$ rpki-client -vvf repo-rpki.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/0FA41B65D1881666013C9683E40575E68E5DC0A5.mft File: 0FA41B65D1881666013C9683E40575E68E5DC0A5.mft (raw, json) Hash identifier: KHXK3WBNAmwb7R4x9u3dj3oPLI3F5++34wSlR3MVj1E= Subject key identifier: F7:9D:B1:1F:8F:3D:AE:28:A5:FB:AF:F4:83:E0:AE:A4:BB:45:EC:93 Authority key identifier: 0F:A4:1B:65:D1:88:16:66:01:3C:96:83:E4:05:75:E6:8E:5D:C0:A5 Certificate issuer: /CN=0FA41B65D1881666013C9683E40575E68E5DC0A5 Certificate serial: 7A266D72C2CA248131A79639B973BB0735C1F3D1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FA41B65D1881666013C9683E40575E68E5DC0A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/0FA41B65D1881666013C9683E40575E68E5DC0A5.mft Manifest number: 050F Signing time: Sat 23 Aug 2025 07:41:03 +0000 Manifest this update: Sat 23 Aug 2025 07:36:03 +0000 Manifest next update: Tue 26 Aug 2025 18:59:03 +0000 Files and hashes: 1: 0FA41B65D1881666013C9683E40575E68E5DC0A5.crl (hash: IZRBZMWmV6nnGucVnLMHSQLyuYK7C9aKalo1o5F+2lo=) 2: 3130332e3232302e34372e302f32342d3234203d3e20313431313037.roa (hash: tHhLDdHHbsCkG+UHT3p88TUY2+W5e4f+3agioxt0A6g=) 3: 3130332e3231362e3138382e302f32342d3234203d3e20313431313037.roa (hash: 1h7fo52sVm4cJACJ1QTb5QR43dKEDAqoDnfictr7I+U=) 4: 323030313a6466313a666530303a3a2f34382d3438203d3e20313431313037.roa (hash: 96iMJoj+cFMvtnyIVwYET8bE27HKdbaW3rJ7KX7hPqQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/0FA41B65D1881666013C9683E40575E68E5DC0A5.crl rsync://repo-rpki.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/0FA41B65D1881666013C9683E40575E68E5DC0A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FA41B65D1881666013C9683E40575E68E5DC0A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 18:59:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:26:6d:72:c2:ca:24:81:31:a7:96:39:b9:73:bb:07:35:c1:f3:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FA41B65D1881666013C9683E40575E68E5DC0A5 Validity Not Before: Aug 23 07:36:03 2025 GMT Not After : Aug 26 18:59:03 2025 GMT Subject: CN=F79DB11F8F3DAE28A5FBAFF483E0AEA4BB45EC93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:53:ec:18:b8:ab:ba:54:9e:0a:d7:8b:cf:d6: 7c:6d:57:9e:37:20:65:b3:a2:6e:ae:0c:c1:cb:f4: e1:72:9d:58:ec:55:4c:cd:ec:76:be:7b:a6:73:ad: 7e:cc:6a:ba:6e:25:69:a5:79:03:bf:c2:95:9b:b2: 0e:64:43:44:b9:54:9c:d1:af:fe:2a:02:41:6f:e5: d7:7a:bb:48:3d:50:4e:b3:fe:4a:67:13:3e:1f:4e: b6:37:ac:15:0d:1f:c7:9a:d6:cf:13:87:1f:17:4f: dd:07:2d:44:d4:20:51:96:7c:ff:27:99:18:69:55: eb:00:f1:4f:3c:81:b8:28:f1:44:b7:c9:cc:c4:ad: 93:51:3f:86:82:71:a3:06:f4:46:21:66:21:9d:be: 5c:d0:78:c8:f7:ec:cb:24:e9:f4:99:5e:db:2c:25: c9:f3:4f:5e:2a:a7:36:ec:33:f7:08:d0:8a:69:80: b1:cc:81:43:25:c5:d1:b3:d7:2d:b8:82:e8:47:bc: d8:ae:20:9e:28:7e:d9:09:62:03:03:fd:2d:af:c5: a8:51:57:9d:1a:69:11:06:04:f4:5f:4d:0c:f5:97: 5f:24:2b:32:12:3d:16:ae:28:05:e2:a4:4e:09:e7: 7f:32:1c:76:6e:96:c9:1d:9d:16:9d:ef:e7:7c:80: 2c:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:9D:B1:1F:8F:3D:AE:28:A5:FB:AF:F4:83:E0:AE:A4:BB:45:EC:93 