$ rpki-client -vvf repo-rpki.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.mft File: F03499B3CFC25C7C508C14462AC4268BF1E9F67D.mft (raw, json) Hash identifier: oGd9ZxDGDDSNAXTM2WaqKmCzQ5qPMYLjy0oN0HjoxH0= Subject key identifier: 30:CC:DD:87:00:E0:A8:A0:B8:3C:4F:7B:01:75:E9:A2:C1:94:66:B2 Authority key identifier: F0:34:99:B3:CF:C2:5C:7C:50:8C:14:46:2A:C4:26:8B:F1:E9:F6:7D Certificate issuer: /CN=F03499B3CFC25C7C508C14462AC4268BF1E9F67D Certificate serial: 0299F27E99B3377FD870206DB0DCFD75706BCA85 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.mft Manifest number: 0173 Signing time: Fri 22 Aug 2025 09:42:08 +0000 Manifest this update: Fri 22 Aug 2025 09:37:08 +0000 Manifest next update: Mon 25 Aug 2025 12:05:08 +0000 Files and hashes: 1: 3130332e3137332e37322e302f32342d3234203d3e20313437313133.roa (hash: CjoIHvi7yqXvHMVwjtTCYFagfhfgPFy7R0tpEnYKeXM=) 2: 3130332e3137372e3139392e302f32342d3234203d3e20313437313133.roa (hash: pEHLezsTnYguADx1cbYPTZbHF6Ez4ndRML5zjv7PktU=) 3: F03499B3CFC25C7C508C14462AC4268BF1E9F67D.crl (hash: xbzt712Sn4zM9nXTa8f/l36O03U47xm/dNHQGT1pOyE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.crl rsync://repo-rpki.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 12:05:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:99:f2:7e:99:b3:37:7f:d8:70:20:6d:b0:dc:fd:75:70:6b:ca:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F03499B3CFC25C7C508C14462AC4268BF1E9F67D Validity Not Before: Aug 22 09:37:08 2025 GMT Not After : Aug 25 12:05:08 2025 GMT Subject: CN=30CCDD8700E0A8A0B83C4F7B0175E9A2C19466B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:4e:a2:3d:a1:24:88:f3:79:ab:0d:c6:17:90: b3:8b:64:90:9d:d7:da:41:87:7f:a9:1b:0f:14:48: 21:4d:4b:ce:d4:90:0f:bc:38:14:17:36:70:61:31: d6:90:78:ef:13:95:b6:8a:20:0c:78:4d:eb:2c:20: 58:87:b2:a9:fe:c3:78:2a:be:32:2b:59:0b:d1:28: 11:5a:78:e7:05:58:17:a1:c6:49:16:a3:c3:23:96: 77:ee:cd:f1:27:de:78:b2:65:ee:65:26:0b:5f:10: f0:7d:d7:7c:05:d9:cc:ef:2b:6b:8e:c1:a1:5a:af: 73:69:9e:4c:14:e4:a2:be:ef:77:0d:2d:54:22:8a: 62:1e:f6:d6:4d:18:1d:ff:7e:b9:e5:68:58:db:d8: 01:2e:bf:16:de:42:df:e7:b4:6e:3c:a0:3c:03:0d: 0e:7a:c4:11:d3:47:35:2f:16:ed:95:ef:3b:51:b7: de:7f:98:16:73:3e:30:23:4c:1b:a0:58:d7:3e:0e: d1:c0:3b:4a:c0:b3:4e:a7:6f:cc:6d:ca:92:94:c5: 78:b4:03:e2:90:e6:60:55:b5:89:04:1c:c0:36:79: b2:e3:12:97:9c:8d:9d:0f:1e:39:d2:9b:eb:51:2f: ee:ea:03:12:10:6e:32:bb:b5:85:fc:ee:ff:42:fd: 5a:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:CC:DD:87:00:E0:A8:A0:B8:3C:4F:7B:01:75:E9:A2:C1:94:66:B2 X509v3 Authority Key Identifier: keyid:F0:34:99:B3:CF:C2:5C:7C:50:8C:14:46:2A:C4:26:8B:F1:E9:F6:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:97:27:84:01:41:0f:d1:4b:ed:d5:93:e6:34:08:15:e0:cc: 7d:5c:2a:98:3c:a9:49:a2:68:37:e4:f0:0e:15:88:61:ef:74: d1:27:11:ef:66:9b:ed:06:85:11:b6:de:22:61:e2:c1:d0:1c: 3c:f3:0c:ee:6d:4e:6a:62:54:0f:21:84:25:81:ff:e8:de:0c: 28:36:7f:86:a5:cc:e6:49:65:6e:38:13:9a:09:3a:0b:f3:64: f5:28:f1:f6:ca:62:69:e2:35:6a:73:e1:70:79:a0:9b:11:4f: 43:05:43:2c:6e:6d:bb:12:78:1d:b6:df:e9:c7:ea:fe:1f:b4: 04:9d:39:09:7f:68:54:35:e2:d4:f8:05:9e:71:c9:ba:f3:13: fd:69:09:0e:a1:fb:1d:e5:ee:25:e9:86:99:a9:55:04:43:d0: 3e:26:21:b6:cb:78:b7:f9:cf:d7:4f:9b:8c:b6:dd:73:fe:46: 8a:34:09:91:3d:1c:8e:11:05:51:6b:db:5d:02:7c:f9:cf:a7: e2:6f:7d:b9:32:f8:91:75:c7:56:61:63:a9:40:58:6c:bc:db: 61:71:7f:d4:f0:77:b7:eb:94:43:b3:4d:2c:da:28:25:3e:15: 02:91:23:58:7b:41:90:1e:08:db:1f:79:ec:3b:f8:08:58:1e: 98:0c:50:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUApnyfpmzN3/YcCBtsNz9dXBryoUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjAzNDk5QjNDRkMyNUM3QzUwOEMxNDQ2MkFDNDI2OEJG MUU5RjY3RDAeFw0yNTA4MjIwOTM3MDhaFw0yNTA4MjUxMjA1MDhaMDMxMTAvBgNV BAMTKDMwQ0NERDg3MDBFMEE4QTBCODNDNEY3QjAxNzVFOUEyQzE5NDY2QjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQTqI9oSSI83mrDcYXkLOLZJCd 19pBh3+pGw8USCFNS87UkA+8OBQXNnBhMdaQeO8TlbaKIAx4TessIFiHsqn+w3gq vjIrWQvRKBFaeOcFWBehxkkWo8MjlnfuzfEn3niyZe5lJgtfEPB913wF2czvK2uO waFar3NpnkwU5KK+73cNLVQiimIe9tZNGB3/frnlaFjb2AEuvxbeQt/ntG48oDwD DQ56xBHTRzUvFu2V7ztRt95/mBZzPjAjTBugWNc+DtHAO0rAs06nb8xtypKUxXi0 A+KQ5mBVtYkEHMA2ebLjEpecjZ0PHjnSm+tRL+7qAxIQbjK7tYX87v9C/VrhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMMzdhwDgqKC4PE97AXXposGUZrIwHwYDVR0j BBgwFoAU8DSZs8/CXHxQjBRGKsQmi/Hp9n0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MDA0ZTUzMC0yZmNmLTRjZDYtYjA1Yy1lYjNjMGMxMzU2MDgvMC9GMDM0OTlCM0NG QzI1QzdDNTA4QzE0NDYyQUM0MjY4QkYxRTlGNjdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjAzNDk5QjNDRkMyNUM3QzUwOEMxNDQ2MkFDNDI2OEJGMUU5 RjY3RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTAwNGU1MzAtMmZjZi00Y2Q2LWIw NWMtZWIzYzBjMTM1NjA4LzAvRjAzNDk5QjNDRkMyNUM3QzUwOEMxNDQ2MkFDNDI2 OEJGMUU5RjY3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJyXJ4QBQQ/RS+3Vk+Y0CBXgzH1cKpg8qUmi aDfk8A4ViGHvdNEnEe9mm+0GhRG23iJh4sHQHDzzDO5tTmpiVA8hhCWB/+jeDCg2 f4alzOZJZW44E5oJOgvzZPUo8fbKYmniNWpz4XB5oJsRT0MFQyxubbsSeB223+nH 6v4ftASdOQl/aFQ14tT4BZ5xybrzE/1pCQ6h+x3l7iXphpmpVQRD0D4mIbbLeLf5 z9dPm4y23XP+Roo0CZE9HI4RBVFr210CfPnPp+Jvfbky+JF1x1ZhY6lAWGy822Fx f9Twd7frlEOzTSzaKCU+FQKRI1h7QZAeCNsfeew7+AhYHpgMUK4= -----END CERTIFICATE-----Generated at Sat Aug 23 21:51:40 2025 by rpki-client