$ rpki-client -vvf repo-rpki.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/F91B50B9BD34481B7AED3341ECBE67B1731B3908.mft File: F91B50B9BD34481B7AED3341ECBE67B1731B3908.mft (raw, json) Hash identifier: MMRLjDx39M+YgA6/ZkNi3oaC1f4btSA1rL0KTphq90Y= Subject key identifier: A3:3F:D1:65:7B:70:A1:28:5A:02:CD:02:2C:5B:44:93:B5:5F:34:D0 Authority key identifier: F9:1B:50:B9:BD:34:48:1B:7A:ED:33:41:EC:BE:67:B1:73:1B:39:08 Certificate issuer: /CN=F91B50B9BD34481B7AED3341ECBE67B1731B3908 Certificate serial: 6944C166AF490BD48498B92D55DDAE94BF2332E1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F91B50B9BD34481B7AED3341ECBE67B1731B3908.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/F91B50B9BD34481B7AED3341ECBE67B1731B3908.mft Manifest number: 81 Signing time: Fri 22 Aug 2025 04:30:02 +0000 Manifest this update: Fri 22 Aug 2025 04:25:02 +0000 Manifest next update: Mon 25 Aug 2025 08:27:02 +0000 Files and hashes: 1: 3136302e32352e3131342e302f32332d3234203d3e20313533303731.roa (hash: MNszZnIoAzv/XRj5b4YuvVQ+VmFmnsG7kA5nvphcOpw=) 2: 3136302e32352e3131352e302f32342d3234203d3e20313533303731.roa (hash: hezNNbhUajCptWpnwfUzl4SBqEdlom/yjX2EzaxR8NU=) 3: F91B50B9BD34481B7AED3341ECBE67B1731B3908.crl (hash: /OspwOp1vPTRngmq87n3jogdEEx+1Dz1IGiWV6j7GIM=) 4: 3136302e32352e3131342e302f32342d3234203d3e20313533303731.roa (hash: NFFJiSNTIqtq1ZBECFcXT+o0qD0iXQRYvbFaTorCPIM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/F91B50B9BD34481B7AED3341ECBE67B1731B3908.crl rsync://repo-rpki.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/F91B50B9BD34481B7AED3341ECBE67B1731B3908.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F91B50B9BD34481B7AED3341ECBE67B1731B3908.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 08:27:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:44:c1:66:af:49:0b:d4:84:98:b9:2d:55:dd:ae:94:bf:23:32:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F91B50B9BD34481B7AED3341ECBE67B1731B3908 Validity Not Before: Aug 22 04:25:02 2025 GMT Not After : Aug 25 08:27:02 2025 GMT Subject: CN=A33FD1657B70A1285A02CD022C5B4493B55F34D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:d9:09:0a:62:14:52:f2:d2:f7:19:96:1a:0d: 8e:9a:ee:13:ea:32:67:c3:79:34:85:84:ea:9b:3f: 54:74:41:6e:f6:4e:79:68:5d:75:c2:17:7c:c9:52: f3:f7:e1:94:70:e3:50:0b:e1:f2:03:f6:f2:85:3d: 35:4a:dd:42:91:38:db:bd:72:cc:58:73:02:4c:b1: 83:04:9b:c7:0d:27:2d:57:f0:af:f3:7b:c8:44:fe: a9:a8:5c:f8:d1:58:03:eb:00:68:76:2a:05:08:25: ff:f7:f3:2f:df:66:52:90:4d:95:b3:40:2a:01:d8: 7d:fa:f1:fb:a7:68:d1:73:53:fd:6e:30:41:6b:d4: 37:7b:87:ab:4c:ed:53:95:a6:eb:fd:4a:e2:73:d5: 96:2d:c2:c2:2a:13:8e:3e:e0:b6:cd:9a:02:77:b2: 0d:68:ae:5f:24:77:2b:92:1e:5c:01:d0:e4:46:01: fc:53:ff:6c:8e:34:08:62:39:05:95:8d:48:fb:6b: 36:72:f5:10:a5:bd:ae:e5:e9:36:2e:9f:fa:d7:49: 5c:10:52:54:a7:6c:8e:23:75:31:7b:d4:c0:93:3c: 82:eb:19:ec:e6:12:51:f6:7f:5b:cd:fd:4c:8c:fd: eb:12:5b:fd:28:81:59:a8:f2:ac:56:07:b4:b5:d0: f1:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:3F:D1:65:7B:70:A1:28:5A:02:CD:02:2C:5B:44:93:B5:5F:34:D0 X509v3 Authority Key Identifier: keyid:F9:1B:50:B9:BD:34:48:1B:7A:ED:33:41:EC:BE:67:B1:73:1B:39:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/F91B50B9BD34481B7AED3341ECBE67B1731B3908.