$ rpki-client -vvf repo-rpki.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/F8DF40E4C95F9EBF81453870736995E91BBB92F7.mft File: F8DF40E4C95F9EBF81453870736995E91BBB92F7.mft (raw, json) Hash identifier: +3FuGPa/YmlDbqIFEolGZu5EZfEewdpWDvpGGRHe1/0= Subject key identifier: 7A:10:5E:5B:A6:57:3C:12:5B:42:97:CE:5C:05:34:98:94:EA:84:48 Authority key identifier: F8:DF:40:E4:C9:5F:9E:BF:81:45:38:70:73:69:95:E9:1B:BB:92:F7 Certificate issuer: /CN=F8DF40E4C95F9EBF81453870736995E91BBB92F7 Certificate serial: 241D64D8B67636B1BC3E3B9ACCBF249E0E8B9434 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8DF40E4C95F9EBF81453870736995E91BBB92F7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/F8DF40E4C95F9EBF81453870736995E91BBB92F7.mft Manifest number: 0255 Signing time: Mon 30 Jun 2025 04:40:02 +0000 Manifest this update: Mon 30 Jun 2025 04:35:01 +0000 Manifest next update: Thu 03 Jul 2025 13:23:01 +0000 Files and hashes: 1: 3130332e3234302e3130382e302f32322d3234203d3e203538383139.roa (hash: XeC/h72IOu7dA+NCUWie+KTWNqBhpQyXbuk3uFJs7XQ=) 2: F8DF40E4C95F9EBF81453870736995E91BBB92F7.crl (hash: IEACEaQhpqvc4Vvnmya1irk2YVKjOlMllP+63SZO7V8=) 3: 3130332e3234302e3131312e302f32342d3234203d3e203538383139.roa (hash: qsAy9+8K3YocUUVABAHpwtAAQ9W+nqV1JTT37/pzGo4=) 4: 3130332e3234302e3130392e302f32342d3234203d3e203538383139.roa (hash: 5nvoiGj4OjH2+HTzWQu4bmTNWJXJYHQTVDrsbt8AseA=) 5: 3130332e3234302e3131302e302f32342d3234203d3e203538383139.roa (hash: kInQZ6+a0szsE+89xOKFo2QCmfmxhWma36K3DO0bgYU=) 6: 3130332e3234302e3130382e302f32342d3234203d3e203538383139.roa (hash: D+zqgakWFBdHD5/mV/z3ocZSo/C1/ZxuuNBMHS2Lcrc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/F8DF40E4C95F9EBF81453870736995E91BBB92F7.crl rsync://repo-rpki.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/F8DF40E4C95F9EBF81453870736995E91BBB92F7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8DF40E4C95F9EBF81453870736995E91BBB92F7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 13:23:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:1d:64:d8:b6:76:36:b1:bc:3e:3b:9a:cc:bf:24:9e:0e:8b:94:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8DF40E4C95F9EBF81453870736995E91BBB92F7 Validity Not Before: Jun 30 04:35:01 2025 GMT Not After : Jul 3 13:23:01 2025 GMT Subject: CN=7A105E5BA6573C125B4297CE5C05349894EA8448 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:15:5e:42:88:f2:b7:e8:e7:51:11:69:fd:2d: ef:32:7c:14:3b:ae:ab:91:10:10:33:8c:35:49:fa: 97:7a:5d:49:18:d4:df:55:91:44:48:39:b3:2c:0e: b7:58:04:9f:5a:b1:22:65:18:8d:b6:d2:4c:76:69: ff:b8:f4:59:e2:4e:dd:ce:9d:03:d9:b0:3e:2f:ff: 39:05:73:53:dd:f9:fb:b4:39:fa:c7:67:9e:41:4b: ae:c3:bd:66:9f:a5:8e:f5:86:5d:4c:ff:88:5a:ea: 3c:0f:f3:11:5b:4d:29:76:ae:84:57:f0:3e:65:cb: d2:74:6a:a5:d3:30:85:47:06:09:04:35:c2:6a:7f: e9:17:95:60:a8:99:90:47:46:7f:e7:06:45:62:07: 09:62:f0:3b:3d:f4:eb:42:09:61:54:01:28:0f:a4: ce:b8:4c:cf:04:c2:63:4a:f5:51:f9:5b:66:f7:66: 3e:fa:34:b0:d7:7b:2c:99:0f:20:90:10:de:b2:61: e2:e6:ca:b6:13:e9:78:08:a9:08:6f:7a:10:d1:32: 4d:55:a6:cb:ad:07:1c:1e:3e:e2:ba:95:69:ba:82: 86:71:a0:76:14:1e:b9:cd:ce:63:53:53:23:a1:63: 