$ rpki-client -vvf repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.mft File: 0FAFA39AA3875A4CF63BCF7E873087927B499D2F.mft (raw, json) Hash identifier: IO7tW8fwUgG/CeXXcijAFR5dv2WPOcwLYuLyMeAflwM= Subject key identifier: 71:8D:18:8C:0C:76:54:F2:A6:B6:A2:E1:7B:B8:43:96:27:59:64:A6 Authority key identifier: 0F:AF:A3:9A:A3:87:5A:4C:F6:3B:CF:7E:87:30:87:92:7B:49:9D:2F Certificate issuer: /CN=0FAFA39AA3875A4CF63BCF7E873087927B499D2F Certificate serial: 32A6DAA50D82431E73DA2C655CED299D1D1AB363 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.mft Manifest number: 01F1 Signing time: Wed 02 Jul 2025 01:51:12 +0000 Manifest this update: Wed 02 Jul 2025 01:46:12 +0000 Manifest next update: Sat 05 Jul 2025 05:40:12 +0000 Files and hashes: 1: 323030313a6466313a326430303a3a2f34382d3438203d3e20313336313132.roa (hash: uiZFjhvQ9ciRjJRK7vZMZHXsl+bdrRUmgcpl6MwjW4M=) 2: 3130332e39322e3233322e302f32332d3233203d3e20313336313132.roa (hash: 5yT7jld1qwMjQ1Wxg8xXgEk9H98NQ/9bvOuTLpVK3wE=) 3: 0FAFA39AA3875A4CF63BCF7E873087927B499D2F.crl (hash: OGdpXo/VCnnY3saQS2uE22cQJwU3B6Xdu/S9ufzsVLA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.crl rsync://repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 05:40:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:a6:da:a5:0d:82:43:1e:73:da:2c:65:5c:ed:29:9d:1d:1a:b3:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FAFA39AA3875A4CF63BCF7E873087927B499D2F Validity Not Before: Jul 2 01:46:12 2025 GMT Not After : Jul 5 05:40:12 2025 GMT Subject: CN=718D188C0C7654F2A6B6A2E17BB84396275964A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ac:b1:f3:f2:5a:bf:eb:38:40:79:93:18:d9: 05:64:6e:63:c0:37:c2:21:fd:01:16:0a:b1:c7:e6: 2d:84:b8:6a:65:53:c8:5d:65:4a:4f:75:7b:75:70: 1a:2f:07:5f:86:c8:dd:45:57:4a:b5:41:cd:26:2b: cf:7b:fe:b0:48:07:a1:b6:f4:25:57:34:e6:04:3a: 84:5f:24:d1:eb:89:73:10:f0:0d:2c:48:3b:2f:e7: d0:e8:1c:02:59:f6:27:bd:51:7f:cd:ce:74:6b:2a: d9:ae:e5:8c:aa:67:2b:6c:c5:6d:de:88:1b:ae:47: 9c:1b:45:55:64:86:14:48:47:5e:ef:86:8c:eb:b8: 8b:a2:c7:d9:8b:32:98:c2:f2:92:41:29:d9:32:61: af:3a:53:7a:41:ca:1f:0c:25:b0:a7:18:6b:96:56: 6e:85:9f:d6:da:1b:e9:0e:ee:1e:3e:30:b4:c5:59: ea:a1:38:f3:45:2e:34:c7:09:54:6f:56:7f:b8:75: 2c:a1:cc:a2:c3:a3:a8:73:c4:96:d0:30:3f:eb:21: 26:1e:31:c7:38:bd:62:cd:0f:d7:f6:f9:9d:1d:17: 44:09:87:23:77:a3:8b:ac:03:19:c4:32:7b:04:9e: e6:cf:3a:f0:a4:91:7a:5e:8b:8e:83:8a:49:65:5b: 6c:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:8D:18:8C:0C:76:54:F2:A6:B6:A2:E1:7B:B8:43:96:27:59:64:A6 X509v3 Authority Key Identifier: