$ rpki-client -vvf repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.mft File: F318D15D68E63CEBE4BFA026A5269F3877BE13C1.mft (raw, json) Hash identifier: O+g2E6wKKNwGKCAgzBDB/Etw/p3zPOBElpxpYzIEiyc= Subject key identifier: B6:BA:87:60:F9:A3:34:E1:00:23:77:00:39:1C:D8:33:F7:B3:E8:78 Authority key identifier: F3:18:D1:5D:68:E6:3C:EB:E4:BF:A0:26:A5:26:9F:38:77:BE:13:C1 Certificate issuer: /CN=F318D15D68E63CEBE4BFA026A5269F3877BE13C1 Certificate serial: 4BD218A3791343FFF17F5FFBC986C3AF3C65DE97 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.mft Manifest number: 0506 Signing time: Fri 22 Aug 2025 20:42:11 +0000 Manifest this update: Fri 22 Aug 2025 20:37:11 +0000 Manifest next update: Tue 26 Aug 2025 08:21:11 +0000 Files and hashes: 1: F318D15D68E63CEBE4BFA026A5269F3877BE13C1.crl (hash: xKEKCvq5cTqV/0nhn2K2MJS2Gyyq88fPKZ6bct/JX84=) 2: 3130332e39372e3134312e302f32342d3234203d3e20313431303731.roa (hash: ob6mRc06BCeBAj0X28E3a80wGp9aApab42pA+hcHgrk=) 3: 3130332e39372e3134302e302f32332d3233203d3e203538383230.roa (hash: ky48tvEganYAJKKKh8LACXy3ayIODImWxB2YSjo+hjY=) 4: 3130332e39372e3134302e302f32342d3234203d3e20313431303731.roa (hash: u+uBgrPGm+40zgnoGLAagJdkp/O9sV2Z6UZd95b5fdg=) 5: 323030313a6466313a393030303a3a2f34382d3438203d3e203538383230.roa (hash: 5vlCAQxD3Rtm38WM/0l+BFIYmxxS60ewb6v8d3eKIKE=) 6: 3130332e39372e3131312e302f32342d3234203d3e203538383230.roa (hash: LVzLvHlGvkclluFVEiY44EndzlPbN92fYYJEvFwmUZU=) 7: 3130332e3234312e32342e302f32342d3234203d3e203538383230.roa (hash: bOC+RmVGdVwwtAAFBHuMaIGcTf4BirQnm1dEmryUd+o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.crl rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 08:21:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:d2:18:a3:79:13:43:ff:f1:7f:5f:fb:c9:86:c3:af:3c:65:de:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F318D15D68E63CEBE4BFA026A5269F3877BE13C1 Validity Not Before: Aug 22 20:37:11 2025 GMT Not After : Aug 26 08:21:11 2025 GMT Subject: CN=B6BA8760F9A334E100237700391CD833F7B3E878 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:63:ff:b4:a3:a3:7b:21:e8:66:01:6c:7e:59: 3f:b9:52:e5:48:ad:75:45:05:6c:f7:45:ed:18:44: 92:8d:99:2c:ba:cf:85:3f:63:7f:15:58:b1:42:0f: 66:a4:93:67:2d:d2:64:93:e7:46:10:fe:a1:a5:61: c1:58:63:40:1f:83:39:7a:b2:ca:86:22:70:9e:83: a8:6e:98:18:4a:72:2d:32:d4:61:fe:4f:b7:75:2f: 31:57:b6:e3:03:53:25:58:98:64:89:3c:98:5e:91: f1:97:ec:db:d1:14:6e:70:98:ba:a6:4d:49:fb:a9: a1:6e:90:92:e0:61:95:ca:d2:c2:ca:8c:f6:6a:f8: ae:38:ae:af:90:b3:ab:bb:b4:81:83:6d:13:aa:3f: 45:90:a8:cb:3f:49:35:10:99:f0:9b:02:5a:ff:37: 7d:ce:be:ea:e3:74:70:53:73:13:31:b6:7e:6b:4c: 3a:d4:f3:e2:77:8b:4d:b4:ad:8c:af:fe:7a:c1:c3: 5d:ef:67:9e:d5:ec:ac:cc:1e:8d:4f:91:d8:9b:9e: 90:01:82:b4:12:ea:dd:7e:2a:51:bd:76:21:16:d7: 11:86:32:01:f0:45:0c:c2:5e:18:cc:f2:c7:17:b4: