$ rpki-client -vvf repo-rpki.idnic.net/repo/fd1fc1a2-ee77-405f-9e31-adc6dfc9b74c/0/F38B6752412BBA5BA6A00E0BD400D0920CA01E22.mft File: F38B6752412BBA5BA6A00E0BD400D0920CA01E22.mft (raw, json) Hash identifier: ZWMx2cY39Yi5UeWkzh899DLV9x6G6kjfFCeCUyaPMng= Subject key identifier: 47:C4:DA:25:CB:8C:1D:04:0D:32:A0:B3:D5:BA:BD:71:B9:10:E7:51 Authority key identifier: F3:8B:67:52:41:2B:BA:5B:A6:A0:0E:0B:D4:00:D0:92:0C:A0:1E:22 Certificate issuer: /CN=F38B6752412BBA5BA6A00E0BD400D0920CA01E22 Certificate serial: 2BF3469404E84DB9A82FE2B4C865E59BCA67D796 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F38B6752412BBA5BA6A00E0BD400D0920CA01E22.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fd1fc1a2-ee77-405f-9e31-adc6dfc9b74c/0/F38B6752412BBA5BA6A00E0BD400D0920CA01E22.mft Manifest number: E4 Signing time: Fri 22 Aug 2025 20:12:04 +0000 Manifest this update: Fri 22 Aug 2025 20:07:03 +0000 Manifest next update: Mon 25 Aug 2025 22:07:03 +0000 Files and hashes: 1: F38B6752412BBA5BA6A00E0BD400D0920CA01E22.crl (hash: YISTSWuFKB8siVPMfx4QdoQpd/NMprpFlSWPa+WYC3I=) 2: 3135372e31352e3231322e302f32342d3234203d3e20313532343036.roa (hash: ILdIplNUn5zzvV+8+nEtx6VwnOOAN7tEdP7POnsDWcQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fd1fc1a2-ee77-405f-9e31-adc6dfc9b74c/0/F38B6752412BBA5BA6A00E0BD400D0920CA01E22.crl rsync://repo-rpki.idnic.net/repo/fd1fc1a2-ee77-405f-9e31-adc6dfc9b74c/0/F38B6752412BBA5BA6A00E0BD400D0920CA01E22.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F38B6752412BBA5BA6A00E0BD400D0920CA01E22.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 22:07:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:f3:46:94:04:e8:4d:b9:a8:2f:e2:b4:c8:65:e5:9b:ca:67:d7:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F38B6752412BBA5BA6A00E0BD400D0920CA01E22 Validity Not Before: Aug 22 20:07:03 2025 GMT Not After : Aug 25 22:07:03 2025 GMT Subject: CN=47C4DA25CB8C1D040D32A0B3D5BABD71B910E751 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:15:77:c5:cc:70:f1:80:32:af:b8:51:61:5c: 2c:25:54:c3:c1:ed:4b:36:50:07:95:f7:70:6e:b1: 84:06:14:56:39:7e:01:ba:e4:ec:78:7f:95:50:f8: 65:b6:d8:83:3d:e4:0b:e8:3d:9d:7a:b7:a1:dd:bc: 94:c0:7f:ae:9a:fe:ae:72:24:4b:f5:a8:6a:28:98: eb:4c:72:91:fe:4a:28:89:ae:ba:36:a9:18:a4:52: 41:7f:b0:dc:d7:9a:e7:86:de:0c:59:2c:06:d7:13: 4f:fe:2d:d6:8c:74:cb:84:10:81:2d:f2:6c:0c:ae: 0c:1f:e0:cd:c6:7a:f1:77:98:e9:e1:05:ad:90:57: e9:a1:57:0e:03:15:9e:d0:1e:ee:ff:e8:b2:49:a4: af:37:b6:42:9f:a8:8f:60:d7:64:f8:ca:b4:ad:ae: c5:6c:f3:36:bb:09:b2:1f:c7:8a:53:b0:83:e9:5c: 71:70:bf:6f:b8:bb:eb:f6:72:c5:80:45:26:14:31: db:a4:f3:82:86:13:55:3d:e3:da:f2:ee:19:a2:dd: 93:c1:dc:40:c3:0d:65:76:32:9e:0f:3a:ce:f9:1d: 19:b7:c7:79:a7:b2:a8:a7:66:0f:c8:cc:35:cd:21: f3:e6:d1:f3:61:19:37:66:b3:57:58:91:49:0c:03: bf:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:C4:DA:25:CB:8C:1D:04:0D:32:A0:B3:D5:BA:BD:71:B9:10:E7:51 X509v3 Authority Key Identifier: keyid:F3:8B:67:52:41:2B:BA:5B:A6:A0:0E:0B:D4:00:D0:92:0C:A0:1E:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fd1fc1a2-ee77-405f-9e31-adc6dfc9b74c/0/F38B6752412BBA5BA6A00E0BD400D0920CA01E22.