$ rpki-client -vvf repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft File: F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft (raw, json) Hash identifier: qke72hE1kkuf3h6D4SJBAN6kdmiKVv+1t+LFbnYML4M= Subject key identifier: 4F:CB:AE:C8:00:1B:40:B7:07:18:8C:24:DB:49:A9:45:67:4A:8E:12 Authority key identifier: F3:F9:AB:30:AC:2C:50:B3:ED:F7:C9:1C:45:31:CC:9A:EE:9C:9D:A3 Certificate issuer: /CN=F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3 Certificate serial: 0391320ACE25F90879B29ACD9CD805CA85565F9F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft Manifest number: 04F5 Signing time: Thu 24 Jul 2025 12:41:02 +0000 Manifest this update: Thu 24 Jul 2025 12:36:02 +0000 Manifest next update: Sun 27 Jul 2025 21:57:02 +0000 Files and hashes: 1: 3130332e3130302e3138322e302f32342d3234203d3e20313336383430.roa (hash: 82WkCsugh3Y0Do+wrRLPbBu7oY8u5dpqm/OQwR7YoKQ=) 2: 3130332e3130302e3138302e302f32322d3232203d3e20313336383430.roa (hash: Um7YNYBxTVjbF3M76ZtkS+WRPG6nd3aZ+YWjDA+f9zA=) 3: 3130332e3130302e3138332e302f32342d3234203d3e20313336383430.roa (hash: HP2CIuQ7HdSouFMxhc4gbLPN64fDpck7CCz5j9Fedrs=) 4: 323430313a626663303a3a2f33322d3332203d3e20313336383430.roa (hash: OD6ds+KTm//KkPIe0CnHbGgyxy24D56HEq7afLGbIc8=) 5: 3130332e3130302e3138312e302f32342d3234203d3e20313336383430.roa (hash: CamY8eX6kfj5MZjd7GTKNGu0eML2pclOVMqWYRohOEs=) 6: 3130332e3130302e3138302e302f32342d3234203d3e20313336383430.roa (hash: yz7KoAXsbF5ZqTXQr0wN32L4YkceTPCN36RTUDHDNIE=) 7: F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.crl (hash: YvAxIxNmS4srNW5wnBGjAKnq3fwc55BP+UW1nrPQb0o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.crl rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 21:57:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:91:32:0a:ce:25:f9:08:79:b2:9a:cd:9c:d8:05:ca:85:56:5f:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3 Validity Not Before: Jul 24 12:36:02 2025 GMT Not After : Jul 27 21:57:02 2025 GMT Subject: CN=4FCBAEC8001B40B707188C24DB49A945674A8E12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:66:a6:f9:f4:a0:b0:75:4d:b2:83:40:b1:76: 95:c1:b6:76:3e:3a:ce:11:4b:a0:d8:81:09:09:ee: 4e:f7:81:3a:5b:2a:41:1c:e8:c3:7a:cb:1a:65:9a: 9e:3a:f0:21:1d:10:7b:4f:0a:8c:b9:18:93:a2:22: ec:5c:f7:85:72:ee:c8:68:26:f9:46:81:07:99:10: e7:4a:96:d4:c6:61:7f:82:56:e7:c7:38:ca:bd:59: ad:6b:f2:bd:46:ff:b9:84:d5:27:50:f5:f3:bb:a9: 8b:a7:3f:c9:06:40:69:04:06:8f:6a:c4:9e:fc:5a: 62:7a:ee:fb:97:85:83:f5:48:f9:05:f1:0a:18:b2: c1:3a:24:46:85:7d:c1:fb:cd:95:7a:ed:2a:bb:13: b3:27:75:c4:39:d1:32:b3:20:b5:e0:84:81:3d:34: 77:db:77:a9:a4:e6:c7:94:aa:94:54:01:5f:df:bb: 6a:6c:75:2c:4a:07:77:61:9d:2f:07:d3:52:d7:5f: 86:71:93:0d:b0:88:09:eb:f6:eb:6f:9f:e1:95:75: d5:ac:07:d0:39:30:27:de:40:a2:7e:f3:d4:45:12: 66:28:3d:05:6d:60:f5:33:50:07:67:b2:a3:39:24: 