$ rpki-client -vvf repo-rpki.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/F8DF40E4C95F9EBF81453870736995E91BBB92F7.mft File: F8DF40E4C95F9EBF81453870736995E91BBB92F7.mft (raw, json) Hash identifier: KB+IBXL8BIJHFT0DemNMBg8/t9aD/CwRl6e2pLXkIJc= Subject key identifier: 45:A0:96:90:D8:77:3A:2C:CB:37:B6:69:2F:85:3C:82:50:F3:B2:EB Authority key identifier: F8:DF:40:E4:C9:5F:9E:BF:81:45:38:70:73:69:95:E9:1B:BB:92:F7 Certificate issuer: /CN=F8DF40E4C95F9EBF81453870736995E91BBB92F7 Certificate serial: 4AB778AA6620BAA860E28A50424F23AFE211AD4B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8DF40E4C95F9EBF81453870736995E91BBB92F7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/F8DF40E4C95F9EBF81453870736995E91BBB92F7.mft Manifest number: 026D Signing time: Sat 23 Aug 2025 07:40:01 +0000 Manifest this update: Sat 23 Aug 2025 07:35:01 +0000 Manifest next update: Tue 26 Aug 2025 08:35:01 +0000 Files and hashes: 1: 3130332e3234302e3130392e302f32342d3234203d3e203538383139.roa (hash: 5nvoiGj4OjH2+HTzWQu4bmTNWJXJYHQTVDrsbt8AseA=) 2: 3130332e3234302e3131312e302f32342d3234203d3e203538383139.roa (hash: qsAy9+8K3YocUUVABAHpwtAAQ9W+nqV1JTT37/pzGo4=) 3: F8DF40E4C95F9EBF81453870736995E91BBB92F7.crl (hash: V9tAQhKpIkHg67wxuCb7axf3mCSOAgLNM/Z5MQpfXbs=) 4: 3130332e3234302e3130382e302f32342d3234203d3e203538383139.roa (hash: D+zqgakWFBdHD5/mV/z3ocZSo/C1/ZxuuNBMHS2Lcrc=) 5: 3130332e3234302e3131302e302f32342d3234203d3e203538383139.roa (hash: kInQZ6+a0szsE+89xOKFo2QCmfmxhWma36K3DO0bgYU=) 6: 3130332e3234302e3130382e302f32322d3234203d3e203538383139.roa (hash: XeC/h72IOu7dA+NCUWie+KTWNqBhpQyXbuk3uFJs7XQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/F8DF40E4C95F9EBF81453870736995E91BBB92F7.crl rsync://repo-rpki.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/F8DF40E4C95F9EBF81453870736995E91BBB92F7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8DF40E4C95F9EBF81453870736995E91BBB92F7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 08:35:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:b7:78:aa:66:20:ba:a8:60:e2:8a:50:42:4f:23:af:e2:11:ad:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8DF40E4C95F9EBF81453870736995E91BBB92F7 Validity Not Before: Aug 23 07:35:01 2025 GMT Not After : Aug 26 08:35:01 2025 GMT Subject: CN=45A09690D8773A2CCB37B6692F853C8250F3B2EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c7:32:66:1d:6b:80:ad:8c:cc:c3:90:c7:c1: 05:4d:4a:55:aa:ae:16:49:ee:3e:18:cc:d6:37:93: 35:5a:9c:ac:73:41:cd:f0:46:14:e2:0d:e1:9b:83: 4c:7b:4a:93:33:23:8a:42:ee:a1:76:d8:60:fd:37: 28:57:ad:14:e6:4e:49:0e:09:eb:97:01:af:86:99: 0a:ba:4a:21:5a:02:69:76:7b:d3:09:df:5c:00:48: 70:8d:e3:d8:09:0b:9b:68:bf:1e:ce:6f:e5:83:da: 16:7d:7a:08:90:16:8d:b9:0a:72:13:d2:b7:66:b9: c3:0d:59:22:db:43:68:50:8d:62:57:09:a4:43:55: 38:23:7c:b4:cc:b5:cf:8e:a3:6a:07:98:e8:b8:74: f7:6f:74:f4:49:ba:d9:51:a0:29:57:bf:03:e4:de: 3b:06:71:87:4c:13:0d:a2:35:77:2e:fe:33:7e:1b: 40:27:fc:82:e2:a3:c3:02:ef:46:28:d1:d9:0c:e8: 54:1c:23:82:03:76:23:3c:44:92:0d:c2:7e:44:c2: 0b:6d:bd:74:42:f6:77:80:74:75:d1:b0:dd:b2:7b: 4d:09:4e:6f:55:cc:b0:69:e0:be:0c:a1:1b:9e:8d: 