$ rpki-client -vvf repo-rpki.idnic.net/repo/f239fdcb-c417-4f3f-b1c9-7e369cde21fd/0/F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.mft File: F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.mft (raw, json) Hash identifier: 9mtUAgl6Y5wWxGOA8Ssi9PVXvsxXs5I+ysWvqaykdsY= Subject key identifier: 97:11:79:CC:44:F2:92:6B:06:F9:07:C6:C6:C4:1E:CB:45:DD:9F:59 Authority key identifier: F3:81:08:E7:3D:42:C7:F2:0A:64:8C:A9:19:3F:BF:B8:EF:E0:EC:27 Certificate issuer: /CN=F38108E73D42C7F20A648CA9193FBFB8EFE0EC27 Certificate serial: 7E579EC322D5BC67FBA23736749FD575F42ACCE7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f239fdcb-c417-4f3f-b1c9-7e369cde21fd/0/F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.mft Manifest number: 01B8 Signing time: Thu 21 Aug 2025 12:31:33 +0000 Manifest this update: Thu 21 Aug 2025 12:26:33 +0000 Manifest next update: Sun 24 Aug 2025 22:04:33 +0000 Files and hashes: 1: F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.crl (hash: PEvxVrBjaoJ4glRuMSAaSt5Y+3D+5PHxXZcQ+5IFJls=) 2: 3130332e39372e3233312e302f32342d3234203d3e20313530323831.roa (hash: YXC7vao6SdQdo4asInUo2bjoBB1agb+16mo8L2xO7DM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f239fdcb-c417-4f3f-b1c9-7e369cde21fd/0/F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.crl rsync://repo-rpki.idnic.net/repo/f239fdcb-c417-4f3f-b1c9-7e369cde21fd/0/F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 22:04:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:57:9e:c3:22:d5:bc:67:fb:a2:37:36:74:9f:d5:75:f4:2a:cc:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F38108E73D42C7F20A648CA9193FBFB8EFE0EC27 Validity Not Before: Aug 21 12:26:33 2025 GMT Not After : Aug 24 22:04:33 2025 GMT Subject: CN=971179CC44F2926B06F907C6C6C41ECB45DD9F59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:83:b9:b3:a0:d0:d8:e4:14:12:68:f5:b1:71: bf:d9:5a:ae:e9:0b:13:4a:0a:39:8f:02:e9:78:5d: 68:42:e4:3a:53:60:01:ac:0a:4f:32:8e:79:0c:2d: b0:9e:0d:26:57:a7:b7:df:33:0a:1a:62:1c:40:2c: a2:e4:aa:f1:f3:02:11:90:43:e4:9e:21:9d:27:01: 15:6d:f6:8e:92:10:53:49:0c:84:79:1f:79:83:fb: 97:64:07:8a:2f:d0:a7:a7:84:ad:6d:df:54:c2:67: 92:23:ef:a8:12:51:5f:0c:9c:16:d5:bf:e5:2b:bf: 25:bd:eb:76:ce:ad:8d:20:cb:26:55:ae:66:36:2a: c7:a8:e4:17:71:bb:e5:43:37:9d:e1:cc:6d:02:5c: 62:59:26:f1:70:34:58:8b:0f:26:0a:c7:7c:d1:13: 21:77:12:6c:a7:b8:d8:44:de:85:fe:81:63:20:bd: 9c:37:92:ce:f8:e4:ae:3d:6d:6a:a4:53:a2:04:23: 26:25:c5:9d:74:85:4b:60:6d:ca:05:2e:38:22:d2: 85:60:ad:e7:7f:80:fc:ae:59:38:3f:dd:72:41:9a: 60:32:0c:3c:16:0a:f7:14:fc:3d:fc:3e:4a:e5:9d: d7:d1:de:db:33:17:61:2d:e9:45:73:3e:1a:2c:02: 0d:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:11:79:CC:44:F2:92:6B:06:F9:07:C6:C6:C4:1E:CB:45:DD:9F:59 X509v3 Authority Key Identifier: