$ rpki-client -vvf repo-rpki.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.mft File: F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.mft (raw, json) Hash identifier: V6XIGXv/QEHjH9odP0BxHgy03snTPsrBJ42SCcF98Ew= Subject key identifier: 20:7B:42:D4:DD:D5:E5:88:74:3E:9C:00:72:E5:7F:0C:D4:D2:21:BD Authority key identifier: F1:0D:F0:FD:3D:45:5B:BA:95:D0:CE:9E:AA:27:EE:38:3E:44:D6:AF Certificate issuer: /CN=F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF Certificate serial: 073ED88DA5FD745AC9C7E466DE41FFEA1D5091A5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.mft Manifest number: 02D5 Signing time: Fri 22 Aug 2025 12:30:49 +0000 Manifest this update: Fri 22 Aug 2025 12:25:49 +0000 Manifest next update: Tue 26 Aug 2025 00:11:49 +0000 Files and hashes: 1: F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.crl (hash: z7I7ewHC23TmG0YbkZcqFbbKX61CvroahZru5nrH8Qs=) 2: 3130332e3136392e3133362e302f32332d3234203d3e203538383231.roa (hash: JP1YqhEOJY1Cdv/h1dRSKlUNEpZlyXiIJsuj7P3SVio=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.crl rsync://repo-rpki.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 00:11:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:3e:d8:8d:a5:fd:74:5a:c9:c7:e4:66:de:41:ff:ea:1d:50:91:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF Validity Not Before: Aug 22 12:25:49 2025 GMT Not After : Aug 26 00:11:49 2025 GMT Subject: CN=207B42D4DDD5E588743E9C0072E57F0CD4D221BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:66:5b:28:24:32:1f:02:7a:37:05:ca:c0:89: 9e:cb:83:07:91:c3:ff:b2:f9:f1:5e:99:c6:b5:3c: 65:5c:2a:49:f3:05:31:87:63:35:0a:c3:8f:5e:c5: 25:f9:13:20:da:2b:38:db:7d:8f:e5:8a:d1:01:83: eb:68:45:7c:0f:f5:cf:b5:f8:41:f6:10:87:f7:03: f8:4a:fe:e0:00:00:f1:b0:8d:94:21:93:23:1d:0d: 12:bd:42:76:e2:31:e7:59:6f:12:2a:a3:eb:f5:25: 98:60:97:56:0c:75:ca:b9:95:f8:38:59:fb:02:97: 58:9f:44:cb:11:5e:ca:83:c3:e9:c8:46:b5:24:13: 6e:d2:ac:4c:8e:c9:3e:fc:5c:47:b6:d9:7e:f3:ed: 2f:c0:fc:71:4a:23:6f:f7:cc:b1:73:2c:92:b7:79: 2b:37:a4:76:fb:39:96:9f:80:db:9c:9f:12:06:24: 3e:37:ba:53:52:b3:c5:98:2f:4a:3f:2c:ab:72:be: 75:e9:ce:a4:c8:39:9b:00:8e:ed:00:18:36:ec:b2: d7:ed:af:c2:21:c7:78:b8:3c:11:ab:93:57:21:a4: 14:85:cf:29:8d:ec:bb:2b:f6:49:68:a0:20:8d:54: ae:52:ef:4c:40:ab:5a:41:a6:38:b5:82:dd:69:dc: c0:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:7B:42:D4:DD:D5:E5:88:74:3E:9C:00:72:E5:7F:0C:D4:D2:21:BD X509v3 Authority Key Identifier: keyid:F1:0D:F0:FD:3D:45:5B:BA:95:D0:CE:9E:AA:27:EE:38:3E:44:D6:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:d2:16:2e:39:1a:86:62:9b:f4:41:9e:0d:81:b3:f7:bd:22: 