$ rpki-client -vvf repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.mft File: F256ED0C68D48E70DDBE3473644FDBA420E82FBC.mft (raw, json) Hash identifier: N0W3TmWkNpE1ebzlRH2dhppxenMokTAdqMcTt/sarCg= Subject key identifier: A7:41:21:3B:D5:CE:E7:08:9A:7A:E6:4D:2F:E1:DF:FD:B8:71:0B:51 Authority key identifier: F2:56:ED:0C:68:D4:8E:70:DD:BE:34:73:64:4F:DB:A4:20:E8:2F:BC Certificate issuer: /CN=F256ED0C68D48E70DDBE3473644FDBA420E82FBC Certificate serial: 75763FDFCACF732CFE809526934606E5ECEFD485 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.mft Manifest number: 0454 Signing time: Wed 06 Aug 2025 14:01:38 +0000 Manifest this update: Wed 06 Aug 2025 13:56:38 +0000 Manifest next update: Sat 09 Aug 2025 14:36:38 +0000 Files and hashes: 1: 3130332e3136312e3133302e302f32332d3233203d3e20313431363133.roa (hash: KW5knR4ALt6hLV7qJyhXL5J0Aia4lk+P8+shKebFztw=) 2: 3130332e3136312e3133302e302f32342d3234203d3e20313431363133.roa (hash: ZmtyjH4esGBpYxS6kg8mvGLf2n4U5Kw19ahenRHRz1U=) 3: 3130332e3136312e3133312e302f32342d3234203d3e20313431363133.roa (hash: k4MdP+pLjawFS04xVNJ5Qw3RpHb/EN1we0LXgjwR3jc=) 4: F256ED0C68D48E70DDBE3473644FDBA420E82FBC.crl (hash: mBCMMsy0s5iyT/KTxQs6n4RYcjvIP12LGIGrKl2s6rs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.crl rsync://repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 14:36:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:76:3f:df:ca:cf:73:2c:fe:80:95:26:93:46:06:e5:ec:ef:d4:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F256ED0C68D48E70DDBE3473644FDBA420E82FBC Validity Not Before: Aug 6 13:56:38 2025 GMT Not After : Aug 9 14:36:38 2025 GMT Subject: CN=A741213BD5CEE7089A7AE64D2FE1DFFDB8710B51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:18:eb:60:40:41:ae:20:3c:9c:bd:d9:50:76: 8d:93:21:9e:f7:e0:4f:b2:cd:05:13:8b:2a:d4:fa: 31:01:df:08:9d:7b:fd:13:ba:73:76:fa:e9:0e:18: 76:6e:6a:10:ad:d2:ea:0e:19:14:19:21:b3:fc:6d: 55:d9:80:e6:35:d8:ac:03:fb:78:fc:13:ae:3c:fb: c5:63:90:9c:b2:fe:b6:b7:ee:1f:e9:06:19:38:6c: 62:c0:5a:82:4e:ec:7c:48:ad:d0:72:ec:07:28:25: 26:35:f0:da:e3:3a:a4:0a:31:44:f3:09:90:8d:56: 20:ea:65:0a:44:9b:ba:26:7b:09:ef:83:d8:52:81: 3d:52:96:a7:88:4f:92:be:4a:50:3d:b3:4c:20:86: 30:6b:1c:f9:1e:81:6b:63:14:20:ef:50:b5:86:f9: 02:e1:60:63:85:56:1c:dc:19:e8:7b:32:ed:ca:9e: 65:cc:12:84:9e:37:38:54:60:67:9e:cc:fb:6c:a5: 72:9f:95:fd:09:f4:d9:61:c8:ce:94:9b:51:30:a6: 8f:0a:51:32:59:f0:fd:20:f5:b5:0f:e0:5b:dc:b0: 3b:36:80:ed:f9:ef:d2:37:12:22:b4:19:1d:0d:6d: 05:d9:e4:44:95:cc:55:3c:03:ec:29:2e:8a:7c:d3: 91:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:41:21:3B:D5:CE:E7:08:9A:7A:E6:4D:2F:E1:DF:FD:B8:71:0B:51 X509v3 Authority