$ rpki-client -vvf repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.mft File: 0FAFA39AA3875A4CF63BCF7E873087927B499D2F.mft (raw, json) Hash identifier: mxs2shgxX5XpCKhfxrmQNX0VH1l4oQ5Xr31FvpQxAG8= Subject key identifier: 37:EE:C7:12:E2:8D:7F:8F:6F:02:35:86:F4:F1:09:CC:00:94:CF:B9 Authority key identifier: 0F:AF:A3:9A:A3:87:5A:4C:F6:3B:CF:7E:87:30:87:92:7B:49:9D:2F Certificate issuer: /CN=0FAFA39AA3875A4CF63BCF7E873087927B499D2F Certificate serial: 53FC3EC7F8468C28413932C4657C4A54AA554E86 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.mft Manifest number: 0208 Signing time: Fri 22 Aug 2025 23:21:13 +0000 Manifest this update: Fri 22 Aug 2025 23:16:13 +0000 Manifest next update: Tue 26 Aug 2025 03:48:13 +0000 Files and hashes: 1: 3130332e39322e3233322e302f32332d3233203d3e20313336313132.roa (hash: 5yT7jld1qwMjQ1Wxg8xXgEk9H98NQ/9bvOuTLpVK3wE=) 2: 323030313a6466313a326430303a3a2f34382d3438203d3e20313336313132.roa (hash: uiZFjhvQ9ciRjJRK7vZMZHXsl+bdrRUmgcpl6MwjW4M=) 3: 0FAFA39AA3875A4CF63BCF7E873087927B499D2F.crl (hash: /8yIdyYvO0CFZcEdr2629yyEervNEnUmeqImMW6ejtM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.crl rsync://repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 03:48:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:fc:3e:c7:f8:46:8c:28:41:39:32:c4:65:7c:4a:54:aa:55:4e:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FAFA39AA3875A4CF63BCF7E873087927B499D2F Validity Not Before: Aug 22 23:16:13 2025 GMT Not After : Aug 26 03:48:13 2025 GMT Subject: CN=37EEC712E28D7F8F6F023586F4F109CC0094CFB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:77:ca:e7:a7:eb:21:53:e5:34:f6:64:18:5a: 2d:72:75:da:c8:30:ac:74:4c:73:5b:10:71:26:02: 9c:66:ca:0f:ae:a5:ce:ec:b1:6c:a3:f4:d0:35:8b: e5:07:e6:bd:3e:b3:ca:68:83:36:d2:48:d5:b8:31: 5b:8a:d5:9b:70:39:51:f9:79:2b:fe:96:a4:a6:8a: a2:79:42:45:3e:1b:64:41:2c:ca:68:b6:34:68:eb: 9c:51:9a:53:fe:c5:c8:6c:ac:63:48:5d:77:46:c3: 8b:dd:56:45:65:4e:ec:fd:06:c1:78:8e:2d:f3:8e: 63:2e:0c:de:7a:74:c5:73:48:63:ea:e3:c4:48:09: 63:78:6d:f7:4a:44:f6:d0:ad:c9:f1:03:34:74:f7: bf:48:e0:1c:34:2b:4a:ee:a7:77:d3:b5:a8:3e:2b: be:2d:ab:d3:dc:18:bd:60:11:91:aa:20:20:bf:af: ac:6b:65:20:c3:77:44:7d:16:89:65:e5:0c:2c:78: a2:a3:d6:fe:9b:a2:74:59:d5:eb:00:42:bc:77:11: 81:76:b9:56:ea:4d:ce:a1:9c:b8:93:14:d0:a9:24: c8:97:d1:7e:da:37:c2:74:e8:45:92:99:e6:a6:d3: e8:46:34:17:39:d9:14:cb:14:02:d3:66:e7:59:e9: a8:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:EE:C7:12:E2:8D:7F:8F:6F:02:35:86:F4:F1:09:CC:00:94:CF:B9 X509v3 Authority Key Identifier: