$ rpki-client -vvf repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft File: F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft (raw, json) Hash identifier: prT8BtQ/hcEl1svTWK0FU+hf1ttIWCBzf63btLSNIGo= Subject key identifier: 19:1D:4C:B7:00:98:50:C1:06:54:47:A8:94:90:38:29:6E:FC:3C:D8 Authority key identifier: F3:F9:AB:30:AC:2C:50:B3:ED:F7:C9:1C:45:31:CC:9A:EE:9C:9D:A3 Certificate issuer: /CN=F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3 Certificate serial: 6FE4AF83BA6603F6EAA2AD17552C4D56E0FB63AE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft Manifest number: 0502 Signing time: Fri 22 Aug 2025 18:01:04 +0000 Manifest this update: Fri 22 Aug 2025 17:56:04 +0000 Manifest next update: Tue 26 Aug 2025 02:23:04 +0000 Files and hashes: 1: 3130332e3130302e3138322e302f32342d3234203d3e20313336383430.roa (hash: 82WkCsugh3Y0Do+wrRLPbBu7oY8u5dpqm/OQwR7YoKQ=) 2: F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.crl (hash: oZR1A6IF/aETlJiypZ/orITyEO2HBGjxlvsWQTRvK+4=) 3: 323430313a626663303a3a2f33322d3332203d3e20313336383430.roa (hash: OD6ds+KTm//KkPIe0CnHbGgyxy24D56HEq7afLGbIc8=) 4: 3130332e3130302e3138302e302f32342d3234203d3e20313336383430.roa (hash: yz7KoAXsbF5ZqTXQr0wN32L4YkceTPCN36RTUDHDNIE=) 5: 3130332e3130302e3138302e302f32322d3232203d3e20313336383430.roa (hash: Um7YNYBxTVjbF3M76ZtkS+WRPG6nd3aZ+YWjDA+f9zA=) 6: 3130332e3130302e3138312e302f32342d3234203d3e20313336383430.roa (hash: CamY8eX6kfj5MZjd7GTKNGu0eML2pclOVMqWYRohOEs=) 7: 3130332e3130302e3138332e302f32342d3234203d3e20313336383430.roa (hash: HP2CIuQ7HdSouFMxhc4gbLPN64fDpck7CCz5j9Fedrs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.crl rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 02:23:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:e4:af:83:ba:66:03:f6:ea:a2:ad:17:55:2c:4d:56:e0:fb:63:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3 Validity Not Before: Aug 22 17:56:04 2025 GMT Not After : Aug 26 02:23:04 2025 GMT Subject: CN=191D4CB7009850C1065447A8949038296EFC3CD8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:67:08:d0:1d:b0:d0:85:5c:84:33:b3:6d:19: dc:71:ec:4c:07:c5:da:48:8f:9d:dd:77:44:a2:c0: 62:b9:db:b5:b7:98:73:45:ac:6e:0f:5a:21:5e:14: d7:ce:0f:f8:83:8c:3e:4d:e6:85:c8:7f:36:74:83: 15:87:03:55:1d:e1:91:47:31:fe:d9:cd:4c:63:0a: f5:9d:97:fe:70:bb:6c:8f:0e:1b:c8:11:34:dc:5d: 9e:59:ea:87:d4:63:b3:6d:74:13:90:6f:ec:67:60: f6:97:56:af:d2:e7:7c:36:ef:48:b2:32:b4:52:5d: bb:8d:13:a4:9f:af:39:83:c6:50:2c:07:73:e0:19: 46:10:4d:7a:35:18:d2:fe:07:3e:f7:7f:ba:94:47: 52:63:8b:70:5a:fa:8e:b8:ba:d7:05:99:55:db:18: cd:18:07:41:63:16:26:cc:59:fa:9d:89:11:51:ac: e2:aa:9d:e3:e2:f7:3b:3f:28:4e:ec:4b:4b:41:55: 42:71:4d:d8:32:9f:8f:bd:04:88:78:5b:d8:c1:16: cb:b5:1f:71:d9:4c:6e:f5:4f:cc:d7:8b:62:02:f1: c8:c7:31:a5:60:89:85:b9:4a:5e:d7:18:62:9f:e6: 