$ rpki-client -vvf repo-rpki.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0/439D16E03D05D5CECA2B7F135D2BBB1B30105057.mft File: 439D16E03D05D5CECA2B7F135D2BBB1B30105057.mft (raw, json) Hash identifier: mbVCIpi2iIqwxmZrZfzRFeO4Uli9F89GZaO3GMTo6Ms= Subject key identifier: 08:A4:74:84:20:60:17:7D:A9:7E:A8:B2:02:90:53:AF:A2:A6:59:10 Authority key identifier: 43:9D:16:E0:3D:05:D5:CE:CA:2B:7F:13:5D:2B:BB:1B:30:10:50:57 Certificate issuer: /CN=439D16E03D05D5CECA2B7F135D2BBB1B30105057 Certificate serial: 5A3E59D5FE5FBF369C9C5C9CE3D08B867EECD381 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/439D16E03D05D5CECA2B7F135D2BBB1B30105057.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0/439D16E03D05D5CECA2B7F135D2BBB1B30105057.mft Manifest number: 0203 Signing time: Fri 22 Aug 2025 06:30:46 +0000 Manifest this update: Fri 22 Aug 2025 06:25:46 +0000 Manifest next update: Mon 25 Aug 2025 11:42:46 +0000 Files and hashes: 1: 3130332e3138372e39302e302f32342d3234203d3e20313439383839.roa (hash: 38VctucVjPuOnSloXC5TfoiL9rHRKzx9uk3RVJIrnlg=) 2: 439D16E03D05D5CECA2B7F135D2BBB1B30105057.crl (hash: KuT8wiVV+yW/y02KqWo5vROv+6YdBM20C/TJ1MhgzvA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0/439D16E03D05D5CECA2B7F135D2BBB1B30105057.crl rsync://repo-rpki.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0/439D16E03D05D5CECA2B7F135D2BBB1B30105057.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/439D16E03D05D5CECA2B7F135D2BBB1B30105057.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 11:42:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:3e:59:d5:fe:5f:bf:36:9c:9c:5c:9c:e3:d0:8b:86:7e:ec:d3:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=439D16E03D05D5CECA2B7F135D2BBB1B30105057 Validity Not Before: Aug 22 06:25:46 2025 GMT Not After : Aug 25 11:42:46 2025 GMT Subject: CN=08A474842060177DA97EA8B2029053AFA2A65910 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ba:48:6b:3c:7b:4f:e2:4a:5f:7d:b2:40:fb: f1:e8:6f:ef:39:3a:1a:47:cd:33:81:12:c8:65:a0: 0b:8c:ca:31:6b:73:8f:d5:cd:6c:93:53:ca:b2:aa: 4a:b7:68:21:7f:a5:72:05:a2:74:d8:2f:f5:dc:b0: 4f:4b:b2:5a:23:ef:9c:34:17:66:b2:9a:cf:f1:51: 31:51:71:a4:d1:90:87:e1:ec:2c:9c:80:73:dc:8b: b3:f5:e6:43:c9:31:9c:85:25:ad:93:54:3f:47:5c: a6:4d:61:09:07:e0:f2:55:16:39:63:2d:c4:13:5c: e8:6b:d9:66:f5:12:fe:74:b2:4a:1a:e3:7b:59:ba: b6:e6:94:44:78:f3:00:be:d2:ab:e0:cd:b0:6a:57: d0:f7:fd:f3:03:eb:e5:f5:b4:d4:85:87:e1:03:cf: 45:5a:d9:37:a3:85:78:07:3c:a9:03:a3:7e:6e:19: 75:fc:e2:00:6d:02:75:76:1c:39:a0:a9:3d:b0:d3: 07:7e:a1:2d:05:ae:ba:2b:86:10:37:2c:38:1a:ca: 94:28:a0:84:cc:fb:75:06:8a:ee:a2:4c:f6:5c:84: 22:00:80:fb:8b:a4:c4:dc:8b:a9:46:f1:21:37:02: 8c:ef:1d:5e:d0:fd:9f:67:f9:53:eb:f8:74:6f:a1: 28:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:A4:74:84:20:60:17:7D:A9:7E:A8:B2:02:90:53:AF:A2:A6:59:10 X509v3 Authority Key Identifier: keyid:43:9D:16:E0:3D:05:D5:CE:CA:2B:7F:13:5D:2B:BB:1B:30:10:50:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0/439D16E03D05D5CECA2B7F135D2BBB1B30105057.