$ rpki-client -vvf repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.mft File: F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.mft (raw, json) Hash identifier: Q0sdkLEpXpi22Gx82ew4NW/gyaVenmpX5eV2KQwAYtQ= Subject key identifier: 4A:3F:BF:D7:8E:EC:54:02:51:7B:81:86:32:5A:B8:22:11:83:E6:D2 Authority key identifier: F8:C1:9A:8F:8C:B0:DD:C8:5D:1C:8E:55:63:8F:B4:35:84:90:3E:17 Certificate issuer: /CN=F8C19A8F8CB0DDC85D1C8E55638FB43584903E17 Certificate serial: 25642A4AE5B69C46F6A579A6C3E7742C8EE9FAB0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.mft Manifest number: 04F2 Signing time: Sat 28 Jun 2025 20:11:12 +0000 Manifest this update: Sat 28 Jun 2025 20:06:12 +0000 Manifest next update: Wed 02 Jul 2025 05:38:12 +0000 Files and hashes: 1: 3130332e3133352e37332e302f32342d3234203d3e203436303236.roa (hash: lsw9Lj4TdivwiY9urFVLBPCnaQDyjQIHv9L2rFNGJcY=) 2: 3137352e3131312e3131322e302f32312d3234203d3e203436303236.roa (hash: ThbbDvKhsxoAnPUKtdbY/FsPIfXpLzxzoe4gZ4SwG7I=) 3: 3137352e3131312e3131342e302f32342d3234203d3e203436303236.roa (hash: +kWoeqncIsg2yG08LA8FNhnez+6IikrA0zXpF5e1dxk=) 4: 3130332e3133352e37352e302f32342d3234203d3e203436303236.roa (hash: dn2LxIR2i9f98oBHTTzMm7c0l11yZxH5BdOjGXs/ET8=) 5: 3130332e3133352e37322e302f32342d3234203d3e203436303236.roa (hash: YN/2s31112uMwq4KT5YT8EMIK9P8Spv9BQ+gu6aYN4g=) 6: 3130332e3133352e37342e302f32342d3234203d3e203436303236.roa (hash: qZ2majG5cGcPiPcNAPu4jGy/H5NlD9ILAfwhNapK3KI=) 7: 3137352e3131312e3131392e302f32342d3234203d3e203436303236.roa (hash: VSjVNeF6CQhhuIMP9VzYdgPpAyYTICUyURNkkRPZvf0=) 8: 3137352e3131312e3131362e302f32342d3234203d3e203436303236.roa (hash: yvTVsKwfMbm9/tZX55oqWjXKQNBRGzzlj+jV8XkeY/A=) 9: 3137352e3131312e3131382e302f32342d3234203d3e203436303236.roa (hash: I9Xm1cEngTYg6WB2t4U5k+twc9OnUGEq5Opc/dfrZDc=) 10: 3130332e3133352e37322e302f32322d3234203d3e203436303236.roa (hash: yzByHbO6Frok5mfNqGJAnbHUvCHTDaMTJ6hmg53mLQI=) 11: 3137352e3131312e3131352e302f32342d3234203d3e203436303236.roa (hash: X871KmxDisPDxaQpNaNmNV8uKTNCiB9DC630xRuhDpo=) 12: 3130332e3133352e37322e302f32332d3234203d3e203436303236.roa (hash: rEgIPgrk+DS47tvTK2+eEPfHUVseXsnwTUUBVtEyooc=) 13: 3137352e3131312e3131332e302f32342d3234203d3e203436303236.roa (hash: 6tYZRHS1gp6lxrRLkcMQOZpyzT7UZqMxo9oLwoeh2Kk=) 