$ rpki-client -vvf repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.mft File: F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.mft (raw, json) Hash identifier: sLyz3L45KP3AtWj1rxJIJkT4rp+kPND0qzMUao8SEkI= Subject key identifier: C5:E0:2E:B6:14:A5:B2:8A:0E:69:DF:1F:6E:99:6A:EB:34:8E:A8:DC Authority key identifier: F8:FA:AE:F9:7E:D3:DB:A7:D2:72:43:70:7C:7C:0D:16:05:89:6B:AF Certificate issuer: /CN=F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF Certificate serial: 530F5F7429FE4C7892B6CE6CCC73112E8AD0A1AE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.mft Manifest number: CB Signing time: Mon 30 Jun 2025 02:41:01 +0000 Manifest this update: Mon 30 Jun 2025 02:36:01 +0000 Manifest next update: Thu 03 Jul 2025 05:34:01 +0000 Files and hashes: 1: 3135372e32302e3133302e302f32342d3234203d3e20313532343134.roa (hash: yredKIZP9xr2lB528+R6ApvkXgeNpX2Bu3+xAbm9RU0=) 2: F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.crl (hash: 5b06Cx4txGx7dGMcB96kINO291PPw0/iMUNqkDbATtk=) 3: 3135372e32302e3133312e302f32342d3234203d3e20313532343134.roa (hash: W4ACU/xOnpQ+wB4eCIEuEDxQIvNhZYjdjmTdf9J25lk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.crl rsync://repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 05:34:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:0f:5f:74:29:fe:4c:78:92:b6:ce:6c:cc:73:11:2e:8a:d0:a1:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF Validity Not Before: Jun 30 02:36:01 2025 GMT Not After : Jul 3 05:34:01 2025 GMT Subject: CN=C5E02EB614A5B28A0E69DF1F6E996AEB348EA8DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:b8:6e:78:69:38:55:4a:de:26:ed:48:02:71: 51:6a:d2:ad:83:b7:01:56:17:a1:15:aa:77:5a:ba: 29:65:3c:1c:99:21:1c:b5:1d:25:db:c3:9e:4b:dd: 8d:ef:84:a5:9e:14:ee:d1:10:32:7b:27:d1:90:00: 81:00:12:63:2d:ee:7c:d3:09:55:34:d3:3b:34:36: 2a:ec:1e:33:f1:ae:e9:73:ce:5e:29:f5:d7:6b:e8: 42:ea:89:be:48:7c:95:e9:d4:f8:f6:04:b1:6b:aa: 06:f0:6f:1d:b8:c8:28:de:45:e7:ee:32:0f:fc:89: 82:51:87:f0:81:bd:7b:4e:12:47:27:ea:cc:57:17: 8e:16:95:15:83:a8:de:d2:5f:99:98:c7:30:e2:27: 82:9d:99:0d:e5:52:fa:59:3a:f9:c8:cc:77:e2:e8: 62:2c:66:84:66:d3:2c:a0:28:42:0c:17:a9:d5:b9: 7f:a3:ab:66:a3:d1:45:d6:b3:0c:bd:ab:4a:d0:80: 8a:52:73:f9:f4:3c:e0:65:fd:12:88:c9:d3:b7:ce: 58:4f:bc:cb:46:8c:d9:6e:73:6c:45:9d:6f:d7:11: 01:dc:0b:77:d4:dc:f7:36:93:53:06:d9:bb:1d:fc: db:00:e0:0e:19:ce:ec:86:85:bd:32:7d:10:ae:d3: 71:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:E0:2E:B6:14:A5:B2:8A:0E:69:DF:1F:6E:99:6A:EB:34:8E:A8:DC X509v3 Authority Key Identifier: