$ rpki-client -vvf repo-rpki.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/F8F2A2C885D477DE76A5B2E75D699D5C06240751.mft File: F8F2A2C885D477DE76A5B2E75D699D5C06240751.mft (raw, json) Hash identifier: R4efrtg8aWEpasc7pjNaEH81K0frRhtLNTVx2HjTuoA= Subject key identifier: A4:E0:B8:3F:E3:EE:79:42:BA:EC:22:32:FD:56:98:8A:0E:5D:A3:70 Authority key identifier: F8:F2:A2:C8:85:D4:77:DE:76:A5:B2:E7:5D:69:9D:5C:06:24:07:51 Certificate issuer: /CN=F8F2A2C885D477DE76A5B2E75D699D5C06240751 Certificate serial: 396F602679B5E84C52A738C7D7F0E2B8151C0B0A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8F2A2C885D477DE76A5B2E75D699D5C06240751.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/F8F2A2C885D477DE76A5B2E75D699D5C06240751.mft Manifest number: 047F Signing time: Wed 02 Jul 2025 12:51:46 +0000 Manifest this update: Wed 02 Jul 2025 12:46:46 +0000 Manifest next update: Sat 05 Jul 2025 23:42:46 +0000 Files and hashes: 1: 3130332e3136302e39342e302f32332d3233203d3e20313431353739.roa (hash: 4ujJx3862oYXI+kui8VPv/8wetRwESOHwDeVR8biwJY=) 2: 3130332e3136302e39352e302f32342d3234203d3e20313431353739.roa (hash: HKp1z82dwndkEh4Vdac5ps8RWvQhptPK64Rz93mARG4=) 3: F8F2A2C885D477DE76A5B2E75D699D5C06240751.crl (hash: FElGDQg5luegrT26W/oYOvE8JFPBGgAm5hOJCKBiZfg=) 4: 3130332e3136302e39342e302f32342d3234203d3e20313431353739.roa (hash: gijq71WUIKwqTkiUrcH4e0KYl0f3NugCOM107Gyg1TQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/F8F2A2C885D477DE76A5B2E75D699D5C06240751.crl rsync://repo-rpki.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/F8F2A2C885D477DE76A5B2E75D699D5C06240751.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8F2A2C885D477DE76A5B2E75D699D5C06240751.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 23:42:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:6f:60:26:79:b5:e8:4c:52:a7:38:c7:d7:f0:e2:b8:15:1c:0b:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8F2A2C885D477DE76A5B2E75D699D5C06240751 Validity Not Before: Jul 2 12:46:46 2025 GMT Not After : Jul 5 23:42:46 2025 GMT Subject: CN=A4E0B83FE3EE7942BAEC2232FD56988A0E5DA370 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:05:9f:7d:f8:c1:b6:0e:14:e1:56:62:9c:b0: 1a:de:34:f0:d3:d8:71:5a:6a:01:67:d2:f5:87:7a: 02:1b:8e:dd:b6:90:56:6f:cc:56:b2:80:31:4d:30: f0:15:69:93:77:78:5d:48:65:04:2a:14:a2:6f:69: a5:ba:73:6b:6d:68:45:82:f8:d2:b2:17:5e:a4:72: 85:95:f7:ff:d5:3e:05:91:a0:8a:f8:e8:1b:45:49: dd:79:6a:75:04:9f:18:6a:38:5f:15:99:0d:a4:16: 26:12:e5:5d:e7:06:14:f9:2b:23:d7:d1:12:54:fe: 08:88:19:0c:b1:5e:a2:b0:18:21:cf:e2:f6:50:cb: 59:1f:0e:18:a8:93:7a:57:86:db:ed:0c:4e:e5:50: 82:b1:b6:fd:36:1d:1a:e5:2e:90:76:14:4e:cc:d6: f7:bd:a1:97:ee:90:24:4f:97:a9:f5:c0:7d:ba:ed: ec:c0:c0:53:e5:c3:a1:20:a0:db:45:1f:eb:d2:e4: 13:2b:21:04:af:75:72:9b:86:20:25:a3:8b:cb:be: 9d:29:e9:1b:d8:66:4b:79:5c:c3:79:f9:86:58:80: 9a:a3:90:99:b1:95:e4:65:95:9d:b0:5d:b7:d7:a0: 90:72:be:34:58:ad:de:91:d9:bf:0c:ac:76:6c:b9: 1a:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:E0:B8:3F:E3:EE:79:42:BA:EC:22:32:FD:56:98:8A:0E:5D:A3:70 X509v3 Authority Key Identifier: keyid:F8:F2:A2:C8:85:D4:77:DE:76:A5:B2:E7:5D:69:9D:5C:06:24:07:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/F8F2A2C885D477DE76A5B2E75D699D5C06240751.