67:d0:8c:b4:5d:0b:db:de:5d:91:ba:57:45:39:73: cb:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:10:5E:5B:A6:57:3C:12:5B:42:97:CE:5C:05:34:98:94:EA:84:48 X509v3 Authority Key Identifier: keyid:F8:DF:40:E4:C9:5F:9E:BF:81:45:38:70:73:69:95:E9:1B:BB:92:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/F8DF40E4C95F9EBF81453870736995E91BBB92F7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8DF40E4C95F9EBF81453870736995E91BBB92F7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/F8DF40E4C95F9EBF81453870736995E91BBB92F7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:83:a2:9f:dc:77:e7:b0:26:d9:29:19:b5:e4:9e:4b:a4:b6: 1f:d0:b9:79:14:4b:7d:93:b5:ca:b8:6e:c2:26:ac:b0:9a:83: ff:22:9b:71:9a:f0:79:a4:6d:56:80:d8:3e:47:5f:f9:bb:a6: 02:4d:88:cd:81:02:6c:57:63:dc:a5:01:e7:9b:4d:7b:c1:1c: 2f:cb:97:fe:3d:82:81:50:df:1d:75:82:fe:30:dc:48:74:d8: d2:e7:3c:20:94:eb:64:0a:68:9c:75:3c:7f:05:07:87:31:31: cb:1e:6a:f0:12:d2:b3:e1:fb:8c:47:8b:59:ab:5e:b0:01:40: 11:9d:d1:95:17:a4:7c:a4:b2:bd:73:da:11:74:cb:ba:3e:36: cd:84:11:a7:cb:b6:e9:56:97:4f:9d:6d:86:41:a7:6c:8d:62: 70:f7:e4:a7:67:0c:bb:64:bf:4b:5f:03:9c:76:c0:ab:4f:2f: 04:de:7d:a9:08:e6:d5:43:0e:f4:08:59:9f:59:b5:d9:ab:60: 25:6a:dd:71:af:71:f6:43:7c:1e:23:a2:e4:ec:ec:da:e6:ae: 36:f6:44:1e:4b:78:ee:8e:13:ca:61:44:ea:66:93:ca:bd:4c: 60:01:7d:a9:c1:46:12:ee:ce:53:85:da:1b:2d:df:79:63:27: ba:97:c5:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJB1k2LZ2NrG8PjuazL8kng6LlDQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhERjQwRTRDOTVGOUVCRjgxNDUzODcwNzM2OTk1RTkx QkJCOTJGNzAeFw0yNTA2MzAwNDM1MDFaFw0yNTA3MDMxMzIzMDFaMDMxMTAvBgNV BAMTKDdBMTA1RTVCQTY1NzNDMTI1QjQyOTdDRTVDMDUzNDk4OTRFQTg0NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXFV5CiPK36OdREWn9Le8yfBQ7 rquREBAzjDVJ+pd6XUkY1N9VkURIObMsDrdYBJ9asSJlGI220kx2af+49FniTt3O nQPZsD4v/zkFc1Pd+fu0OfrHZ55BS67DvWafpY71hl1M/4ha6jwP8xFbTSl2roRX 8D5ly9J0aqXTMIVHBgkENcJqf+kXlWComZBHRn/nBkViBwli8Ds99OtCCWFUASgP pM64TM8EwmNK9VH5W2b3Zj76NLDXeyyZDyCQEN6yYeLmyrYT6XgIqQhvehDRMk1V psutBxwePuK6lWm6goZxoHYUHrnNzmNTUyOhY2fQjLRdC9veXZG6V0U5c8tJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUehBeW6ZXPBJbQpfOXAU0mJTqhEgwHwYDVR0j BBgwFoAU+N9A5Mlfnr+BRThwc2mV6Ru7kvcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDAzYWYwMS1mMjM5LTRhMWYtODFjZC00MTA2YmViYjJhMjIvMC9GOERGNDBFNEM5 NUY5RUJGODE0NTM4NzA3MzY5OTVFOTFCQkI5MkY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjhERjQwRTRDOTVGOUVCRjgxNDUzODcwNzM2OTk1RTkxQkJC OTJGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQwM2FmMDEtZjIzOS00YTFmLTgx Y2QtNDEwNmJlYmIyYTIyLzAvRjhERjQwRTRDOTVGOUVCRjgxNDUzODcwNzM2OTk1 RTkxQkJCOTJGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJGDop/cd+ewJtkpGbXknkukth/QuXkUS32T tcq4bsImrLCag/8im3Ga8HmkbVaA2D5HX/m7pgJNiM2BAmxXY9ylAeebTXvBHC/L l/49goFQ3x11gv4w3Eh02NLnPCCU62QKaJx1PH8FB4cxMcseavAS0rPh+4xHi1mr XrABQBGd0ZUXpHyksr1z2hF0y7o+Ns2EEafLtulWl0+dbYZBp2yNYnD35KdnDLtk v0tfA5x2wKtPLwTefakI5tVDDvQIWZ9ZtdmrYCVq3XGvcfZDfB4jouTs7Nrmrjb2 RB5LeO6OE8phROpmk8q9TGABfanBRhLuzlOF2hst33ljJ7qXxRg= -----END CERTIFICATE-----Generated at Tue Jul 1 11:58:38 2025 by rpki-client