keyid:0F:AF:A3:9A:A3:87:5A:4C:F6:3B:CF:7E:87:30:87:92:7B:49:9D:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:c3:79:63:06:7f:2b:12:61:69:68:06:72:3f:04:48:9b:9e: d2:c9:0c:3e:0d:04:f4:27:9e:d0:1d:37:e4:8b:fd:04:80:10: eb:b2:30:5d:80:3d:73:ae:96:fa:ba:a6:b2:0c:7e:38:de:15: 0b:21:9a:39:05:c6:6a:cc:15:0d:7e:7e:6b:cb:0c:a0:18:b2: 38:10:cd:ae:23:b8:e2:6b:0f:5c:0b:30:15:87:f2:c1:08:db: 5f:ea:d4:ff:56:aa:c9:55:88:a1:85:4c:5c:64:0c:0d:18:cd: 7f:80:a3:fa:90:aa:aa:57:87:89:5b:9e:6d:84:8c:ed:f3:24: 41:bb:ab:0c:0b:55:13:7b:f8:f1:76:b1:5b:b7:df:0f:23:6b: 21:64:5c:f8:78:6f:6d:fa:60:8b:a2:78:00:8b:fc:3c:24:bb: 03:cd:46:33:cc:b7:f9:98:2f:17:e9:c7:49:02:66:fe:46:22: a2:3d:ec:74:59:30:a3:25:00:30:fb:40:2f:da:85:90:e9:2d: b6:93:58:05:1d:8f:d1:20:1f:10:c1:f4:37:a4:bc:7c:dd:73: f0:5a:90:cb:3b:c3:22:85:98:f4:b8:30:5c:48:e6:d0:3f:54: 3c:7e:94:a7:fe:68:19:60:c8:dc:f3:f6:51:e3:72:d1:26:c1: 61:3c:15:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMqbapQ2CQx5z2ixlXO0pnR0as2MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZBRkEzOUFBMzg3NUE0Q0Y2M0JDRjdFODczMDg3OTI3 QjQ5OUQyRjAeFw0yNTA3MDIwMTQ2MTJaFw0yNTA3MDUwNTQwMTJaMDMxMTAvBgNV BAMTKDcxOEQxODhDMEM3NjU0RjJBNkI2QTJFMTdCQjg0Mzk2Mjc1OTY0QTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTrLHz8lq/6zhAeZMY2QVkbmPA N8Ih/QEWCrHH5i2EuGplU8hdZUpPdXt1cBovB1+GyN1FV0q1Qc0mK897/rBIB6G2 9CVXNOYEOoRfJNHriXMQ8A0sSDsv59DoHAJZ9ie9UX/NznRrKtmu5YyqZytsxW3e iBuuR5wbRVVkhhRIR17vhozruIuix9mLMpjC8pJBKdkyYa86U3pByh8MJbCnGGuW Vm6Fn9baG+kO7h4+MLTFWeqhOPNFLjTHCVRvVn+4dSyhzKLDo6hzxJbQMD/rISYe Mcc4vWLND9f2+Z0dF0QJhyN3o4usAxnEMnsEnubPOvCkkXpei46DikllW2zDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcY0YjAx2VPKmtqLhe7hDlidZZKYwHwYDVR0j BBgwFoAUD6+jmqOHWkz2O89+hzCHkntJnS8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MGUxMWZmYy1lNzVhLTRiZjQtODQ0OC1jNjhlMjAzMzVlZTgvMC8wRkFGQTM5QUEz ODc1QTRDRjYzQkNGN0U4NzMwODc5MjdCNDk5RDJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEZBRkEzOUFBMzg3NUE0Q0Y2M0JDRjdFODczMDg3OTI3QjQ5 OUQyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjBlMTFmZmMtZTc1YS00YmY0LTg0 NDgtYzY4ZTIwMzM1ZWU4LzAvMEZBRkEzOUFBMzg3NUE0Q0Y2M0JDRjdFODczMDg3 OTI3QjQ5OUQyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIzDeWMGfysSYWloBnI/BEibntLJDD4NBPQn ntAdN+SL/QSAEOuyMF2APXOulvq6prIMfjjeFQshmjkFxmrMFQ1+fmvLDKAYsjgQ za4juOJrD1wLMBWH8sEI21/q1P9WqslViKGFTFxkDA0YzX+Ao/qQqqpXh4lbnm2E jO3zJEG7qwwLVRN7+PF2sVu33w8jayFkXPh4b236YIuieACL/DwkuwPNRjPMt/mY Lxfpx0kCZv5GIqI97HRZMKMlADD7QC/ahZDpLbaTWAUdj9EgHxDB9DekvHzdc/Ba kMs7wyKFmPS4MFxI5tA/VDx+lKf+aBlgyNzz9lHjctEmwWE8FT4= -----END CERTIFICATE-----Generated at Wed Jul 2 04:05:47 2025 by rpki-client