70:81:c4:a9:6a:41:b3:b8:a1:d8:df:8c:5f:3b:e7: 7f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:CB:AE:C8:00:1B:40:B7:07:18:8C:24:DB:49:A9:45:67:4A:8E:12 X509v3 Authority Key Identifier: keyid:F3:F9:AB:30:AC:2C:50:B3:ED:F7:C9:1C:45:31:CC:9A:EE:9C:9D:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:fa:9e:c7:33:3f:e7:0d:ae:94:32:c9:0d:8a:35:59:15:ae: 1d:8f:4b:a2:71:c4:fd:d8:04:ee:b7:ec:77:a1:54:7a:33:3c: 84:57:ae:58:15:98:80:f9:34:a0:44:f9:e5:99:f2:b6:7d:52: 08:89:8f:9b:01:d5:ac:56:ca:ab:58:c2:de:dc:f2:5d:f1:5b: c4:b5:5e:17:36:f7:01:47:8a:97:43:27:c6:f7:99:f8:5b:d2: 74:2a:97:6f:9d:d2:07:bc:cf:d5:0b:4b:ec:ea:c2:52:9e:43: fb:0e:cb:2f:a8:8b:bd:49:fd:73:e5:94:bf:af:60:1f:3e:cf: a0:d7:da:21:23:a1:5e:31:b8:c5:23:fd:5c:c9:d9:c4:76:4f: 28:1c:ad:69:c9:3c:83:80:06:09:db:84:e8:d3:c3:68:4d:29: 46:64:65:a4:33:54:b7:27:ac:a2:a6:10:bd:e3:e0:a2:f0:4e: 5e:63:52:2a:c7:c3:96:b7:3b:6c:24:51:ff:9b:d1:19:b1:0e: 48:f9:ca:b9:3c:99:69:f0:d0:89:bb:1c:94:c2:4a:01:b3:28: c9:96:2f:2f:46:5e:a3:2d:5b:93:fd:e8:2b:f1:8b:44:a0:1b: 90:ba:d7:34:85:27:89:30:9d:70:6f:68:f8:94:ee:3f:50:fc: 08:6e:17:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA5EyCs4l+Qh5sprNnNgFyoVWX58wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjNGOUFCMzBBQzJDNTBCM0VERjdDOTFDNDUzMUNDOUFF RTlDOURBMzAeFw0yNTA3MjQxMjM2MDJaFw0yNTA3MjcyMTU3MDJaMDMxMTAvBgNV BAMTKDRGQ0JBRUM4MDAxQjQwQjcwNzE4OEMyNERCNDlBOTQ1Njc0QThFMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClZqb59KCwdU2yg0CxdpXBtnY+ Os4RS6DYgQkJ7k73gTpbKkEc6MN6yxplmp468CEdEHtPCoy5GJOiIuxc94Vy7sho JvlGgQeZEOdKltTGYX+CVufHOMq9Wa1r8r1G/7mE1SdQ9fO7qYunP8kGQGkEBo9q xJ78WmJ67vuXhYP1SPkF8QoYssE6JEaFfcH7zZV67Sq7E7MndcQ50TKzILXghIE9 NHfbd6mk5seUqpRUAV/fu2psdSxKB3dhnS8H01LXX4Zxkw2wiAnr9utvn+GVddWs B9A5MCfeQKJ+89RFEmYoPQVtYPUzUAdnsqM5JHCBxKlqQbO4odjfjF875399AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUT8uuyAAbQLcHGIwk20mpRWdKjhIwHwYDVR0j BBgwFoAU8/mrMKwsULPt98kcRTHMmu6cnaMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZWYwODkwMC1mMmM2LTRkMDctYjY5NC1kMTg4YmFhM2I4ZjIvMC9GM0Y5QUIzMEFD MkM1MEIzRURGN0M5MUM0NTMxQ0M5QUVFOUM5REEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjNGOUFCMzBBQzJDNTBCM0VERjdDOTFDNDUzMUNDOUFFRTlD OURBMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWVmMDg5MDAtZjJjNi00ZDA3LWI2 OTQtZDE4OGJhYTNiOGYyLzAvRjNGOUFCMzBBQzJDNTBCM0VERjdDOTFDNDUzMUND OUFFRTlDOURBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABj6nsczP+cNrpQyyQ2KNVkVrh2PS6JxxP3Y BO637HehVHozPIRXrlgVmID5NKBE+eWZ8rZ9UgiJj5sB1axWyqtYwt7c8l3xW8S1 Xhc29wFHipdDJ8b3mfhb0nQql2+d0ge8z9ULS+zqwlKeQ/sOyy+oi71J/XPllL+v YB8+z6DX2iEjoV4xuMUj/VzJ2cR2TygcrWnJPIOABgnbhOjTw2hNKUZkZaQzVLcn rKKmEL3j4KLwTl5jUirHw5a3O2wkUf+b0RmxDkj5yrk8mWnw0Im7HJTCSgGzKMmW Ly9GXqMtW5P96Cvxi0SgG5C61zSFJ4kwnXBvaPiU7j9Q/AhuFwM= -----END CERTIFICATE-----Generated at Fri Jul 25 06:37:25 2025 by rpki-client