$ rpki-client -vvf repo-rpki.idnic.net/repo/fd1fc1a2-ee77-405f-9e31-adc6dfc9b74c/0/F38B6752412BBA5BA6A00E0BD400D0920CA01E22.mft File: F38B6752412BBA5BA6A00E0BD400D0920CA01E22.mft (raw, json) Hash identifier: hBg3+Zm4g+65AFUVWLDkP85tpsWLzLHi0bnkprjKpso= Subject key identifier: 0B:0D:41:9D:A9:92:3D:CF:FC:68:AA:73:52:B7:8C:F5:8D:52:77:EC Authority key identifier: F3:8B:67:52:41:2B:BA:5B:A6:A0:0E:0B:D4:00:D0:92:0C:A0:1E:22 Certificate issuer: /CN=F38B6752412BBA5BA6A00E0BD400D0920CA01E22 Certificate serial: 2161FF2B6FE517D669E38960A654F081E54131C5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F38B6752412BBA5BA6A00E0BD400D0920CA01E22.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fd1fc1a2-ee77-405f-9e31-adc6dfc9b74c/0/F38B6752412BBA5BA6A00E0BD400D0920CA01E22.mft Manifest number: CC Signing time: Sun 29 Jun 2025 09:02:00 +0000 Manifest this update: Sun 29 Jun 2025 08:57:00 +0000 Manifest next update: Wed 02 Jul 2025 19:29:00 +0000 Files and hashes: 1: 3135372e31352e3231322e302f32342d3234203d3e20313532343036.roa (hash: ILdIplNUn5zzvV+8+nEtx6VwnOOAN7tEdP7POnsDWcQ=) 2: F38B6752412BBA5BA6A00E0BD400D0920CA01E22.crl (hash: csBfFj5LVupnosZJbuePayhpCONzOq7/66nxuuhRO6U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fd1fc1a2-ee77-405f-9e31-adc6dfc9b74c/0/F38B6752412BBA5BA6A00E0BD400D0920CA01E22.crl rsync://repo-rpki.idnic.net/repo/fd1fc1a2-ee77-405f-9e31-adc6dfc9b74c/0/F38B6752412BBA5BA6A00E0BD400D0920CA01E22.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F38B6752412BBA5BA6A00E0BD400D0920CA01E22.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 19:29:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:61:ff:2b:6f:e5:17:d6:69:e3:89:60:a6:54:f0:81:e5:41:31:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F38B6752412BBA5BA6A00E0BD400D0920CA01E22 Validity Not Before: Jun 29 08:57:00 2025 GMT Not After : Jul 2 19:29:00 2025 GMT Subject: CN=0B0D419DA9923DCFFC68AA7352B78CF58D5277EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:9c:72:07:6d:f3:10:00:d4:98:b8:9f:5e:2b: a4:de:85:15:45:d2:67:0a:89:1e:64:63:b4:82:6d: 43:22:26:e3:4f:08:ef:00:a9:ef:bf:43:87:fa:fe: 45:8d:25:e4:4f:f6:df:ed:96:25:f2:3b:ae:ce:e8: 18:e4:02:fe:75:c7:a8:3d:80:95:95:45:2c:79:c2: 03:40:64:aa:4b:a9:b7:d2:77:26:e6:34:6c:95:29: 38:b8:c9:a8:b4:b0:4e:89:04:66:ee:b5:bb:56:44: d3:19:4a:d3:10:24:ba:e8:ab:86:8f:0c:f8:43:c1: fb:b8:04:9f:b0:02:af:50:3c:4d:88:15:e4:94:da: f1:af:19:e8:d5:ef:54:ea:00:26:56:0c:39:c5:2e: 19:7b:e3:39:29:f5:ee:24:bb:a5:87:cc:df:60:e1: 71:5e:4b:e9:0e:d3:d5:a4:bf:57:8f:08:62:3f:ae: 3e:4e:c8:4b:61:1d:0b:3d:d8:ce:66:85:24:3d:8b: 28:f5:14:14:6e:b9:91:bf:7a:d8:67:06:1e:fe:4f: 98:b4:1d:14:62:cf:98:a9:37:0b:cf:72:65:01:cc: e2:36:16:a0:ff:fe:68:0b:1c:be:33:dc:cb:70:40: 9f:70:d0:c0:58:3c:de:2e:00:0e:d8:34:28:b4:18: 3a:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:0D:41:9D:A9:92:3D:CF:FC:68:AA:73:52:B7:8C:F5:8D:52:77:EC X509v3 Authority Key Identifier: keyid:F3:8B:67:52:41:2B:BA:5B:A6:A0:0E:0B:D4:00:D0:92:0C:A0:1E:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fd1fc1a2-ee77-405f-9e31-adc6dfc9b74c/0/F38B6752412BBA5BA6A00E0BD400D0920CA01E22.