$ rpki-client -vvf repo-rpki.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.mft File: F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.mft (raw, json) Hash identifier: 3lNdZP71/HYXfzpuip97VpRQIBoWiJSwe4Ql25O0hds= Subject key identifier: DB:AB:55:6E:0E:40:DB:DE:ED:F8:29:AD:8C:ED:6F:9C:CC:DF:2C:7E Authority key identifier: F8:B7:C8:E5:DD:BD:D0:36:51:3F:10:B8:7F:39:A9:4B:E1:DB:3D:CA Certificate issuer: /CN=F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA Certificate serial: 758B04A4236D4FD800AAE41966D467954975F91D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.mft Manifest number: 01EE Signing time: Mon 30 Jun 2025 08:40:37 +0000 Manifest this update: Mon 30 Jun 2025 08:35:37 +0000 Manifest next update: Thu 03 Jul 2025 11:16:37 +0000 Files and hashes: 1: 3130332e3138392e3131362e302f32342d3234203d3e20313439383738.roa (hash: WTqqW4cwushoWLyLWupS3yHzTC5AqZ4B8ENJ6k7wzI4=) 2: 3130332e3138392e3131372e302f32342d3234203d3e20313439383738.roa (hash: nXEHhJ8w6SXV+eCEbP2YrkovqQsEQKgULxh/UNhY8O8=) 3: F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.crl (hash: 3DMs2cVkwVG7+GezlliroLFrHsxRmQV8cexZjKf49L8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.crl rsync://repo-rpki.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 11:16:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:8b:04:a4:23:6d:4f:d8:00:aa:e4:19:66:d4:67:95:49:75:f9:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA Validity Not Before: Jun 30 08:35:37 2025 GMT Not After : Jul 3 11:16:37 2025 GMT Subject: CN=DBAB556E0E40DBDEEDF829AD8CED6F9CCCDF2C7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b1:2f:ef:22:ef:6e:22:68:af:06:05:45:99: e5:84:31:7a:e4:af:89:c6:be:01:e1:32:78:09:da: e8:81:13:10:16:b2:ca:76:47:6b:fd:33:fd:cb:e7: 57:8d:cd:35:48:35:e0:24:b0:6d:9d:fb:e2:c2:fc: e3:b4:a8:8d:42:ef:73:3b:2c:3a:e9:b4:c4:9f:44: 00:b0:1e:c4:42:b3:ab:1d:f5:fd:79:90:bb:ce:0f: 6c:c1:3c:91:d3:eb:f5:46:3e:54:e4:39:7e:c3:04: 0e:5d:b2:8a:f0:b1:90:29:a3:92:d7:7e:f7:10:6c: 05:27:67:7f:a7:29:81:0e:64:09:05:f5:17:7f:52: 24:a8:cf:80:a6:f0:28:2c:42:69:5f:1a:70:e4:a7: e3:4b:06:77:18:36:86:f5:b7:f6:57:aa:bf:c0:28: 20:93:ef:1e:2f:d5:61:f5:9b:5e:22:bc:73:6d:ea: b0:fb:32:78:3c:4a:f6:f9:58:44:bc:94:26:28:c9: 7a:27:cd:ff:01:54:a0:b1:55:ca:20:9f:b1:4f:89: 0b:bb:f6:17:80:5f:d6:e7:16:26:3f:4c:ed:57:8a: be:ae:4e:a2:81:17:19:16:58:b4:68:3f:b9:50:8a: ef:86:8b:8c:75:c6:ea:c9:2f:6e:ec:1f:ed:8e:7c: a7:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:AB:55:6E:0E:40:DB:DE:ED:F8:29:AD:8C:ED:6F:9C:CC:DF:2C:7E X509v3 Authority Key Identifier: keyid:F8:B7:C8:E5:DD:BD:D0:36:51:3F:10:B8:7F:39:A9:4B:E1:DB:3D:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:64:b5:10:30:88:a8:ed:ea:28:6f:52:cc:25:a9:af:81:34: 48:db:d8:7f:67:25:af:6b:78:fb:15:43:0d:b8:29:92:f5:55: 6b:9b:44:6f:75:cc:b0:77:63:f3:34:96:06:2d:4a:24:a5:13: bd:95:a0:da:d1:d0:39:95:f3:9c:bf:33:3d:3b:b8:15:92:75: 57:a0:dc:96:d8:c6:71:87:72:77:fc:f4:c7:03:84:b2:14:f9: 99:6d:51:8f:47:10:6c:e5:a4:af:d0:3c:75:14:28:82:1b:32: 38:94:90:b7:5b:e8:a8:29:f1:a9:47:f2:d9:ff:19:91:e1:b9: 4b:69:f6:ea:bf:5b:6e:85:46:5f:e4:96:8b:cd:64:2f:84:23: e6:0d:ea:16:f8:42:71:67:c4:c1:b2:19:e4:84:c6:b4:a4:eb: e7:9b:84:fa:3f:f1:6d:f0:b9:fc:e5:2f:a6:3d:4e:b3:18:32: 2a:88:a1:c5:86:96:00:ee:89:15:4e:00:21:aa:ae:5e:02:f3: 46:2b:a1:1d:2f:5a:10:f3:4a:b0:ad:11:a3:e7:1b:d5:05:27: ec:23:79:83:70:20:8a:45:a4:09:39:07:74:75:5b:21:0b:dd: 5b:9e:c6:cb:2f:ee:f1:cd:db:5b:cf:a6:fc:98:a9:24:c8:b7: b0:ab:0b:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdYsEpCNtT9gAquQZZtRnlUl1+R0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhCN0M4RTVEREJERDAzNjUxM0YxMEI4N0YzOUE5NEJF MURCM0RDQTAeFw0yNTA2MzAwODM1MzdaFw0yNTA3MDMxMTE2MzdaMDMxMTAvBgNV BAMTKERCQUI1NTZFMEU0MERCREVFREY4MjlBRDhDRUQ2RjlDQ0NERjJDN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLsS/vIu9uImivBgVFmeWEMXrk r4nGvgHhMngJ2uiBExAWssp2R2v9M/3L51eNzTVINeAksG2d++LC/OO0qI1C73M7 LDrptMSfRACwHsRCs6sd9f15kLvOD2zBPJHT6/VGPlTkOX7DBA5dsorwsZApo5LX fvcQbAUnZ3+nKYEOZAkF9Rd/UiSoz4Cm8CgsQmlfGnDkp+NLBncYNob1t/ZXqr/A KCCT7x4v1WH1m14ivHNt6rD7Mng8Svb5WES8lCYoyXonzf8BVKCxVcogn7FPiQu7 9heAX9bnFiY/TO1Xir6uTqKBFxkWWLRoP7lQiu+Gi4x1xurJL27sH+2OfKcJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU26tVbg5A297t+CmtjO1vnMzfLH4wHwYDVR0j BBgwFoAU+LfI5d290DZRPxC4fzmpS+HbPcowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MzA1YWIzMC01NjUzLTQyYmMtOWMzZi1hYWY1NjdlYWU3MDEvMC9GOEI3QzhFNURE QkREMDM2NTEzRjEwQjg3RjM5QTk0QkUxREIzRENBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjhCN0M4RTVEREJERDAzNjUxM0YxMEI4N0YzOUE5NEJFMURC M0RDQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzMwNWFiMzAtNTY1My00MmJjLTlj M2YtYWFmNTY3ZWFlNzAxLzAvRjhCN0M4RTVEREJERDAzNjUxM0YxMEI4N0YzOUE5 NEJFMURCM0RDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHNktRAwiKjt6ihvUswlqa+BNEjb2H9nJa9r ePsVQw24KZL1VWubRG91zLB3Y/M0lgYtSiSlE72VoNrR0DmV85y/Mz07uBWSdVeg 3JbYxnGHcnf89McDhLIU+ZltUY9HEGzlpK/QPHUUKIIbMjiUkLdb6Kgp8alH8tn/ GZHhuUtp9uq/W26FRl/klovNZC+EI+YN6hb4QnFnxMGyGeSExrSk6+ebhPo/8W3w ufzlL6Y9TrMYMiqIocWGlgDuiRVOACGqrl4C80YroR0vWhDzSrCtEaPnG9UFJ+wj eYNwIIpFpAk5B3R1WyEL3Vuexssv7vHN21vPpvyYqSTIt7CrC2w= -----END CERTIFICATE-----Generated at Tue Jul 1 20:21:44 2025 by rpki-client