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F38B6752412BBA5BA6A00E0BD400D0920CA01E22.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fd1fc1a2-ee77-405f-9e31-adc6dfc9b74c/0/F38B6752412BBA5BA6A00E0BD400D0920CA01E22.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:d1:05:c7:51:07:34:3a:63:f5:3d:40:96:d0:69:5b:55:f3: 2c:1d:bf:92:bf:e5:c1:a9:fc:a5:74:5c:5a:c9:cd:54:06:4a: e9:29:2f:9e:fa:f2:f9:3a:9e:65:c7:b3:8c:f6:c4:0e:52:a7: 66:6a:05:66:f2:24:cb:b3:07:f0:a9:d5:a7:3f:af:5e:0a:2c: 50:d1:6b:3d:81:a1:8e:73:31:85:9f:db:96:39:07:85:ad:7e: f5:c7:f0:68:f7:5a:d1:ed:22:9b:a5:ce:5b:30:56:e1:af:e4: 10:ed:45:d3:b2:2e:a9:1e:2b:5c:f5:98:ce:35:c2:91:20:89: 9b:73:0e:8d:53:c8:c9:74:b1:74:11:54:9e:d5:61:d0:54:98: de:17:7b:93:9b:71:3e:fc:41:bf:8c:35:4c:cf:2b:02:79:e6: b7:df:fa:e1:9a:52:ff:b3:30:62:24:9b:de:89:80:6f:f2:ea: 14:03:cc:d2:05:7b:6a:92:b0:84:73:13:a4:ac:c2:dd:15:e6: 53:43:12:e5:8e:83:93:1f:23:85:c7:35:c2:0f:61:95:89:76: 0b:a4:c3:b8:c8:91:b3:c8:02:7f:d3:11:e4:12:93:01:a3:9e: 14:e8:8b:cb:f8:1c:e7:d5:a1:ba:1e:d1:ed:89:63:fb:22:f3: 1c:59:6a:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK/NGlAToTbmoL+K0yGXlm8pn15YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM4QjY3NTI0MTJCQkE1QkE2QTAwRTBCRDQwMEQwOTIw Q0EwMUUyMjAeFw0yNTA4MjIyMDA3MDNaFw0yNTA4MjUyMjA3MDNaMDMxMTAvBgNV BAMTKDQ3QzREQTI1Q0I4QzFEMDQwRDMyQTBCM0Q1QkFCRDcxQjkxMEU3NTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4FXfFzHDxgDKvuFFhXCwlVMPB 7Us2UAeV93BusYQGFFY5fgG65Ox4f5VQ+GW22IM95AvoPZ16t6HdvJTAf66a/q5y JEv1qGoomOtMcpH+SiiJrro2qRikUkF/sNzXmueG3gxZLAbXE0/+LdaMdMuEEIEt 8mwMrgwf4M3GevF3mOnhBa2QV+mhVw4DFZ7QHu7/6LJJpK83tkKfqI9g12T4yrSt rsVs8za7CbIfx4pTsIPpXHFwv2+4u+v2csWARSYUMduk84KGE1U949ry7hmi3ZPB 3EDDDWV2Mp4POs75HRm3x3mnsqinZg/IzDXNIfPm0fNhGTdms1dYkUkMA7/VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUR8TaJcuMHQQNMqCz1bq9cbkQ51EwHwYDVR0j BBgwFoAU84tnUkErulumoA4L1ADQkgygHiIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZDFmYzFhMi1lZTc3LTQwNWYtOWUzMS1hZGM2ZGZjOWI3NGMvMC9GMzhCNjc1MjQx MkJCQTVCQTZBMDBFMEJENDAwRDA5MjBDQTAxRTIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjM4QjY3NTI0MTJCQkE1QkE2QTAwRTBCRDQwMEQwOTIwQ0Ew MUUyMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmQxZmMxYTItZWU3Ny00MDVmLTll MzEtYWRjNmRmYzliNzRjLzAvRjM4QjY3NTI0MTJCQkE1QkE2QTAwRTBCRDQwMEQw OTIwQ0EwMUUyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHTRBcdRBzQ6Y/U9QJbQaVtV8ywdv5K/5cGp /KV0XFrJzVQGSukpL5768vk6nmXHs4z2xA5Sp2ZqBWbyJMuzB/Cp1ac/r14KLFDR az2BoY5zMYWf25Y5B4WtfvXH8Gj3WtHtIpulzlswVuGv5BDtRdOyLqkeK1z1mM41 wpEgiZtzDo1TyMl0sXQRVJ7VYdBUmN4Xe5ObcT78Qb+MNUzPKwJ55rff+uGaUv+z MGIkm96JgG/y6hQDzNIFe2qSsIRzE6Sswt0V5lNDEuWOg5MfI4XHNcIPYZWJdguk w7jIkbPIAn/TEeQSkwGjnhToi8v4HOfVoboe0e2JY/si8xxZalY= -----END CERTIFICATE-----Generated at Sun Aug 24 04:09:05 2025 by rpki-client