$ rpki-client -vvf repo-rpki.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.mft File: F3C45071697AB68FDEAEBF5820E70DDD1B494B58.mft (raw, json) Hash identifier: lWM8ZDaHTh54rb+ujaT3AsM4vkv221iakNghapId5s0= Subject key identifier: 7A:B5:4A:36:47:CC:4A:54:D6:F1:F0:9C:84:C9:3E:B8:C2:1B:53:52 Authority key identifier: F3:C4:50:71:69:7A:B6:8F:DE:AE:BF:58:20:E7:0D:DD:1B:49:4B:58 Certificate issuer: /CN=F3C45071697AB68FDEAEBF5820E70DDD1B494B58 Certificate serial: 405A572C04892E93ACB9C935BA092BB1B9191E8C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.mft Manifest number: A0 Signing time: Fri 22 Aug 2025 15:31:21 +0000 Manifest this update: Fri 22 Aug 2025 15:26:21 +0000 Manifest next update: Mon 25 Aug 2025 19:23:21 +0000 Files and hashes: 1: 3136302e31392e3131302e302f32332d3234203d3e20313532373733.roa (hash: H3T3VBAkYGZBVt4prOPaCEzHSlQDxm09XEH58hbRsm0=) 2: F3C45071697AB68FDEAEBF5820E70DDD1B494B58.crl (hash: o4BSFD8QzlG+TRQR1VaftpNB6uxX/V4E9KKC1jLOi/M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.crl rsync://repo-rpki.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 19:23:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:5a:57:2c:04:89:2e:93:ac:b9:c9:35:ba:09:2b:b1:b9:19:1e:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3C45071697AB68FDEAEBF5820E70DDD1B494B58 Validity Not Before: Aug 22 15:26:21 2025 GMT Not After : Aug 25 19:23:21 2025 GMT Subject: CN=7AB54A3647CC4A54D6F1F09C84C93EB8C21B5352 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:08:4e:c1:19:bc:56:b8:08:d4:c2:9c:d0:8f: 76:27:f8:6d:49:04:98:a1:cd:9f:ab:ae:bb:00:bd: a7:e7:f3:4e:49:24:f9:39:60:fc:bf:b4:cc:06:29: e6:7c:fc:2a:cd:e6:ee:b6:50:fc:ff:7c:71:fe:d2: 5d:72:4c:83:5d:9b:5f:5b:26:ec:cc:be:a2:8a:ce: a0:8e:e5:0c:fc:9e:36:52:c9:b3:f0:53:4e:f1:11: 33:85:d0:18:aa:7d:23:80:49:3f:6e:23:f4:8b:58: 2f:47:e7:bf:be:0d:86:1b:8d:4a:fa:ac:33:1e:b7: 23:7e:c7:bd:dc:81:0c:47:c8:cb:b3:92:9f:29:d4: e5:a2:13:e7:7f:54:10:d5:6d:24:58:09:ee:2e:2f: b4:e7:46:ce:60:f4:1c:cf:5f:b6:4b:a6:70:0f:a4: 60:43:f7:8e:2d:cc:76:af:7b:2b:44:bc:56:c5:35: 52:07:19:1f:e4:ba:93:18:7f:5a:23:6b:2c:52:55: 87:36:37:05:21:60:19:1f:0f:d1:ec:ab:b4:a9:b3: 26:d6:70:f0:a1:2a:f0:f9:8e:a3:b0:e2:be:a4:a9: 93:ac:9c:13:f5:d5:1c:cf:12:6a:49:26:23:2a:3d: b2:1c:04:64:17:aa:ac:47:bb:7a:a1:6a:c9:5a:04: 88:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:B5:4A:36:47:CC:4A:54:D6:F1:F0:9C:84:C9:3E:B8:C2:1B:53:52 X509v3 Authority Key Identifier: keyid:F3:C4:50:71:69:7A:B6:8F:DE:AE:BF:58:20:E7:0D:DD:1B:49:4B:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:56:58:d1:07:1f:fd:e6:53:91:7c:51:74:ca:03:9c:71:00: 