$ rpki-client -vvf repo-rpki.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/F1364C8B62D0A8EDFF2EB7CE55698011E828988A.mft File: F1364C8B62D0A8EDFF2EB7CE55698011E828988A.mft (raw, json) Hash identifier: bKX0EeN1VvRw7+hejPlL8nUSY80FWq/RTAhRd8qUSWM= Subject key identifier: 36:24:F9:2C:2C:40:FB:DC:27:04:9C:9A:5A:35:03:AD:8B:0D:D7:6A Authority key identifier: F1:36:4C:8B:62:D0:A8:ED:FF:2E:B7:CE:55:69:80:11:E8:28:98:8A Certificate issuer: /CN=F1364C8B62D0A8EDFF2EB7CE55698011E828988A Certificate serial: 3595AD97F5F3C584EBC6F973F7339CA32779E484 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1364C8B62D0A8EDFF2EB7CE55698011E828988A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/F1364C8B62D0A8EDFF2EB7CE55698011E828988A.mft Manifest number: 0291 Signing time: Fri 22 Aug 2025 03:30:36 +0000 Manifest this update: Fri 22 Aug 2025 03:25:36 +0000 Manifest next update: Mon 25 Aug 2025 11:41:36 +0000 Files and hashes: 1: 3130332e3137382e3135302e302f32342d3234203d3e20313439333234.roa (hash: huN1KtLEjsdu8qOGqy80hR78HrSkhaqrUY5ivluzIbo=) 2: 3130332e3137382e3135312e302f32342d3234203d3e20313439333234.roa (hash: lAdIZ8+pFmEWNMeEcTE2EpGqKVRaWuJiBss1Y+sie/o=) 3: 3130332e3137382e3135302e302f32332d3233203d3e20313439333234.roa (hash: I/rkytrCsreSN7E1KqGsHJ84dCmK/xNAtlQhg9Bm6h8=) 4: F1364C8B62D0A8EDFF2EB7CE55698011E828988A.crl (hash: 3S85J8TrqBX/kqc4vbIFwTvN1SHtZAdpUJfZwvFYBXI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/F1364C8B62D0A8EDFF2EB7CE55698011E828988A.crl rsync://repo-rpki.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/F1364C8B62D0A8EDFF2EB7CE55698011E828988A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1364C8B62D0A8EDFF2EB7CE55698011E828988A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 11:41:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:95:ad:97:f5:f3:c5:84:eb:c6:f9:73:f7:33:9c:a3:27:79:e4:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F1364C8B62D0A8EDFF2EB7CE55698011E828988A Validity Not Before: Aug 22 03:25:36 2025 GMT Not After : Aug 25 11:41:36 2025 GMT Subject: CN=3624F92C2C40FBDC27049C9A5A3503AD8B0DD76A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:8d:53:6c:e5:02:09:cb:72:e9:d4:3e:ed:2b: 5c:a9:55:fd:1f:c8:5d:af:27:e1:70:8e:f6:eb:0d: 7f:e8:3a:cb:5c:75:cf:91:eb:7b:b6:c0:c6:2b:3b: 80:ac:a3:c5:25:01:13:3e:4f:a4:c1:e7:19:9b:44: 3b:d3:3b:b1:07:f5:bc:83:1f:d9:82:40:47:5d:26: a5:3c:e6:5c:fe:cf:6e:dd:6f:40:1d:91:df:21:73: 2e:1d:dd:8a:5f:ab:6e:44:cb:01:10:a3:e8:9c:0a: 38:3d:d1:5d:27:ae:ba:44:38:07:72:23:22:77:8c: cf:87:d0:a8:9d:c2:49:64:dc:d2:99:17:5e:b2:c5: 12:f1:39:94:28:3f:84:df:4b:04:83:81:ee:54:6c: 9f:ae:f0:40:98:2c:8c:1d:1e:76:8d:93:4e:ba:71: b3:66:6e:8a:af:68:fa:3d:2c:5e:c6:b3:ef:34:64: ea:73:31:8a:e8:ea:2f:2a:0f:67:2c:f9:12:03:d7: 66:1e:6b:32:5c:21:ad:06:01:0a:9a:b4:8a:5a:92: 98:a8:6e:9b:0f:9b:e6:b1:e0:2d:bb:08:aa:d3:e0: 8f:43:23:a1:86:f8:bd:d0:9c:65:db:f9:88:01:05: f2:f1:6c:ee:b2:9e:4a:27:5e:b0:7c:a5:db:b0:8d: c9:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:24:F9:2C:2C:40:FB:DC:27:04:9C:9A:5A:35:03:AD:8B:0D:D7:6A