$ rpki-client -vvf repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.mft File: F7D89AF4A6B49559B90BD1A11D2262692C406D9B.mft (raw, json) Hash identifier: aFByWcKOZGCCXA6rhFiUVMGmxsWIW7jc3TCej9ZTzGc= Subject key identifier: 83:71:93:92:2F:05:EB:D0:AF:FB:1E:50:89:A5:B9:E8:C7:7F:03:51 Authority key identifier: F7:D8:9A:F4:A6:B4:95:59:B9:0B:D1:A1:1D:22:62:69:2C:40:6D:9B Certificate issuer: /CN=F7D89AF4A6B49559B90BD1A11D2262692C406D9B Certificate serial: 65B3A95C090E6CF5B03F8B3C4C85C26C6AA93BB8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.mft Manifest number: 01DB Signing time: Fri 22 Aug 2025 06:01:21 +0000 Manifest this update: Fri 22 Aug 2025 05:56:21 +0000 Manifest next update: Mon 25 Aug 2025 08:12:21 +0000 Files and hashes: 1: F7D89AF4A6B49559B90BD1A11D2262692C406D9B.crl (hash: vYlBAte+oU+WQU0slKudf37fKtwWZzw+wZiaRDiFlFk=) 2: 3130332e31332e3230352e302f32342d3234203d3e20313532333636.roa (hash: bNck8LpKpp26kW2UN16eMZ1fOvjILY8XEu10GDGQj+I=) 3: 3130332e31332e3230352e302f32342d3234203d3e203438343635.roa (hash: /BkZhdhHuWpr0COSSqEa5xQ/tUEnJqvOpL9FKXE/Mm4=) 4: 3130332e31332e3230342e302f32342d3234203d3e203438343635.roa (hash: WBg+Oj5FDShLbz1I5ijbkQnlP4hqNRkJwhL0ngYl8bg=) 5: 3130332e31332e3230342e302f32332d3233203d3e203634333030.roa (hash: 2AxkviF5pv7j1kTQ3v8XjI6k7pg1zXnW3iJ2qwjQWV0=) 6: 3130332e31332e3230342e302f32342d3234203d3e203634333030.roa (hash: aoGZEwGfwxorrH0vm0ZUZnYbhYMMuOl+o+RcX6GAvoE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.crl rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 08:12:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:b3:a9:5c:09:0e:6c:f5:b0:3f:8b:3c:4c:85:c2:6c:6a:a9:3b:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F7D89AF4A6B49559B90BD1A11D2262692C406D9B Validity Not Before: Aug 22 05:56:21 2025 GMT Not After : Aug 25 08:12:21 2025 GMT Subject: CN=837193922F05EBD0AFFB1E5089A5B9E8C77F0351 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f6:8f:21:46:ac:55:0e:39:36:39:1e:45:d3: e4:7c:15:57:43:82:fd:fe:2b:0a:4b:e2:8d:22:fd: 24:be:9b:0f:38:48:02:e8:c5:2f:f2:6e:79:be:fb: 50:69:54:cc:66:b7:a5:58:49:4d:f9:2d:a0:37:f4: 62:4c:db:68:77:a4:3d:4e:35:f2:08:30:0f:7f:43: b1:2c:80:5c:8f:49:28:dc:3b:b6:d5:57:24:88:92: 00:f9:0a:12:64:1f:3e:f6:d0:b0:48:c1:1c:68:7c: f6:4b:3b:5a:d3:bf:87:8d:4c:be:fe:64:a3:ec:3a: 80:0d:a6:ad:6a:22:76:57:8b:f0:cc:75:b5:ba:38: b8:e7:63:1a:06:41:46:fa:a9:e0:e5:81:45:f4:9a: 45:69:4d:05:92:d7:24:a8:ab:31:80:90:59:2a:6d: b7:0b:3e:ea:69:b2:33:99:c2:4c:c0:ff:35:1e:b1: 50:94:24:8a:4c:86:ef:5f:5b:f4:4d:a9:2d:68:bc: 3a:c5:c0:1a:c1:6f:2e:f2:07:a5:9f:be:bd:b0:4f: f0:5c:47:59:b1:e7:0d:7c:8f:29:90:d7:e2:ba:ca: 13:f1:77:3d:0f:cf:db:cc:9a:43:19:df:10:11:fd: fc:40:40:65:b9:93:1c:89:82:e8:8b:6a:4e:fa:b7: b0:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:71:93:92:2F:05:EB:D0:AF:FB:1E:50:89:A5:B9:E8:C7:7F:03:51 X509v3 Authority Key Identifier: keyid:F7:D8:9A:F4:A6:B4:95:59:B9:0B:D1:A1:1D:22:62:69:2C:40:6D:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:f7:3a:ec:36:31:d6:1d:83:87:45:e9:f3:20:43:7f:81:45: f1:d9:fb:2e:f7:81:bb:f3:af:37:9f:51:ce:ef:35:67:c4:51: cb:7d:fe:be:e3:9e:b3:77:52:db:99:83:1d:e2:65:a4:ea:c9: cf:7d:16:a7:3b:d2:07:80:4a:6b:c0:6c:3e:cf:8a:40:ff:21: 10:5b:c7:0c:c4:d5:42:d6:85:9b:b2:c3:8b:28:d7:b1:81:61: e5:fb:31:e5:d6:a5:db:51:63:67:17:24:da:a5:79:ff:12:67: 36:ce:ec:24:46:db:87:f4:0e:7c:e6:22:a6:68:ad:fc:5c:b1: 63:f2:37:6a:89:ca:8b:3d:bb:94:a2:8f:87:e1:a8:3e:cc:08: 1c:ba:3f:d4:e3:3e:2a:69:02:c3:04:1c:77:95:b1:9d:75:f5: be:4f:6a:b1:0e:81:cd:7e:05:fc:6a:36:de:74:7c:b5:87:7b: 83:71:4a:fc:7b:4b:42:9e:df:be:2a:fb:dd:8b:23:43:19:f3: f6:0a:7f:ab:92:05:69:3f:06:fe:01:fd:91:a2:b1:52:b9:01: 89:0d:02:e9:3f:30:9a:0d:d7:20:96:12:e2:ff:3f:42:ea:07: 21:25:bc:5d:00:eb:2f:7f:e0:6d:bd:3e:20:81:46:55:4d:8d: ed:8c:92:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZbOpXAkObPWwP4s8TIXCbGqpO7gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjdEODlBRjRBNkI0OTU1OUI5MEJEMUExMUQyMjYyNjky QzQwNkQ5QjAeFw0yNTA4MjIwNTU2MjFaFw0yNTA4MjUwODEyMjFaMDMxMTAvBgNV BAMTKDgzNzE5MzkyMkYwNUVCRDBBRkZCMUU1MDg5QTVCOUU4Qzc3RjAzNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH9o8hRqxVDjk2OR5F0+R8FVdD gv3+KwpL4o0i/SS+mw84SALoxS/ybnm++1BpVMxmt6VYSU35LaA39GJM22h3pD1O NfIIMA9/Q7EsgFyPSSjcO7bVVySIkgD5ChJkHz720LBIwRxofPZLO1rTv4eNTL7+ ZKPsOoANpq1qInZXi/DMdbW6OLjnYxoGQUb6qeDlgUX0mkVpTQWS1ySoqzGAkFkq bbcLPuppsjOZwkzA/zUesVCUJIpMhu9fW/RNqS1ovDrFwBrBby7yB6Wfvr2wT/Bc R1mx5w18jymQ1+K6yhPxdz0Pz9vMmkMZ3xAR/fxAQGW5kxyJguiLak76t7BzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUg3GTki8F69Cv+x5QiaW56Md/A1EwHwYDVR0j BBgwFoAU99ia9Ka0lVm5C9GhHSJiaSxAbZswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZmM5MDk2Yy0yOGRjLTQ0ZTQtYjRjZi05NmQ2MzFiNzNhYzAvMC9GN0Q4OUFGNEE2 QjQ5NTU5QjkwQkQxQTExRDIyNjI2OTJDNDA2RDlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjdEODlBRjRBNkI0OTU1OUI5MEJEMUExMUQyMjYyNjkyQzQw NkQ5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmZjOTA5NmMtMjhkYy00NGU0LWI0 Y2YtOTZkNjMxYjczYWMwLzAvRjdEODlBRjRBNkI0OTU1OUI5MEJEMUExMUQyMjYy NjkyQzQwNkQ5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHr3Ouw2MdYdg4dF6fMgQ3+BRfHZ+y73gbvz rzefUc7vNWfEUct9/r7jnrN3UtuZgx3iZaTqyc99Fqc70geASmvAbD7PikD/IRBb xwzE1ULWhZuyw4so17GBYeX7MeXWpdtRY2cXJNqlef8SZzbO7CRG24f0DnzmIqZo rfxcsWPyN2qJyos9u5Sij4fhqD7MCBy6P9TjPippAsMEHHeVsZ119b5ParEOgc1+ BfxqNt50fLWHe4NxSvx7S0Ke374q+92LI0MZ8/YKf6uSBWk/Bv4B/ZGisVK5AYkN Auk/MJoN1yCWEuL/P0LqByElvF0A6y9/4G29PiCBRlVNje2MkuE= -----END CERTIFICATE-----Generated at Sat Aug 23 10:34:22 2025 by rpki-client