$ rpki-client -vvf repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/F30F14F4AEB6630FF4E270B0729358AEBFA97733.mft File: F30F14F4AEB6630FF4E270B0729358AEBFA97733.mft (raw, json) Hash identifier: hWZZM158MDIW2K9L91BCgvfRCs2EFLF/I/DJPmJDzD4= Subject key identifier: 7E:24:37:7F:B8:6B:9D:7E:60:11:87:CD:72:E1:30:F8:42:57:15:93 Authority key identifier: F3:0F:14:F4:AE:B6:63:0F:F4:E2:70:B0:72:93:58:AE:BF:A9:77:33 Certificate issuer: /CN=F30F14F4AEB6630FF4E270B0729358AEBFA97733 Certificate serial: 0722698168E2DCB90CE538BED481FAF26C54385E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F30F14F4AEB6630FF4E270B0729358AEBFA97733.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/F30F14F4AEB6630FF4E270B0729358AEBFA97733.mft Manifest number: 04F9 Signing time: Fri 08 Aug 2025 13:22:02 +0000 Manifest this update: Fri 08 Aug 2025 13:17:02 +0000 Manifest next update: Mon 11 Aug 2025 18:36:02 +0000 Files and hashes: 1: 323430373a343630303a3a2f33322d3438203d3e203435323935.roa (hash: 4LpQRgrp7oBVnTYb85mIa1GKQ4oBc22IhdekLi1TA6c=) 2: F30F14F4AEB6630FF4E270B0729358AEBFA97733.crl (hash: QWMPM8D67kYBb3F/+YVSrQHV9kON5r5ko3w4nmCmTo0=) 3: 3130332e3135312e39322e302f32332d3234203d3e203435323935.roa (hash: WCf4k80HtpWJXreA4Q6XD5iDNEeVQ9AU8BVWi8IEoSM=) 4: 3131332e3231322e3136302e302f32312d3234203d3e203435323935.roa (hash: ykBCC6a4TUa9u53qD+3M0qE2NkGoJtCXa3OdoYw7FhA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/F30F14F4AEB6630FF4E270B0729358AEBFA97733.crl rsync://repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/F30F14F4AEB6630FF4E270B0729358AEBFA97733.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F30F14F4AEB6630FF4E270B0729358AEBFA97733.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 18:36:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:22:69:81:68:e2:dc:b9:0c:e5:38:be:d4:81:fa:f2:6c:54:38:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F30F14F4AEB6630FF4E270B0729358AEBFA97733 Validity Not Before: Aug 8 13:17:02 2025 GMT Not After : Aug 11 18:36:02 2025 GMT Subject: CN=7E24377FB86B9D7E601187CD72E130F842571593 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:a6:2d:34:56:33:55:1b:74:6f:aa:bb:f0:12: 9b:5d:5a:28:9a:2a:83:77:37:75:cc:1d:43:84:09: f1:9b:82:0a:2a:ec:db:d3:57:79:9a:88:62:85:cb: fd:1c:19:9f:b4:3f:72:a6:99:0d:21:90:90:0c:dd: 19:18:be:74:3d:18:5b:c4:06:6d:95:4f:f6:fc:9b: bb:07:e6:7d:4d:ec:48:40:24:70:08:13:d1:0c:fa: 52:97:6c:9b:d6:ba:0b:3e:73:6e:31:c1:8a:53:c9: 7e:14:29:7f:af:e9:b4:20:73:16:22:e6:d4:14:37: a5:f6:92:16:52:b6:34:cf:3d:9c:d7:c1:8e:92:fe: e9:00:d1:e6:62:6f:48:2d:51:25:10:28:de:85:df: 18:89:a1:1f:e4:a4:43:ec:6e:c9:f8:75:ca:74:73: 05:b3:3c:b0:9d:0d:c3:a8:9d:d0:ea:8a:fa:d7:eb: 42:08:b6:6d:aa:a3:be:3c:9c:81:93:d3:73:6d:4c: cb:01:bb:fd:84:2a:31:fd:42:7f:b4:f4:bc:a9:d6: b1:b7:f6:eb:a3:e4:7a:de:51:04:32:47:c4:cf:9c: 96:18:a4:f0:f3:8e:8e:fa:37:39:7f:e4:0c:fd:11: 57:fc:34:44:23:82:d6:8b:d3:02:6a:30:63:9a:69: 38:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:24:37:7F:B8:6B:9D:7E:60:11:87:CD:72:E1:30:F8:42:57:15:93 X509v3 Authority Key Identifier: keyid:F3:0F:14:F4:AE:B6:63:0F:F4:E2:70:B0:72:93:58:AE:BF:A9:77:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/F30F14F4AEB6630FF4E270B0729358AEBFA97733.