14: F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.crl (hash: APTbmvfHMCIeSXPTEOMjiUCTzFJD7IC0BY68uPPKR8w=) 15: 3137352e3131312e3131372e302f32342d3234203d3e203436303236.roa (hash: PAUNyFLoTuXnyzJaaygCGIoZ2kkR7s3iDrCXWwkOWpM=) 16: 3137352e3131312e3131322e302f32342d3234203d3e203436303236.roa (hash: addoLGX7l1qN9yrFfHEwbDZZ1vggnAx8LkSg4qCXPoA=) 17: 3130332e3133352e37342e302f32332d3234203d3e203436303236.roa (hash: KXtJmDO4hKKtckmp6/OjWqYrbZ7ZmK12D4CTr8FodJE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.crl rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 05:38:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:64:2a:4a:e5:b6:9c:46:f6:a5:79:a6:c3:e7:74:2c:8e:e9:fa:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8C19A8F8CB0DDC85D1C8E55638FB43584903E17 Validity Not Before: Jun 28 20:06:12 2025 GMT Not After : Jul 2 05:38:12 2025 GMT Subject: CN=4A3FBFD78EEC5402517B8186325AB8221183E6D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:11:37:84:f3:f4:d9:02:a9:eb:0a:3e:d9:1a: d2:bf:7c:a3:02:56:a4:79:f0:b4:b3:d9:1d:13:77: 49:7c:5e:10:e0:2c:a3:77:ce:55:3a:4b:6c:a7:c5: f2:7e:7f:87:a4:cf:92:af:1a:e2:4c:d7:b4:5b:c9: ff:dc:28:94:fd:9a:3d:0c:36:38:16:bd:66:0d:96: ae:cd:6a:7a:d3:9e:6e:e5:d3:5a:10:27:6e:d2:79: 99:22:21:82:9e:db:8c:87:b5:66:4a:69:17:0f:42: 61:ac:bb:80:17:cc:5f:2b:6f:d3:c6:6a:01:8a:42: 97:c7:a3:e8:5b:00:18:94:f2:38:6e:e9:25:23:0a: 2c:5e:28:13:c6:06:fe:a5:aa:99:fe:3c:58:77:90: 41:75:9d:43:b5:5e:b6:1d:0d:06:aa:51:c9:84:0e: 44:d7:fa:db:e0:02:d1:80:cf:a8:c4:db:5d:64:f8: 1d:c1:be:de:30:7d:74:e6:a5:d4:28:ad:24:d8:41: fb:24:fb:25:a5:c2:34:d6:86:c4:a4:d7:13:b8:86: a2:9b:50:fe:05:43:ae:e1:db:c4:69:f2:3a:0f:39: 6b:f9:0e:f0:b0:7a:ff:e1:3c:4b:2b:e3:54:eb:68: d2:d4:ec:ee:67:d4:02:46:b2:6e:5c:ed:e8:ff:f4: 72:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:3F:BF:D7:8E:EC:54:02:51:7B:81:86:32:5A:B8:22:11:83:E6:D2 X509v3 Authority Key Identifier: keyid:F8:C1:9A:8F:8C:B0:DD:C8:5D:1C:8E:55:63:8F:B4:35:84:90:3E:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:0b:c6:2f:c0:bc:52:b5:bb:65:3e:9e:73:4a:cd:53:08:f5: 94:b8:88:eb:03:c2:a4:b4:f2:49:bc:96:48:49:ad:f6:fd:a8: b9:82:f4:0a:36:d9:a3:41:25:07:50:76:f4:20:00:f7:2c:12: da:e8:75:fb:e2:ff:c1:9d:63:e8:07:b3:4c:79:42:56:fa:51: 