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8F2A2C885D477DE76A5B2E75D699D5C06240751.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/F8F2A2C885D477DE76A5B2E75D699D5C06240751.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:77:3c:b2:4b:f5:ea:5d:74:96:28:3d:8e:ad:4a:c8:d1:66: 98:12:52:67:31:52:68:7c:3f:80:91:8b:22:69:d3:f9:d5:a1: 26:96:06:75:43:cf:5f:33:5a:5c:cc:bb:59:ed:96:1e:f5:8a: 87:0c:ee:c1:86:fb:fd:08:42:e1:13:eb:a0:1d:17:52:ad:54: 1b:51:fc:e3:db:b8:4d:c9:54:27:9f:d8:1e:64:07:3c:11:a7: 42:84:24:2a:86:b9:c3:82:5a:94:06:2f:29:77:2c:3e:40:23: c8:94:73:2c:5b:cb:cb:0b:7f:0b:1c:64:57:c1:86:f7:a0:0f: 48:7a:54:8d:1e:67:5d:87:d2:f4:05:76:d2:6d:b1:36:e1:85: 2e:4a:ad:ad:7e:b2:3d:7c:40:93:75:f3:89:8b:5f:78:ef:0b: 2a:b0:c5:6e:6f:35:cd:2c:fc:5f:63:0f:95:bd:75:fd:37:09: 88:82:a3:17:e5:fc:c5:d6:d4:91:72:e2:7b:e8:96:3b:2b:d2: d1:64:dc:3a:b7:cf:16:4a:bd:6e:5a:13:3f:69:85:52:2d:17: 43:36:f0:39:4c:38:85:41:6d:45:99:a3:a7:5d:32:f9:75:1e: 34:31:c6:42:c3:0f:c0:53:58:81:ae:dd:b7:72:b6:9e:a9:2b: b1:fd:4a:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOW9gJnm16ExSpzjH1/DiuBUcCwowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhGMkEyQzg4NUQ0NzdERTc2QTVCMkU3NUQ2OTlENUMw NjI0MDc1MTAeFw0yNTA3MDIxMjQ2NDZaFw0yNTA3MDUyMzQyNDZaMDMxMTAvBgNV BAMTKEE0RTBCODNGRTNFRTc5NDJCQUVDMjIzMkZENTY5ODhBMEU1REEzNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlBZ99+MG2DhThVmKcsBreNPDT 2HFaagFn0vWHegIbjt22kFZvzFaygDFNMPAVaZN3eF1IZQQqFKJvaaW6c2ttaEWC +NKyF16kcoWV9//VPgWRoIr46BtFSd15anUEnxhqOF8VmQ2kFiYS5V3nBhT5KyPX 0RJU/giIGQyxXqKwGCHP4vZQy1kfDhiok3pXhtvtDE7lUIKxtv02HRrlLpB2FE7M 1ve9oZfukCRPl6n1wH267ezAwFPlw6EgoNtFH+vS5BMrIQSvdXKbhiAlo4vLvp0p 6RvYZkt5XMN5+YZYgJqjkJmxleRllZ2wXbfXoJByvjRYrd6R2b8MrHZsuRqrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpOC4P+PueUK67CIy/VaYig5do3AwHwYDVR0j BBgwFoAU+PKiyIXUd952pbLnXWmdXAYkB1EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NTllNTY1OC1hYjEwLTQyOTctOTJmNC1mNmEyNjYzZTU0YzAvMC9GOEYyQTJDODg1 RDQ3N0RFNzZBNUIyRTc1RDY5OUQ1QzA2MjQwNzUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjhGMkEyQzg4NUQ0NzdERTc2QTVCMkU3NUQ2OTlENUMwNjI0 MDc1MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTU5ZTU2NTgtYWIxMC00Mjk3LTky ZjQtZjZhMjY2M2U1NGMwLzAvRjhGMkEyQzg4NUQ0NzdERTc2QTVCMkU3NUQ2OTlE NUMwNjI0MDc1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKt3PLJL9epddJYoPY6tSsjRZpgSUmcxUmh8 P4CRiyJp0/nVoSaWBnVDz18zWlzMu1ntlh71iocM7sGG+/0IQuET66AdF1KtVBtR /OPbuE3JVCef2B5kBzwRp0KEJCqGucOCWpQGLyl3LD5AI8iUcyxby8sLfwscZFfB hvegD0h6VI0eZ12H0vQFdtJtsTbhhS5Kra1+sj18QJN184mLX3jvCyqwxW5vNc0s /F9jD5W9df03CYiCoxfl/MXW1JFy4nvoljsr0tFk3Dq3zxZKvW5aEz9phVItF0M2 8DlMOIVBbUWZo6ddMvl1HjQxxkLDD8BTWIGu3bdytp6pK7H9Suc= -----END CERTIFICATE-----Generated at Thu Jul 3 23:00:36 2025 by rpki-client