15:e7:68:85:98:57:b0:a0:51:e8:08:f3:55:5f:a3:b2:e4:82: 47:4e:7b:5d:b5:a0:3a:29:bd:24:1a:99:97:47:db:2d:23:a9: f5:f7:ca:d8:fc:bc:b2:73:0a:eb:db:96:d0:18:ab:0b:0c:4c: 57:1e:88:4b:90:2a:38:3b:c8:4e:15:57:ac:c8:f4:df:9f:08: a1:49:bf:8a:ec:aa:c6:83:5d:52:9a:9e:3c:9e:52:bd:e1:d6: 70:94:c1:9b:dc:29:1b:1e:41:5d:d8:42:3c:37:f6:27:a4:f3: 03:2d:e8:5a:22:50:f5:08:99:37:5f:20:0f:1e:e3:be:18:af: e3:a6:32:d6:c5:b8:36:65:e9:b4:90:39:ce:a8:6e:a9:be:18: 1c:9f:b1:44:2d:82:16:7e:b4:a9:af:52:64:24:00:76:68:19: 7f:9e:1c:90:72:1b:6e:0f:12:8b:b8:60:10:51:06:f3:6f:a7: b2:ab:01:43:c5:ab:d1:4c:7a:46:db:3d:84:b8:2f:91:b8:1b: 7d:41:12:cf:27:c8:7a:11:7b:9d:67:f0:a3:56:2b:75:95:69: 83:22:1a:69:55:1f:94:59:03:06:12:20:48:4c:2a:90:54:9a: 00:0c:74:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBz7YjaX9dFrJx+Rm3kH/6h1QkaUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjEwREYwRkQzRDQ1NUJCQTk1RDBDRTlFQUEyN0VFMzgz RTQ0RDZBRjAeFw0yNTA4MjIxMjI1NDlaFw0yNTA4MjYwMDExNDlaMDMxMTAvBgNV BAMTKDIwN0I0MkQ0RERENUU1ODg3NDNFOUMwMDcyRTU3RjBDRDREMjIxQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuZlsoJDIfAno3BcrAiZ7LgweR w/+y+fFemca1PGVcKknzBTGHYzUKw49exSX5EyDaKzjbfY/litEBg+toRXwP9c+1 +EH2EIf3A/hK/uAAAPGwjZQhkyMdDRK9QnbiMedZbxIqo+v1JZhgl1YMdcq5lfg4 WfsCl1ifRMsRXsqDw+nIRrUkE27SrEyOyT78XEe22X7z7S/A/HFKI2/3zLFzLJK3 eSs3pHb7OZafgNucnxIGJD43ulNSs8WYL0o/LKtyvnXpzqTIOZsAju0AGDbsstft r8Ihx3i4PBGrk1chpBSFzymN7Lsr9klooCCNVK5S70xAq1pBpji1gt1p3MDnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIHtC1N3V5Yh0PpwAcuV/DNTSIb0wHwYDVR0j BBgwFoAU8Q3w/T1FW7qV0M6eqifuOD5E1q8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MWNiMmU4ZS1hMWEyLTRjYTAtODBiMC0yMjU1MThmZmFlMTQvMC9GMTBERjBGRDNE NDU1QkJBOTVEMENFOUVBQTI3RUUzODNFNDRENkFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjEwREYwRkQzRDQ1NUJCQTk1RDBDRTlFQUEyN0VFMzgzRTQ0 RDZBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjFjYjJlOGUtYTFhMi00Y2EwLTgw YjAtMjI1NTE4ZmZhZTE0LzAvRjEwREYwRkQzRDQ1NUJCQTk1RDBDRTlFQUEyN0VF MzgzRTQ0RDZBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC7SFi45GoZim/RBng2Bs/e9IhXnaIWYV7Cg UegI81Vfo7LkgkdOe121oDopvSQamZdH2y0jqfX3ytj8vLJzCuvbltAYqwsMTFce iEuQKjg7yE4VV6zI9N+fCKFJv4rsqsaDXVKanjyeUr3h1nCUwZvcKRseQV3YQjw3 9iek8wMt6FoiUPUImTdfIA8e474Yr+OmMtbFuDZl6bSQOc6obqm+GByfsUQtghZ+ tKmvUmQkAHZoGX+eHJByG24PEou4YBBRBvNvp7KrAUPFq9FMekbbPYS4L5G4G31B Es8nyHoRe51n8KNWK3WVaYMiGmlVH5RZAwYSIEhMKpBUmgAMdKk= -----END CERTIFICATE-----Generated at Sat Aug 23 15:24:21 2025 by rpki-client