$ rpki-client -vvf repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.mft File: F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.mft (raw, json) Hash identifier: Hx2U6VGAITfEBnZaFXMzxbbGygGCprKjyJsv626WsQQ= Subject key identifier: 12:62:6C:07:C5:2A:D5:11:43:6F:14:2F:47:7A:2A:6E:76:E0:E2:6F Authority key identifier: F8:E1:2F:0A:43:3C:8B:73:3B:E3:1D:B5:E0:CD:1E:F2:02:FC:21:EA Certificate issuer: /CN=F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA Certificate serial: 3ECBD7ECECF93952D73AAA6E5A897CB1CC5A3C3E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.mft Manifest number: 0198 Signing time: Fri 22 Aug 2025 18:01:58 +0000 Manifest this update: Fri 22 Aug 2025 17:56:58 +0000 Manifest next update: Tue 26 Aug 2025 03:45:58 +0000 Files and hashes: 1: F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.crl (hash: 0BrSxLv2VZjAPpkP4Sql4OdSXuJ5oenMrkHGfVHkm+w=) 2: 3130332e3139352e36352e302f32342d3234203d3e203234333132.roa (hash: O6HbZbnpwvJlF71+0v/AvXMqBhHi9/+bK/SRCDPbapk=) 3: 3130332e3139352e36352e302f32342d3234203d3e20323131343037.roa (hash: YFqBunOn7BAxcRO9kxvgzIpLLgn70FZ5dEIXUOseJlA=) 4: 3130332e3139352e36352e302f32342d3234203d3e2036393339.roa (hash: Iki/ujAUR2r8jEic7uIoweO5tx+ZoKhjiMwDTjulvbo=) 5: 3130332e3139352e36352e302f32342d3234203d3e20313532333638.roa (hash: gnmrbZ6phBcjgkNgTfRN5xt+ZC7Cm6KFgCfrhOm4VXQ=) 6: 3130332e3139352e36352e302f32342d3234203d3e203530313034.roa (hash: zq6FCBzDTt8AjXmbK9U4RXyugtl+khIAf1ju1PBBDs8=) 7: 3130332e3139352e36352e302f32342d3234203d3e20323130353337.roa (hash: kIEXLbdHyNVR/2+p4R7baZ0vAlG7dZTeEpJcDfIBOIk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.crl rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 03:45:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:cb:d7:ec:ec:f9:39:52:d7:3a:aa:6e:5a:89:7c:b1:cc:5a:3c:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA Validity Not Before: Aug 22 17:56:58 2025 GMT Not After : Aug 26 03:45:58 2025 GMT Subject: CN=12626C07C52AD511436F142F477A2A6E76E0E26F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:eb:4a:87:c1:8f:6e:ec:e1:ee:47:53:44:90: 93:15:43:33:f2:cf:f9:2b:3a:da:76:46:c5:4e:50: 94:f6:76:74:40:3d:bb:9f:1c:e3:bc:96:a5:93:46: e7:ae:0e:56:03:1d:76:6c:5e:4a:03:d3:00:1f:11: ba:e1:df:5b:3e:4f:a2:2b:ec:f4:49:82:6e:e1:e2: f8:0a:c2:76:db:6e:17:2f:4b:d3:d5:26:d1:be:df: e7:3f:89:7b:b9:69:fd:63:5e:d1:1a:a0:2b:68:3e: c8:cf:dc:a8:fc:de:8c:47:1c:17:a6:70:c8:f9:86: 0a:77:90:b3:a5:dd:e1:6d:da:44:67:9f:45:61:25: 40:51:db:b9:d4:67:ef:ca:ee:b1:5b:e9:4a:08:67: 91:7d:c3:9f:d3:f3:b2:f2:89:c0:a8:17:1e:cc:6c: 8e:08:26:65:81:ad:eb:b4:93:be:04:ec:c7:6e:05: 6f:35:d8:59:f9:2b:d8:39:9d:ef:52:f1:54:b8:73: 72:90:90:31:fb:bb:5b:c3:3a:77:f7:69:45:7c:be: bf:bd:6f:56:6b:4b:b4:b7:45:81:fe:de:66:76:90: 76:f5:c0:f2:99:68:d4:4a:fe:5e:dc:ac:4e:1b:26: b4:0d:31:ee:e2:da:23:f1:44:56:03:de:0f:84:7b: 69:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:62:6C:07:C5:2A:D5:11:43:6F:14:2F:47:7A:2A:6E:76:E0:E2:6F X509v3 Authority Key Identifier: keyid:F8:E1:2F:0A:43:3C:8B:73:3B:E3:1D:B5:E0:CD:1E:F2:02:FC:21:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:6d:38:58:e9:ee:e9:07:a1:e9:df:14:61:39:fd:3c:37:00: d3:0c:79:e8:5e:28:a6:73:15:3e:7f:0f:e6:a1:0c:d2:5f:15: 07:39:fa:6e:92:be:40:82:ab:bd:3d:01:11:09:5d:8b:df:af: 4d:bb:69:77:b5:95:0f:65:c8:71:f7:ad:37:4e:15:4f:61:40: 8b:a1:53:c2:9b:8d:be:6e:0a:50:03:06:10:b6:ee:41:1f:8b: 30:1c:5e:b9:b9:45:94:47:57:98:83:8e:27:78:38:c1:e5:9b: 7c:91:85:34:e6:ab:1b:c6:84:67:81:96:7d:b3:24:e6:99:58: af:3d:92:48:d0:4e:6d:81:cb:44:dd:49:71:91:4d:f3:e2:ea: bd:6e:9d:a8:ac:6a:5b:bd:e3:53:52:cb:3f:60:d2:65:92:f8: 93:f5:eb:27:b8:10:13:19:b3:00:c8:cb:47:28:a3:5b:66:d7: a0:0d:c4:41:af:ca:6c:c0:b0:3e:35:24:ce:b6:08:3d:1d:5a: 37:c6:0e:4f:6a:76:6a:e0:ed:e9:15:18:58:22:18:37:5e:1b: 8a:95:b5:73:29:0b:f3:f2:a9:8f:11:42:b9:40:43:87:d5:5a: 1c:1a:de:59:6a:bd:85:ee:dd:0b:48:01:19:b5:0c:8c:8d:00: 48:a0:fe:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPsvX7Oz5OVLXOqpuWol8scxaPD4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhFMTJGMEE0MzNDOEI3MzNCRTMxREI1RTBDRDFFRjIw MkZDMjFFQTAeFw0yNTA4MjIxNzU2NThaFw0yNTA4MjYwMzQ1NThaMDMxMTAvBgNV BAMTKDEyNjI2QzA3QzUyQUQ1MTE0MzZGMTQyRjQ3N0EyQTZFNzZFMEUyNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF60qHwY9u7OHuR1NEkJMVQzPy z/krOtp2RsVOUJT2dnRAPbufHOO8lqWTRueuDlYDHXZsXkoD0wAfEbrh31s+T6Ir 7PRJgm7h4vgKwnbbbhcvS9PVJtG+3+c/iXu5af1jXtEaoCtoPsjP3Kj83oxHHBem cMj5hgp3kLOl3eFt2kRnn0VhJUBR27nUZ+/K7rFb6UoIZ5F9w5/T87LyicCoFx7M bI4IJmWBreu0k74E7MduBW812Fn5K9g5ne9S8VS4c3KQkDH7u1vDOnf3aUV8vr+9 b1ZrS7S3RYH+3mZ2kHb1wPKZaNRK/l7crE4bJrQNMe7i2iPxRFYD3g+Ee2kVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEmJsB8Uq1RFDbxQvR3oqbnbg4m8wHwYDVR0j BBgwFoAU+OEvCkM8i3M74x214M0e8gL8IeowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MGNlNDc5Ni00OWRlLTQzYjEtYTE1Mi1iMThkMTFhZGE1MjkvMC9GOEUxMkYwQTQz M0M4QjczM0JFMzFEQjVFMENEMUVGMjAyRkMyMUVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjhFMTJGMEE0MzNDOEI3MzNCRTMxREI1RTBDRDFFRjIwMkZD MjFFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODBjZTQ3OTYtNDlkZS00M2IxLWEx NTItYjE4ZDExYWRhNTI5LzAvRjhFMTJGMEE0MzNDOEI3MzNCRTMxREI1RTBDRDFF RjIwMkZDMjFFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJdtOFjp7ukHoenfFGE5/Tw3ANMMeeheKKZz FT5/D+ahDNJfFQc5+m6SvkCCq709AREJXYvfr027aXe1lQ9lyHH3rTdOFU9hQIuh U8Kbjb5uClADBhC27kEfizAcXrm5RZRHV5iDjid4OMHlm3yRhTTmqxvGhGeBln2z JOaZWK89kkjQTm2By0TdSXGRTfPi6r1unaisalu941NSyz9g0mWS+JP16ye4EBMZ swDIy0coo1tm16ANxEGvymzAsD41JM62CD0dWjfGDk9qdmrg7ekVGFgiGDdeG4qV tXMpC/PyqY8RQrlAQ4fVWhwa3llqvYXu3QtIARm1DIyNAEig/gE= -----END CERTIFICATE-----Generated at Sat Aug 23 14:08:52 2025 by rpki-client