keyid:0F:AF:A3:9A:A3:87:5A:4C:F6:3B:CF:7E:87:30:87:92:7B:49:9D:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:83:c1:ec:3b:32:65:64:ca:3c:68:f7:94:2c:16:21:dd:19: 6e:8e:ba:68:70:1b:c6:ee:34:69:3b:36:da:12:cb:ea:9d:6b: c2:07:5a:e0:d7:12:db:8d:90:93:64:d7:80:72:20:01:0a:a8: 2c:da:48:ec:ec:70:9b:92:2d:bb:bf:f5:15:1a:2a:1b:7e:6e: 22:01:ad:84:dd:d1:b1:bc:06:3c:45:aa:31:8e:3a:1a:00:a1: cb:23:14:3c:06:a9:c6:d9:75:8f:f0:bd:8d:c4:87:09:08:67: 49:08:91:3e:7b:32:93:cc:a2:16:62:40:57:a9:23:e9:8c:aa: b5:9a:8b:65:e6:59:9c:24:00:43:b5:72:1d:8e:5e:be:3d:e9: 44:d5:74:4a:bd:6d:77:39:4d:f7:ed:a2:c9:c5:e1:c6:1c:5f: 70:09:16:9d:20:0c:35:be:36:a5:5c:70:c4:e0:90:a1:99:7c: db:d8:54:15:18:06:55:d0:11:dd:9f:3f:fa:3a:cd:12:7e:59: d6:0a:06:8d:6b:d2:bd:43:95:93:4f:24:ee:59:9e:e8:3b:34: dd:29:61:95:25:28:c7:ff:78:5f:dd:80:13:7b:c0:21:e8:04: 3a:92:5f:2a:f3:1b:e9:a8:7a:5e:79:7f:a0:cc:8a:f3:db:1d: 73:4d:25:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU/w+x/hGjChBOTLEZXxKVKpVToYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZBRkEzOUFBMzg3NUE0Q0Y2M0JDRjdFODczMDg3OTI3 QjQ5OUQyRjAeFw0yNTA4MjIyMzE2MTNaFw0yNTA4MjYwMzQ4MTNaMDMxMTAvBgNV BAMTKDM3RUVDNzEyRTI4RDdGOEY2RjAyMzU4NkY0RjEwOUNDMDA5NENGQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQd8rnp+shU+U09mQYWi1yddrI MKx0THNbEHEmApxmyg+upc7ssWyj9NA1i+UH5r0+s8pogzbSSNW4MVuK1ZtwOVH5 eSv+lqSmiqJ5QkU+G2RBLMpotjRo65xRmlP+xchsrGNIXXdGw4vdVkVlTuz9BsF4 ji3zjmMuDN56dMVzSGPq48RICWN4bfdKRPbQrcnxAzR0979I4Bw0K0rup3fTtag+ K74tq9PcGL1gEZGqICC/r6xrZSDDd0R9Foll5QwseKKj1v6bonRZ1esAQrx3EYF2 uVbqTc6hnLiTFNCpJMiX0X7aN8J06EWSmeam0+hGNBc52RTLFALTZudZ6ahTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUN+7HEuKNf49vAjWG9PEJzACUz7kwHwYDVR0j BBgwFoAUD6+jmqOHWkz2O89+hzCHkntJnS8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MGUxMWZmYy1lNzVhLTRiZjQtODQ0OC1jNjhlMjAzMzVlZTgvMC8wRkFGQTM5QUEz ODc1QTRDRjYzQkNGN0U4NzMwODc5MjdCNDk5RDJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEZBRkEzOUFBMzg3NUE0Q0Y2M0JDRjdFODczMDg3OTI3QjQ5 OUQyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjBlMTFmZmMtZTc1YS00YmY0LTg0 NDgtYzY4ZTIwMzM1ZWU4LzAvMEZBRkEzOUFBMzg3NUE0Q0Y2M0JDRjdFODczMDg3 OTI3QjQ5OUQyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHKDwew7MmVkyjxo95QsFiHdGW6OumhwG8bu NGk7NtoSy+qda8IHWuDXEtuNkJNk14ByIAEKqCzaSOzscJuSLbu/9RUaKht+biIB rYTd0bG8BjxFqjGOOhoAocsjFDwGqcbZdY/wvY3EhwkIZ0kIkT57MpPMohZiQFep I+mMqrWai2XmWZwkAEO1ch2OXr496UTVdEq9bXc5TfftosnF4cYcX3AJFp0gDDW+ NqVccMTgkKGZfNvYVBUYBlXQEd2fP/o6zRJ+WdYKBo1r0r1DlZNPJO5Znug7NN0p YZUlKMf/eF/dgBN7wCHoBDqSXyrzG+moel55f6DMivPbHXNNJbM= -----END CERTIFICATE-----Generated at Sat Aug 23 12:10:25 2025 by rpki-client