$ rpki-client -vvf repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.mft File: 0FAFA39AA3875A4CF63BCF7E873087927B499D2F.mft (raw, json) Hash identifier: ve2+YyAjvOZCGKrZ1IVUAopWUPkGu6u3ICwjgJTqpqs= Subject key identifier: 8B:DF:DF:23:BD:56:7F:18:0B:EB:72:9A:3A:7A:8B:D3:27:81:89:24 Authority key identifier: 0F:AF:A3:9A:A3:87:5A:4C:F6:3B:CF:7E:87:30:87:92:7B:49:9D:2F Certificate issuer: /CN=0FAFA39AA3875A4CF63BCF7E873087927B499D2F Certificate serial: 066028750DA15F7C82FCAAD8CB275DB74F56A751 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.mft Manifest number: 0201 Signing time: Wed 06 Aug 2025 21:51:16 +0000 Manifest this update: Wed 06 Aug 2025 21:46:16 +0000 Manifest next update: Sun 10 Aug 2025 08:34:16 +0000 Files and hashes: 1: 323030313a6466313a326430303a3a2f34382d3438203d3e20313336313132.roa (hash: uiZFjhvQ9ciRjJRK7vZMZHXsl+bdrRUmgcpl6MwjW4M=) 2: 3130332e39322e3233322e302f32332d3233203d3e20313336313132.roa (hash: 5yT7jld1qwMjQ1Wxg8xXgEk9H98NQ/9bvOuTLpVK3wE=) 3: 0FAFA39AA3875A4CF63BCF7E873087927B499D2F.crl (hash: /sCCR4ZB2VHjWVJMKuECny9+7ymMr2FPzcTa+JrPE9s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.crl rsync://repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 08:34:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:60:28:75:0d:a1:5f:7c:82:fc:aa:d8:cb:27:5d:b7:4f:56:a7:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FAFA39AA3875A4CF63BCF7E873087927B499D2F Validity Not Before: Aug 6 21:46:16 2025 GMT Not After : Aug 10 08:34:16 2025 GMT Subject: CN=8BDFDF23BD567F180BEB729A3A7A8BD327818924 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:bb:83:2e:0f:61:11:03:93:ed:b6:d1:71:6e: 93:3e:03:99:6a:56:6c:37:6f:a6:ed:44:02:65:ec: 92:ff:87:52:15:cc:e6:2e:a6:b2:58:35:ce:4c:88: 14:96:7d:b5:fc:82:70:c4:8a:1c:45:6e:1c:31:37: 99:c2:30:1b:15:cc:ec:ae:6a:0d:8b:c9:f8:86:b6: 17:91:9d:2a:3a:dc:99:bc:21:38:93:c5:ed:cc:bd: a4:41:29:d4:47:ac:7f:5f:a3:1d:14:f7:63:5c:c6: 7e:25:79:99:af:6f:18:1d:36:35:42:e0:1f:d0:a5: 32:1c:c3:31:71:f3:9f:ba:e3:4c:32:4d:f3:f6:c8: d6:db:57:34:8a:6a:d9:84:92:a0:9e:c6:86:68:3a: b0:7c:fa:24:58:86:9e:29:65:fb:4f:9f:4b:5a:6b: b3:02:49:63:da:d6:49:ce:45:1c:18:79:36:52:5c: 88:73:89:16:cc:94:49:a9:a9:27:08:3e:59:fc:1e: 47:f9:23:39:44:35:cf:eb:a2:78:f6:bb:43:cf:b0: ab:fc:65:49:8f:dd:8c:12:a1:b0:31:a2:c4:89:e1: c1:6f:de:3b:93:9d:17:b6:ef:77:94:58:26:34:db: 78:4e:0d:2f:82:69:56:17:94:a6:90:bc:82:bd:f2: f8:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:DF:DF:23:BD:56:7F:18:0B:EB:72:9A:3A:7A:8B:D3:27:81:89:24 X509v3 Authority Key Identifier: keyid:0F:AF:A3:9A:A3:87:5A:4C:F6:3B:CF:7E:87:30:87:92:7B:49:9D:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:b9:d0:57:43:15:d1:07:81:1e:a9:ab:8c:a8:64:6b:85:b6: e1:2f:34:78:a6:cc:f1:19:85:77:d2:96:ad:57:c5:f8:da:13: 2b:e2:7a:e5:2d:59:79:9a:2c:c0:6c:eb:6e:fb:3b:0c:ca:36: 1d:f3:7d:a1:ae:65:45:d8:3f:44:21:ba:59:11:77:43:19:54: 9d:ea:95:9c:17:7a:54:e0:69:1d:92:1e:6d:bf:35:9d:51:32: a0:95:9e:38:cb:bb:74:25:5e:2f:cd:3c:a4:c4:18:b1:a0:6d: 60:72:d5:d8:0f:8b:4a:9f:e5:bd:33:74:c8:13:37:ab:93:06: d1:a4:9a:05:93:7a:7a:58:c8:3b:67:e7:69:46:7e:c4:9f:9c: 30:b5:ae:f2:01:f3:15:39:12:c8:fd:42:a8:0d:bd:51:21:12: 9e:7d:d6:e2:95:56:2a:78:d5:8b:7b:3c:93:49:45:f1:63:5f: a5:ca:72:31:83:59:23:e2:b9:65:5b:ef:25:1a:50:aa:f7:ec: e2:2b:37:a4:90:d1:e1:67:8c:13:e5:16:78:92:ce:ef:43:91: 89:07:4d:5a:88:8e:c0:d8:01:06:c1:a9:4b:47:23:34:9d:75: fa:37:fc:48:88:5f:1e:f1:2b:b1:e9:7e:eb:81:bf:47:9d:53: 79:ef:3f:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBmAodQ2hX3yC/KrYyyddt09Wp1EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZBRkEzOUFBMzg3NUE0Q0Y2M0JDRjdFODczMDg3OTI3 QjQ5OUQyRjAeFw0yNTA4MDYyMTQ2MTZaFw0yNTA4MTAwODM0MTZaMDMxMTAvBgNV BAMTKDhCREZERjIzQkQ1NjdGMTgwQkVCNzI5QTNBN0E4QkQzMjc4MTg5MjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDru4MuD2ERA5PtttFxbpM+A5lq Vmw3b6btRAJl7JL/h1IVzOYuprJYNc5MiBSWfbX8gnDEihxFbhwxN5nCMBsVzOyu ag2LyfiGtheRnSo63Jm8ITiTxe3MvaRBKdRHrH9fox0U92Ncxn4leZmvbxgdNjVC 4B/QpTIcwzFx85+640wyTfP2yNbbVzSKatmEkqCexoZoOrB8+iRYhp4pZftPn0ta a7MCSWPa1knORRwYeTZSXIhziRbMlEmpqScIPln8Hkf5IzlENc/ronj2u0PPsKv8 ZUmP3YwSobAxosSJ4cFv3juTnRe273eUWCY023hODS+CaVYXlKaQvIK98vjXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUi9/fI71WfxgL63KaOnqL0yeBiSQwHwYDVR0j BBgwFoAUD6+jmqOHWkz2O89+hzCHkntJnS8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MGUxMWZmYy1lNzVhLTRiZjQtODQ0OC1jNjhlMjAzMzVlZTgvMC8wRkFGQTM5QUEz ODc1QTRDRjYzQkNGN0U4NzMwODc5MjdCNDk5RDJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEZBRkEzOUFBMzg3NUE0Q0Y2M0JDRjdFODczMDg3OTI3QjQ5 OUQyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjBlMTFmZmMtZTc1YS00YmY0LTg0 NDgtYzY4ZTIwMzM1ZWU4LzAvMEZBRkEzOUFBMzg3NUE0Q0Y2M0JDRjdFODczMDg3 OTI3QjQ5OUQyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHi50FdDFdEHgR6pq4yoZGuFtuEvNHimzPEZ hXfSlq1XxfjaEyvieuUtWXmaLMBs6277OwzKNh3zfaGuZUXYP0QhulkRd0MZVJ3q lZwXelTgaR2SHm2/NZ1RMqCVnjjLu3QlXi/NPKTEGLGgbWBy1dgPi0qf5b0zdMgT N6uTBtGkmgWTenpYyDtn52lGfsSfnDC1rvIB8xU5Esj9QqgNvVEhEp591uKVVip4 1Yt7PJNJRfFjX6XKcjGDWSPiuWVb7yUaUKr37OIrN6SQ0eFnjBPlFniSzu9DkYkH TVqIjsDYAQbBqUtHIzSddfo3/EiIXx7xK7HpfuuBv0edU3nvPxA= -----END CERTIFICATE-----Generated at Sat Aug 9 05:34:49 2025 by rpki-client