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F38B6752412BBA5BA6A00E0BD400D0920CA01E22.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fd1fc1a2-ee77-405f-9e31-adc6dfc9b74c/0/F38B6752412BBA5BA6A00E0BD400D0920CA01E22.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:48:78:b4:0b:d8:d3:eb:f5:46:74:a0:d5:96:2e:7d:94:ca: 5f:19:79:06:56:49:74:4e:8f:d8:47:99:e0:6b:fc:dc:17:65: bd:7b:80:6a:2f:53:3a:0d:4b:7c:a7:76:8b:47:31:de:88:49: 01:12:8b:88:21:a1:40:c8:97:05:d1:a3:2b:97:e8:af:88:86: 79:13:ca:16:5a:65:b7:75:93:11:7e:3e:02:70:3c:5a:81:33: 36:08:e5:91:db:eb:b4:dd:7b:4c:56:25:5c:e8:c1:cd:da:ff: 4b:c2:aa:f8:db:ea:cb:8c:06:1c:12:07:16:60:21:da:bb:e4: 0c:7e:2e:1e:c8:0b:af:44:3f:97:61:15:0d:86:63:4b:99:1b: 07:5b:3f:20:63:9f:63:b0:fc:a7:04:7d:80:ee:19:30:1c:e0: de:cd:90:9a:b9:55:0d:2c:8a:d4:85:b7:c4:7e:d0:62:92:ae: cf:21:5b:3a:71:4d:18:15:81:24:31:16:ee:4a:df:0b:55:22: 9c:59:e7:ce:94:9d:e1:58:bc:48:80:70:68:4b:fe:40:ac:2c: 8a:d1:44:d4:84:c2:e4:31:21:a2:f9:51:90:fd:44:92:7f:21: f5:f2:df:4d:f7:6c:bd:3b:8d:98:b2:b6:a3:23:05:d9:a1:0d: 11:c0:17:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIWH/K2/lF9Zp44lgplTwgeVBMcUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM4QjY3NTI0MTJCQkE1QkE2QTAwRTBCRDQwMEQwOTIw Q0EwMUUyMjAeFw0yNTA2MjkwODU3MDBaFw0yNTA3MDIxOTI5MDBaMDMxMTAvBgNV BAMTKDBCMEQ0MTlEQTk5MjNEQ0ZGQzY4QUE3MzUyQjc4Q0Y1OEQ1Mjc3RUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDnHIHbfMQANSYuJ9eK6TehRVF 0mcKiR5kY7SCbUMiJuNPCO8Aqe+/Q4f6/kWNJeRP9t/tliXyO67O6BjkAv51x6g9 gJWVRSx5wgNAZKpLqbfSdybmNGyVKTi4yai0sE6JBGbutbtWRNMZStMQJLroq4aP DPhDwfu4BJ+wAq9QPE2IFeSU2vGvGejV71TqACZWDDnFLhl74zkp9e4ku6WHzN9g 4XFeS+kO09Wkv1ePCGI/rj5OyEthHQs92M5mhSQ9iyj1FBRuuZG/ethnBh7+T5i0 HRRiz5ipNwvPcmUBzOI2FqD//mgLHL4z3MtwQJ9w0MBYPN4uAA7YNCi0GDorAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCw1BnamSPc/8aKpzUreM9Y1Sd+wwHwYDVR0j BBgwFoAU84tnUkErulumoA4L1ADQkgygHiIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZDFmYzFhMi1lZTc3LTQwNWYtOWUzMS1hZGM2ZGZjOWI3NGMvMC9GMzhCNjc1MjQx MkJCQTVCQTZBMDBFMEJENDAwRDA5MjBDQTAxRTIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjM4QjY3NTI0MTJCQkE1QkE2QTAwRTBCRDQwMEQwOTIwQ0Ew MUUyMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmQxZmMxYTItZWU3Ny00MDVmLTll MzEtYWRjNmRmYzliNzRjLzAvRjM4QjY3NTI0MTJCQkE1QkE2QTAwRTBCRDQwMEQw OTIwQ0EwMUUyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC9IeLQL2NPr9UZ0oNWWLn2Uyl8ZeQZWSXRO j9hHmeBr/NwXZb17gGovUzoNS3yndotHMd6ISQESi4ghoUDIlwXRoyuX6K+IhnkT yhZaZbd1kxF+PgJwPFqBMzYI5ZHb67Tde0xWJVzowc3a/0vCqvjb6suMBhwSBxZg Idq75Ax+Lh7IC69EP5dhFQ2GY0uZGwdbPyBjn2Ow/KcEfYDuGTAc4N7NkJq5VQ0s itSFt8R+0GKSrs8hWzpxTRgVgSQxFu5K3wtVIpxZ586UneFYvEiAcGhL/kCsLIrR RNSEwuQxIaL5UZD9RJJ/IfXy3033bL07jZiytqMjBdmhDRHAF1U= -----END CERTIFICATE-----Generated at Tue Jul 1 19:18:40 2025 by rpki-client