$ rpki-client -vvf repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.mft File: F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.mft (raw, json) Hash identifier: fo/2HU8HCUIY5F/qq3G+vw54jE5B0RBQna1Ienmuxgs= Subject key identifier: 1D:3F:99:7C:77:BB:E9:E2:BD:1F:08:0B:81:9D:4F:71:CF:1F:AC:9F Authority key identifier: F8:E1:2F:0A:43:3C:8B:73:3B:E3:1D:B5:E0:CD:1E:F2:02:FC:21:EA Certificate issuer: /CN=F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA Certificate serial: 680C445FB47FB86BC460525A6590D56336EC913D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.mft Manifest number: 018B Signing time: Thu 24 Jul 2025 02:03:18 +0000 Manifest this update: Thu 24 Jul 2025 01:58:18 +0000 Manifest next update: Sun 27 Jul 2025 05:45:18 +0000 Files and hashes: 1: 3130332e3139352e36352e302f32342d3234203d3e203234333132.roa (hash: O6HbZbnpwvJlF71+0v/AvXMqBhHi9/+bK/SRCDPbapk=) 2: 3130332e3139352e36352e302f32342d3234203d3e20313532333638.roa (hash: gnmrbZ6phBcjgkNgTfRN5xt+ZC7Cm6KFgCfrhOm4VXQ=) 3: F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.crl (hash: etgNDG+SNKAvGstkmnK3S8XXTZcUIdtoaicHdmWhiGM=) 4: 3130332e3139352e36352e302f32342d3234203d3e203530313034.roa (hash: zq6FCBzDTt8AjXmbK9U4RXyugtl+khIAf1ju1PBBDs8=) 5: 3130332e3139352e36352e302f32342d3234203d3e2036393339.roa (hash: Iki/ujAUR2r8jEic7uIoweO5tx+ZoKhjiMwDTjulvbo=) 6: 3130332e3139352e36352e302f32342d3234203d3e20323131343037.roa (hash: YFqBunOn7BAxcRO9kxvgzIpLLgn70FZ5dEIXUOseJlA=) 7: 3130332e3139352e36352e302f32342d3234203d3e20323130353337.roa (hash: 2FbNCyBbTvgWS7aFYjsLlYd9SYY28PwsTt9mqOb3gc4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.crl rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 05:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:0c:44:5f:b4:7f:b8:6b:c4:60:52:5a:65:90:d5:63:36:ec:91:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA Validity Not Before: Jul 24 01:58:18 2025 GMT Not After : Jul 27 05:45:18 2025 GMT Subject: CN=1D3F997C77BBE9E2BD1F080B819D4F71CF1FAC9F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:3e:3b:13:46:b9:89:27:f1:6c:51:bd:e1:42: dd:1b:1b:e1:31:43:2b:08:7e:43:03:05:98:78:ab: 2e:cf:67:ac:38:e4:7d:48:22:1d:1a:fe:6c:4e:33: 84:6d:01:01:ae:42:b8:3d:89:04:9e:fa:e6:a2:81: dd:75:ee:1c:2a:27:bc:b8:88:fe:fb:0b:61:bb:68: 57:86:c1:53:ce:c0:37:be:5d:73:67:45:e7:ea:4f: 53:35:7c:0d:e5:c8:aa:d3:a1:93:fc:68:cd:bc:aa: ac:ec:ee:b3:09:aa:cd:29:15:79:92:84:2e:b2:3d: aa:63:b4:2f:61:a1:92:06:c7:8a:10:9d:b1:45:a7: 4f:9b:3d:9e:4c:30:7c:45:d2:3b:ba:d0:1b:c2:46: 60:21:34:7e:2c:c4:5a:2b:4c:62:17:51:21:11:ab: 94:2a:79:bd:b0:97:a9:a6:9a:05:8a:aa:15:df:7b: e7:57:8b:0c:6d:57:04:67:72:60:8d:f5:59:0b:9c: f4:e2:ab:61:fe:8f:28:f4:bf:3b:75:b7:b4:26:41: 60:f3:5d:c6:51:69:7e:3e:0d:67:55:3b:27:0a:52: e1:b4:f5:16:e0:68:46:75:aa:4b:bb:c1:94:e9:43: c0:3d:0d:46:69:33:82:8e:10:f0:f4:07:95:4e:ae: b7:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:3F:99:7C:77:BB:E9:E2:BD:1F:08:0B:81:9D:4F:71:CF:1F:AC:9F X509v3 Authority Key Identifier: keyid:F8:E1:2F:0A:43:3C:8B:73:3B:E3:1D:B5:E0:CD:1E:F2:02:FC:21:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:5f:0d:1c:98:21:ca:99:0a:89:01:89:10:d9:6f:26:63:96: e5:82:11:ea:30:47:74:02:90:9e:eb:67:25:03:a9:63:48:be: 68:9e:7b:78:00:af:fc:e1:01:00:23:39:a5:ed:75:2d:e2:a8: 1c:8c:5e:67:2a:d7:b0:df:28:82:f7:c2:6c:59:b8:99:da:e1: 31:cc:cf:0b:9e:1a:a2:b2:08:ee:54:aa:16:31:9a:ec:89:28: 1d:a9:1b:3d:e3:88:ee:5c:b2:a6:4b:bb:ec:a6:87:6e:76:ae: de:d6:cd:12:54:fc:1e:b5:c4:f5:0b:41:f4:31:d2:87:79:cb: b4:e0:5e:bd:6d:85:75:0c:dc:51:3a:25:f5:27:3f:da:f7:81: a2:5f:d9:4e:10:a3:51:1e:78:e9:a9:19:b0:0b:ee:30:de:c7: 59:80:19:c2:b7:a1:98:46:ac:10:5f:70:8b:18:d0:b1:7a:d1: 9a:fd:6f:9b:6f:b0:07:ed:09:cc:9c:0b:c5:2e:e4:ae:8e:30: 1e:a1:b9:bd:a6:9c:62:86:43:16:5a:d6:99:6e:77:b5:79:8f: 29:b5:0e:ee:2c:a9:72:bd:4b:5f:d8:ca:f1:ab:f0:d8:3c:17: ee:bb:15:0d:da:45:04:f4:6c:0a:c8:f7:58:9b:25:a6:b2:77: 14:5d:85:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaAxEX7R/uGvEYFJaZZDVYzbskT0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhFMTJGMEE0MzNDOEI3MzNCRTMxREI1RTBDRDFFRjIw MkZDMjFFQTAeFw0yNTA3MjQwMTU4MThaFw0yNTA3MjcwNTQ1MThaMDMxMTAvBgNV BAMTKDFEM0Y5OTdDNzdCQkU5RTJCRDFGMDgwQjgxOUQ0RjcxQ0YxRkFDOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbPjsTRrmJJ/FsUb3hQt0bG+Ex QysIfkMDBZh4qy7PZ6w45H1IIh0a/mxOM4RtAQGuQrg9iQSe+uaigd117hwqJ7y4 iP77C2G7aFeGwVPOwDe+XXNnRefqT1M1fA3lyKrToZP8aM28qqzs7rMJqs0pFXmS hC6yPapjtC9hoZIGx4oQnbFFp0+bPZ5MMHxF0ju60BvCRmAhNH4sxForTGIXUSER q5Qqeb2wl6mmmgWKqhXfe+dXiwxtVwRncmCN9VkLnPTiq2H+jyj0vzt1t7QmQWDz XcZRaX4+DWdVOycKUuG09RbgaEZ1qku7wZTpQ8A9DUZpM4KOEPD0B5VOrrfDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHT+ZfHe76eK9HwgLgZ1Pcc8frJ8wHwYDVR0j BBgwFoAU+OEvCkM8i3M74x214M0e8gL8IeowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MGNlNDc5Ni00OWRlLTQzYjEtYTE1Mi1iMThkMTFhZGE1MjkvMC9GOEUxMkYwQTQz M0M4QjczM0JFMzFEQjVFMENEMUVGMjAyRkMyMUVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjhFMTJGMEE0MzNDOEI3MzNCRTMxREI1RTBDRDFFRjIwMkZD MjFFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODBjZTQ3OTYtNDlkZS00M2IxLWEx NTItYjE4ZDExYWRhNTI5LzAvRjhFMTJGMEE0MzNDOEI3MzNCRTMxREI1RTBDRDFF RjIwMkZDMjFFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHBfDRyYIcqZCokBiRDZbyZjluWCEeowR3QC kJ7rZyUDqWNIvmiee3gAr/zhAQAjOaXtdS3iqByMXmcq17DfKIL3wmxZuJna4THM zwueGqKyCO5UqhYxmuyJKB2pGz3jiO5csqZLu+ymh252rt7WzRJU/B61xPULQfQx 0od5y7TgXr1thXUM3FE6JfUnP9r3gaJf2U4Qo1EeeOmpGbAL7jDex1mAGcK3oZhG rBBfcIsY0LF60Zr9b5tvsAftCcycC8Uu5K6OMB6hub2mnGKGQxZa1plud7V5jym1 Du4sqXK9S1/YyvGr8Ng8F+67FQ3aRQT0bArI91ibJaaydxRdhZ8= -----END CERTIFICATE-----Generated at Thu Jul 24 04:55:30 2025 by rpki-client