$ rpki-client -vvf repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft File: F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft (raw, json) Hash identifier: EKb1rwAsSEYm3E3nuTjs0USfKcwUEZ7thBug7ajwwEg= Subject key identifier: 1E:05:AE:67:68:E6:54:0B:85:07:47:7E:42:77:EA:62:F3:48:27:A8 Authority key identifier: F3:F9:AB:30:AC:2C:50:B3:ED:F7:C9:1C:45:31:CC:9A:EE:9C:9D:A3 Certificate issuer: /CN=F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3 Certificate serial: 64F3B8246A1304F11144E4739035A6DFFB3B8654 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft Manifest number: 04FB Signing time: Thu 07 Aug 2025 00:31:11 +0000 Manifest this update: Thu 07 Aug 2025 00:26:11 +0000 Manifest next update: Sun 10 Aug 2025 06:04:11 +0000 Files and hashes: 1: 3130332e3130302e3138312e302f32342d3234203d3e20313336383430.roa (hash: CamY8eX6kfj5MZjd7GTKNGu0eML2pclOVMqWYRohOEs=) 2: 3130332e3130302e3138322e302f32342d3234203d3e20313336383430.roa (hash: 82WkCsugh3Y0Do+wrRLPbBu7oY8u5dpqm/OQwR7YoKQ=) 3: 3130332e3130302e3138302e302f32322d3232203d3e20313336383430.roa (hash: Um7YNYBxTVjbF3M76ZtkS+WRPG6nd3aZ+YWjDA+f9zA=) 4: 3130332e3130302e3138332e302f32342d3234203d3e20313336383430.roa (hash: HP2CIuQ7HdSouFMxhc4gbLPN64fDpck7CCz5j9Fedrs=) 5: 323430313a626663303a3a2f33322d3332203d3e20313336383430.roa (hash: OD6ds+KTm//KkPIe0CnHbGgyxy24D56HEq7afLGbIc8=) 6: 3130332e3130302e3138302e302f32342d3234203d3e20313336383430.roa (hash: yz7KoAXsbF5ZqTXQr0wN32L4YkceTPCN36RTUDHDNIE=) 7: F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.crl (hash: sfKkixwGbl+z03U8XjA7zUbG4sqFyFoBALxuqF1VWAo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.crl rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 06:04:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:f3:b8:24:6a:13:04:f1:11:44:e4:73:90:35:a6:df:fb:3b:86:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3 Validity Not Before: Aug 7 00:26:11 2025 GMT Not After : Aug 10 06:04:11 2025 GMT Subject: CN=1E05AE6768E6540B8507477E4277EA62F34827A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:63:f8:c1:dc:99:35:7d:bb:ca:4c:2a:da:a3: cc:7b:9f:ec:9d:28:3f:1e:c2:21:08:8e:17:8e:67: da:42:99:2c:1c:3a:56:3e:3d:ae:55:a4:5d:12:6a: f9:08:58:47:f5:2e:5f:33:70:00:e6:19:38:5b:a5: b9:57:95:14:43:45:74:fd:4d:8b:9e:69:b7:7c:0f: a4:00:86:5a:c4:7d:ca:ff:de:3f:ba:43:6a:8e:2a: de:18:a3:a7:ea:5d:42:d3:94:16:8c:7d:33:3a:63: 09:2c:3e:9b:34:24:75:e1:2e:79:e7:5b:dc:9c:c8: e1:90:71:88:c2:25:05:33:e6:89:8c:83:be:76:36: 00:6f:78:68:fa:0c:a2:40:23:3d:97:a6:eb:75:fa: 9f:dd:b0:04:15:33:0d:89:f3:96:93:ef:c1:8a:06: 7a:7f:2a:a6:2a:d2:42:22:13:5b:1d:4f:ca:8e:ca: ff:ea:70:e2:26:91:9d:13:99:18:1b:76:5e:bf:07: 9e:67:8f:2e:44:b7:fb:94:30:75:c3:03:50:af:51: cf:6a:d9:b6:3e:a8:c9:a6:a6:de:3f:bf:d0:01:01: b5:72:23:ca:48:86:00:eb:46:2d:bc:ae:5b:a1:58: 