$ rpki-client -vvf repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.mft File: F7D89AF4A6B49559B90BD1A11D2262692C406D9B.mft (raw, json) Hash identifier: OSXVks7sXS2PfwsIVODX7inUIdmfAC4Ju9peVFHMbyY= Subject key identifier: B3:F5:B2:A6:98:68:3B:52:7D:14:23:6A:77:E2:FE:9E:12:5F:89:E3 Authority key identifier: F7:D8:9A:F4:A6:B4:95:59:B9:0B:D1:A1:1D:22:62:69:2C:40:6D:9B Certificate issuer: /CN=F7D89AF4A6B49559B90BD1A11D2262692C406D9B Certificate serial: 157774067F01DC1EA848AEC80F44B6C3029EB1D9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.mft Manifest number: 01CD Signing time: Mon 21 Jul 2025 08:21:18 +0000 Manifest this update: Mon 21 Jul 2025 08:16:18 +0000 Manifest next update: Thu 24 Jul 2025 12:05:18 +0000 Files and hashes: 1: 3130332e31332e3230342e302f32342d3234203d3e203634333030.roa (hash: aoGZEwGfwxorrH0vm0ZUZnYbhYMMuOl+o+RcX6GAvoE=) 2: 3130332e31332e3230342e302f32342d3234203d3e203438343635.roa (hash: WBg+Oj5FDShLbz1I5ijbkQnlP4hqNRkJwhL0ngYl8bg=) 3: 3130332e31332e3230342e302f32332d3233203d3e203634333030.roa (hash: 2AxkviF5pv7j1kTQ3v8XjI6k7pg1zXnW3iJ2qwjQWV0=) 4: 3130332e31332e3230352e302f32342d3234203d3e203438343635.roa (hash: /BkZhdhHuWpr0COSSqEa5xQ/tUEnJqvOpL9FKXE/Mm4=) 5: 3130332e31332e3230352e302f32342d3234203d3e20313532333636.roa (hash: bNck8LpKpp26kW2UN16eMZ1fOvjILY8XEu10GDGQj+I=) 6: F7D89AF4A6B49559B90BD1A11D2262692C406D9B.crl (hash: ui0pm2peSYkztqJKzZLStoPNtQsnQqPLVI/r+4MW/Eg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.crl rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 12:05:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:77:74:06:7f:01:dc:1e:a8:48:ae:c8:0f:44:b6:c3:02:9e:b1:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F7D89AF4A6B49559B90BD1A11D2262692C406D9B Validity Not Before: Jul 21 08:16:18 2025 GMT Not After : Jul 24 12:05:18 2025 GMT Subject: CN=B3F5B2A698683B527D14236A77E2FE9E125F89E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:27:26:eb:02:34:94:a2:cd:3d:3d:83:92:cb: 1a:71:6e:2b:1f:7a:4a:c6:1a:da:7c:68:24:28:d1: b3:59:b4:19:2b:c7:3c:45:0c:5b:78:19:03:09:21: 85:a9:5a:f1:d3:ce:45:e1:ff:fc:6b:47:19:f4:92: ab:3c:74:5a:0f:71:b7:90:a5:3f:e6:9e:36:c1:d2: 53:52:4b:d7:27:48:a5:10:b6:1b:65:cf:ca:f4:72: 69:5e:2f:e9:54:bb:31:d0:60:cf:19:7b:12:ff:cf: b1:6c:b6:5c:e1:69:05:4d:d6:3d:3a:ef:f6:26:6c: 0a:d7:6a:f1:28:9e:de:33:7b:54:fc:7c:e1:52:bc: 91:ed:6a:27:23:a1:d9:e0:2a:0a:b6:a3:07:5e:b9: 40:4f:f5:e9:c1:6d:b2:75:cb:7c:29:76:f3:20:df: c0:fb:fa:e2:5b:ae:f3:1a:ed:52:f6:2a:f1:51:1f: 72:48:4b:f5:a8:f8:10:9f:01:1c:0b:0c:af:45:e0: 11:d8:39:9e:ed:d6:28:f0:a1:43:07:38:57:84:af: 53:b7:36:3e:49:0d:ae:68:f7:47:ed:f5:67:ac:e6: ea:7b:2f:50:95:dd:22:3d:74:ea:81:cc:36:33:6d: 08:2b:3e:e6:26:9e:4b:d9:50:71:31:66:86:2e:e0: 