$ rpki-client -vvf repo-rpki.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/339257A0C7951203C012BA5AF19EDB52E6790B03.mft File: 339257A0C7951203C012BA5AF19EDB52E6790B03.mft (raw, json) Hash identifier: 1DevAG6zZzoepGDIOtCOYjJQDuzikolSqLUVVXOO530= Subject key identifier: 75:8F:C3:5F:59:C5:87:85:D1:BD:20:B4:BE:24:EB:9D:0A:ED:E7:D6 Authority key identifier: 33:92:57:A0:C7:95:12:03:C0:12:BA:5A:F1:9E:DB:52:E6:79:0B:03 Certificate issuer: /CN=339257A0C7951203C012BA5AF19EDB52E6790B03 Certificate serial: 58A12FDC79FD502A6F0DBB3272FD22F8A9C2D7E3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/339257A0C7951203C012BA5AF19EDB52E6790B03.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/339257A0C7951203C012BA5AF19EDB52E6790B03.mft Manifest number: 0238 Signing time: Mon 20 Oct 2025 03:11:04 +0000 Manifest this update: Mon 20 Oct 2025 03:06:04 +0000 Manifest next update: Thu 23 Oct 2025 09:03:04 +0000 Files and hashes: 1: 3130332e38372e36302e302f32322d3234203d3e20313336303932.roa (hash: +xob4YEanp8C5GvuLdsQx6ikXowtOPpr/uG69DFpAKw=) 2: 339257A0C7951203C012BA5AF19EDB52E6790B03.crl (hash: GDjJ4LlV/U7Apw7KGkeOKca6MpmRYw/IfSC/ur0ODew=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/339257A0C7951203C012BA5AF19EDB52E6790B03.crl rsync://repo-rpki.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/339257A0C7951203C012BA5AF19EDB52E6790B03.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/339257A0C7951203C012BA5AF19EDB52E6790B03.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 09:03:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:a1:2f:dc:79:fd:50:2a:6f:0d:bb:32:72:fd:22:f8:a9:c2:d7:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=339257A0C7951203C012BA5AF19EDB52E6790B03 Validity Not Before: Oct 20 03:06:04 2025 GMT Not After : Oct 23 09:03:04 2025 GMT Subject: CN=758FC35F59C58785D1BD20B4BE24EB9D0AEDE7D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:24:6c:ca:d8:ee:13:e0:bd:a4:13:80:a0:d7: e2:de:e6:3b:10:a7:f2:8a:8c:e9:ba:ec:5d:80:ec: 53:2d:f8:93:d0:af:a1:d2:e6:00:25:9e:57:f9:c7: c0:7b:36:42:ba:42:45:03:e6:11:d4:f8:c1:73:de: 72:d4:81:ad:3c:5e:00:66:1c:8f:de:a1:50:46:af: 0e:6f:64:28:7f:ad:81:7c:be:55:33:aa:c1:77:fe: 93:b0:67:25:ad:3a:a4:b3:f9:4c:f8:a2:64:db:47: 50:3b:75:ab:a5:45:aa:82:43:59:df:0a:9e:a8:f5: 0f:50:19:d9:ee:c7:d1:f1:4d:5b:be:61:88:97:50: 5c:82:58:35:f9:7f:ca:f3:b6:0b:09:2a:74:f7:2d: b2:e6:27:09:4e:e3:ac:2e:aa:23:98:92:4e:26:ea: f9:4e:2a:1f:06:b0:34:2c:5e:9f:be:08:89:27:b1: 26:d6:8b:40:9d:2e:9c:7c:06:0e:9b:7f:a1:aa:29: af:46:07:8e:d6:a9:ac:5d:a4:ad:0d:9a:1e:45:71: 55:79:80:dc:1d:30:1f:ba:7b:95:92:59:58:a0:7c: 67:93:0f:32:6a:c1:fa:c5:82:58:cf:5e:c7:6f:68: 65:61:dd:ae:dc:e3:aa:46:0d:44:13:21:a3:02:60: 32:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:8F:C3:5F:59:C5:87:85:D1:BD:20:B4:BE:24:EB:9D:0A:ED:E7:D6 X509v3 Authority Key Identifier: keyid:33:92:57:A0:C7:95:12:03:C0:12:BA:5A:F1:9E:DB:52:E6:79:0B:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/339257A0C7951203C012BA5AF19EDB52E6790B03.