5e:c6:a3:67:d0:f2:bb:14:b8:30:bf:1d:36:f9:23:94:99:2b: 39:41:56:51:8d:5a:c9:eb:6e:36:7d:1a:1d:29:70:43:74:c7: 9b:b6:18:cc:63:eb:0e:f2:c4:bc:09:3c:88:98:c9:07:cc:06: fe:ab:9f:07:ce:f1:88:f0:12:b5:a5:04:35:6e:3d:b9:97:73: 05:b6:2e:5d:ee:93:5b:91:b9:e8:76:c7:95:2e:e4:1d:ba:26: 27:e8:9b:9d:b1:71:a6:53:9a:d6:6c:23:c0:7d:05:61:fb:d9: 26:e5:cb:18:f1:c4:fa:29:88:12:53:22:b8:af:00:3a:32:5f: 37:de:a8:2a:0d:36:a3:2f:37:b0:f0:8c:47:6a:a8:c0:35:07: 2a:ce:67:03:d2:0a:ee:53:cc:97:89:72:e6:b5:3f:a8:ba:54: 7b:b4:fd:c7:5e:5c:2a:76:a6:68:cd:58:3e:b4:69:b1:74:3b: 34:d4:6c:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJWQqSuW2nEb2pXmmw+d0LI7p+rAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhDMTlBOEY4Q0IwRERDODVEMUM4RTU1NjM4RkI0MzU4 NDkwM0UxNzAeFw0yNTA2MjgyMDA2MTJaFw0yNTA3MDIwNTM4MTJaMDMxMTAvBgNV BAMTKDRBM0ZCRkQ3OEVFQzU0MDI1MTdCODE4NjMyNUFCODIyMTE4M0U2RDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLETeE8/TZAqnrCj7ZGtK/fKMC VqR58LSz2R0Td0l8XhDgLKN3zlU6S2ynxfJ+f4ekz5KvGuJM17Rbyf/cKJT9mj0M NjgWvWYNlq7NanrTnm7l01oQJ27SeZkiIYKe24yHtWZKaRcPQmGsu4AXzF8rb9PG agGKQpfHo+hbABiU8jhu6SUjCixeKBPGBv6lqpn+PFh3kEF1nUO1XrYdDQaqUcmE DkTX+tvgAtGAz6jE211k+B3Bvt4wfXTmpdQorSTYQfsk+yWlwjTWhsSk1xO4hqKb UP4FQ67h28Rp8joPOWv5DvCwev/hPEsr41TraNLU7O5n1AJGsm5c7ej/9HI5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSj+/147sVAJRe4GGMlq4IhGD5tIwHwYDVR0j BBgwFoAU+MGaj4yw3chdHI5VY4+0NYSQPhcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZmY0ZWJjZC0yOWNmLTRlZWMtYTkyYS1kMTEzNmY1Zjk5MzYvMC9GOEMxOUE4RjhD QjBEREM4NUQxQzhFNTU2MzhGQjQzNTg0OTAzRTE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjhDMTlBOEY4Q0IwRERDODVEMUM4RTU1NjM4RkI0MzU4NDkw M0UxNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWZmNGViY2QtMjljZi00ZWVjLWE5 MmEtZDExMzZmNWY5OTM2LzAvRjhDMTlBOEY4Q0IwRERDODVEMUM4RTU1NjM4RkI0 MzU4NDkwM0UxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHULxi/AvFK1u2U+nnNKzVMI9ZS4iOsDwqS0 8km8lkhJrfb9qLmC9Ao22aNBJQdQdvQgAPcsEtrodfvi/8GdY+gHs0x5Qlb6UV7G o2fQ8rsUuDC/HTb5I5SZKzlBVlGNWsnrbjZ9Gh0pcEN0x5u2GMxj6w7yxLwJPIiY yQfMBv6rnwfO8YjwErWlBDVuPbmXcwW2Ll3uk1uRueh2x5Uu5B26Jifom52xcaZT mtZsI8B9BWH72SblyxjxxPopiBJTIrivADoyXzfeqCoNNqMvN7DwjEdqqMA1ByrO ZwPSCu5TzJeJcua1P6i6VHu0/cdeXCp2pmjNWD60abF0OzTUbL0= -----END CERTIFICATE-----Generated at Mon Jun 30 13:21:28 2025 by rpki-client