$ rpki-client -vvf repo-rpki.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.mft File: F2441731A38F6F03ED8BFDB14F3CF89CED26A880.mft (raw, json) Hash identifier: jfXr+yxtrbYVySdYjw8sO0Ap+MPjK1S8G4TsesuH3A4= Subject key identifier: 43:94:4E:E5:65:61:0B:DF:60:F6:58:EF:DE:BB:5A:94:75:32:F9:5C Authority key identifier: F2:44:17:31:A3:8F:6F:03:ED:8B:FD:B1:4F:3C:F8:9C:ED:26:A8:80 Certificate issuer: /CN=F2441731A38F6F03ED8BFDB14F3CF89CED26A880 Certificate serial: 2CD654DA0B3D522363344A440A469C40EEA6FE9C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.mft Manifest number: 04FD Signing time: Thu 21 Aug 2025 22:21:22 +0000 Manifest this update: Thu 21 Aug 2025 22:16:22 +0000 Manifest next update: Mon 25 Aug 2025 04:35:22 +0000 Files and hashes: 1: 3230322e39342e38332e302f32342d3234203d3e203535363732.roa (hash: XIFruI1ighCiBN1KxhqbA4Dl9kZx4Bi5WaQ0ju1y2JQ=) 2: F2441731A38F6F03ED8BFDB14F3CF89CED26A880.crl (hash: FtRfS1W3VHXng0OBEeKZowsKyCyZPgEpSQQWkGDHu2I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.crl rsync://repo-rpki.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 04:35:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:d6:54:da:0b:3d:52:23:63:34:4a:44:0a:46:9c:40:ee:a6:fe:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2441731A38F6F03ED8BFDB14F3CF89CED26A880 Validity Not Before: Aug 21 22:16:22 2025 GMT Not After : Aug 25 04:35:22 2025 GMT Subject: CN=43944EE565610BDF60F658EFDEBB5A947532F95C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:6c:59:fe:2d:62:82:0c:e5:d9:59:5c:ae:2c: 91:68:fe:e5:62:2a:07:b8:dc:ea:20:1e:0c:c0:ba: 62:bd:ee:92:a3:84:84:aa:dc:88:a4:fd:fd:97:98: f0:5c:44:ed:1d:d1:0c:12:1a:33:69:0d:d1:2a:64: e8:b9:ef:ea:35:01:de:ed:56:99:f9:ad:15:fe:67: b5:e1:c7:23:88:bb:df:d0:23:e9:9e:e9:da:2b:5a: eb:28:c5:b7:27:e0:cb:e7:95:85:6a:47:21:eb:ff: 41:5c:33:9c:1e:03:42:eb:bc:a7:25:db:97:91:cb: 79:07:9a:80:1c:3f:90:10:ce:d7:5c:70:94:8e:2d: 41:7b:f4:83:3f:93:95:c5:ab:ef:d5:b6:86:d1:68: 65:f3:8d:fd:27:3d:ec:63:87:ba:18:c6:60:7e:09: 04:2e:e8:4e:d7:e3:f2:c0:d0:38:b5:69:ad:b9:9b: be:4c:92:a6:1b:65:ee:fd:7e:ca:10:a8:3a:8c:b7: d8:67:47:11:c8:05:74:06:88:18:c4:cc:ce:3d:00: 8b:c6:6d:cd:b5:1e:85:2b:ba:37:a7:0b:28:f2:ea: 8c:be:44:75:8a:69:f6:5c:c2:32:ba:1f:5c:74:ae: 1c:b8:aa:5e:0c:6a:b6:07:16:ca:2a:f8:0c:8b:09: 3b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:94:4E:E5:65:61:0B:DF:60:F6:58:EF:DE:BB:5A:94:75:32:F9:5C X509v3 Authority Key Identifier: keyid:F2:44:17:31:A3:8F:6F:03:ED:8B:FD:B1:4F:3C:F8:9C:ED:26:A8:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:e9:b0:28:5d:41:bf:f5:8b:e6:6d:33:08:d5:89:5c:e3:68: 