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F30F14F4AEB6630FF4E270B0729358AEBFA97733.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/F30F14F4AEB6630FF4E270B0729358AEBFA97733.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:99:ce:95:52:9e:a9:c4:85:a1:cb:73:d8:00:59:7e:ad:c6: 2c:2c:d7:cc:e0:63:7b:92:46:e9:f2:92:56:81:f9:b8:83:0f: e1:30:68:29:5a:46:23:a6:6d:f0:7a:10:7b:3b:90:4a:fd:c6: a0:82:2d:39:37:70:36:96:e1:1d:d7:35:7f:59:fc:7c:bc:5d: 52:51:d7:a1:14:c3:5f:f3:38:f3:98:d1:85:ff:5a:64:f0:db: a3:87:28:69:7e:d0:b9:88:54:f1:cf:c8:df:90:ec:f6:e1:5b: 25:4e:a8:e5:18:5c:a9:af:39:24:70:40:54:96:63:61:f3:ea: cc:83:ae:36:b9:ec:f9:32:c2:16:a3:79:e3:f0:6b:cc:b9:41: 7b:eb:01:b1:0e:33:5d:2a:b5:bd:e9:0c:d4:f2:15:a4:8a:2e: 63:6f:12:12:4d:9f:ef:d7:fd:dd:ce:81:e2:be:9d:95:8d:9d: d7:39:cf:98:31:6e:4a:2e:46:97:b9:31:25:32:7d:32:97:4f: bc:61:4b:f7:2e:95:26:44:57:1d:70:fe:ea:0f:dd:59:f2:3b: 14:24:ce:4e:54:04:e2:0b:98:69:24:bc:09:f8:3b:d3:ef:d1: c0:2c:fa:3e:b0:82:cb:16:a8:01:02:ce:89:e5:4d:cb:17:0f: 6a:d1:07:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUByJpgWji3LkM5Ti+1IH68mxUOF4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjMwRjE0RjRBRUI2NjMwRkY0RTI3MEIwNzI5MzU4QUVC RkE5NzczMzAeFw0yNTA4MDgxMzE3MDJaFw0yNTA4MTExODM2MDJaMDMxMTAvBgNV BAMTKDdFMjQzNzdGQjg2QjlEN0U2MDExODdDRDcyRTEzMEY4NDI1NzE1OTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZpi00VjNVG3RvqrvwEptdWiia KoN3N3XMHUOECfGbggoq7NvTV3maiGKFy/0cGZ+0P3KmmQ0hkJAM3RkYvnQ9GFvE Bm2VT/b8m7sH5n1N7EhAJHAIE9EM+lKXbJvWugs+c24xwYpTyX4UKX+v6bQgcxYi 5tQUN6X2khZStjTPPZzXwY6S/ukA0eZib0gtUSUQKN6F3xiJoR/kpEPsbsn4dcp0 cwWzPLCdDcOondDqivrX60IItm2qo748nIGT03NtTMsBu/2EKjH9Qn+09Lyp1rG3 9uuj5HreUQQyR8TPnJYYpPDzjo76Nzl/5Az9EVf8NEQjgtaL0wJqMGOaaTh1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfiQ3f7hrnX5gEYfNcuEw+EJXFZMwHwYDVR0j BBgwFoAU8w8U9K62Yw/04nCwcpNYrr+pdzMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NGY0OGE4OS05MGM1LTRmNWEtODAxNS0zNmYxMTk2YTcxYzgvMC9GMzBGMTRGNEFF QjY2MzBGRjRFMjcwQjA3MjkzNThBRUJGQTk3NzMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjMwRjE0RjRBRUI2NjMwRkY0RTI3MEIwNzI5MzU4QUVCRkE5 NzczMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDRmNDhhODktOTBjNS00ZjVhLTgw MTUtMzZmMTE5NmE3MWM4LzAvRjMwRjE0RjRBRUI2NjMwRkY0RTI3MEIwNzI5MzU4 QUVCRkE5NzczMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAmZzpVSnqnEhaHLc9gAWX6txiws18zgY3uS RunyklaB+biDD+EwaClaRiOmbfB6EHs7kEr9xqCCLTk3cDaW4R3XNX9Z/Hy8XVJR 16EUw1/zOPOY0YX/WmTw26OHKGl+0LmIVPHPyN+Q7PbhWyVOqOUYXKmvOSRwQFSW Y2Hz6syDrja57PkywhajeePwa8y5QXvrAbEOM10qtb3pDNTyFaSKLmNvEhJNn+/X /d3OgeK+nZWNndc5z5gxbkouRpe5MSUyfTKXT7xhS/culSZEVx1w/uoP3VnyOxQk zk5UBOILmGkkvAn4O9Pv0cAs+j6wgssWqAECzonlTcsXD2rRB5s= -----END CERTIFICATE-----Generated at Fri Aug 8 19:26:54 2025 by rpki-client