X509v3 Authority Key Identifier: keyid:F1:36:4C:8B:62:D0:A8:ED:FF:2E:B7:CE:55:69:80:11:E8:28:98:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/F1364C8B62D0A8EDFF2EB7CE55698011E828988A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1364C8B62D0A8EDFF2EB7CE55698011E828988A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/F1364C8B62D0A8EDFF2EB7CE55698011E828988A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:62:99:6b:c1:cd:1c:18:ce:80:cc:58:d9:59:d7:65:46:ae: 48:25:38:0d:ff:ed:29:ec:a8:7d:ad:89:93:b9:13:cd:8e:50: 6c:ee:91:f8:42:d8:4e:39:c5:21:6b:28:3c:da:f2:b5:9c:a6: 7a:78:1f:6a:91:89:88:b7:ae:0a:14:36:8c:f3:21:89:59:32: 69:c0:f7:e6:82:24:1e:e5:5c:5b:aa:c9:9b:c3:81:a7:e2:13: f7:f8:4d:db:b8:ca:de:f9:4b:a1:65:a4:d9:24:de:fd:80:b2: cb:02:a6:6e:c6:24:11:d6:7a:82:95:6d:08:a8:09:8f:8f:48: e2:08:d5:27:30:69:db:89:85:80:67:90:2e:0b:2e:16:b3:16: 72:62:7b:71:98:e4:09:a8:ea:21:7a:d8:7c:12:95:28:9f:a3: 75:bf:a7:04:af:03:8f:d9:da:a5:8c:81:80:23:3c:46:fc:62: f2:46:f4:f9:75:41:bc:30:69:e9:cb:9c:e4:05:34:17:b0:8f: 03:ba:eb:73:62:4e:f7:0c:30:71:60:57:9b:99:3d:b4:35:c6: 9b:7e:91:5d:94:55:8e:6f:50:ad:ff:52:a9:3f:fe:c3:d4:da: e8:9b:94:eb:1a:28:cc:ad:67:43:94:9c:3c:8e:d2:7b:4a:6c: 17:eb:c6:c6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNZWtl/XzxYTrxvlz9zOcoyd55IQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjEzNjRDOEI2MkQwQThFREZGMkVCN0NFNTU2OTgwMTFF ODI4OTg4QTAeFw0yNTA4MjIwMzI1MzZaFw0yNTA4MjUxMTQxMzZaMDMxMTAvBgNV BAMTKDM2MjRGOTJDMkM0MEZCREMyNzA0OUM5QTVBMzUwM0FEOEIwREQ3NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2jVNs5QIJy3Lp1D7tK1ypVf0f yF2vJ+FwjvbrDX/oOstcdc+R63u2wMYrO4Cso8UlARM+T6TB5xmbRDvTO7EH9byD H9mCQEddJqU85lz+z27db0Adkd8hcy4d3Ypfq25EywEQo+icCjg90V0nrrpEOAdy IyJ3jM+H0Kidwklk3NKZF16yxRLxOZQoP4TfSwSDge5UbJ+u8ECYLIwdHnaNk066 cbNmboqvaPo9LF7Gs+80ZOpzMYro6i8qD2cs+RID12YeazJcIa0GAQqatIpakpio bpsPm+ax4C27CKrT4I9DI6GG+L3QnGXb+YgBBfLxbO6ynkonXrB8pduwjcklAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNiT5LCxA+9wnBJyaWjUDrYsN12owHwYDVR0j BBgwFoAU8TZMi2LQqO3/LrfOVWmAEegomIowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NjVmYTk4Zi0xZTg1LTQ2MzgtYmI5ZC0yODczNzhhNGNlODcvMC9GMTM2NEM4QjYy RDBBOEVERkYyRUI3Q0U1NTY5ODAxMUU4Mjg5ODhBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjEzNjRDOEI2MkQwQThFREZGMkVCN0NFNTU2OTgwMTFFODI4 OTg4QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDY1ZmE5OGYtMWU4NS00NjM4LWJi OWQtMjg3Mzc4YTRjZTg3LzAvRjEzNjRDOEI2MkQwQThFREZGMkVCN0NFNTU2OTgw MTFFODI4OTg4QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD5imWvBzRwYzoDMWNlZ12VGrkglOA3/7Sns qH2tiZO5E82OUGzukfhC2E45xSFrKDza8rWcpnp4H2qRiYi3rgoUNozzIYlZMmnA 9+aCJB7lXFuqyZvDgafiE/f4Tdu4yt75S6FlpNkk3v2AsssCpm7GJBHWeoKVbQio CY+PSOII1ScwaduJhYBnkC4LLhazFnJie3GY5Amo6iF62HwSlSifo3W/pwSvA4/Z 2qWMgYAjPEb8YvJG9Pl1QbwwaenLnOQFNBewjwO663NiTvcMMHFgV5uZPbQ1xpt+ kV2UVY5vUK3/Uqk//sPU2uiblOsaKMytZ0OUnDyO0ntKbBfrxsY= -----END CERTIFICATE-----Generated at Sat Aug 23 13:44:39 2025 by rpki-client