01:69:79:84:2d:6d:82:81:df:c5:93:20:18:24:bd:5f:21:42: 18:f1:e5:8a:43:bc:dc:01:33:9c:49:47:52:5a:14:0c:84:57: 9f:20:d2:ce:3d:d0:f8:31:ab:30:f0:d5:57:1c:20:cb:10:d6: a3:a0:d2:4e:c6:cf:15:ac:c5:92:8f:9e:ef:a7:d4:1c:ee:7d: aa:69:f8:bf:01:3f:2a:7b:6e:73:60:48:e3:d3:51:07:a0:ff: 80:65:b4:62:83:6b:ec:81:1c:04:49:c6:36:1b:33:17:63:1a: 8e:89:55:b6:9c:57:f1:b0:a5:3c:19:41:7c:e3:9e:84:9b:23: b8:84:c8:c9:71:d1:cf:37:ac:28:0f:2e:09:52:71:28:0e:30: 00:d1:2d:43:d0:c6:96:d1:ea:57:0d:8d:90:24:03:e2:a8:41: 49:d1:bf:d3:b8:c6:fe:66:36:43:b9:fc:8b:21:2f:cd:43:5c: a1:55:05:c7:4b:ae:31:02:73:a3:25:bf:6b:77:25:d3:a5:e2: cc:a0:8e:22:21:29:97:94:d3:99:1a:34:e0:af:ad:62:7e:99: fc:93:12:a3:4e:6c:27:c8:98:9f:3a:68:81:0b:89:b6:81:e9: 9f:c6:39:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQFpXLASJLpOsuck1ugkrsbkZHowwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjNDNDUwNzE2OTdBQjY4RkRFQUVCRjU4MjBFNzBEREQx QjQ5NEI1ODAeFw0yNTA4MjIxNTI2MjFaFw0yNTA4MjUxOTIzMjFaMDMxMTAvBgNV BAMTKDdBQjU0QTM2NDdDQzRBNTRENkYxRjA5Qzg0QzkzRUI4QzIxQjUzNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrCE7BGbxWuAjUwpzQj3Yn+G1J BJihzZ+rrrsAvafn805JJPk5YPy/tMwGKeZ8/CrN5u62UPz/fHH+0l1yTINdm19b JuzMvqKKzqCO5Qz8njZSybPwU07xETOF0BiqfSOAST9uI/SLWC9H57++DYYbjUr6 rDMetyN+x73cgQxHyMuzkp8p1OWiE+d/VBDVbSRYCe4uL7TnRs5g9BzPX7ZLpnAP pGBD944tzHaveytEvFbFNVIHGR/kupMYf1ojayxSVYc2NwUhYBkfD9Hsq7SpsybW cPChKvD5jqOw4r6kqZOsnBP11RzPEmpJJiMqPbIcBGQXqqxHu3qhaslaBIhFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUerVKNkfMSlTW8fCchMk+uMIbU1IwHwYDVR0j BBgwFoAU88RQcWl6to/err9YIOcN3RtJS1gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZDliMzUxOS0zZGYzLTQ0MDYtODI4Zi0zZWJiOTFkOTI5NDQvMC9GM0M0NTA3MTY5 N0FCNjhGREVBRUJGNTgyMEU3MERERDFCNDk0QjU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjNDNDUwNzE2OTdBQjY4RkRFQUVCRjU4MjBFNzBEREQxQjQ5 NEI1OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGQ5YjM1MTktM2RmMy00NDA2LTgy OGYtM2ViYjkxZDkyOTQ0LzAvRjNDNDUwNzE2OTdBQjY4RkRFQUVCRjU4MjBFNzBE REQxQjQ5NEI1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADZWWNEHH/3mU5F8UXTKA5xxAAFpeYQtbYKB 38WTIBgkvV8hQhjx5YpDvNwBM5xJR1JaFAyEV58g0s490PgxqzDw1VccIMsQ1qOg 0k7GzxWsxZKPnu+n1Bzufapp+L8BPyp7bnNgSOPTUQeg/4BltGKDa+yBHARJxjYb MxdjGo6JVbacV/GwpTwZQXzjnoSbI7iEyMlx0c83rCgPLglScSgOMADRLUPQxpbR 6lcNjZAkA+KoQUnRv9O4xv5mNkO5/IshL81DXKFVBcdLrjECc6Mlv2t3JdOl4syg jiIhKZeU05kaNOCvrWJ+mfyTEqNObCfImJ86aIELibaB6Z/GOeE= -----END CERTIFICATE-----Generated at Sat Aug 23 20:10:21 2025 by rpki-client