$ rpki-client -vvf repo-rpki.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.mft File: F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.mft (raw, json) Hash identifier: Waqv63Ptk2GLrpsKVmyz4nIAQj8yWxkGZ8I6jUrIykk= Subject key identifier: BF:62:66:D0:0C:21:7A:22:F7:89:9E:4D:C5:F1:2E:78:2E:6F:54:56 Authority key identifier: F8:B7:C8:E5:DD:BD:D0:36:51:3F:10:B8:7F:39:A9:4B:E1:DB:3D:CA Certificate issuer: /CN=F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA Certificate serial: 18501E16149C351E5CB1B07F4BF858B02096D6F2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.mft Manifest number: 01F7 Signing time: Sun 20 Jul 2025 11:00:36 +0000 Manifest this update: Sun 20 Jul 2025 10:55:36 +0000 Manifest next update: Wed 23 Jul 2025 19:24:36 +0000 Files and hashes: 1: F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.crl (hash: 2kWJ3WkCTUd6pT3wSr7aooBf2R4F5c3R8R8oYpIeayQ=) 2: 3130332e3138392e3131372e302f32342d3234203d3e20313439383738.roa (hash: nXEHhJ8w6SXV+eCEbP2YrkovqQsEQKgULxh/UNhY8O8=) 3: 3130332e3138392e3131362e302f32342d3234203d3e20313439383738.roa (hash: WTqqW4cwushoWLyLWupS3yHzTC5AqZ4B8ENJ6k7wzI4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.crl rsync://repo-rpki.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 19:24:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:50:1e:16:14:9c:35:1e:5c:b1:b0:7f:4b:f8:58:b0:20:96:d6:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA Validity Not Before: Jul 20 10:55:36 2025 GMT Not After : Jul 23 19:24:36 2025 GMT Subject: CN=BF6266D00C217A22F7899E4DC5F12E782E6F5456 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:1a:ec:17:bf:50:c6:bb:28:ec:f0:ee:78:f8: d3:11:03:96:12:8b:15:42:11:0a:8f:7d:1b:c3:70: e7:e4:ff:0c:62:92:e9:fa:3e:f6:ca:a5:e6:e4:5e: a5:40:bc:e0:ff:ff:92:8b:f1:37:4c:7e:8e:3a:a9: 4b:a7:12:5b:a1:22:e7:9d:10:cd:da:a5:fd:6d:74: 38:5a:c3:d6:ff:57:18:f2:8c:e1:47:f2:87:0c:8d: 7b:e1:74:4e:6c:70:c6:79:c1:8e:ce:be:60:2a:2a: 8b:e2:97:68:97:ed:a7:07:d2:32:bd:b7:d9:1c:59: a5:01:8c:72:ab:58:1d:70:c2:6a:49:ba:ab:3f:24: 13:1b:87:4c:b6:dd:89:64:40:1d:c5:aa:a1:f3:f3: 0e:b5:08:19:e6:f4:ec:0e:0d:18:3d:92:5c:8c:0d: 70:7d:2d:17:9c:40:69:f2:ad:29:7f:1b:91:37:c6: e4:f7:b5:cd:9a:81:5d:2b:6d:51:5f:bc:66:6a:cb: fd:5b:30:77:31:a4:12:0b:f0:62:23:01:0f:88:1c: ae:6b:1f:db:80:45:d1:58:11:73:7e:03:95:36:24: b8:05:1e:6f:3c:f5:a2:15:3b:ff:a9:d4:68:4f:31: f3:fe:6b:64:22:8e:9b:56:c3:7b:5e:a4:73:6d:0a: 1d:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:62:66:D0:0C:21:7A:22:F7:89:9E:4D:C5:F1:2E:78:2E:6F:54:56 X509v3 Authority Key Identifier: keyid:F8:B7:C8:E5:DD:BD:D0:36:51:3F:10:B8:7F:39:A9:4B:E1:DB:3D:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:94:cc:6a:95:c9:a0:fe:c1:2c:2c:da:09:17:d5:55:12:92: 90:73:a1:0e:51:2f:b5:49:a8:22:b5:bb:36:f3:a6:12:1b:df: db:4e:9b:03:5d:0e:27:39:ac:cc:14:ae:55:97:9f:1b:6e:be: 91:4b:9c:24:3b:e7:27:1d:6e:ab:bf:77:26:98:e2:c7:09:92: 06:21:40:ef:3b:25:1f:a3:bb:95:2f:d1:dc:e0:0e:a1:f0:cc: 6c:3e:fb:4d:d5:f2:1d:32:1d:2e:26:d3:7d:b4:b5:44:11:36: bf:ef:9c:60:24:1a:be:96:25:9c:f7:d9:4f:71:9f:7f:0f:8a: 49:d4:5d:39:9e:a3:33:12:00:89:9d:85:08:08:4a:f8:bb:61: 47:1a:1a:54:e0:57:45:00:0f:88:92:1e:d1:40:44:b0:ac:9f: 8f:65:4f:af:75:d8:b4:a6:9e:47:5c:76:e9:d0:ef:4a:49:5c: 66:80:9e:ca:9f:7f:ef:58:a9:9e:db:e9:dc:56:c9:89:40:eb: ba:5d:7f:b4:7b:77:d9:8c:9f:99:54:48:9c:ea:6d:96:04:7e: 20:15:9d:65:a7:92:cc:a5:1b:3e:60:c9:a7:d5:1b:c3:00:5d: 8e:f4:d1:0d:36:8b:75:ee:dc:03:96:f2:76:a6:fd:1d:bd:27: 6e:fe:d2:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGFAeFhScNR5csbB/S/hYsCCW1vIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhCN0M4RTVEREJERDAzNjUxM0YxMEI4N0YzOUE5NEJF MURCM0RDQTAeFw0yNTA3MjAxMDU1MzZaFw0yNTA3MjMxOTI0MzZaMDMxMTAvBgNV BAMTKEJGNjI2NkQwMEMyMTdBMjJGNzg5OUU0REM1RjEyRTc4MkU2RjU0NTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfGuwXv1DGuyjs8O54+NMRA5YS ixVCEQqPfRvDcOfk/wxikun6PvbKpebkXqVAvOD//5KL8TdMfo46qUunEluhIued EM3apf1tdDhaw9b/VxjyjOFH8ocMjXvhdE5scMZ5wY7OvmAqKovil2iX7acH0jK9 t9kcWaUBjHKrWB1wwmpJuqs/JBMbh0y23YlkQB3FqqHz8w61CBnm9OwODRg9klyM DXB9LRecQGnyrSl/G5E3xuT3tc2agV0rbVFfvGZqy/1bMHcxpBIL8GIjAQ+IHK5r H9uARdFYEXN+A5U2JLgFHm889aIVO/+p1GhPMfP+a2QijptWw3tepHNtCh2ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUv2Jm0AwheiL3iZ5NxfEueC5vVFYwHwYDVR0j BBgwFoAU+LfI5d290DZRPxC4fzmpS+HbPcowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MzA1YWIzMC01NjUzLTQyYmMtOWMzZi1hYWY1NjdlYWU3MDEvMC9GOEI3QzhFNURE QkREMDM2NTEzRjEwQjg3RjM5QTk0QkUxREIzRENBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjhCN0M4RTVEREJERDAzNjUxM0YxMEI4N0YzOUE5NEJFMURC M0RDQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzMwNWFiMzAtNTY1My00MmJjLTlj M2YtYWFmNTY3ZWFlNzAxLzAvRjhCN0M4RTVEREJERDAzNjUxM0YxMEI4N0YzOUE5 NEJFMURCM0RDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHiUzGqVyaD+wSws2gkX1VUSkpBzoQ5RL7VJ qCK1uzbzphIb39tOmwNdDic5rMwUrlWXnxtuvpFLnCQ75ycdbqu/dyaY4scJkgYh QO87JR+ju5Uv0dzgDqHwzGw++03V8h0yHS4m0320tUQRNr/vnGAkGr6WJZz32U9x n38PiknUXTmeozMSAImdhQgISvi7YUcaGlTgV0UAD4iSHtFARLCsn49lT6912LSm nkdcdunQ70pJXGaAnsqff+9YqZ7b6dxWyYlA67pdf7R7d9mMn5lUSJzqbZYEfiAV nWWnksylGz5gyafVG8MAXY700Q02i3Xu3AOW8nam/R29J27+0ug= -----END CERTIFICATE-----Generated at Sun Jul 20 22:29:43 2025 by rpki-client