$ rpki-client -vvf repo-rpki.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.mft File: F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.mft (raw, json) Hash identifier: Prxw6u4W7ayk/qt6VXpBDU480LPQOndxVkvfry4e9VE= Subject key identifier: 0F:07:86:F8:81:74:78:A3:8A:E9:02:90:0D:DA:EC:45:65:5E:0F:A4 Authority key identifier: F2:CC:4B:38:29:5B:A8:B2:11:B5:5A:53:DA:0A:CB:76:DA:63:6E:70 Certificate issuer: /CN=F2CC4B38295BA8B211B55A53DA0ACB76DA636E70 Certificate serial: 7A64A61B730FC953C3027C2166E5EB73526FCC70 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.mft Manifest number: 0386 Signing time: Wed 06 Aug 2025 11:32:07 +0000 Manifest this update: Wed 06 Aug 2025 11:27:07 +0000 Manifest next update: Sat 09 Aug 2025 12:14:07 +0000 Files and hashes: 1: 3130332e3136382e34362e302f32342d3234203d3e20313432333130.roa (hash: LxlhGvniVX1DZYQ1W62yOkB/KkKuWv10+O7NsPderxM=) 2: 3130332e3136382e34372e302f32342d3234203d3e20313432333130.roa (hash: nH/6GtgoV/9v3sMWYjneb+fyVV81krMAog9BySpXr4E=) 3: F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.crl (hash: FJVeZDgbLpNoOq7gAc9sVqRs41ayZ1mXQ0J5GfnZZrg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.crl rsync://repo-rpki.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 12:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:64:a6:1b:73:0f:c9:53:c3:02:7c:21:66:e5:eb:73:52:6f:cc:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2CC4B38295BA8B211B55A53DA0ACB76DA636E70 Validity Not Before: Aug 6 11:27:07 2025 GMT Not After : Aug 9 12:14:07 2025 GMT Subject: CN=0F0786F8817478A38AE902900DDAEC45655E0FA4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:9f:f5:cb:36:a1:ab:19:ec:99:41:32:0f:28: 5d:b8:d6:e0:ac:5d:24:4d:ef:39:6a:64:4e:e5:93: 1e:92:06:eb:5a:e5:6b:b3:a0:01:8c:58:6d:df:a3: 6c:5e:b2:ff:7b:ee:29:de:a1:36:c0:89:ab:10:35: 7f:e7:27:7b:91:aa:84:77:f6:9b:d9:3d:3d:c7:ed: c2:db:8d:93:24:b7:e7:2e:ec:28:45:3f:1f:6c:f7: 38:80:d7:ab:c1:02:55:f2:27:f7:e9:28:16:3f:55: 2f:ca:c3:4f:a7:90:07:6c:a6:06:fd:ac:ad:84:01: 43:e4:b0:00:f9:22:94:74:e2:88:ad:98:7a:67:f5: 83:65:6f:1b:b9:04:83:90:eb:e4:51:56:6d:49:eb: 24:a9:17:2e:85:d7:4d:b0:e6:f4:40:b0:c5:ee:a3: 6b:15:30:53:9e:ed:9d:85:ca:23:0a:a6:e6:f3:c2: c2:59:30:7a:14:8c:07:9a:d7:98:97:18:f9:53:fe: 10:dd:33:ce:7b:7b:1a:5a:72:76:02:d2:22:bd:70: 3c:ec:c6:c1:1d:c5:44:14:01:78:42:bd:16:50:dc: fc:a8:d5:a8:72:df:b3:95:03:b0:f6:e8:fb:c7:a0: dc:1a:c1:ac:96:9a:e8:2f:88:39:60:7b:e2:15:d5: 6d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:07:86:F8:81:74:78:A3:8A:E9:02:90:0D:DA:EC:45:65:5E:0F:A4 X509v3 Authority Key Identifier: keyid:F2:CC:4B:38:29:5B:A8:B2:11:B5:5A:53:DA:0A:CB:76:DA:63:6E:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:59:1d:d9:27:47:40:25:4b:71:78:c8:e5:eb:62:c5:3b:fe: 29:77:6c:e0:f3:8d:1a:89:59:b3:79:dd:5c:e7:55:8b:ef:af: 0f:d8:f9:3a:0f:5f:7a:f3:9f:62:d9:f7:83:a0:92:03:c8:37: 44:52:67:93:b9:70:de:d1:26:b8:e3:9a:d8:c7:b5:15:b0:b6: f6:62:31:8f:6f:7f:66:43:44:f6:64:7a:0e:73:4f:13:ea:14: 79:70:05:de:57:26:3d:15:ef:ed:70:7a:12:36:f3:1e:29:aa: 27:2c:55:7b:88:ca:81:f9:6f:76:db:a8:e8:b5:a7:27:5f:60: 63:f8:88:0a:de:8b:a5:fa:d6:b7:78:3e:d8:c5:98:ef:74:4f: 05:11:13:a5:f2:f9:33:c7:fe:f7:ef:2a:29:13:ce:a2:a5:d3: 17:4c:b2:05:e8:40:6f:00:e0:df:4c:1f:ab:b9:81:40:02:89: 3f:f2:3d:69:3b:e7:03:7c:77:d9:1f:5b:f8:1e:9d:7b:3b:42: 03:bf:f6:33:4b:e7:43:fa:d8:70:fa:64:fa:6e:35:6c:d1:9a: 12:79:99:40:1a:0a:91:1d:33:59:7e:9b:ae:c5:6d:14:eb:94: e6:cc:f3:7f:78:77:c9:72:a4:0c:d1:ad:2f:7a:58:ce:63:8b: 6f:04:27:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUemSmG3MPyVPDAnwhZuXrc1JvzHAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjJDQzRCMzgyOTVCQThCMjExQjU1QTUzREEwQUNCNzZE QTYzNkU3MDAeFw0yNTA4MDYxMTI3MDdaFw0yNTA4MDkxMjE0MDdaMDMxMTAvBgNV BAMTKDBGMDc4NkY4ODE3NDc4QTM4QUU5MDI5MDBEREFFQzQ1NjU1RTBGQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWn/XLNqGrGeyZQTIPKF241uCs XSRN7zlqZE7lkx6SButa5WuzoAGMWG3fo2xesv977ineoTbAiasQNX/nJ3uRqoR3 9pvZPT3H7cLbjZMkt+cu7ChFPx9s9ziA16vBAlXyJ/fpKBY/VS/Kw0+nkAdspgb9 rK2EAUPksAD5IpR04oitmHpn9YNlbxu5BIOQ6+RRVm1J6ySpFy6F102w5vRAsMXu o2sVMFOe7Z2FyiMKpubzwsJZMHoUjAea15iXGPlT/hDdM857expacnYC0iK9cDzs xsEdxUQUAXhCvRZQ3Pyo1ahy37OVA7D26PvHoNwawayWmugviDlge+IV1W1LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDweG+IF0eKOK6QKQDdrsRWVeD6QwHwYDVR0j BBgwFoAU8sxLOClbqLIRtVpT2grLdtpjbnAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NDI5M2M2NC1lYTAwLTQxM2YtOTA5MC0yYjE5MGIxYTQ1YWYvMC9GMkNDNEIzODI5 NUJBOEIyMTFCNTVBNTNEQTBBQ0I3NkRBNjM2RTcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjJDQzRCMzgyOTVCQThCMjExQjU1QTUzREEwQUNCNzZEQTYz NkU3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjQyOTNjNjQtZWEwMC00MTNmLTkw OTAtMmIxOTBiMWE0NWFmLzAvRjJDQzRCMzgyOTVCQThCMjExQjU1QTUzREEwQUNC NzZEQTYzNkU3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFlZHdknR0AlS3F4yOXrYsU7/il3bODzjRqJ WbN53VznVYvvrw/Y+ToPX3rzn2LZ94OgkgPIN0RSZ5O5cN7RJrjjmtjHtRWwtvZi MY9vf2ZDRPZkeg5zTxPqFHlwBd5XJj0V7+1wehI28x4pqicsVXuIyoH5b3bbqOi1 pydfYGP4iArei6X61rd4PtjFmO90TwURE6Xy+TPH/vfvKikTzqKl0xdMsgXoQG8A 4N9MH6u5gUACiT/yPWk75wN8d9kfW/genXs7QgO/9jNL50P62HD6ZPpuNWzRmhJ5 mUAaCpEdM1l+m67FbRTrlObM8394d8lypAzRrS96WM5ji28EJ80= -----END CERTIFICATE-----Generated at Fri Aug 8 10:24:16 2025 by rpki-client