$ rpki-client -vvf repo-rpki.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.mft File: F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.mft (raw, json) Hash identifier: dEUzdk6+FWiX1dRCcVgU/bg0V6yBTwj1JFjSQkQtjE0= Subject key identifier: BC:97:08:F0:02:2B:9C:EA:1D:5A:07:C1:75:B7:06:E8:06:55:D8:E0 Authority key identifier: F2:28:6B:78:D2:C9:6C:F3:CD:F0:67:A8:9D:3F:54:81:59:1C:FE:3F Certificate issuer: /CN=F2286B78D2C96CF3CDF067A89D3F5481591CFE3F Certificate serial: 51212DAF904AC4C4EFAAA557ADF1CDEF42AA6134 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.mft Manifest number: 0505 Signing time: Fri 22 Aug 2025 17:11:10 +0000 Manifest this update: Fri 22 Aug 2025 17:06:10 +0000 Manifest next update: Mon 25 Aug 2025 23:36:10 +0000 Files and hashes: 1: F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.crl (hash: UK3n4sBYQBiY77Rm93/qPCRstiXX0sDlpppEXsgTcfk=) 2: 323030313a6466343a616138303a3a2f34382d3438203d3e20313431303537.roa (hash: tTehZh9UKuAWzLXm3C0kYFHgqql5m+DDpx9m9vm/Bjg=) 3: 3130332e3135352e32362e302f32342d3234203d3e20313431303537.roa (hash: zvD1gWyZUcS44IboIaWL1frQd2y5H3jWJXa/wy/mGcM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.crl rsync://repo-rpki.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 23:36:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:21:2d:af:90:4a:c4:c4:ef:aa:a5:57:ad:f1:cd:ef:42:aa:61:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2286B78D2C96CF3CDF067A89D3F5481591CFE3F Validity Not Before: Aug 22 17:06:10 2025 GMT Not After : Aug 25 23:36:10 2025 GMT Subject: CN=BC9708F0022B9CEA1D5A07C175B706E80655D8E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:23:0d:0c:c0:f0:62:fc:6d:29:50:fb:76:17: fe:5f:d4:64:a9:29:7f:a7:aa:aa:9f:99:1a:b4:4e: a0:2c:c8:b6:1f:c8:33:4a:8d:41:5d:29:0c:74:20: 6e:fa:12:d6:c0:2a:f4:25:3f:df:28:cb:e8:b3:13: 88:95:5e:ad:58:f7:81:43:93:2d:28:9d:0e:a3:7d: f1:b5:4a:c5:c6:70:c3:f0:ae:f3:5b:40:8c:cb:1a: 9e:63:96:93:5c:fa:27:2c:fb:6d:ff:a6:8d:71:69: d6:43:74:01:6f:54:8a:4d:50:5a:1c:1b:a4:4f:11: ae:6b:fb:ba:17:6b:96:b7:8b:3e:6a:7b:fd:03:9c: 53:03:88:05:0e:45:83:83:ff:d6:d7:e5:4e:df:e1: 0a:d4:75:9e:f7:29:4d:09:5b:84:c1:44:e1:f1:b1: 61:e3:93:96:d8:38:cf:92:75:8e:ec:66:51:4a:72: 18:da:da:48:e1:3b:04:33:07:47:ff:95:78:26:12: 3f:43:51:3a:28:19:4c:41:de:e0:7a:c0:17:ed:7a: 2f:28:f7:a4:c3:5e:a7:24:ed:1d:cf:9a:16:8f:a0: 76:98:7c:0f:d6:d2:aa:1c:f1:89:56:c4:08:4c:b7: fb:34:39:40:38:d8:f0:58:05:f7:3a:d6:2e:f4:81: 50:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:97:08:F0:02:2B:9C:EA:1D:5A:07:C1:75:B7:06:E8:06:55:D8:E0 X509v3 Authority Key Identifier: keyid:F2:28:6B:78:D2:C9:6C:F3:CD:F0:67:A8:9D:3F:54:81:59:1C:FE:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:92:98:37:08:40:15:99:5a:61:d7:14:32:fd:f3:5b:a1:e9: 88:58:4c:fe:94:9a:af:d9:e9:fc:78:ad:00:9b:bb:8b:18:bf: 27:23:26:e1:bb:06:b9:d3:0d:b2:be:59:e9:35:11:8e:04:70: eb:37:64:49:22:9f:68:73:77:4d:68:a1:63:71:dd:69:36:b0: 8c:22:d2:21:d7:19:3d:8b:3b:a8:3c:1c:ed:8c:1b:1f:6b:4d: eb:d8:23:63:11:71:60:41:76:70:20:ce:97:eb:68:c7:3b:f8: 4a:05:09:48:df:be:01:a6:a1:86:07:b3:02:5e:c9:13:0d:dc: 9f:34:65:18:7f:a7:19:d1:82:4e:30:62:c5:63:fb:a2:e0:b0: e3:9b:bd:48:43:d8:5b:bf:ef:99:e9:80:86:88:b9:26:a1:07: cb:a9:0b:14:f4:5e:16:16:c2:08:5f:dd:af:23:8a:f8:3c:98: 88:10:9a:47:52:a2:42:cf:c2:ba:64:05:fa:f0:2e:ab:40:d9: 2a:45:8d:e8:2b:14:b0:a3:27:ed:3b:30:2e:6f:ac:ad:48:c3: 4e:d3:6d:25:65:37:85:e5:e7:94:78:8f:92:df:7d:0e:cc:9d: 5e:5c:88:6f:8d:c6:b9:a6:6a:b2:26:4b:bf:0c:8e:89:5c:9f: 53:f0:29:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUSEtr5BKxMTvqqVXrfHN70KqYTQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjIyODZCNzhEMkM5NkNGM0NERjA2N0E4OUQzRjU0ODE1 OTFDRkUzRjAeFw0yNTA4MjIxNzA2MTBaFw0yNTA4MjUyMzM2MTBaMDMxMTAvBgNV BAMTKEJDOTcwOEYwMDIyQjlDRUExRDVBMDdDMTc1QjcwNkU4MDY1NUQ4RTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIIw0MwPBi/G0pUPt2F/5f1GSp KX+nqqqfmRq0TqAsyLYfyDNKjUFdKQx0IG76EtbAKvQlP98oy+izE4iVXq1Y94FD ky0onQ6jffG1SsXGcMPwrvNbQIzLGp5jlpNc+ics+23/po1xadZDdAFvVIpNUFoc G6RPEa5r+7oXa5a3iz5qe/0DnFMDiAUORYOD/9bX5U7f4QrUdZ73KU0JW4TBROHx sWHjk5bYOM+SdY7sZlFKchja2kjhOwQzB0f/lXgmEj9DUTooGUxB3uB6wBftei8o 96TDXqck7R3PmhaPoHaYfA/W0qoc8YlWxAhMt/s0OUA42PBYBfc61i70gVCVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvJcI8AIrnOodWgfBdbcG6AZV2OAwHwYDVR0j BBgwFoAU8ihreNLJbPPN8GeonT9UgVkc/j8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MjRkYTE1Mi0wMDI0LTQzNmQtOTkwZC0zMjM4MDZlMDE2OTkvMC9GMjI4NkI3OEQy Qzk2Q0YzQ0RGMDY3QTg5RDNGNTQ4MTU5MUNGRTNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjIyODZCNzhEMkM5NkNGM0NERjA2N0E4OUQzRjU0ODE1OTFD RkUzRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzI0ZGExNTItMDAyNC00MzZkLTk5 MGQtMzIzODA2ZTAxNjk5LzAvRjIyODZCNzhEMkM5NkNGM0NERjA2N0E4OUQzRjU0 ODE1OTFDRkUzRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACWSmDcIQBWZWmHXFDL981uh6YhYTP6Umq/Z 6fx4rQCbu4sYvycjJuG7BrnTDbK+Wek1EY4EcOs3ZEkin2hzd01ooWNx3Wk2sIwi 0iHXGT2LO6g8HO2MGx9rTevYI2MRcWBBdnAgzpfraMc7+EoFCUjfvgGmoYYHswJe yRMN3J80ZRh/pxnRgk4wYsVj+6LgsOObvUhD2Fu/75npgIaIuSahB8upCxT0XhYW wghf3a8jivg8mIgQmkdSokLPwrpkBfrwLqtA2SpFjegrFLCjJ+07MC5vrK1Iw07T bSVlN4Xl55R4j5LffQ7MnV5ciG+NxrmmarImS78Mjolcn1PwKbE= -----END CERTIFICATE-----Generated at Sat Aug 23 18:20:53 2025 by rpki-client