79:55:d2:7d:42:50:7a:7d:22:ea:6e:e8:3e:87:e1:58:ec:19: a9:af:bf:c2:a0:91:51:26:0d:13:f8:55:3f:13:8e:af:6f:f1: e3:e7:f9:32:7f:28:18:7c:d7:9e:f0:7f:79:8c:5e:09:08:51: 20:6f:37:a9:a9:2a:fb:80:e9:52:17:67:89:b9:1c:5f:ec:0c: d5:e5:25:0f:aa:fe:c9:4f:91:51:d6:e3:af:5d:65:9a:77:37: a1:e5:dd:f6:a7:41:db:04:55:1f:a8:4a:49:d4:dc:dd:c8:fe: 92:ca:60:cf:8f:99:b1:38:2c:72:39:2b:45:44:e9:b5:4d:77: 83:a3:55:8d:59:45:7d:18:ce:64:d9:90:d4:7c:8f:2b:2c:85: 83:5e:65:c0:ca:f5:fb:01:82:4a:12:3f:f5:32:10:60:c8:e7: e6:55:7c:91:0f:a0:a0:ec:de:20:63:b6:84:22:c5:e4:8e:fd: 13:ef:df:ef:9e:6b:95:1b:07:49:f9:fd:75:ed:40:46:5f:e7: 92:82:5b:b1:4e:17:63:a4:7f:bf:0c:36:1e:cb:67:7f:11:8c: 07:49:b7:10:f6:35:87:a8:1e:80:6d:02:30:28:69:00:b3:e3: f2:3e:76:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULNZU2gs9UiNjNEpECkacQO6m/pwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI0NDE3MzFBMzhGNkYwM0VEOEJGREIxNEYzQ0Y4OUNF RDI2QTg4MDAeFw0yNTA4MjEyMjE2MjJaFw0yNTA4MjUwNDM1MjJaMDMxMTAvBgNV BAMTKDQzOTQ0RUU1NjU2MTBCREY2MEY2NThFRkRFQkI1QTk0NzUzMkY5NUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1bFn+LWKCDOXZWVyuLJFo/uVi Kge43OogHgzAumK97pKjhISq3Iik/f2XmPBcRO0d0QwSGjNpDdEqZOi57+o1Ad7t Vpn5rRX+Z7XhxyOIu9/QI+me6dorWusoxbcn4MvnlYVqRyHr/0FcM5weA0LrvKcl 25eRy3kHmoAcP5AQztdccJSOLUF79IM/k5XFq+/VtobRaGXzjf0nPexjh7oYxmB+ CQQu6E7X4/LA0Di1aa25m75MkqYbZe79fsoQqDqMt9hnRxHIBXQGiBjEzM49AIvG bc21HoUrujenCyjy6oy+RHWKafZcwjK6H1x0rhy4ql4MarYHFsoq+AyLCTsPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ5RO5WVhC99g9ljv3rtalHUy+VwwHwYDVR0j BBgwFoAU8kQXMaOPbwPti/2xTzz4nO0mqIAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i OGI0NDFhZC1mMWFhLTQ4ZDMtOWVkYi1iOWE1ZDVjZTliYTgvMC9GMjQ0MTczMUEz OEY2RjAzRUQ4QkZEQjE0RjNDRjg5Q0VEMjZBODgwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjI0NDE3MzFBMzhGNkYwM0VEOEJGREIxNEYzQ0Y4OUNFRDI2 QTg4MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjhiNDQxYWQtZjFhYS00OGQzLTll ZGItYjlhNWQ1Y2U5YmE4LzAvRjI0NDE3MzFBMzhGNkYwM0VEOEJGREIxNEYzQ0Y4 OUNFRDI2QTg4MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFbpsChdQb/1i+ZtMwjViVzjaHlV0n1CUHp9 Iupu6D6H4VjsGamvv8KgkVEmDRP4VT8Tjq9v8ePn+TJ/KBh8157wf3mMXgkIUSBv N6mpKvuA6VIXZ4m5HF/sDNXlJQ+q/slPkVHW469dZZp3N6Hl3fanQdsEVR+oSknU 3N3I/pLKYM+PmbE4LHI5K0VE6bVNd4OjVY1ZRX0YzmTZkNR8jysshYNeZcDK9fsB gkoSP/UyEGDI5+ZVfJEPoKDs3iBjtoQixeSO/RPv3++ea5UbB0n5/XXtQEZf55KC W7FOF2Okf78MNh7LZ38RjAdJtxD2NYeoHoBtAjAoaQCz4/I+dmU= -----END CERTIFICATE-----Generated at Sat Aug 23 12:08:54 2025 by rpki-client