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/439D16E03D05D5CECA2B7F135D2BBB1B30105057.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0/439D16E03D05D5CECA2B7F135D2BBB1B30105057.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:28:12:21:0b:2b:6e:40:33:5f:fc:fe:d8:a8:de:27:49:f5: 84:0c:ce:ad:d2:f7:58:6e:b0:ff:b7:ed:2d:eb:22:bc:a2:e9: c1:35:f0:2c:0c:3e:f3:3a:d2:d2:28:9e:1b:4b:97:3b:99:fe: 50:c3:dd:d4:40:1f:05:35:e6:f9:a3:ab:dc:4c:16:45:c0:93: 14:d5:59:80:ef:04:0c:86:7f:b0:17:10:6a:f7:70:fb:36:9b: 5a:a7:01:11:aa:c7:d3:88:94:f3:45:72:da:f3:48:14:f9:ed: 6d:9c:30:ee:3c:b1:ef:49:59:7b:96:d9:c9:af:4e:8b:93:5a: 62:51:41:ef:a8:7b:3b:77:a6:d0:a6:e5:62:c3:e6:ee:fe:d6: f3:f4:e2:4e:ea:ff:d2:d8:dd:f9:cc:87:48:ee:ba:ed:1b:94: 07:5d:5e:88:53:b2:b8:69:17:d6:04:e1:bb:34:3a:51:b5:9a: 67:16:e9:ad:a5:10:a9:03:19:67:6f:e0:3e:4a:49:4c:a3:96: 89:c0:d7:33:77:47:1e:62:04:c6:d2:d8:c7:9a:81:16:d9:5c: 73:fa:1c:56:6d:e7:dc:b3:9d:d2:f9:99:0b:d5:e6:87:16:85: ad:97:6b:3c:dd:e7:7b:18:55:e2:da:0b:cc:9c:b9:90:60:3a: 30:84:e9:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWj5Z1f5fvzacnFyc49CLhn7s04EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDM5RDE2RTAzRDA1RDVDRUNBMkI3RjEzNUQyQkJCMUIz MDEwNTA1NzAeFw0yNTA4MjIwNjI1NDZaFw0yNTA4MjUxMTQyNDZaMDMxMTAvBgNV BAMTKDA4QTQ3NDg0MjA2MDE3N0RBOTdFQThCMjAyOTA1M0FGQTJBNjU5MTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAukhrPHtP4kpffbJA+/Hob+85 OhpHzTOBEshloAuMyjFrc4/VzWyTU8qyqkq3aCF/pXIFonTYL/XcsE9Lsloj75w0 F2ayms/xUTFRcaTRkIfh7CycgHPci7P15kPJMZyFJa2TVD9HXKZNYQkH4PJVFjlj LcQTXOhr2Wb1Ev50skoa43tZurbmlER48wC+0qvgzbBqV9D3/fMD6+X1tNSFh+ED z0Va2TejhXgHPKkDo35uGXX84gBtAnV2HDmgqT2w0wd+oS0FrrorhhA3LDgaypQo oITM+3UGiu6iTPZchCIAgPuLpMTci6lG8SE3AozvHV7Q/Z9n+VPr+HRvoSjPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCKR0hCBgF32pfqiyApBTr6KmWRAwHwYDVR0j BBgwFoAUQ50W4D0F1c7KK38TXSu7GzAQUFcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OGYzYjM3ZC1mZTRkLTQzNmQtYTkzYi1lMWY2ZmNjOWZjNGQvMC80MzlEMTZFMDNE MDVENUNFQ0EyQjdGMTM1RDJCQkIxQjMwMTA1MDU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDM5RDE2RTAzRDA1RDVDRUNBMkI3RjEzNUQyQkJCMUIzMDEw NTA1Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZThmM2IzN2QtZmU0ZC00MzZkLWE5 M2ItZTFmNmZjYzlmYzRkLzAvNDM5RDE2RTAzRDA1RDVDRUNBMkI3RjEzNUQyQkJC MUIzMDEwNTA1Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB0oEiELK25AM1/8/tio3idJ9YQMzq3S91hu sP+37S3rIryi6cE18CwMPvM60tIonhtLlzuZ/lDD3dRAHwU15vmjq9xMFkXAkxTV WYDvBAyGf7AXEGr3cPs2m1qnARGqx9OIlPNFctrzSBT57W2cMO48se9JWXuW2cmv TouTWmJRQe+oezt3ptCm5WLD5u7+1vP04k7q/9LY3fnMh0juuu0blAddXohTsrhp F9YE4bs0OlG1mmcW6a2lEKkDGWdv4D5KSUyjlonA1zN3Rx5iBMbS2MeagRbZXHP6 HFZt59yzndL5mQvV5ocWha2Xazzd53sYVeLaC8ycuZBgOjCE6ak= -----END CERTIFICATE-----Generated at Sat Aug 23 10:21:58 2025 by rpki-client