keyid:F3:81:08:E7:3D:42:C7:F2:0A:64:8C:A9:19:3F:BF:B8:EF:E0:EC:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f239fdcb-c417-4f3f-b1c9-7e369cde21fd/0/F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f239fdcb-c417-4f3f-b1c9-7e369cde21fd/0/F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:03:26:de:08:2e:96:55:29:1d:bf:e0:bd:67:9e:c6:8d:f6: e9:a8:fa:11:d0:32:44:01:8b:0e:11:dc:6b:33:96:31:b7:48: f5:de:10:da:9d:c5:fa:43:02:a0:b4:69:28:4a:db:3b:17:08: 4e:e5:a4:58:d1:e2:12:01:18:db:a7:aa:a2:56:a6:97:e6:fe: a5:69:a8:a6:95:0f:5a:a3:b5:74:c7:be:01:a8:66:f9:7d:7a: 7c:04:e4:e7:a0:a9:b7:05:b0:f8:ea:05:d4:19:09:15:93:c1: a4:95:e7:11:75:53:98:2e:7b:ee:5e:0a:ce:d6:ff:be:6a:88: 5e:bc:69:3e:d2:8d:ad:ce:96:2c:5e:69:1e:2f:46:4c:a2:77: f7:ac:54:95:1b:a5:e9:79:31:7b:64:9f:b6:bb:42:7f:cd:41: b3:44:3e:bc:16:95:ce:6f:c7:b8:fa:8e:58:60:56:35:45:9d: ff:4f:83:77:b5:c6:14:94:fe:55:14:df:32:e5:0b:01:68:b1: 7b:a2:c5:e5:f1:eb:03:b9:bc:b2:2a:ea:62:6c:38:ec:53:e5: fc:e2:63:9e:82:fd:ef:82:40:8f:a1:f2:2a:87:31:3e:66:11: 63:46:67:a3:18:1b:80:a3:76:55:52:70:69:d4:d0:05:5b:71: d1:c2:e7:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfleewyLVvGf7ojc2dJ/VdfQqzOcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM4MTA4RTczRDQyQzdGMjBBNjQ4Q0E5MTkzRkJGQjhF RkUwRUMyNzAeFw0yNTA4MjExMjI2MzNaFw0yNTA4MjQyMjA0MzNaMDMxMTAvBgNV BAMTKDk3MTE3OUNDNDRGMjkyNkIwNkY5MDdDNkM2QzQxRUNCNDVERDlGNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsg7mzoNDY5BQSaPWxcb/ZWq7p CxNKCjmPAul4XWhC5DpTYAGsCk8yjnkMLbCeDSZXp7ffMwoaYhxALKLkqvHzAhGQ Q+SeIZ0nARVt9o6SEFNJDIR5H3mD+5dkB4ov0KenhK1t31TCZ5Ij76gSUV8MnBbV v+UrvyW963bOrY0gyyZVrmY2Kseo5Bdxu+VDN53hzG0CXGJZJvFwNFiLDyYKx3zR EyF3EmynuNhE3oX+gWMgvZw3ks745K49bWqkU6IEIyYlxZ10hUtgbcoFLjgi0oVg red/gPyuWTg/3XJBmmAyDDwWCvcU/D38PkrlndfR3tszF2Et6UVzPhosAg0TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlxF5zETykmsG+QfGxsQey0Xdn1kwHwYDVR0j BBgwFoAU84EI5z1Cx/IKZIypGT+/uO/g7CcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MjM5ZmRjYi1jNDE3LTRmM2YtYjFjOS03ZTM2OWNkZTIxZmQvMC9GMzgxMDhFNzNE NDJDN0YyMEE2NDhDQTkxOTNGQkZCOEVGRTBFQzI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjM4MTA4RTczRDQyQzdGMjBBNjQ4Q0E5MTkzRkJGQjhFRkUw RUMyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjIzOWZkY2ItYzQxNy00ZjNmLWIx YzktN2UzNjljZGUyMWZkLzAvRjM4MTA4RTczRDQyQzdGMjBBNjQ4Q0E5MTkzRkJG QjhFRkUwRUMyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJkDJt4ILpZVKR2/4L1nnsaN9umo+hHQMkQB iw4R3GszljG3SPXeENqdxfpDAqC0aShK2zsXCE7lpFjR4hIBGNunqqJWppfm/qVp qKaVD1qjtXTHvgGoZvl9enwE5OegqbcFsPjqBdQZCRWTwaSV5xF1U5gue+5eCs7W /75qiF68aT7Sja3OlixeaR4vRkyid/esVJUbpel5MXtkn7a7Qn/NQbNEPrwWlc5v x7j6jlhgVjVFnf9Pg3e1xhSU/lUU3zLlCwFosXuixeXx6wO5vLIq6mJsOOxT5fzi Y56C/e+CQI+h8iqHMT5mEWNGZ6MYG4CjdlVScGnU0AVbcdHC58s= -----END CERTIFICATE-----Generated at Sat Aug 23 14:30:49 2025 by rpki-client