X509v3 Authority Key Identifier: keyid:0F:A4:1B:65:D1:88:16:66:01:3C:96:83:E4:05:75:E6:8E:5D:C0:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/0FA41B65D1881666013C9683E40575E68E5DC0A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FA41B65D1881666013C9683E40575E68E5DC0A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/0FA41B65D1881666013C9683E40575E68E5DC0A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:e6:77:17:b1:6a:e6:53:5c:3c:16:dc:49:83:a7:b1:7f:1b: 1c:bb:00:0e:52:31:79:50:70:ea:a5:f5:ee:85:f4:02:fb:5e: 7c:c0:da:2d:dc:e2:61:71:e5:ae:68:2a:5e:e8:3e:24:c0:b0: 97:d8:eb:15:ec:c5:1a:47:85:13:b8:b9:da:0b:b0:54:85:be: 06:ed:52:3e:de:12:c5:55:a7:80:36:51:52:33:02:a4:68:58: 93:62:a1:bd:12:da:ae:91:d9:14:49:8c:61:af:4f:fd:94:66: ab:99:76:95:e5:9f:9e:9a:37:84:d6:6b:85:1d:e2:75:b5:5d: 21:79:ea:12:de:e4:0f:24:9f:61:59:3a:de:46:d1:b5:9a:66: 9a:f6:60:e5:62:7e:51:4d:d5:5e:66:6e:06:53:1a:9a:6d:b1: 16:3e:ed:56:c4:40:2e:a5:31:92:29:d3:6c:99:09:73:b9:5e: 34:ab:0e:f2:64:08:ea:39:cf:c1:11:82:46:d8:84:11:a0:06: 50:d8:27:9e:37:f4:81:59:5d:65:3d:b9:44:e1:5f:84:3e:d7: 13:81:88:76:63:9a:7f:61:3d:ac:93:86:02:66:6e:1f:b1:1b: 71:4e:3d:5d:94:a4:26:70:00:23:e0:86:d9:5b:55:72:0a:60: 4d:e2:81:d5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeiZtcsLKJIExp5Y5uXO7BzXB89EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZBNDFCNjVEMTg4MTY2NjAxM0M5NjgzRTQwNTc1RTY4 RTVEQzBBNTAeFw0yNTA4MjMwNzM2MDNaFw0yNTA4MjYxODU5MDNaMDMxMTAvBgNV BAMTKEY3OURCMTFGOEYzREFFMjhBNUZCQUZGNDgzRTBBRUE0QkI0NUVDOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6U+wYuKu6VJ4K14vP1nxtV543 IGWzom6uDMHL9OFynVjsVUzN7Ha+e6ZzrX7MarpuJWmleQO/wpWbsg5kQ0S5VJzR r/4qAkFv5dd6u0g9UE6z/kpnEz4fTrY3rBUNH8ea1s8Thx8XT90HLUTUIFGWfP8n mRhpVesA8U88gbgo8US3yczErZNRP4aCcaMG9EYhZiGdvlzQeMj37Msk6fSZXtss JcnzT14qpzbsM/cI0IppgLHMgUMlxdGz1y24guhHvNiuIJ4oftkJYgMD/S2vxahR V50aaREGBPRfTQz1l18kKzISPRauKAXipE4J538yHHZulskdnRad7+d8gCzXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU952xH489riil+6/0g+CupLtF7JMwHwYDVR0j BBgwFoAUD6QbZdGIFmYBPJaD5AV15o5dwKUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OTk0ZDM3NS1mYzdkLTRkYzctYTFmMS1lMGIzYTU5ZmRmNzgvMC8wRkE0MUI2NUQx ODgxNjY2MDEzQzk2ODNFNDA1NzVFNjhFNURDMEE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEZBNDFCNjVEMTg4MTY2NjAxM0M5NjgzRTQwNTc1RTY4RTVE QzBBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzk5NGQzNzUtZmM3ZC00ZGM3LWEx ZjEtZTBiM2E1OWZkZjc4LzAvMEZBNDFCNjVEMTg4MTY2NjAxM0M5NjgzRTQwNTc1 RTY4RTVEQzBBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA7mdxexauZTXDwW3EmDp7F/Gxy7AA5SMXlQ cOql9e6F9AL7XnzA2i3c4mFx5a5oKl7oPiTAsJfY6xXsxRpHhRO4udoLsFSFvgbt Uj7eEsVVp4A2UVIzAqRoWJNiob0S2q6R2RRJjGGvT/2UZquZdpXln56aN4TWa4Ud 4nW1XSF56hLe5A8kn2FZOt5G0bWaZpr2YOViflFN1V5mbgZTGpptsRY+7VbEQC6l MZIp02yZCXO5XjSrDvJkCOo5z8ERgkbYhBGgBlDYJ5439IFZXWU9uUThX4Q+1xOB iHZjmn9hPayThgJmbh+xG3FOPV2UpCZwACPghtlbVXIKYE3igdU= -----END CERTIFICATE-----Generated at Sat Aug 23 22:01:54 2025 by rpki-client