$ rpki-client -vvf repo-rpki.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.mft File: F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.mft (raw, json) Hash identifier: bi3yWkyjDxeehdawA5GAI+/lOSXw4CCHgGaodGvqqBM= Subject key identifier: 0F:3F:38:2E:94:FA:61:7C:DD:5F:09:B0:41:13:9D:CA:37:DE:85:C0 Authority key identifier: F8:B7:C8:E5:DD:BD:D0:36:51:3F:10:B8:7F:39:A9:4B:E1:DB:3D:CA Certificate issuer: /CN=F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA Certificate serial: 0444D447598062C9A2AC1F746D8B9942A0E2448F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.mft Manifest number: 01FE Signing time: Tue 05 Aug 2025 13:00:37 +0000 Manifest this update: Tue 05 Aug 2025 12:55:37 +0000 Manifest next update: Fri 08 Aug 2025 17:42:37 +0000 Files and hashes: 1: 3130332e3138392e3131372e302f32342d3234203d3e20313439383738.roa (hash: nXEHhJ8w6SXV+eCEbP2YrkovqQsEQKgULxh/UNhY8O8=) 2: 3130332e3138392e3131362e302f32342d3234203d3e20313439383738.roa (hash: WTqqW4cwushoWLyLWupS3yHzTC5AqZ4B8ENJ6k7wzI4=) 3: F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.crl (hash: es8l9SRf7iJyZqZ8tGDfIj/wDclDwjhG1JPabWG0lG4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.crl rsync://repo-rpki.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 17:42:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:44:d4:47:59:80:62:c9:a2:ac:1f:74:6d:8b:99:42:a0:e2:44:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA Validity Not Before: Aug 5 12:55:37 2025 GMT Not After : Aug 8 17:42:37 2025 GMT Subject: CN=0F3F382E94FA617CDD5F09B041139DCA37DE85C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:dc:da:cf:45:bd:14:e9:8b:6c:a2:cb:50:9f: 0d:36:fd:a9:f3:cb:df:46:66:9d:08:15:89:2a:81: d5:e4:1f:3e:24:81:0d:ca:a1:4b:f3:eb:9d:ab:85: c2:b6:f3:86:1c:d6:e1:09:f3:26:d2:c9:78:10:51: 6b:ed:ae:07:3c:f4:53:b8:1a:df:b5:a4:3e:15:6b: 43:a5:db:58:7a:7d:99:ff:9f:a6:46:4f:a3:d9:3c: ee:31:b3:ae:5e:1f:c9:00:9f:6d:50:b3:79:f6:a3: a6:ad:6e:62:8d:d7:fb:34:9a:39:16:aa:11:8d:02: bf:6a:de:54:09:5e:88:9e:a9:3b:5c:ac:16:8e:9d: df:dd:f5:48:f7:93:8d:75:0b:61:fb:df:6a:3b:ce: 7c:8b:a0:94:8e:84:06:0c:27:db:fe:70:d4:2f:3c: 29:b8:f6:d1:10:f3:be:68:a9:99:a3:18:ae:0c:a2: 44:24:6d:4e:dc:4b:f6:96:87:5a:c7:86:2b:68:e1: 34:62:b7:70:b2:8f:ca:02:17:cf:53:b4:c5:0a:05: 87:94:2f:ed:87:57:c1:23:1b:da:b8:1b:79:80:21: 9d:24:1b:44:a9:ba:56:a0:18:02:d2:98:1d:19:37: ac:20:4f:03:43:26:05:d9:d0:ab:70:05:56:18:25: c0:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:3F:38:2E:94:FA:61:7C:DD:5F:09:B0:41:13:9D:CA:37:DE:85:C0 X509v3 Authority Key Identifier: keyid:F8:B7:C8:E5:DD:BD:D0:36:51:3F:10:B8:7F:39:A9:4B:E1:DB:3D:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:fc:c9:5d:de:9a:5d:af:3d:3f:16:fa:eb:21:5b:13:33:a6: ab:d4:cd:5d:03:1b:71:84:da:fb:cb:54:ca:3c:79:df:fb:12: 1b:cb:e9:39:6a:1d:8a:90:82:43:99:fc:68:5f:5d:d1:84:8e: a4:22:90:b1:b2:f1:ec:28:f5:0d:d5:6f:b6:b6:fe:05:34:00: f1:2e:2f:b0:5d:5b:56:aa:af:fa:3c:d4:67:78:b8:0f:68:06: f8:f4:a0:16:9f:5a:ad:cb:d2:c0:06:e7:00:64:c3:1d:26:df: 83:b8:95:d8:dc:6d:28:9d:47:8a:e0:17:11:d6:a8:85:02:1b: 29:76:dd:b3:bb:9d:76:5b:a6:60:79:94:16:45:66:cf:a0:cc: af:a1:ea:85:b7:62:0a:24:94:5c:ed:d4:a4:9c:ca:e1:16:52: 00:8a:a1:99:44:bc:b9:f2:44:8a:c1:53:c2:65:31:71:5d:9a: 4d:22:b0:80:79:29:44:51:8b:fa:5b:27:ff:13:08:b4:00:aa: 7b:71:ef:cc:1e:35:a3:0c:bd:e8:6e:7b:0b:fa:89:df:c6:15: b6:61:4c:b8:99:0a:8f:b8:4d:44:3a:19:3a:89:3d:6c:61:fa: d8:0e:aa:45:93:b9:ba:0e:2b:dc:9d:3d:d2:6b:51:6b:d9:90: 58:e5:8d:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBETUR1mAYsmirB90bYuZQqDiRI8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhCN0M4RTVEREJERDAzNjUxM0YxMEI4N0YzOUE5NEJF MURCM0RDQTAeFw0yNTA4MDUxMjU1MzdaFw0yNTA4MDgxNzQyMzdaMDMxMTAvBgNV BAMTKDBGM0YzODJFOTRGQTYxN0NERDVGMDlCMDQxMTM5RENBMzdERTg1QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ3NrPRb0U6YtsostQnw02/anz y99GZp0IFYkqgdXkHz4kgQ3KoUvz652rhcK284Yc1uEJ8ybSyXgQUWvtrgc89FO4 Gt+1pD4Va0Ol21h6fZn/n6ZGT6PZPO4xs65eH8kAn21Qs3n2o6atbmKN1/s0mjkW qhGNAr9q3lQJXoieqTtcrBaOnd/d9Uj3k411C2H732o7znyLoJSOhAYMJ9v+cNQv PCm49tEQ875oqZmjGK4MokQkbU7cS/aWh1rHhito4TRit3Cyj8oCF89TtMUKBYeU L+2HV8EjG9q4G3mAIZ0kG0SpulagGALSmB0ZN6wgTwNDJgXZ0KtwBVYYJcADAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDz84LpT6YXzdXwmwQROdyjfehcAwHwYDVR0j BBgwFoAU+LfI5d290DZRPxC4fzmpS+HbPcowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MzA1YWIzMC01NjUzLTQyYmMtOWMzZi1hYWY1NjdlYWU3MDEvMC9GOEI3QzhFNURE QkREMDM2NTEzRjEwQjg3RjM5QTk0QkUxREIzRENBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjhCN0M4RTVEREJERDAzNjUxM0YxMEI4N0YzOUE5NEJFMURC M0RDQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzMwNWFiMzAtNTY1My00MmJjLTlj M2YtYWFmNTY3ZWFlNzAxLzAvRjhCN0M4RTVEREJERDAzNjUxM0YxMEI4N0YzOUE5 NEJFMURCM0RDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIj8yV3eml2vPT8W+ushWxMzpqvUzV0DG3GE 2vvLVMo8ed/7EhvL6TlqHYqQgkOZ/GhfXdGEjqQikLGy8ewo9Q3Vb7a2/gU0APEu L7BdW1aqr/o81Gd4uA9oBvj0oBafWq3L0sAG5wBkwx0m34O4ldjcbSidR4rgFxHW qIUCGyl23bO7nXZbpmB5lBZFZs+gzK+h6oW3YgoklFzt1KScyuEWUgCKoZlEvLny RIrBU8JlMXFdmk0isIB5KURRi/pbJ/8TCLQAqntx78weNaMMvehuewv6id/GFbZh TLiZCo+4TUQ6GTqJPWxh+tgOqkWTuboOK9ydPdJrUWvZkFjljWg= -----END CERTIFICATE-----Generated at Thu Aug 7 04:29:28 2025 by rpki-client