6f:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:F5:B2:A6:98:68:3B:52:7D:14:23:6A:77:E2:FE:9E:12:5F:89:E3 X509v3 Authority Key Identifier: keyid:F7:D8:9A:F4:A6:B4:95:59:B9:0B:D1:A1:1D:22:62:69:2C:40:6D:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:98:4c:c5:db:cb:e3:ab:f7:d9:ac:9e:fd:a3:6b:5f:39:fe: ab:86:db:56:cb:a0:96:ce:5e:31:55:ef:fe:ed:e7:00:b3:69: af:8f:6f:b1:50:1c:0f:de:28:35:14:69:e8:4c:eb:20:0a:30: 8a:dd:46:bf:eb:f6:63:84:fe:df:62:f6:e2:21:ec:2f:14:8b: b5:cf:8b:bd:76:2a:f4:6d:2b:ed:68:71:1a:54:6d:2a:5a:25: c3:c2:e9:6e:07:71:cd:d8:67:d3:0b:74:8b:c0:a6:95:ec:13: f5:4d:a9:a2:e2:12:3b:7f:d3:76:d4:66:a1:e3:44:80:dc:fa: 03:85:d6:dc:34:58:1e:b8:c1:db:64:aa:b7:fe:9e:11:12:6d: 7d:29:54:ac:fb:b3:0f:94:ce:3f:0f:6e:d5:10:00:ad:7b:87: ea:2b:1e:27:1c:07:f8:8b:5b:11:da:be:2e:91:1f:94:1b:27: 4c:68:fe:a9:d1:25:09:25:d0:a7:b6:f2:bf:0e:d0:c3:60:d2: a8:61:f5:b2:76:f0:a7:f9:3a:bd:3a:e9:a3:b2:f1:3d:8e:f0: de:fa:36:3a:fc:c5:ca:0f:56:03:5c:26:3e:8c:86:f2:5e:56: 1d:2d:76:c3:a6:f2:b2:b7:8d:b0:cc:7e:f4:ab:f4:f0:23:79: c5:93:79:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFXd0Bn8B3B6oSK7ID0S2wwKesdkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjdEODlBRjRBNkI0OTU1OUI5MEJEMUExMUQyMjYyNjky QzQwNkQ5QjAeFw0yNTA3MjEwODE2MThaFw0yNTA3MjQxMjA1MThaMDMxMTAvBgNV BAMTKEIzRjVCMkE2OTg2ODNCNTI3RDE0MjM2QTc3RTJGRTlFMTI1Rjg5RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/JybrAjSUos09PYOSyxpxbisf ekrGGtp8aCQo0bNZtBkrxzxFDFt4GQMJIYWpWvHTzkXh//xrRxn0kqs8dFoPcbeQ pT/mnjbB0lNSS9cnSKUQthtlz8r0cmleL+lUuzHQYM8ZexL/z7FstlzhaQVN1j06 7/YmbArXavEont4ze1T8fOFSvJHtaicjodngKgq2owdeuUBP9enBbbJ1y3wpdvMg 38D7+uJbrvMa7VL2KvFRH3JIS/Wo+BCfARwLDK9F4BHYOZ7t1ijwoUMHOFeEr1O3 Nj5JDa5o90ft9Wes5up7L1CV3SI9dOqBzDYzbQgrPuYmnkvZUHExZoYu4G9fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUs/WypphoO1J9FCNqd+L+nhJfieMwHwYDVR0j BBgwFoAU99ia9Ka0lVm5C9GhHSJiaSxAbZswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZmM5MDk2Yy0yOGRjLTQ0ZTQtYjRjZi05NmQ2MzFiNzNhYzAvMC9GN0Q4OUFGNEE2 QjQ5NTU5QjkwQkQxQTExRDIyNjI2OTJDNDA2RDlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjdEODlBRjRBNkI0OTU1OUI5MEJEMUExMUQyMjYyNjkyQzQw NkQ5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmZjOTA5NmMtMjhkYy00NGU0LWI0 Y2YtOTZkNjMxYjczYWMwLzAvRjdEODlBRjRBNkI0OTU1OUI5MEJEMUExMUQyMjYy NjkyQzQwNkQ5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGeYTMXby+Or99msnv2ja185/quG21bLoJbO XjFV7/7t5wCzaa+Pb7FQHA/eKDUUaehM6yAKMIrdRr/r9mOE/t9i9uIh7C8Ui7XP i712KvRtK+1ocRpUbSpaJcPC6W4Hcc3YZ9MLdIvAppXsE/VNqaLiEjt/03bUZqHj RIDc+gOF1tw0WB64wdtkqrf+nhESbX0pVKz7sw+Uzj8PbtUQAK17h+orHiccB/iL WxHavi6RH5QbJ0xo/qnRJQkl0Ke28r8O0MNg0qhh9bJ28Kf5Or066aOy8T2O8N76 Njr8xcoPVgNcJj6MhvJeVh0tdsOm8rK3jbDMfvSr9PAjecWTeRg= -----END CERTIFICATE-----Generated at Mon Jul 21 18:06:10 2025 by rpki-client