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/339257A0C7951203C012BA5AF19EDB52E6790B03.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/339257A0C7951203C012BA5AF19EDB52E6790B03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:2e:5f:56:0b:a0:5a:f2:33:ac:ec:41:6e:ad:5e:26:c5:e0: 93:9d:9b:12:6b:f5:05:bb:5c:06:e8:52:93:e1:36:0f:a3:ef: 50:b7:3a:05:e5:b5:83:a5:41:c3:de:28:f0:ef:dc:8f:50:39: 21:3d:ff:bf:98:fd:47:c6:cd:35:64:2b:1b:5b:a3:ae:54:d6: f4:55:d9:55:c8:39:b9:77:3a:51:e4:b5:c9:53:a5:eb:ec:49: 01:8c:28:e7:97:ba:92:47:5a:e4:49:59:fb:6b:c9:41:04:e9: 3d:81:9f:54:8e:08:3a:30:58:fe:e1:a6:f0:07:a7:b5:aa:17: 94:47:5f:ce:1b:eb:ff:6d:bf:71:6f:aa:a7:0b:11:c8:e2:b6: cb:f6:f4:5e:a1:eb:d0:53:f6:b7:a2:3e:b1:b6:6f:f6:60:9b: 8e:c5:a9:2b:68:58:f2:7d:13:4c:07:b1:fc:37:69:53:90:c3: b1:41:d2:0b:75:aa:1f:3b:f2:ca:0c:2c:18:08:b4:c7:09:51: 28:9e:0e:78:62:a5:79:7c:c7:79:18:8a:3b:e0:25:a8:1a:4d: f9:7c:f4:c1:19:16:3b:21:8c:af:d5:48:4d:1c:07:f1:e2:fb: f5:58:79:71:94:38:6a:8e:aa:85:fa:ef:c8:0a:db:a8:81:1e: 9d:81:f2:c6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWKEv3Hn9UCpvDbsycv0i+KnC1+MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzM5MjU3QTBDNzk1MTIwM0MwMTJCQTVBRjE5RURCNTJF Njc5MEIwMzAeFw0yNTEwMjAwMzA2MDRaFw0yNTEwMjMwOTAzMDRaMDMxMTAvBgNV BAMTKDc1OEZDMzVGNTlDNTg3ODVEMUJEMjBCNEJFMjRFQjlEMEFFREU3RDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHJGzK2O4T4L2kE4Cg1+Le5jsQ p/KKjOm67F2A7FMt+JPQr6HS5gAlnlf5x8B7NkK6QkUD5hHU+MFz3nLUga08XgBm HI/eoVBGrw5vZCh/rYF8vlUzqsF3/pOwZyWtOqSz+Uz4omTbR1A7daulRaqCQ1nf Cp6o9Q9QGdnux9HxTVu+YYiXUFyCWDX5f8rztgsJKnT3LbLmJwlO46wuqiOYkk4m 6vlOKh8GsDQsXp++CIknsSbWi0CdLpx8Bg6bf6GqKa9GB47WqaxdpK0Nmh5FcVV5 gNwdMB+6e5WSWVigfGeTDzJqwfrFgljPXsdvaGVh3a7c46pGDUQTIaMCYDLLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdY/DX1nFh4XRvSC0viTrnQrt59YwHwYDVR0j BBgwFoAUM5JXoMeVEgPAErpa8Z7bUuZ5CwMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YmEwYjNmMS05NzRmLTQyMDUtYmRjZS0wZjlmNWI3MjUwZGMvMC8zMzkyNTdBMEM3 OTUxMjAzQzAxMkJBNUFGMTlFREI1MkU2NzkwQjAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzM5MjU3QTBDNzk1MTIwM0MwMTJCQTVBRjE5RURCNTJFNjc5 MEIwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2JhMGIzZjEtOTc0Zi00MjA1LWJk Y2UtMGY5ZjViNzI1MGRjLzAvMzM5MjU3QTBDNzk1MTIwM0MwMTJCQTVBRjE5RURC NTJFNjc5MEIwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHQuX1YLoFryM6zsQW6tXibF4JOdmxJr9QW7 XAboUpPhNg+j71C3OgXltYOlQcPeKPDv3I9QOSE9/7+Y/UfGzTVkKxtbo65U1vRV 2VXIObl3OlHktclTpevsSQGMKOeXupJHWuRJWftryUEE6T2Bn1SOCDowWP7hpvAH p7WqF5RHX84b6/9tv3FvqqcLEcjitsv29F6h69BT9reiPrG2b/Zgm47FqStoWPJ9 E0wHsfw3aVOQw7FB0gt1qh878soMLBgItMcJUSieDnhipXl8x3kYijvgJagaTfl8 9MEZFjshjK/VSE0cB/Hi+/VYeXGUOGqOqoX678gK26iBHp2B8sY= -----END CERTIFICATE-----Generated at Mon Oct 20 18:15:31 2025 by rpki-client