6f:b9:5c:56:8e:1d:67:41:2a:65:3b:31:90:bd:0c: 7c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:A0:96:90:D8:77:3A:2C:CB:37:B6:69:2F:85:3C:82:50:F3:B2:EB X509v3 Authority Key Identifier: keyid:F8:DF:40:E4:C9:5F:9E:BF:81:45:38:70:73:69:95:E9:1B:BB:92:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/F8DF40E4C95F9EBF81453870736995E91BBB92F7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8DF40E4C95F9EBF81453870736995E91BBB92F7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/F8DF40E4C95F9EBF81453870736995E91BBB92F7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:04:69:ea:93:3d:5c:52:af:6a:5c:3d:46:c0:e0:24:79:88: 64:a1:f8:66:83:96:32:1a:f1:ac:d4:92:b4:4a:09:31:0a:12: ef:d3:3d:10:95:11:1d:a1:cf:1c:b7:ea:32:c9:cf:6d:29:3a: 99:f3:12:12:92:1f:64:e2:b9:2e:14:a0:90:a2:dd:d7:79:63: b2:c2:3d:2e:bd:2a:7c:df:b0:86:0a:f2:9e:35:9d:16:69:c6: 20:72:f7:f8:58:2f:d6:9c:0a:36:36:0d:bc:fa:fd:b8:7f:17: 06:ac:49:ef:65:95:58:9f:7d:83:1e:f2:33:24:e1:42:78:be: 04:85:71:7d:e7:0a:2e:8b:61:5b:8b:4a:9c:ec:e9:a6:d9:82: ce:58:b9:6a:4b:07:3a:a3:ab:d4:1c:f4:02:ce:6e:c5:bb:0e: 00:0c:58:b4:75:fd:2e:21:5c:cf:82:ad:19:34:83:06:e0:b9: f6:0c:6f:24:64:8e:86:50:40:25:24:88:7f:5e:55:f3:2a:82: 2e:3c:ec:eb:48:4e:c4:3a:69:23:f4:16:7d:ec:0e:80:e3:9a: 7a:7d:5b:c3:2e:84:0f:1f:01:33:d4:6a:17:27:8d:5a:56:00: e9:5e:46:11:9c:5e:ea:26:71:ea:97:17:1e:d3:c1:68:60:5c: 3f:85:9f:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSrd4qmYguqhg4opQQk8jr+IRrUswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhERjQwRTRDOTVGOUVCRjgxNDUzODcwNzM2OTk1RTkx QkJCOTJGNzAeFw0yNTA4MjMwNzM1MDFaFw0yNTA4MjYwODM1MDFaMDMxMTAvBgNV BAMTKDQ1QTA5NjkwRDg3NzNBMkNDQjM3QjY2OTJGODUzQzgyNTBGM0IyRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+xzJmHWuArYzMw5DHwQVNSlWq rhZJ7j4YzNY3kzVanKxzQc3wRhTiDeGbg0x7SpMzI4pC7qF22GD9NyhXrRTmTkkO CeuXAa+GmQq6SiFaAml2e9MJ31wASHCN49gJC5tovx7Ob+WD2hZ9egiQFo25CnIT 0rdmucMNWSLbQ2hQjWJXCaRDVTgjfLTMtc+Oo2oHmOi4dPdvdPRJutlRoClXvwPk 3jsGcYdMEw2iNXcu/jN+G0An/ILio8MC70Yo0dkM6FQcI4IDdiM8RJINwn5Ewgtt vXRC9neAdHXRsN2ye00JTm9VzLBp4L4MoRuejW+5XFaOHWdBKmU7MZC9DHw/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQURaCWkNh3OizLN7ZpL4U8glDzsuswHwYDVR0j BBgwFoAU+N9A5Mlfnr+BRThwc2mV6Ru7kvcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDAzYWYwMS1mMjM5LTRhMWYtODFjZC00MTA2YmViYjJhMjIvMC9GOERGNDBFNEM5 NUY5RUJGODE0NTM4NzA3MzY5OTVFOTFCQkI5MkY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjhERjQwRTRDOTVGOUVCRjgxNDUzODcwNzM2OTk1RTkxQkJC OTJGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQwM2FmMDEtZjIzOS00YTFmLTgx Y2QtNDEwNmJlYmIyYTIyLzAvRjhERjQwRTRDOTVGOUVCRjgxNDUzODcwNzM2OTk1 RTkxQkJCOTJGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADoEaeqTPVxSr2pcPUbA4CR5iGSh+GaDljIa 8azUkrRKCTEKEu/TPRCVER2hzxy36jLJz20pOpnzEhKSH2TiuS4UoJCi3dd5Y7LC PS69KnzfsIYK8p41nRZpxiBy9/hYL9acCjY2Dbz6/bh/FwasSe9llViffYMe8jMk 4UJ4vgSFcX3nCi6LYVuLSpzs6abZgs5YuWpLBzqjq9Qc9ALObsW7DgAMWLR1/S4h XM+CrRk0gwbgufYMbyRkjoZQQCUkiH9eVfMqgi487OtITsQ6aSP0Fn3sDoDjmnp9 W8MuhA8fATPUahcnjVpWAOleRhGcXuomceqXFx7TwWhgXD+Fn58= -----END CERTIFICATE-----Generated at Sat Aug 23 10:36:15 2025 by rpki-client