$ rpki-client -vvf repo-rpki.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.mft File: F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.mft (raw, json) Hash identifier: 6x14GeJUfrWjbFMLdd29sihnp0B1rzpMdopF5OIGBhQ= Subject key identifier: 2E:E2:A3:BA:52:66:05:E4:3A:4C:A4:B6:D6:D7:42:59:3D:CB:FA:86 Authority key identifier: F8:B7:C8:E5:DD:BD:D0:36:51:3F:10:B8:7F:39:A9:4B:E1:DB:3D:CA Certificate issuer: /CN=F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA Certificate serial: 733DB2D8389BF9F0FAF69D3B30C237FC3D6C9D00 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.mft Manifest number: 01E8 Signing time: Tue 17 Jun 2025 02:20:36 +0000 Manifest this update: Tue 17 Jun 2025 02:15:36 +0000 Manifest next update: Fri 20 Jun 2025 10:18:36 +0000 Files and hashes: 1: 3130332e3138392e3131372e302f32342d3234203d3e20313439383738.roa (hash: nXEHhJ8w6SXV+eCEbP2YrkovqQsEQKgULxh/UNhY8O8=) 2: F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.crl (hash: N0snAzkhBHf/QuCyFfoHLjtfSmE3eo5FAhASOzyjJfU=) 3: 3130332e3138392e3131362e302f32342d3234203d3e20313439383738.roa (hash: WTqqW4cwushoWLyLWupS3yHzTC5AqZ4B8ENJ6k7wzI4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.crl rsync://repo-rpki.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 10:18:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:3d:b2:d8:38:9b:f9:f0:fa:f6:9d:3b:30:c2:37:fc:3d:6c:9d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA Validity Not Before: Jun 17 02:15:36 2025 GMT Not After : Jun 20 10:18:36 2025 GMT Subject: CN=2EE2A3BA526605E43A4CA4B6D6D742593DCBFA86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:21:d9:b0:25:ce:d7:ac:c6:ee:60:9d:69:09: 19:78:3e:0a:d9:4a:4f:af:e6:bd:ba:0f:06:93:67: 9e:f9:e2:11:3e:52:4f:ce:a3:11:37:3b:b2:93:31: 1d:73:ad:7a:47:91:3a:16:dc:85:e6:35:bf:66:f9: b3:7d:ae:fe:6a:95:51:70:08:f7:d1:6c:f8:8b:12: 12:d0:30:c6:09:93:bd:47:91:23:c8:68:68:4b:f9: 4f:67:a6:33:8f:19:58:83:1f:71:17:70:c4:33:bb: 3b:f1:67:0e:8f:2f:b2:e1:fb:15:60:56:ff:e3:c5: 38:99:71:dc:90:4f:a8:d0:24:00:f3:6f:45:96:77: 3f:eb:65:6f:6b:ed:9c:7d:5b:96:0e:e2:16:3a:3b: 78:18:4a:c9:c4:ff:99:ca:87:70:54:51:80:a6:b8: c6:74:37:75:7d:df:5c:52:ad:dd:1d:43:79:2d:3a: 89:35:1f:b5:37:11:3e:c2:d8:38:8a:a2:9e:3e:4f: 01:c3:be:8e:6b:03:86:8c:3f:fa:9d:ea:ac:64:1c: 3a:e7:6f:7c:a2:84:5c:2b:b4:d4:48:83:ae:90:0f: f6:aa:9e:5c:95:bc:c6:a9:28:e1:8b:c5:e0:65:cd: 7c:df:d6:30:82:d5:a4:24:5d:90:15:df:d0:25:a8: d9:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:E2:A3:BA:52:66:05:E4:3A:4C:A4:B6:D6:D7:42:59:3D:CB:FA:86 X509v3 Authority Key Identifier: