$ rpki-client -vvf repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.mft File: F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.mft (raw, json) Hash identifier: dh5Zn0RYwv0KP/PnU4Ifb9d5grf0EDHenm19AI6QZRk= Subject key identifier: 3F:84:FB:AE:67:BA:61:97:38:2A:53:7D:0C:24:86:81:F8:4B:DE:7D Authority key identifier: F8:FA:AE:F9:7E:D3:DB:A7:D2:72:43:70:7C:7C:0D:16:05:89:6B:AF Certificate issuer: /CN=F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF Certificate serial: 0C922F41F36BFF7A876F40A6D83158FE615008FC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.mft Manifest number: C4 Signing time: Sat 14 Jun 2025 17:20:59 +0000 Manifest this update: Sat 14 Jun 2025 17:15:59 +0000 Manifest next update: Wed 18 Jun 2025 02:22:59 +0000 Files and hashes: 1: F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.crl (hash: 81IW+niXctcMevYmocX98tFZSWsKPfGBP5iOEAZo5dg=) 2: 3135372e32302e3133312e302f32342d3234203d3e20313532343134.roa (hash: W4ACU/xOnpQ+wB4eCIEuEDxQIvNhZYjdjmTdf9J25lk=) 3: 3135372e32302e3133302e302f32342d3234203d3e20313532343134.roa (hash: yredKIZP9xr2lB528+R6ApvkXgeNpX2Bu3+xAbm9RU0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.crl rsync://repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 02:22:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:92:2f:41:f3:6b:ff:7a:87:6f:40:a6:d8:31:58:fe:61:50:08:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF Validity Not Before: Jun 14 17:15:59 2025 GMT Not After : Jun 18 02:22:59 2025 GMT Subject: CN=3F84FBAE67BA6197382A537D0C248681F84BDE7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:20:46:71:ce:23:4f:9d:75:c6:d5:71:d2:c5: 39:4d:a1:32:28:f5:1e:38:62:e6:e6:f3:f3:e1:27: 14:8d:2b:a4:ff:15:e2:9d:79:58:32:0f:87:5a:b1: 9b:d6:12:95:88:e1:c1:86:ca:2a:88:70:93:21:e6: b3:e1:46:70:97:e2:87:a6:49:86:b3:be:13:bb:11: f5:94:22:df:39:44:90:ae:19:3c:9c:3b:89:1f:ce: f2:15:89:98:ab:45:18:1d:99:a9:35:9c:db:37:3c: a0:86:fb:b8:8e:71:74:3e:2e:64:d4:00:0a:4d:61: 52:98:52:4a:ca:d9:9e:de:d8:24:b8:ac:8e:6c:32: be:e3:bb:f9:ff:8b:11:58:4d:00:50:cc:14:0d:0d: 9c:a7:38:0f:74:ee:00:60:ae:e5:b3:ef:11:69:fd: de:75:7a:de:fa:d3:dd:73:3a:b5:5b:64:fa:5b:09: 4b:c6:43:6f:29:73:a3:0b:1a:ca:0d:86:32:44:cc: 93:87:3e:ba:dc:fb:63:25:79:85:27:01:15:cb:cd: 62:17:d8:d4:50:39:a6:ab:68:fc:5a:24:45:46:34: 16:43:54:49:73:56:d5:b6:e0:13:39:2d:62:35:23: 29:61:b6:43:af:d5:e3:e3:24:14:69:ca:64:19:71: 5d:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:84:FB:AE:67:BA:61:97:38:2A:53:7D:0C:24:86:81:F8:4B:DE:7D X509v3 Authority Key Identifier: keyid:F8:FA:AE:F9:7E:D3:DB:A7:D2:72:43:70:7C:7C:0D:16:05:89:6B:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:a4:1d:c4:57:63:29:e8:6e:71:60:da:0e:1f:3a:86:09:79: 4a:4f:a1:f1:17:ad:0e:2f:ec:cd:fc:01:e7:c4:0b:08:87:11: 81:72:62:41:d6:08:75:3b:5c:0c:22:4e:8e:2e:6c:cd:b3:c3: fd:7a:e6:11:e3:12:02:cb:69:1c:c4:8c:8e:15:1d:e0:99:d0: 35:67:14:c9:8d:6e:06:70:d6:f6:44:72:1f:9b:98:b1:5c:f3: 8f:5a:82:c7:a3:a5:65:13:f0:69:53:1b:68:26:d3:63:a8:27: 71:e8:b3:b6:f7:87:a8:11:cb:02:b7:5f:23:eb:dc:04:f3:21: 35:45:8b:fb:4d:a4:dc:46:fb:8f:30:8b:20:d5:b6:07:09:2b: b3:09:6f:03:62:c1:0b:f6:ba:81:ed:4e:64:a5:12:48:ba:53: 02:6e:e9:02:ac:ce:27:7b:ca:d3:ea:6c:79:cf:44:a6:07:3c: a4:fa:3f:64:6f:68:6d:32:e3:ea:15:93:74:90:bd:dd:82:cf: dd:99:60:88:6f:59:5c:81:20:1b:05:89:15:d3:2c:53:c5:96: 8d:e3:40:d6:aa:03:21:89:d0:52:8c:21:48:0c:3d:b6:62:48: 94:2c:e4:38:64:0d:91:90:46:28:2c:ec:be:b8:02:24:ee:e9: 8f:01:10:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDJIvQfNr/3qHb0Cm2DFY/mFQCPwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhGQUFFRjk3RUQzREJBN0QyNzI0MzcwN0M3QzBEMTYw NTg5NkJBRjAeFw0yNTA2MTQxNzE1NTlaFw0yNTA2MTgwMjIyNTlaMDMxMTAvBgNV BAMTKDNGODRGQkFFNjdCQTYxOTczODJBNTM3RDBDMjQ4NjgxRjg0QkRFN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOIEZxziNPnXXG1XHSxTlNoTIo 9R44Yubm8/PhJxSNK6T/FeKdeVgyD4dasZvWEpWI4cGGyiqIcJMh5rPhRnCX4oem SYazvhO7EfWUIt85RJCuGTycO4kfzvIViZirRRgdmak1nNs3PKCG+7iOcXQ+LmTU AApNYVKYUkrK2Z7e2CS4rI5sMr7ju/n/ixFYTQBQzBQNDZynOA907gBgruWz7xFp /d51et76091zOrVbZPpbCUvGQ28pc6MLGsoNhjJEzJOHPrrc+2MleYUnARXLzWIX 2NRQOaaraPxaJEVGNBZDVElzVtW24BM5LWI1IylhtkOv1ePjJBRpymQZcV1TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUP4T7rme6YZc4KlN9DCSGgfhL3n0wHwYDVR0j BBgwFoAU+Pqu+X7T26fSckNwfHwNFgWJa68wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ODZmZjI2NC1mZjI1LTRmZTYtODZlZi1kODRiN2QyODgzNTQvMC9GOEZBQUVGOTdF RDNEQkE3RDI3MjQzNzA3QzdDMEQxNjA1ODk2QkFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjhGQUFFRjk3RUQzREJBN0QyNzI0MzcwN0M3QzBEMTYwNTg5 NkJBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzg2ZmYyNjQtZmYyNS00ZmU2LTg2 ZWYtZDg0YjdkMjg4MzU0LzAvRjhGQUFFRjk3RUQzREJBN0QyNzI0MzcwN0M3QzBE MTYwNTg5NkJBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA2kHcRXYynobnFg2g4fOoYJeUpPofEXrQ4v 7M38AefECwiHEYFyYkHWCHU7XAwiTo4ubM2zw/165hHjEgLLaRzEjI4VHeCZ0DVn FMmNbgZw1vZEch+bmLFc849agsejpWUT8GlTG2gm02OoJ3Hos7b3h6gRywK3XyPr 3ATzITVFi/tNpNxG+48wiyDVtgcJK7MJbwNiwQv2uoHtTmSlEki6UwJu6QKszid7 ytPqbHnPRKYHPKT6P2RvaG0y4+oVk3SQvd2Cz92ZYIhvWVyBIBsFiRXTLFPFlo3j QNaqAyGJ0FKMIUgMPbZiSJQs5DhkDZGQRigs7L64AiTu6Y8BEKc= -----END CERTIFICATE-----Generated at Mon Jun 16 06:11:32 2025 by rpki-client