$ rpki-client -vvf repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.mft File: F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.mft (raw, json) Hash identifier: DjE7hBP4cxLf3KjZUh25G+1i3JHmJG4+6Zy+axjw/Po= Subject key identifier: 57:B7:E7:16:A3:24:F7:C3:E5:8C:A7:24:D0:81:FB:27:40:59:21:77 Authority key identifier: F8:E1:2F:0A:43:3C:8B:73:3B:E3:1D:B5:E0:CD:1E:F2:02:FC:21:EA Certificate issuer: /CN=F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA Certificate serial: 2E20ED09BAA3F24FE2EC94691C0D8486CB124054 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.mft Manifest number: 017A Signing time: Mon 16 Jun 2025 04:51:55 +0000 Manifest this update: Mon 16 Jun 2025 04:46:55 +0000 Manifest next update: Thu 19 Jun 2025 06:25:55 +0000 Files and hashes: 1: F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.crl (hash: 0Cc/HcJrUnbOH44Rhh1YotRYIubOJJybaL01yUBVEic=) 2: 3130332e3139352e36352e302f32342d3234203d3e20323130353337.roa (hash: 2FbNCyBbTvgWS7aFYjsLlYd9SYY28PwsTt9mqOb3gc4=) 3: 3130332e3139352e36352e302f32342d3234203d3e2036393339.roa (hash: Iki/ujAUR2r8jEic7uIoweO5tx+ZoKhjiMwDTjulvbo=) 4: 3130332e3139352e36352e302f32342d3234203d3e20313532333638.roa (hash: gnmrbZ6phBcjgkNgTfRN5xt+ZC7Cm6KFgCfrhOm4VXQ=) 5: 3130332e3139352e36352e302f32342d3234203d3e203530313034.roa (hash: zq6FCBzDTt8AjXmbK9U4RXyugtl+khIAf1ju1PBBDs8=) 6: 3130332e3139352e36352e302f32342d3234203d3e203234333132.roa (hash: O6HbZbnpwvJlF71+0v/AvXMqBhHi9/+bK/SRCDPbapk=) 7: 3130332e3139352e36352e302f32342d3234203d3e20323131343037.roa (hash: YFqBunOn7BAxcRO9kxvgzIpLLgn70FZ5dEIXUOseJlA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.crl rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 06:25:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:20:ed:09:ba:a3:f2:4f:e2:ec:94:69:1c:0d:84:86:cb:12:40:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA Validity Not Before: Jun 16 04:46:55 2025 GMT Not After : Jun 19 06:25:55 2025 GMT Subject: CN=57B7E716A324F7C3E58CA724D081FB2740592177 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d2:97:f4:9e:71:96:af:3d:bf:17:af:bc:e3: 1f:58:76:34:b7:eb:80:c2:9f:43:63:c6:7b:b0:0f: 58:53:2e:1f:02:e6:80:b9:b3:7f:ac:78:a6:0b:e6: 41:ae:17:35:05:ce:83:d3:a5:29:cd:5b:ee:33:a2: dc:03:f2:62:2e:26:46:af:c3:6e:9f:80:54:01:1e: 5b:43:bb:c8:14:a5:d7:4c:bc:13:f0:24:f0:74:37: 56:8d:67:d3:53:87:bd:2b:19:09:4c:4a:c1:78:33: 27:a5:75:c5:c7:63:7a:ca:c2:86:4b:2e:0a:35:71: 56:10:05:80:50:2f:b9:ad:77:21:d7:f5:34:8b:d0: 68:ed:6a:2a:d2:74:a5:73:09:39:13:55:9d:9b:de: 01:16:78:5c:d9:b9:75:39:16:55:9d:cb:6a:cf:3d: 71:67:b9:28:3b:8d:28:ed:7c:ff:6f:5e:14:74:34: b9:c2:2e:f2:f4:b6:68:41:0f:59:12:a9:e7:87:87: e5:76:9b:1a:05:6f:7d:e7:c1:6a:6e:0c:79:fb:7f: bc:5b:41:fa:53:9d:ec:52:3f:19:98:a4:1e:41:32: 23:ec:87:dd:f2:cf:cd:af:44:f3:59:18:21:a3:a0: cf:f5:82:80:d4:fb:91:52:2b:f3:40:7c:38:dd:5d: af:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:B7:E7:16:A3:24:F7:C3:E5:8C:A7:24:D0:81:FB:27:40:59:21:77 X509v3 Authority Key Identifier: keyid:F8:E1:2F:0A:43:3C:8B:73:3B:E3:1D:B5:E0:CD:1E:F2:02:FC:21:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:f7:1f:52:5e:5c:00:ff:9a:c5:68:e8:56:c2:9f:d6:32:f1: 0a:bc:b7:2e:af:7e:f0:55:ea:f2:ca:02:d5:77:89:18:b6:1e: c9:20:f0:4e:dd:a3:ca:76:8f:41:2e:0a:07:38:48:bf:21:94: 65:56:82:da:b2:4c:72:35:01:98:87:b9:0b:9b:49:e9:35:bc: af:57:c3:1c:15:8e:06:80:16:ba:45:2f:b7:07:13:91:c7:0e: 08:63:2d:d1:c0:a5:c0:9d:6a:5a:52:8c:ed:43:5e:b9:d7:80: 27:de:16:79:b2:b6:78:71:f1:da:82:50:7c:4a:e9:db:43:11: 08:bb:a6:ee:9b:fc:f0:c4:50:f1:c3:bf:c2:95:a0:74:98:87: 60:7d:24:05:4e:40:3b:6b:16:21:45:0b:17:e4:14:e8:73:bf: 12:49:b4:82:db:bb:96:32:c3:d9:d0:58:f0:bb:e9:02:f1:b8: 76:0f:a7:10:3d:73:bf:eb:b5:b8:4c:a2:a1:db:90:f9:27:47: 4e:0f:6b:c4:fe:38:4f:63:22:56:30:d6:6a:0d:7f:fd:49:38: 38:44:54:88:4f:4c:2f:00:bc:62:e2:7d:90:0d:60:88:32:55: 6c:09:96:c4:67:7b:73:cc:cf:a0:92:8a:2c:90:c5:16:f8:f9: d4:9b:8a:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULiDtCbqj8k/i7JRpHA2EhssSQFQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhFMTJGMEE0MzNDOEI3MzNCRTMxREI1RTBDRDFFRjIw MkZDMjFFQTAeFw0yNTA2MTYwNDQ2NTVaFw0yNTA2MTkwNjI1NTVaMDMxMTAvBgNV BAMTKDU3QjdFNzE2QTMyNEY3QzNFNThDQTcyNEQwODFGQjI3NDA1OTIxNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC0pf0nnGWrz2/F6+84x9YdjS3 64DCn0NjxnuwD1hTLh8C5oC5s3+seKYL5kGuFzUFzoPTpSnNW+4zotwD8mIuJkav w26fgFQBHltDu8gUpddMvBPwJPB0N1aNZ9NTh70rGQlMSsF4MyeldcXHY3rKwoZL Lgo1cVYQBYBQL7mtdyHX9TSL0GjtairSdKVzCTkTVZ2b3gEWeFzZuXU5FlWdy2rP PXFnuSg7jSjtfP9vXhR0NLnCLvL0tmhBD1kSqeeHh+V2mxoFb33nwWpuDHn7f7xb QfpTnexSPxmYpB5BMiPsh93yz82vRPNZGCGjoM/1goDU+5FSK/NAfDjdXa/PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUV7fnFqMk98PljKck0IH7J0BZIXcwHwYDVR0j BBgwFoAU+OEvCkM8i3M74x214M0e8gL8IeowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MGNlNDc5Ni00OWRlLTQzYjEtYTE1Mi1iMThkMTFhZGE1MjkvMC9GOEUxMkYwQTQz M0M4QjczM0JFMzFEQjVFMENEMUVGMjAyRkMyMUVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjhFMTJGMEE0MzNDOEI3MzNCRTMxREI1RTBDRDFFRjIwMkZD MjFFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODBjZTQ3OTYtNDlkZS00M2IxLWEx NTItYjE4ZDExYWRhNTI5LzAvRjhFMTJGMEE0MzNDOEI3MzNCRTMxREI1RTBDRDFF RjIwMkZDMjFFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKb3H1JeXAD/msVo6FbCn9Yy8Qq8ty6vfvBV 6vLKAtV3iRi2Hskg8E7do8p2j0EuCgc4SL8hlGVWgtqyTHI1AZiHuQubSek1vK9X wxwVjgaAFrpFL7cHE5HHDghjLdHApcCdalpSjO1DXrnXgCfeFnmytnhx8dqCUHxK 6dtDEQi7pu6b/PDEUPHDv8KVoHSYh2B9JAVOQDtrFiFFCxfkFOhzvxJJtILbu5Yy w9nQWPC76QLxuHYPpxA9c7/rtbhMoqHbkPknR04Pa8T+OE9jIlYw1moNf/1JODhE VIhPTC8AvGLifZANYIgyVWwJlsRne3PMz6CSiiyQxRb4+dSbipI= -----END CERTIFICATE-----Generated at Mon Jun 16 14:52:08 2025 by rpki-client