$ rpki-client -vvf repo-rpki.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.mft File: F027F0676E31F5D61FFCB99138BA71A6A6C2A888.mft (raw, json) Hash identifier: rDuMfA01XGJ9cydzLr3FTLaiMpuMWO8saI9CVDKTOC0= Subject key identifier: EF:DE:17:2D:04:26:21:6B:8C:B2:BF:63:AA:B7:A5:28:A3:C5:C5:BB Authority key identifier: F0:27:F0:67:6E:31:F5:D6:1F:FC:B9:91:38:BA:71:A6:A6:C2:A8:88 Certificate issuer: /CN=F027F0676E31F5D61FFCB99138BA71A6A6C2A888 Certificate serial: 56D28C03A9801CF1023FA5EF71BE1DCE6448E77F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.mft Manifest number: 019A Signing time: Wed 06 Aug 2025 08:11:40 +0000 Manifest this update: Wed 06 Aug 2025 08:06:40 +0000 Manifest next update: Sat 09 Aug 2025 09:31:40 +0000 Files and hashes: 1: 3130332e37392e3233392e302f32342d3234203d3e20313336383431.roa (hash: rT8h0ZGLVYrPZ61SPuOGRkw+nbg9/wVNgxfxW7rae5E=) 2: 3130332e37392e3233382e302f32342d3234203d3e20313336383431.roa (hash: MkfPt9TQffXhNKzxQ0JZcLbczDcqfbG61+f4PPOfZmM=) 3: F027F0676E31F5D61FFCB99138BA71A6A6C2A888.crl (hash: b5N/2CHxPgnuAYmI7zaCnRniTmPsJHmDxjl1UGYKUJc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.crl rsync://repo-rpki.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 09:31:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:d2:8c:03:a9:80:1c:f1:02:3f:a5:ef:71:be:1d:ce:64:48:e7:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F027F0676E31F5D61FFCB99138BA71A6A6C2A888 Validity Not Before: Aug 6 08:06:40 2025 GMT Not After : Aug 9 09:31:40 2025 GMT Subject: CN=EFDE172D0426216B8CB2BF63AAB7A528A3C5C5BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:dc:ab:a5:6d:b1:c4:4f:7f:46:dc:46:39:d1: a8:d2:bc:ed:9e:4f:50:9c:88:1a:8e:1c:d7:79:11: a3:9e:48:dc:9e:9a:c9:90:06:b3:d8:03:c4:45:54: 9d:d2:4a:42:80:c5:ad:17:2b:9a:0d:fc:fd:7d:4e: 7d:24:cf:3f:26:1b:8f:9e:6f:50:bc:67:8d:2d:91: ae:c8:e7:e5:be:3d:1b:67:83:bc:4c:81:fd:42:ef: fb:83:19:a4:c0:a6:bb:12:3c:d2:1f:f6:cf:80:0b: b4:ea:be:06:81:ba:95:a1:b4:3d:9b:e1:c0:f4:83: 69:16:76:64:3f:13:2b:64:c3:7b:b5:87:3e:06:c1: eb:19:96:ec:15:1d:f8:a3:09:82:67:5e:ce:e4:cb: 0b:ee:4d:61:44:5b:fd:23:f7:be:6e:a8:ca:9c:6f: 11:4c:64:a0:f8:6f:08:65:c0:5a:35:c7:42:39:5e: 56:46:61:23:49:b5:d8:ef:d2:20:1d:e5:63:cf:16: 76:0a:c4:08:5d:cf:be:54:13:1c:ef:fb:69:e0:cc: f0:fd:60:8d:79:dc:e9:99:06:04:f0:5c:75:ea:38: 9b:8e:f4:b0:6e:bb:2c:e5:43:a9:ed:a2:7d:0a:8a: e4:75:e0:40:35:c7:ba:49:3a:97:14:bf:61:c6:04: 81:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:DE:17:2D:04:26:21:6B:8C:B2:BF:63:AA:B7:A5:28:A3:C5:C5:BB X509v3 Authority Key Identifier: keyid:F0:27:F0:67:6E:31:F5:D6:1F:FC:B9:91:38:BA:71:A6:A6:C2:A8:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:74:db:64:10:c7:5d:d3:90:15:41:4d:0a:d6:2b:31:13:d3: f3:4e:e9:46:e0:10:3d:94:32:f4:d7:f1:da:cc:ad:52:e3:86: af:29:8c:31:8f:de:b3:1a:11:78:9d:9f:82:39:59:89:04:64: 39:10:7b:09:cc:29:56:d4:b8:b2:e7:8a:c1:bf:81:14:be:0d: 18:69:77:8e:51:69:44:d8:49:a1:94:7a:a8:29:a6:c7:18:d3: 25:4b:28:d2:3c:de:5a:97:99:d9:8f:d5:10:77:fe:68:c3:24: eb:04:27:78:f4:97:8d:02:ce:86:9f:96:3d:79:41:5d:cd:10: 5f:82:99:bb:70:a4:07:d6:28:93:ee:77:48:01:f9:16:b9:85: d9:aa:c3:b2:5f:02:f1:0d:72:74:66:e4:fd:23:1f:bc:f5:9d: 88:ea:c8:63:22:4d:a4:27:f1:e6:53:a0:ca:38:c5:ab:75:7b: 76:a2:4f:2f:5a:e8:e6:96:f0:1e:1b:dd:64:1e:23:15:4c:62: 28:02:a1:cd:c3:75:c1:91:9f:99:83:d7:b3:f6:f7:f4:2e:60: 1f:77:aa:e4:f4:9a:b1:3f:28:ef:d5:29:9d:47:24:6d:e8:1e: 5b:60:b0:47:7d:f2:73:78:6b:a8:50:61:89:7e:51:a7:b5:a3: c3:1d:aa:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVtKMA6mAHPECP6Xvcb4dzmRI538wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjAyN0YwNjc2RTMxRjVENjFGRkNCOTkxMzhCQTcxQTZB NkMyQTg4ODAeFw0yNTA4MDYwODA2NDBaFw0yNTA4MDkwOTMxNDBaMDMxMTAvBgNV BAMTKEVGREUxNzJEMDQyNjIxNkI4Q0IyQkY2M0FBQjdBNTI4QTNDNUM1QkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt3KulbbHET39G3EY50ajSvO2e T1CciBqOHNd5EaOeSNyemsmQBrPYA8RFVJ3SSkKAxa0XK5oN/P19Tn0kzz8mG4+e b1C8Z40tka7I5+W+PRtng7xMgf1C7/uDGaTAprsSPNIf9s+AC7TqvgaBupWhtD2b 4cD0g2kWdmQ/Eytkw3u1hz4GwesZluwVHfijCYJnXs7kywvuTWFEW/0j975uqMqc bxFMZKD4bwhlwFo1x0I5XlZGYSNJtdjv0iAd5WPPFnYKxAhdz75UExzv+2ngzPD9 YI153OmZBgTwXHXqOJuO9LBuuyzlQ6nton0KiuR14EA1x7pJOpcUv2HGBIGDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU794XLQQmIWuMsr9jqrelKKPFxbswHwYDVR0j BBgwFoAU8CfwZ24x9dYf/LmROLpxpqbCqIgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NmRmMjY5MS1kYjYyLTQzYjktOGE1Ny0wZTA2ZGExYWNjNjQvMC9GMDI3RjA2NzZF MzFGNUQ2MUZGQ0I5OTEzOEJBNzFBNkE2QzJBODg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjAyN0YwNjc2RTMxRjVENjFGRkNCOTkxMzhCQTcxQTZBNkMy QTg4OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDZkZjI2OTEtZGI2Mi00M2I5LThh NTctMGUwNmRhMWFjYzY0LzAvRjAyN0YwNjc2RTMxRjVENjFGRkNCOTkxMzhCQTcx QTZBNkMyQTg4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJB022QQx13TkBVBTQrWKzET0/NO6UbgED2U MvTX8drMrVLjhq8pjDGP3rMaEXidn4I5WYkEZDkQewnMKVbUuLLnisG/gRS+DRhp d45RaUTYSaGUeqgppscY0yVLKNI83lqXmdmP1RB3/mjDJOsEJ3j0l40Czoaflj15 QV3NEF+CmbtwpAfWKJPud0gB+Ra5hdmqw7JfAvENcnRm5P0jH7z1nYjqyGMiTaQn 8eZToMo4xat1e3aiTy9a6OaW8B4b3WQeIxVMYigCoc3DdcGRn5mD17P29/QuYB93 quT0mrE/KO/VKZ1HJG3oHltgsEd98nN4a6hQYYl+Uae1o8Mdqrs= -----END CERTIFICATE-----Generated at Thu Aug 7 04:03:19 2025 by rpki-client