86:14:86:20:37:63:75:8e:42:7a:90:3b:86:c9:f2: a6:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:05:AE:67:68:E6:54:0B:85:07:47:7E:42:77:EA:62:F3:48:27:A8 X509v3 Authority Key Identifier: keyid:F3:F9:AB:30:AC:2C:50:B3:ED:F7:C9:1C:45:31:CC:9A:EE:9C:9D:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:5d:ca:ed:30:16:1a:c0:bc:8c:9c:d2:a5:dc:cb:73:6d:0a: dc:e2:22:94:1e:15:54:6e:d2:ca:36:33:45:da:22:12:be:80: 92:ef:63:db:1f:3f:ae:71:3f:df:6d:fc:32:2b:1e:8b:00:79: 5a:01:70:93:7d:a7:ea:e3:66:cb:6a:0e:ab:82:c5:37:b6:43: 38:fb:18:88:1e:4d:cd:9b:3b:63:f0:a8:6d:e1:bd:89:ee:fd: eb:93:b7:82:7f:3e:b3:68:14:be:e8:c0:43:cf:4b:72:aa:67: 94:6f:38:81:b4:39:18:30:9f:95:17:cf:ed:44:e5:b0:f4:48: 72:35:db:a6:34:25:f5:83:99:0a:a3:ab:23:91:0a:91:c5:a5: e9:d8:1d:5f:b9:bb:3e:ad:c3:0a:70:45:72:6d:e5:e9:f1:fc: 66:2a:3e:01:f1:f8:65:40:f2:21:e9:20:16:3a:60:80:65:c7: 89:d9:84:ff:dc:f7:f1:0c:6e:3b:97:45:93:d5:16:be:bf:e2: bd:94:ad:2b:2a:b8:d1:4d:24:2c:e1:fd:ab:7e:c1:de:0b:19: f7:d3:84:0f:c2:21:10:4a:53:ca:a5:1a:81:26:3e:e0:5b:1a: ef:35:95:8e:79:78:1d:84:a4:eb:3d:8d:36:d4:3f:b0:f8:f5: 17:38:c7:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZPO4JGoTBPERRORzkDWm3/s7hlQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjNGOUFCMzBBQzJDNTBCM0VERjdDOTFDNDUzMUNDOUFF RTlDOURBMzAeFw0yNTA4MDcwMDI2MTFaFw0yNTA4MTAwNjA0MTFaMDMxMTAvBgNV BAMTKDFFMDVBRTY3NjhFNjU0MEI4NTA3NDc3RTQyNzdFQTYyRjM0ODI3QTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjY/jB3Jk1fbvKTCrao8x7n+yd KD8ewiEIjheOZ9pCmSwcOlY+Pa5VpF0SavkIWEf1Ll8zcADmGThbpblXlRRDRXT9 TYueabd8D6QAhlrEfcr/3j+6Q2qOKt4Yo6fqXULTlBaMfTM6YwksPps0JHXhLnnn W9ycyOGQcYjCJQUz5omMg752NgBveGj6DKJAIz2Xput1+p/dsAQVMw2J85aT78GK Bnp/KqYq0kIiE1sdT8qOyv/qcOImkZ0TmRgbdl6/B55njy5Et/uUMHXDA1CvUc9q 2bY+qMmmpt4/v9ABAbVyI8pIhgDrRi28rluhWIYUhiA3Y3WOQnqQO4bJ8qazAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHgWuZ2jmVAuFB0d+QnfqYvNIJ6gwHwYDVR0j BBgwFoAU8/mrMKwsULPt98kcRTHMmu6cnaMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZWYwODkwMC1mMmM2LTRkMDctYjY5NC1kMTg4YmFhM2I4ZjIvMC9GM0Y5QUIzMEFD MkM1MEIzRURGN0M5MUM0NTMxQ0M5QUVFOUM5REEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjNGOUFCMzBBQzJDNTBCM0VERjdDOTFDNDUzMUNDOUFFRTlD OURBMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWVmMDg5MDAtZjJjNi00ZDA3LWI2 OTQtZDE4OGJhYTNiOGYyLzAvRjNGOUFCMzBBQzJDNTBCM0VERjdDOTFDNDUzMUND OUFFRTlDOURBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGFdyu0wFhrAvIyc0qXcy3NtCtziIpQeFVRu 0so2M0XaIhK+gJLvY9sfP65xP99t/DIrHosAeVoBcJN9p+rjZstqDquCxTe2Qzj7 GIgeTc2bO2PwqG3hvYnu/euTt4J/PrNoFL7owEPPS3KqZ5RvOIG0ORgwn5UXz+1E 5bD0SHI126Y0JfWDmQqjqyORCpHFpenYHV+5uz6twwpwRXJt5enx/GYqPgHx+GVA 8iHpIBY6YIBlx4nZhP/c9/EMbjuXRZPVFr6/4r2UrSsquNFNJCzh/at+wd4LGffT hA/CIRBKU8qlGoEmPuBbGu81lY55eB2EpOs9jTbUP7D49Rc4x8o= -----END CERTIFICATE-----Generated at Thu Aug 7 13:09:37 2025 by rpki-client