9e:b3:f5:a5:19:3a:82:c7:a4:ef:ea:c1:f5:88:6b: aa:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:1D:4C:B7:00:98:50:C1:06:54:47:A8:94:90:38:29:6E:FC:3C:D8 X509v3 Authority Key Identifier: keyid:F3:F9:AB:30:AC:2C:50:B3:ED:F7:C9:1C:45:31:CC:9A:EE:9C:9D:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:a7:3d:ad:ca:2a:2a:98:8a:9b:2e:ff:6f:4f:85:69:b3:68: bb:e2:11:17:49:14:c8:f3:16:18:98:46:a3:94:c4:6e:5d:76: 43:74:d4:9e:3a:ca:a9:92:67:ca:85:3b:89:87:b7:3d:6e:32: ed:92:db:16:e6:37:f3:ea:4a:b0:72:3f:fc:4d:84:38:c5:50: a8:56:52:cd:11:2b:3d:8e:11:a0:40:46:26:f3:11:67:a6:10: d4:9f:29:9e:52:fc:b8:a0:ab:d6:a9:ed:3a:fd:42:7b:69:85: 89:5d:ed:11:87:b8:58:74:e0:03:b2:76:98:28:f2:f8:7c:13: 66:c5:42:cf:50:50:e4:f6:4b:ee:6c:13:7e:7f:f8:24:3e:7d: 10:00:0b:93:47:5d:6a:7e:36:80:de:31:9e:da:bd:4d:97:da: 4a:e6:61:45:7e:6c:59:b8:a8:5b:5f:1f:be:10:d6:82:b6:38: 26:f7:b8:7b:d2:26:7a:e6:99:3e:37:4f:4d:88:d0:f3:8a:1f: 12:23:3e:9e:f6:1e:0d:05:f4:f7:10:5b:00:25:0a:eb:37:43: 76:3b:9d:e9:49:b4:fd:91:2d:43:4c:c9:44:e0:31:30:af:89: 25:e0:84:fb:52:bd:27:e2:54:bb:28:93:92:d8:f2:b2:51:aa: 43:12:1a:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb+Svg7pmA/bqoq0XVSxNVuD7Y64wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjNGOUFCMzBBQzJDNTBCM0VERjdDOTFDNDUzMUNDOUFF RTlDOURBMzAeFw0yNTA4MjIxNzU2MDRaFw0yNTA4MjYwMjIzMDRaMDMxMTAvBgNV BAMTKDE5MUQ0Q0I3MDA5ODUwQzEwNjU0NDdBODk0OTAzODI5NkVGQzNDRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHZwjQHbDQhVyEM7NtGdxx7EwH xdpIj53dd0SiwGK527W3mHNFrG4PWiFeFNfOD/iDjD5N5oXIfzZ0gxWHA1Ud4ZFH Mf7ZzUxjCvWdl/5wu2yPDhvIETTcXZ5Z6ofUY7NtdBOQb+xnYPaXVq/S53w270iy MrRSXbuNE6SfrzmDxlAsB3PgGUYQTXo1GNL+Bz73f7qUR1Jji3Ba+o64utcFmVXb GM0YB0FjFibMWfqdiRFRrOKqnePi9zs/KE7sS0tBVUJxTdgyn4+9BIh4W9jBFsu1 H3HZTG71T8zXi2IC8cjHMaVgiYW5Sl7XGGKf5p6z9aUZOoLHpO/qwfWIa6pFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGR1MtwCYUMEGVEeolJA4KW78PNgwHwYDVR0j BBgwFoAU8/mrMKwsULPt98kcRTHMmu6cnaMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZWYwODkwMC1mMmM2LTRkMDctYjY5NC1kMTg4YmFhM2I4ZjIvMC9GM0Y5QUIzMEFD MkM1MEIzRURGN0M5MUM0NTMxQ0M5QUVFOUM5REEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjNGOUFCMzBBQzJDNTBCM0VERjdDOTFDNDUzMUNDOUFFRTlD OURBMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWVmMDg5MDAtZjJjNi00ZDA3LWI2 OTQtZDE4OGJhYTNiOGYyLzAvRjNGOUFCMzBBQzJDNTBCM0VERjdDOTFDNDUzMUND OUFFRTlDOURBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABmnPa3KKiqYipsu/29PhWmzaLviERdJFMjz FhiYRqOUxG5ddkN01J46yqmSZ8qFO4mHtz1uMu2S2xbmN/PqSrByP/xNhDjFUKhW Us0RKz2OEaBARibzEWemENSfKZ5S/Ligq9ap7Tr9QntphYld7RGHuFh04AOydpgo 8vh8E2bFQs9QUOT2S+5sE35/+CQ+fRAAC5NHXWp+NoDeMZ7avU2X2krmYUV+bFm4 qFtfH74Q1oK2OCb3uHvSJnrmmT43T02I0POKHxIjPp72Hg0F9PcQWwAlCus3Q3Y7 nelJtP2RLUNMyUTgMTCviSXghPtSvSfiVLsok5LY8rJRqkMSGhA= -----END CERTIFICATE-----Generated at Sat Aug 23 14:05:22 2025 by rpki-client