Key Identifier: keyid:F2:56:ED:0C:68:D4:8E:70:DD:BE:34:73:64:4F:DB:A4:20:E8:2F:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:10:17:32:ff:ba:93:ed:27:fd:76:6c:de:e0:f8:0e:c7:78: 26:b1:23:b5:3f:8c:10:c8:a4:de:92:49:21:a9:de:4f:23:d6: cd:68:81:21:7a:63:a0:91:b4:40:bd:e5:46:8d:3f:d7:0c:35: fd:49:a4:ae:08:1f:35:8b:b8:2d:3f:3f:df:b4:e6:e8:34:0b: 2c:9b:ba:31:7a:28:f5:c3:8a:97:46:e8:00:68:52:6a:5d:6d: 72:55:a2:57:ec:a2:2b:eb:d5:fd:ce:af:65:27:4d:8c:12:37: 57:fb:e8:fb:92:dc:65:83:77:4f:c9:fe:7f:57:00:90:67:37: 77:5d:cb:8c:b8:52:1b:2f:68:0f:e8:dc:2a:b2:7b:a0:6b:50: 9c:62:c6:84:6f:8e:0b:8c:94:12:ed:0d:a8:c7:7d:29:25:6c: ba:08:5f:97:e7:3e:6d:b2:8a:f1:ba:6b:de:51:9e:69:f4:c3: 30:7b:1d:6c:31:d1:21:21:0d:49:6a:51:aa:0d:3c:aa:da:ee: db:06:82:ab:0b:e2:85:71:ec:dd:52:9c:98:9f:7e:27:97:22: 7c:e7:7c:cc:f1:8f:e7:8d:8f:0a:db:04:fa:82:3f:65:97:c1: 9e:94:a0:4d:03:8c:3f:0c:38:82:c6:70:b4:e3:91:27:fa:a1: 6e:fb:4f:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdXY/38rPcyz+gJUmk0YG5ezv1IUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1NkVEMEM2OEQ0OEU3MEREQkUzNDczNjQ0RkRCQTQy MEU4MkZCQzAeFw0yNTA4MDYxMzU2MzhaFw0yNTA4MDkxNDM2MzhaMDMxMTAvBgNV BAMTKEE3NDEyMTNCRDVDRUU3MDg5QTdBRTY0RDJGRTFERkZEQjg3MTBCNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0GOtgQEGuIDycvdlQdo2TIZ73 4E+yzQUTiyrU+jEB3wide/0TunN2+ukOGHZuahCt0uoOGRQZIbP8bVXZgOY12KwD +3j8E648+8VjkJyy/ra37h/pBhk4bGLAWoJO7HxIrdBy7AcoJSY18NrjOqQKMUTz CZCNViDqZQpEm7omewnvg9hSgT1SlqeIT5K+SlA9s0wghjBrHPkegWtjFCDvULWG +QLhYGOFVhzcGeh7Mu3KnmXMEoSeNzhUYGeezPtspXKflf0J9NlhyM6Um1Ewpo8K UTJZ8P0g9bUP4FvcsDs2gO3579I3EiK0GR0NbQXZ5ESVzFU8A+wpLop805H/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUp0EhO9XO5wiaeuZNL+Hf/bhxC1EwHwYDVR0j BBgwFoAU8lbtDGjUjnDdvjRzZE/bpCDoL7wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTVjNzNjYy05ODVlLTRlOTItYmE2OS1jZDhiZmZlNGE1M2QvMC9GMjU2RUQwQzY4 RDQ4RTcwRERCRTM0NzM2NDRGREJBNDIwRTgyRkJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjI1NkVEMEM2OEQ0OEU3MEREQkUzNDczNjQ0RkRCQTQyMEU4 MkZCQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U1YzczY2MtOTg1ZS00ZTkyLWJh NjktY2Q4YmZmZTRhNTNkLzAvRjI1NkVEMEM2OEQ0OEU3MEREQkUzNDczNjQ0RkRC QTQyMEU4MkZCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALwQFzL/upPtJ/12bN7g+A7HeCaxI7U/jBDI pN6SSSGp3k8j1s1ogSF6Y6CRtEC95UaNP9cMNf1JpK4IHzWLuC0/P9+05ug0Cyyb ujF6KPXDipdG6ABoUmpdbXJVolfsoivr1f3Or2UnTYwSN1f76PuS3GWDd0/J/n9X AJBnN3ddy4y4UhsvaA/o3Cqye6BrUJxixoRvjguMlBLtDajHfSklbLoIX5fnPm2y ivG6a95Rnmn0wzB7HWwx0SEhDUlqUaoNPKra7tsGgqsL4oVx7N1SnJiffieXInzn fMzxj+eNjwrbBPqCP2WXwZ6UoE0DjD8MOILGcLTjkSf6oW77Ty8= -----END CERTIFICATE-----Generated at Thu Aug 7 04:25:12 2025 by rpki-client