$ rpki-client -vvf repo-rpki.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.mft File: F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.mft (raw, json) Hash identifier: 0pYdHrjC7zRk9kNiC2/hquDu9j4FWcEqWWeT3v093u8= Subject key identifier: 42:5D:78:7F:32:5C:BB:3F:29:D2:81:03:80:1A:FC:AD:6D:F7:68:BE Authority key identifier: F0:7F:FF:47:2E:D9:C7:00:73:BC:98:86:5A:4A:5A:6C:2B:0E:A3:5E Certificate issuer: /CN=F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E Certificate serial: 447012CCFD7A56D693BE8F48B347B5657438BC9F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.mft Manifest number: 8C Signing time: Sun 20 Jul 2025 13:40:02 +0000 Manifest this update: Sun 20 Jul 2025 13:35:02 +0000 Manifest next update: Wed 23 Jul 2025 18:43:02 +0000 Files and hashes: 1: F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.crl (hash: Y8y76ww7qzYYmsqlEhR50X8Y/SnyrZDciMwiqMiuMwA=) 2: 3130332e3132312e35382e302f32342d3234203d3e20313338303436.roa (hash: 59Dd3nZ50FlXyKs9Kc8BpiwoV5l0A2i6OJ/jV+dvHUw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.crl rsync://repo-rpki.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 18:43:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:70:12:cc:fd:7a:56:d6:93:be:8f:48:b3:47:b5:65:74:38:bc:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E Validity Not Before: Jul 20 13:35:02 2025 GMT Not After : Jul 23 18:43:02 2025 GMT Subject: CN=425D787F325CBB3F29D28103801AFCAD6DF768BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:27:5f:c6:4a:3b:0b:3f:15:d5:a3:44:44:8c: 41:b8:9f:de:27:b3:13:b9:d6:86:f7:f1:e3:b2:f3: 1a:b4:a0:4d:74:91:34:7c:fb:b1:88:21:44:4e:d1: c7:69:21:71:17:04:d4:e6:95:68:28:c7:2d:f1:dc: 15:ec:ac:07:75:1b:c0:2d:b4:90:05:b2:9c:e5:9d: c8:b8:67:d9:c1:e5:bb:12:df:cb:9d:e6:b9:f5:8b: c6:e2:d7:a6:18:af:22:f9:ae:21:0b:5f:01:64:4b: 6d:34:37:7c:c5:ba:eb:a6:95:e0:a2:99:e7:9d:15: c8:9d:b9:db:d6:08:ea:41:97:d1:56:e0:42:50:75: 65:cc:86:95:1f:e4:f6:03:ee:ab:b0:fe:dc:86:00: 26:e1:46:d6:79:3c:13:4b:30:84:69:9c:1e:9b:20: 7a:d0:0c:0c:1e:4e:eb:6d:35:25:3a:cb:60:b7:7e: f5:92:84:bc:06:e8:1c:97:79:5b:75:71:87:71:74: 7e:56:6e:36:64:52:5f:66:ef:dd:51:af:7a:66:ee: 10:7f:67:3c:b9:26:44:11:b3:43:8d:3e:d8:0a:ed: 7a:92:d0:76:93:02:aa:62:9b:53:00:fe:81:f8:72: 32:a6:0c:d1:f1:2b:67:9a:70:c9:6f:65:02:69:33: 6c:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:5D:78:7F:32:5C:BB:3F:29:D2:81:03:80:1A:FC:AD:6D:F7:68:BE X509v3 Authority Key Identifier: keyid:F0:7F:FF:47:2E:D9:C7:00:73:BC:98:86:5A:4A:5A:6C:2B:0E:A3:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:a1:dd:94:5e:64:4e:76:64:29:e3:9f:8e:66:28:3b:05:a3: 