$ rpki-client -vvf repo-rpki.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.mft File: F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.mft (raw, json) Hash identifier: EuWbtNlx2A8HuMrg8ElDlzbmfObLCFfsuXvXgXBCjag= Subject key identifier: 35:3B:6F:6C:1B:55:B5:07:D5:43:66:B3:8C:F8:8E:F0:F4:C8:98:8F Authority key identifier: F8:B7:C8:E5:DD:BD:D0:36:51:3F:10:B8:7F:39:A9:4B:E1:DB:3D:CA Certificate issuer: /CN=F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA Certificate serial: 757AAF0D7382BF1E562EE04152129AC4FC10EE01 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.mft Manifest number: 01D6 Signing time: Sat 10 May 2025 09:10:35 +0000 Manifest this update: Sat 10 May 2025 09:05:35 +0000 Manifest next update: Tue 13 May 2025 11:25:35 +0000 Files and hashes: 1: 3130332e3138392e3131372e302f32342d3234203d3e20313439383738.roa (hash: DOr4kkGYLGRSmLcOevTF3B7Hy6DQ86EG8bZ/AC5agXc=) 2: F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.crl (hash: bsjigjBKggdMNoSlER4jI+feR1SyGwqxBz9fN8FySPI=) 3: 3130332e3138392e3131362e302f32342d3234203d3e20313439383738.roa (hash: KqXfnSM3Zf6qKcNW2AyH6vBJa4OplROJDu965qDaJhk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.crl rsync://repo-rpki.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 11:25:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:7a:af:0d:73:82:bf:1e:56:2e:e0:41:52:12:9a:c4:fc:10:ee:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA Validity Not Before: May 10 09:05:35 2025 GMT Not After : May 13 11:25:35 2025 GMT Subject: CN=353B6F6C1B55B507D54366B38CF88EF0F4C8988F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e3:1b:38:7c:aa:de:dc:97:40:7f:24:55:78: 81:5e:30:1a:50:66:25:cc:8e:6e:d5:be:eb:20:91: c5:33:88:39:89:e8:a7:ee:a6:a2:dd:a5:dc:6e:c1: 7a:3f:35:86:e9:8f:a9:ee:d5:b4:a7:f3:12:cd:60: 7d:db:0e:24:3a:74:c0:12:75:e7:fe:37:9e:3d:7f: 76:ed:8c:77:70:d3:96:5d:73:0e:62:a8:8e:69:1a: b4:08:ef:13:6f:5b:27:34:62:2e:17:69:e7:6f:71: 4c:68:19:05:63:6c:cd:a5:df:2e:ee:81:73:9c:fb: c7:49:15:2b:57:f5:91:b9:66:94:e1:be:82:a3:1d: b4:5e:1c:0b:d8:e5:1f:3c:45:7b:3e:7c:85:45:c2: d7:06:d0:70:99:ba:1e:cb:c4:81:48:2c:b7:ae:49: 32:1a:98:07:d8:48:7c:33:68:7f:6a:63:4b:87:9c: ff:fd:02:50:7d:6c:24:29:72:ec:09:b5:d4:cc:10: 02:50:94:b3:36:34:67:e0:90:65:bd:fa:45:9b:78: 80:05:7e:b2:a4:fe:fe:64:fa:1e:78:7a:fa:21:ef: 5b:a6:71:62:36:3d:83:37:d1:df:7f:65:8e:aa:35: fb:0b:45:7d:28:c8:77:89:10:ec:3c:6a:2a:06:b4: 58:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:3B:6F:6C:1B:55:B5:07:D5:43:66:B3:8C:F8:8E:F0:F4:C8:98:8F X509v3 Authority Key Identifier: keyid:F8:B7:C8:E5:DD:BD:D0:36:51:3F:10:B8:7F:39:A9:4B:E1:DB:3D:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:fe:3f:f9:35:26:46:b5:e0:83:96:e2:a3:94:64:75:cb:7f: a0:fa:27:49:7a:0a:2d:92:1a:23:1e:08:71:f6:d0:d2:6b:c8: 38:bc:37:6c:0a:20:8b:8d:6e:74:56:a9:dd:c3:df:28:67:04: d3:8c:57:5f:b0:df:22:14:85:e0:e9:44:b1:7d:6c:1d:c0:13: 5f:e5:5f:07:9a:c9:e6:9c:cd:d9:63:51:ea:e2:fd:70:1d:ae: c6:60:39:d8:8e:5b:0a:54:4e:1a:15:6f:76:d6:cf:a5:9a:0c: 6c:b8:51:80:d6:f1:6d:42:0c:da:70:10:83:54:c0:ab:83:28: 69:55:4c:87:e1:91:14:12:19:64:68:7c:5f:65:0e:0c:ac:07: 0f:66:26:aa:8b:5b:43:e0:49:ad:35:aa:46:c7:8c:dc:3f:a8: 01:22:7d:84:1c:00:24:74:87:80:a1:7f:7b:d0:5c:06:ab:78: d0:bf:13:7a:ff:45:7b:e4:1d:83:69:26:11:7c:c9:f6:b3:01: c1:f0:2e:63:5b:b5:b9:49:2f:4b:66:cd:ae:82:59:00:e2:c4: fb:ee:eb:68:52:f9:af:7e:48:2b:e1:1e:9a:4f:92:c8:38:95: 70:69:5e:eb:6e:f5:e7:1b:2d:a5:e5:22:1d:9e:a7:c8:9d:cb: 2e:9f:b4:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdXqvDXOCvx5WLuBBUhKaxPwQ7gEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhCN0M4RTVEREJERDAzNjUxM0YxMEI4N0YzOUE5NEJF MURCM0RDQTAeFw0yNTA1MTAwOTA1MzVaFw0yNTA1MTMxMTI1MzVaMDMxMTAvBgNV BAMTKDM1M0I2RjZDMUI1NUI1MDdENTQzNjZCMzhDRjg4RUYwRjRDODk4OEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu4xs4fKre3JdAfyRVeIFeMBpQ ZiXMjm7VvusgkcUziDmJ6KfupqLdpdxuwXo/NYbpj6nu1bSn8xLNYH3bDiQ6dMAS def+N549f3btjHdw05Zdcw5iqI5pGrQI7xNvWyc0Yi4XaedvcUxoGQVjbM2l3y7u gXOc+8dJFStX9ZG5ZpThvoKjHbReHAvY5R88RXs+fIVFwtcG0HCZuh7LxIFILLeu STIamAfYSHwzaH9qY0uHnP/9AlB9bCQpcuwJtdTMEAJQlLM2NGfgkGW9+kWbeIAF frKk/v5k+h54evoh71umcWI2PYM30d9/ZY6qNfsLRX0oyHeJEOw8aioGtFidAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNTtvbBtVtQfVQ2azjPiO8PTImI8wHwYDVR0j BBgwFoAU+LfI5d290DZRPxC4fzmpS+HbPcowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MzA1YWIzMC01NjUzLTQyYmMtOWMzZi1hYWY1NjdlYWU3MDEvMC9GOEI3QzhFNURE QkREMDM2NTEzRjEwQjg3RjM5QTk0QkUxREIzRENBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjhCN0M4RTVEREJERDAzNjUxM0YxMEI4N0YzOUE5NEJFMURC M0RDQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzMwNWFiMzAtNTY1My00MmJjLTlj M2YtYWFmNTY3ZWFlNzAxLzAvRjhCN0M4RTVEREJERDAzNjUxM0YxMEI4N0YzOUE5 NEJFMURCM0RDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACb+P/k1Jka14IOW4qOUZHXLf6D6J0l6Ci2S GiMeCHH20NJryDi8N2wKIIuNbnRWqd3D3yhnBNOMV1+w3yIUheDpRLF9bB3AE1/l XweayeaczdljUeri/XAdrsZgOdiOWwpUThoVb3bWz6WaDGy4UYDW8W1CDNpwEINU wKuDKGlVTIfhkRQSGWRofF9lDgysBw9mJqqLW0PgSa01qkbHjNw/qAEifYQcACR0 h4Chf3vQXAareNC/E3r/RXvkHYNpJhF8yfazAcHwLmNbtblJL0tmza6CWQDixPvu 62hS+a9+SCvhHppPksg4lXBpXutu9ecbLaXlIh2ep8idyy6ftLo= -----END CERTIFICATE-----Generated at Sun May 11 09:14:44 2025 by rpki-client