keyid:F8:FA:AE:F9:7E:D3:DB:A7:D2:72:43:70:7C:7C:0D:16:05:89:6B:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:4c:66:a1:62:ab:26:91:f4:81:f8:61:7f:03:0c:53:01:16: 84:0c:5f:f4:bb:5b:6f:3c:4e:10:eb:e7:76:be:6e:7a:a4:58: 4a:93:0c:28:e2:ed:03:49:b7:1e:e2:59:a0:3f:05:71:c4:ad: f0:ab:a9:e1:a1:60:b0:74:17:94:74:3a:d4:3d:9a:1f:82:12: fe:4f:ed:d7:41:59:cc:12:ec:9d:62:0d:58:4d:c8:3f:22:ac: d5:02:e5:8e:1e:03:c0:7f:bc:9a:d3:e1:73:6c:5a:62:c5:8a: 03:23:c5:1f:c9:4f:2e:f9:6f:0f:49:98:ef:dd:1b:38:43:03: 6d:05:06:d1:ee:cd:90:95:36:1c:0f:cf:01:f7:28:c0:14:3c: c1:7f:79:5d:e3:83:68:89:dc:b1:33:8d:59:cb:c1:49:f4:d3: 51:10:b3:44:72:5d:91:2d:2c:31:8c:36:5b:bd:1e:40:4c:b9: d1:bb:48:b5:6f:3d:0b:27:31:3a:cb:fd:32:30:46:e4:76:9e: 9e:cc:83:8e:45:a5:b4:15:d0:39:da:76:d8:aa:e3:8d:4a:cc: 57:ef:14:05:c6:07:d5:ae:cc:c7:d5:b7:38:c4:3f:01:59:37: a8:db:42:a2:3e:51:ff:3a:8c:a6:b8:d9:a8:1d:06:5f:8b:9d: bb:77:c7:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUw9fdCn+THiSts5szHMRLorQoa4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhGQUFFRjk3RUQzREJBN0QyNzI0MzcwN0M3QzBEMTYw NTg5NkJBRjAeFw0yNTA2MzAwMjM2MDFaFw0yNTA3MDMwNTM0MDFaMDMxMTAvBgNV BAMTKEM1RTAyRUI2MTRBNUIyOEEwRTY5REYxRjZFOTk2QUVCMzQ4RUE4REMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVuG54aThVSt4m7UgCcVFq0q2D twFWF6EVqndauillPByZIRy1HSXbw55L3Y3vhKWeFO7REDJ7J9GQAIEAEmMt7nzT CVU00zs0NirsHjPxrulzzl4p9ddr6ELqib5IfJXp1Pj2BLFrqgbwbx24yCjeRefu Mg/8iYJRh/CBvXtOEkcn6sxXF44WlRWDqN7SX5mYxzDiJ4KdmQ3lUvpZOvnIzHfi 6GIsZoRm0yygKEIMF6nVuX+jq2aj0UXWswy9q0rQgIpSc/n0POBl/RKIydO3zlhP vMtGjNluc2xFnW/XEQHcC3fU3Pc2k1MG2bsd/NsA4A4ZzuyGhb0yfRCu03FRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxeAuthSlsooOad8fbplq6zSOqNwwHwYDVR0j BBgwFoAU+Pqu+X7T26fSckNwfHwNFgWJa68wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ODZmZjI2NC1mZjI1LTRmZTYtODZlZi1kODRiN2QyODgzNTQvMC9GOEZBQUVGOTdF RDNEQkE3RDI3MjQzNzA3QzdDMEQxNjA1ODk2QkFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjhGQUFFRjk3RUQzREJBN0QyNzI0MzcwN0M3QzBEMTYwNTg5 NkJBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzg2ZmYyNjQtZmYyNS00ZmU2LTg2 ZWYtZDg0YjdkMjg4MzU0LzAvRjhGQUFFRjk3RUQzREJBN0QyNzI0MzcwN0M3QzBE MTYwNTg5NkJBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIRMZqFiqyaR9IH4YX8DDFMBFoQMX/S7W288 ThDr53a+bnqkWEqTDCji7QNJtx7iWaA/BXHErfCrqeGhYLB0F5R0OtQ9mh+CEv5P 7ddBWcwS7J1iDVhNyD8irNUC5Y4eA8B/vJrT4XNsWmLFigMjxR/JTy75bw9JmO/d GzhDA20FBtHuzZCVNhwPzwH3KMAUPMF/eV3jg2iJ3LEzjVnLwUn001EQs0RyXZEt LDGMNlu9HkBMudG7SLVvPQsnMTrL/TIwRuR2np7Mg45FpbQV0Dnadtiq441KzFfv FAXGB9WuzMfVtzjEPwFZN6jbQqI+Uf86jKa42agdBl+Lnbt3x0A= -----END CERTIFICATE-----Generated at Mon Jun 30 04:09:23 2025 by rpki-client