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F91B50B9BD34481B7AED3341ECBE67B1731B3908.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/F91B50B9BD34481B7AED3341ECBE67B1731B3908.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:f7:b0:ae:13:99:4b:ec:de:f5:36:a5:8c:90:04:0e:52:37: 07:35:3f:4c:a9:af:5c:3a:d0:49:bf:13:da:a7:ff:46:6c:d0: 8c:8e:7c:22:fb:c9:9b:9c:db:f9:1d:ff:a8:3d:64:ca:ca:2c: 01:a3:bc:67:4e:15:7e:cb:40:74:a3:6b:ab:b1:ea:2a:e1:ba: 5f:32:d2:e7:b3:b7:a1:e8:c8:f7:6f:d7:d3:17:2d:f1:71:ad: aa:2d:90:45:67:0d:78:60:4e:b4:ee:91:e4:38:ce:e4:58:db: 1f:0c:f9:09:51:a0:7b:a9:80:b7:f5:ef:9d:da:27:3c:40:af: 21:03:48:e0:fb:90:9e:4d:da:20:47:96:5b:1b:56:b4:fd:a6: d0:59:02:f1:ac:4d:91:c5:50:c7:4b:54:cc:b2:0c:0f:6c:bb: 4e:99:d8:ed:ea:f8:ed:ae:4a:09:d5:3a:97:42:2c:cf:d1:4d: 71:0f:06:ad:6d:58:78:96:bd:37:d4:b9:28:a7:20:75:c5:4e: 0c:1d:30:4b:0b:0c:7c:39:7c:a0:8c:b6:9b:72:6b:e4:59:69: 1a:04:6f:55:99:ce:99:b0:e8:b5:2e:05:01:6b:c1:99:57:7c: cc:f9:a1:e2:8d:ba:80:95:d6:24:31:85:d1:13:a7:45:3e:7a: 1b:a1:a1:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaUTBZq9JC9SEmLktVd2ulL8jMuEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjkxQjUwQjlCRDM0NDgxQjdBRUQzMzQxRUNCRTY3QjE3 MzFCMzkwODAeFw0yNTA4MjIwNDI1MDJaFw0yNTA4MjUwODI3MDJaMDMxMTAvBgNV BAMTKEEzM0ZEMTY1N0I3MEExMjg1QTAyQ0QwMjJDNUI0NDkzQjU1RjM0RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCS2QkKYhRS8tL3GZYaDY6a7hPq MmfDeTSFhOqbP1R0QW72TnloXXXCF3zJUvP34ZRw41AL4fID9vKFPTVK3UKRONu9 csxYcwJMsYMEm8cNJy1X8K/ze8hE/qmoXPjRWAPrAGh2KgUIJf/38y/fZlKQTZWz QCoB2H368funaNFzU/1uMEFr1Dd7h6tM7VOVpuv9SuJz1ZYtwsIqE44+4LbNmgJ3 sg1orl8kdyuSHlwB0ORGAfxT/2yONAhiOQWVjUj7azZy9RClva7l6TYun/rXSVwQ UlSnbI4jdTF71MCTPILrGezmElH2f1vN/UyM/esSW/0ogVmo8qxWB7S10PEXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoz/RZXtwoShaAs0CLFtEk7VfNNAwHwYDVR0j BBgwFoAU+RtQub00SBt67TNB7L5nsXMbOQgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Njc4NjBlMy02YWQ4LTQ3YTUtOTRjMC05M2ZmZDI0NzI4NjUvMC9GOTFCNTBCOUJE MzQ0ODFCN0FFRDMzNDFFQ0JFNjdCMTczMUIzOTA4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjkxQjUwQjlCRDM0NDgxQjdBRUQzMzQxRUNCRTY3QjE3MzFC MzkwOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzY3ODYwZTMtNmFkOC00N2E1LTk0 YzAtOTNmZmQyNDcyODY1LzAvRjkxQjUwQjlCRDM0NDgxQjdBRUQzMzQxRUNCRTY3 QjE3MzFCMzkwOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF33sK4TmUvs3vU2pYyQBA5SNwc1P0ypr1w6 0Em/E9qn/0Zs0IyOfCL7yZuc2/kd/6g9ZMrKLAGjvGdOFX7LQHSja6ux6irhul8y 0uezt6HoyPdv19MXLfFxraotkEVnDXhgTrTukeQ4zuRY2x8M+QlRoHupgLf1753a JzxAryEDSOD7kJ5N2iBHllsbVrT9ptBZAvGsTZHFUMdLVMyyDA9su06Z2O3q+O2u SgnVOpdCLM/RTXEPBq1tWHiWvTfUuSinIHXFTgwdMEsLDHw5fKCMtptya+RZaRoE b1WZzpmw6LUuBQFrwZlXfMz5oeKNuoCV1iQxhdETp0U+ehuhoWI= -----END CERTIFICATE-----Generated at Sat Aug 23 19:50:24 2025 by rpki-client