e3:d3:a9:34:6e:51:d5:17:07:36:98:fd:d7:5a:c2: ca:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:BA:87:60:F9:A3:34:E1:00:23:77:00:39:1C:D8:33:F7:B3:E8:78 X509v3 Authority Key Identifier: keyid:F3:18:D1:5D:68:E6:3C:EB:E4:BF:A0:26:A5:26:9F:38:77:BE:13:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:f0:c1:cf:bb:d5:9c:59:65:2e:37:d0:7c:43:6d:07:6a:a2: 2c:92:62:d7:c7:a7:c8:87:d1:ec:4a:2d:b5:15:8f:5e:6e:0f: 92:f2:8a:ee:fc:43:b5:04:89:65:f8:4b:5c:f7:40:7a:98:d0: 1a:61:b1:d4:2b:d4:20:e5:e5:36:21:41:7f:c5:b9:cc:8d:c9: 6f:0f:bb:54:45:f8:b3:4a:eb:70:62:c8:16:ae:6a:81:9c:8c: 6b:3a:a1:88:87:1c:8c:02:cf:0a:c5:e6:da:94:49:a9:2f:ed: ec:9a:d0:57:1e:a7:e1:16:d9:52:95:05:23:f8:68:6d:19:64: c6:74:42:b6:14:4c:e5:6e:a3:bb:a4:88:82:66:4f:2a:2b:47: 0e:72:40:da:c2:47:c1:82:07:37:56:77:11:55:0c:73:59:70: 5a:4f:a1:83:33:25:36:1b:38:ee:37:9f:da:12:d8:ba:3e:42: 33:4c:10:df:b8:16:76:e6:87:3a:8b:a0:a4:49:89:6f:0c:03: 68:1b:50:4b:7b:7a:4b:ae:4e:f9:b5:79:22:0b:89:17:24:bd: fe:83:22:19:07:1e:c4:44:88:76:d7:a0:fe:b0:55:db:a3:6b: 4e:f1:1e:a6:4d:57:e6:0c:4a:f3:e0:2c:fc:c3:03:68:44:5d: a8:b6:6f:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS9IYo3kTQ//xf1/7yYbDrzxl3pcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjMxOEQxNUQ2OEU2M0NFQkU0QkZBMDI2QTUyNjlGMzg3 N0JFMTNDMTAeFw0yNTA4MjIyMDM3MTFaFw0yNTA4MjYwODIxMTFaMDMxMTAvBgNV BAMTKEI2QkE4NzYwRjlBMzM0RTEwMDIzNzcwMDM5MUNEODMzRjdCM0U4NzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbY/+0o6N7IehmAWx+WT+5UuVI rXVFBWz3Re0YRJKNmSy6z4U/Y38VWLFCD2akk2ct0mST50YQ/qGlYcFYY0Afgzl6 ssqGInCeg6humBhKci0y1GH+T7d1LzFXtuMDUyVYmGSJPJhekfGX7NvRFG5wmLqm TUn7qaFukJLgYZXK0sLKjPZq+K44rq+Qs6u7tIGDbROqP0WQqMs/STUQmfCbAlr/ N33OvurjdHBTcxMxtn5rTDrU8+J3i020rYyv/nrBw13vZ57V7KzMHo1PkdibnpAB grQS6t1+KlG9diEW1xGGMgHwRQzCXhjM8scXtOPTqTRuUdUXBzaY/ddawsrhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtrqHYPmjNOEAI3cAORzYM/ez6HgwHwYDVR0j BBgwFoAU8xjRXWjmPOvkv6AmpSafOHe+E8EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NDAxNDM2Yi0wMjY3LTQ2NmItYTM0MC1lMjg4ZDJlOTM0YTgvMC9GMzE4RDE1RDY4 RTYzQ0VCRTRCRkEwMjZBNTI2OUYzODc3QkUxM0MxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjMxOEQxNUQ2OEU2M0NFQkU0QkZBMDI2QTUyNjlGMzg3N0JF MTNDMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTQwMTQzNmItMDI2Ny00NjZiLWEz NDAtZTI4OGQyZTkzNGE4LzAvRjMxOEQxNUQ2OEU2M0NFQkU0QkZBMDI2QTUyNjlG Mzg3N0JFMTNDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABHwwc+71ZxZZS430HxDbQdqoiySYtfHp8iH 0exKLbUVj15uD5Lyiu78Q7UEiWX4S1z3QHqY0BphsdQr1CDl5TYhQX/FucyNyW8P u1RF+LNK63BiyBauaoGcjGs6oYiHHIwCzwrF5tqUSakv7eya0Fcep+EW2VKVBSP4 aG0ZZMZ0QrYUTOVuo7ukiIJmTyorRw5yQNrCR8GCBzdWdxFVDHNZcFpPoYMzJTYb OO43n9oS2Lo+QjNMEN+4FnbmhzqLoKRJiW8MA2gbUEt7ekuuTvm1eSILiRckvf6D IhkHHsREiHbXoP6wVduja07xHqZNV+YMSvPgLPzDA2hEXai2b74= -----END CERTIFICATE-----Generated at Sat Aug 23 18:26:42 2025 by rpki-client