23:72:cc:19:92:7b:a0:87:c4:28:5c:d7:a1:2a:a7:c2:98:dd: 02:93:0c:32:29:54:68:f3:2b:43:62:9d:a2:b6:4c:2a:51:0a: 77:4f:86:92:40:a5:6f:69:09:50:e1:0a:2c:3d:17:c2:66:fa: 7d:80:8a:1a:ac:f7:89:44:55:de:b9:1d:28:34:4e:fd:b7:d4: a1:fb:24:c1:eb:16:9a:3f:2b:9a:2c:cd:0a:bd:80:20:66:9a: 39:5c:59:71:9e:01:a6:ff:9a:61:ab:61:ec:80:ba:59:1a:6c: 68:e8:8a:07:8b:fd:35:2e:ce:d5:a2:5b:96:cb:06:9c:3c:8a: a1:72:d0:99:81:e5:47:ad:2c:a5:78:e0:76:7d:41:70:43:c5: f0:49:f0:65:71:e6:8f:80:de:b1:47:b4:b1:6b:5d:df:15:19: d6:c1:f3:eb:34:fe:a4:82:8c:e4:49:9e:8b:7b:84:14:7c:b9: a1:c6:d6:22:35:8b:90:a3:2a:b9:42:0b:fa:e7:c8:77:8c:8e: 91:09:cc:c3:a8:52:6b:bf:63:3f:c1:84:8d:3b:d7:d8:55:8d: 2d:6e:21:a5:f8:81:e9:d5:b9:a1:30:51:cc:9b:e7:ff:1a:93: ec:48:21:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURHASzP16VtaTvo9Is0e1ZXQ4vJ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjA3RkZGNDcyRUQ5QzcwMDczQkM5ODg2NUE0QTVBNkMy QjBFQTM1RTAeFw0yNTA3MjAxMzM1MDJaFw0yNTA3MjMxODQzMDJaMDMxMTAvBgNV BAMTKDQyNUQ3ODdGMzI1Q0JCM0YyOUQyODEwMzgwMUFGQ0FENkRGNzY4QkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLJ1/GSjsLPxXVo0REjEG4n94n sxO51ob38eOy8xq0oE10kTR8+7GIIURO0cdpIXEXBNTmlWgoxy3x3BXsrAd1G8At tJAFspzlnci4Z9nB5bsS38ud5rn1i8bi16YYryL5riELXwFkS200N3zFuuumleCi meedFcidudvWCOpBl9FW4EJQdWXMhpUf5PYD7quw/tyGACbhRtZ5PBNLMIRpnB6b IHrQDAweTuttNSU6y2C3fvWShLwG6ByXeVt1cYdxdH5WbjZkUl9m791Rr3pm7hB/ Zzy5JkQRs0ONPtgK7XqS0HaTAqpim1MA/oH4cjKmDNHxK2eacMlvZQJpM2wFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQl14fzJcuz8p0oEDgBr8rW33aL4wHwYDVR0j BBgwFoAU8H//Ry7ZxwBzvJiGWkpabCsOo14wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MjRkYjU2Ny0zM2E4LTRjZTAtYmNmZi1jYjBmMGE4NWMyMzkvMC9GMDdGRkY0NzJF RDlDNzAwNzNCQzk4ODY1QTRBNUE2QzJCMEVBMzVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjA3RkZGNDcyRUQ5QzcwMDczQkM5ODg2NUE0QTVBNkMyQjBF QTM1RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzI0ZGI1NjctMzNhOC00Y2UwLWJj ZmYtY2IwZjBhODVjMjM5LzAvRjA3RkZGNDcyRUQ5QzcwMDczQkM5ODg2NUE0QTVB NkMyQjBFQTM1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC2h3ZReZE52ZCnjn45mKDsFoyNyzBmSe6CH xChc16Eqp8KY3QKTDDIpVGjzK0NinaK2TCpRCndPhpJApW9pCVDhCiw9F8Jm+n2A ihqs94lEVd65HSg0Tv231KH7JMHrFpo/K5oszQq9gCBmmjlcWXGeAab/mmGrYeyA ulkabGjoigeL/TUuztWiW5bLBpw8iqFy0JmB5UetLKV44HZ9QXBDxfBJ8GVx5o+A 3rFHtLFrXd8VGdbB8+s0/qSCjORJnot7hBR8uaHG1iI1i5CjKrlCC/rnyHeMjpEJ zMOoUmu/Yz/BhI0719hVjS1uIaX4genVuaEwUcyb5/8ak+xIIS8= -----END CERTIFICATE-----Generated at Mon Jul 21 07:25:43 2025 by rpki-client