$ rpki-client -vvf repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.mft File: F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.mft (raw, json) Hash identifier: LdkCUrC7TQ/EGqzBr36VF5VyqEuu2kPXWdBhzT18upM= Subject key identifier: 88:F7:60:88:8C:66:C6:72:5F:4C:39:BE:87:4A:2C:CD:15:0C:52:F7 Authority key identifier: F8:FA:AE:F9:7E:D3:DB:A7:D2:72:43:70:7C:7C:0D:16:05:89:6B:AF Certificate issuer: /CN=F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF Certificate serial: 1F5D67C21A1EF0AAF2AD5439C4DDE1B312699FB0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.mft Manifest number: E3 Signing time: Fri 22 Aug 2025 03:31:02 +0000 Manifest this update: Fri 22 Aug 2025 03:26:02 +0000 Manifest next update: Mon 25 Aug 2025 13:06:02 +0000 Files and hashes: 1: F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.crl (hash: X2kf+CQtkLTqqwiYz4pneZ9yFgY+yzrttGZd36KJ3Eg=) 2: 3135372e32302e3133312e302f32342d3234203d3e20313532343134.roa (hash: W4ACU/xOnpQ+wB4eCIEuEDxQIvNhZYjdjmTdf9J25lk=) 3: 3135372e32302e3133302e302f32342d3234203d3e20313532343134.roa (hash: yredKIZP9xr2lB528+R6ApvkXgeNpX2Bu3+xAbm9RU0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.crl rsync://repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 13:06:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:5d:67:c2:1a:1e:f0:aa:f2:ad:54:39:c4:dd:e1:b3:12:69:9f:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF Validity Not Before: Aug 22 03:26:02 2025 GMT Not After : Aug 25 13:06:02 2025 GMT Subject: CN=88F760888C66C6725F4C39BE874A2CCD150C52F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:10:6f:7a:2e:81:d8:a6:0b:fb:7b:f7:91:af: a5:66:5e:40:65:2f:27:c4:87:46:be:30:ea:99:a0: 3e:38:f8:28:28:6b:e2:1a:ce:5c:d5:a3:a5:8b:1a: dc:17:c1:d1:31:ad:19:ad:61:4a:1e:57:23:07:31: 57:ea:21:c7:7d:fb:f7:9b:0f:dd:67:9f:e7:2f:1f: 4c:e6:35:c4:b1:2c:fa:13:cc:08:71:27:3b:05:3b: 4b:3d:1d:0d:80:9d:62:36:a5:32:1e:94:81:05:91: 2d:3a:de:b1:ae:47:ad:d9:98:e9:7b:9f:f7:2c:10: 53:0a:bb:70:ff:b2:12:ab:cb:a1:ff:db:65:cf:38: ab:f3:40:90:65:a8:b8:a8:d0:6a:42:12:fd:d7:96: e3:5e:07:79:f5:67:56:1a:3f:be:4f:38:1d:c8:57: c1:0d:e5:ed:3e:21:b9:fc:6a:c2:2d:bf:57:21:c8: 75:03:37:80:bf:83:55:63:f5:1c:b4:0b:70:bb:fc: 29:79:6f:6a:9c:7a:dd:ea:d1:4b:07:45:40:21:1b: 26:77:81:56:da:1b:d6:56:f4:b2:dc:5b:22:b9:99: 01:c9:54:bd:d6:3e:3b:33:89:50:91:32:22:a2:a1: 4e:42:4f:eb:63:3b:44:0f:cc:43:20:9a:47:bc:ed: 89:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:F7:60:88:8C:66:C6:72:5F:4C:39:BE:87:4A:2C:CD:15:0C:52:F7 X509v3 Authority Key Identifier: keyid:F8:FA:AE:F9:7E:D3:DB:A7:D2:72:43:70:7C:7C:0D:16:05:89:6B:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:1c:76:ba:c5:1f:81:bc:55:ca:57:6b:d2:f3:aa:15:ab:0f: 58:c8:30:6b:5c:4b:2d:47:85:04:0c:0c:52:ed:f7:89:ea:8b: 82:a4:99:56:75:48:ad:1f:8c:d3:5c:df:28:69:5d:24:81:72: a5:11:27:f1:ae:5b:18:3f:07:b5:6c:e2:f9:cb:b0:be:a1:fc: ae:a3:f1:65:61:c6:41:59:ab:bf:9f:fa:c7:25:35:1f:2d:f1: e7:c2:e1:f3:6e:c1:33:a3:98:e9:71:c7:21:11:21:05:44:aa: e9:0d:c9:58:c8:4f:d4:2c:30:2c:25:4e:36:ea:08:c4:b3:50: f3:2b:00:5b:b7:2d:df:d6:4f:aa:54:1d:05:81:c5:33:18:2f: d9:22:e5:6d:33:6c:5d:41:1b:4f:f2:97:ab:92:ab:e6:db:6c: 55:24:43:13:f9:9d:e3:9e:b7:6e:55:44:41:38:ad:9f:8e:4d: bd:38:c2:a3:a6:8f:bf:5e:25:35:7c:29:b2:9f:9d:05:1e:34: 6c:6b:ff:86:31:f4:65:e1:f4:2f:5e:ce:a1:e7:b7:b4:2e:cd: 03:61:49:74:1f:6e:72:b3:21:9d:91:04:06:9f:25:83:f9:51: 6d:37:1d:21:6e:c1:01:69:dd:7e:f1:67:e9:3e:7b:0a:0b:ee: 35:8c:ea:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH11nwhoe8KryrVQ5xN3hsxJpn7AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhGQUFFRjk3RUQzREJBN0QyNzI0MzcwN0M3QzBEMTYw NTg5NkJBRjAeFw0yNTA4MjIwMzI2MDJaFw0yNTA4MjUxMzA2MDJaMDMxMTAvBgNV BAMTKDg4Rjc2MDg4OEM2NkM2NzI1RjRDMzlCRTg3NEEyQ0NEMTUwQzUyRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfEG96LoHYpgv7e/eRr6VmXkBl LyfEh0a+MOqZoD44+Cgoa+IazlzVo6WLGtwXwdExrRmtYUoeVyMHMVfqIcd9+/eb D91nn+cvH0zmNcSxLPoTzAhxJzsFO0s9HQ2AnWI2pTIelIEFkS063rGuR63ZmOl7 n/csEFMKu3D/shKry6H/22XPOKvzQJBlqLio0GpCEv3XluNeB3n1Z1YaP75POB3I V8EN5e0+Ibn8asItv1chyHUDN4C/g1Vj9Ry0C3C7/Cl5b2qcet3q0UsHRUAhGyZ3 gVbaG9ZW9LLcWyK5mQHJVL3WPjsziVCRMiKioU5CT+tjO0QPzEMgmke87YkvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiPdgiIxmxnJfTDm+h0oszRUMUvcwHwYDVR0j BBgwFoAU+Pqu+X7T26fSckNwfHwNFgWJa68wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ODZmZjI2NC1mZjI1LTRmZTYtODZlZi1kODRiN2QyODgzNTQvMC9GOEZBQUVGOTdF RDNEQkE3RDI3MjQzNzA3QzdDMEQxNjA1ODk2QkFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjhGQUFFRjk3RUQzREJBN0QyNzI0MzcwN0M3QzBEMTYwNTg5 NkJBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzg2ZmYyNjQtZmYyNS00ZmU2LTg2 ZWYtZDg0YjdkMjg4MzU0LzAvRjhGQUFFRjk3RUQzREJBN0QyNzI0MzcwN0M3QzBE MTYwNTg5NkJBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADMcdrrFH4G8VcpXa9LzqhWrD1jIMGtcSy1H hQQMDFLt94nqi4KkmVZ1SK0fjNNc3yhpXSSBcqURJ/GuWxg/B7Vs4vnLsL6h/K6j 8WVhxkFZq7+f+sclNR8t8efC4fNuwTOjmOlxxyERIQVEqukNyVjIT9QsMCwlTjbq CMSzUPMrAFu3Ld/WT6pUHQWBxTMYL9ki5W0zbF1BG0/yl6uSq+bbbFUkQxP5neOe t25VREE4rZ+OTb04wqOmj79eJTV8KbKfnQUeNGxr/4Yx9GXh9C9ezqHnt7QuzQNh SXQfbnKzIZ2RBAafJYP5UW03HSFuwQFp3X7xZ+k+ewoL7jWM6og= -----END CERTIFICATE-----Generated at Sat Aug 23 19:29:42 2025 by rpki-client