keyid:F8:B7:C8:E5:DD:BD:D0:36:51:3F:10:B8:7F:39:A9:4B:E1:DB:3D:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:6f:7a:d6:c3:8a:f4:0d:db:6e:14:59:8f:a4:94:68:1f:8d: 78:b0:e5:51:67:12:c3:50:e6:6e:96:80:06:ee:1d:a2:e5:81: f3:a6:bd:a7:c9:5a:97:c9:9f:1b:d9:41:7c:ee:93:7f:78:f3: 2c:3b:fd:83:b4:d3:2a:b5:b0:d0:c1:ad:d0:0c:33:d7:11:6d: 01:ec:e5:7c:fc:0d:d9:5a:4d:ea:74:94:e4:07:26:31:a0:a1: 8a:ef:a0:f7:35:5a:26:b1:4b:aa:92:43:6a:34:44:a4:cc:a8: 28:b2:41:4e:7c:bf:5e:0c:ef:81:43:6d:e3:1f:74:2c:56:da: 17:c8:a7:86:05:27:6f:44:36:34:33:a1:21:91:c4:2a:47:ff: 75:99:b4:cc:d8:b5:27:60:e1:2f:3a:04:1e:55:63:4b:79:06: be:6f:d5:b8:4f:36:62:b7:a9:d6:b3:2b:b1:67:37:f1:4c:d9: a3:ac:70:0d:34:e7:1b:6a:50:10:da:fc:bd:8f:97:c4:30:f3: 63:89:cd:78:5c:3a:c9:36:c0:68:f1:63:17:ef:65:78:32:19: d9:a2:3f:a5:b8:a6:79:18:90:ee:8d:13:86:0a:8c:cd:41:4f: 68:23:67:56:bd:7d:9e:e8:70:f3:3a:47:fe:90:b3:45:3b:d0: 6d:e2:f5:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcz2y2Dib+fD69p07MMI3/D1snQAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhCN0M4RTVEREJERDAzNjUxM0YxMEI4N0YzOUE5NEJF MURCM0RDQTAeFw0yNTA2MTcwMjE1MzZaFw0yNTA2MjAxMDE4MzZaMDMxMTAvBgNV BAMTKDJFRTJBM0JBNTI2NjA1RTQzQTRDQTRCNkQ2RDc0MjU5M0RDQkZBODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+IdmwJc7XrMbuYJ1pCRl4PgrZ Sk+v5r26DwaTZ5754hE+Uk/OoxE3O7KTMR1zrXpHkToW3IXmNb9m+bN9rv5qlVFw CPfRbPiLEhLQMMYJk71HkSPIaGhL+U9npjOPGViDH3EXcMQzuzvxZw6PL7Lh+xVg Vv/jxTiZcdyQT6jQJADzb0WWdz/rZW9r7Zx9W5YO4hY6O3gYSsnE/5nKh3BUUYCm uMZ0N3V931xSrd0dQ3ktOok1H7U3ET7C2DiKop4+TwHDvo5rA4aMP/qd6qxkHDrn b3yihFwrtNRIg66QD/aqnlyVvMapKOGLxeBlzXzf1jCC1aQkXZAV39AlqNknAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULuKjulJmBeQ6TKS21tdCWT3L+oYwHwYDVR0j BBgwFoAU+LfI5d290DZRPxC4fzmpS+HbPcowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MzA1YWIzMC01NjUzLTQyYmMtOWMzZi1hYWY1NjdlYWU3MDEvMC9GOEI3QzhFNURE QkREMDM2NTEzRjEwQjg3RjM5QTk0QkUxREIzRENBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjhCN0M4RTVEREJERDAzNjUxM0YxMEI4N0YzOUE5NEJFMURC M0RDQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzMwNWFiMzAtNTY1My00MmJjLTlj M2YtYWFmNTY3ZWFlNzAxLzAvRjhCN0M4RTVEREJERDAzNjUxM0YxMEI4N0YzOUE5 NEJFMURCM0RDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHhvetbDivQN224UWY+klGgfjXiw5VFnEsNQ 5m6WgAbuHaLlgfOmvafJWpfJnxvZQXzuk3948yw7/YO00yq1sNDBrdAMM9cRbQHs 5Xz8DdlaTep0lOQHJjGgoYrvoPc1WiaxS6qSQ2o0RKTMqCiyQU58v14M74FDbeMf dCxW2hfIp4YFJ29ENjQzoSGRxCpH/3WZtMzYtSdg4S86BB5VY0t5Br5v1bhPNmK3 qdazK7FnN/FM2aOscA005xtqUBDa/L2Pl8Qw82OJzXhcOsk2wGjxYxfvZXgyGdmi P6W4pnkYkO6NE4YKjM1BT2gjZ1a9fZ7ocPM6R/6Qs0U70G3i9bg= -----END CERTIFICATE-----Generated at Wed Jun 18 07:36:35 2025 by rpki-client