$ rpki-client -vvf repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.mft File: F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.mft (raw, json) Hash identifier: 9wIJz/G3cdgRtZLbLNQlwuH7oumCLPrKj2V+nTtFRsM= Subject key identifier: 30:C1:C2:6E:27:16:87:C1:35:8C:8F:BA:DF:A3:21:AF:1E:D4:F1:A7 Authority key identifier: F8:E1:2F:0A:43:3C:8B:73:3B:E3:1D:B5:E0:CD:1E:F2:02:FC:21:EA Certificate issuer: /CN=F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA Certificate serial: 79FAB5B21DA7896F398EB945433F13AEC543C532 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.mft Manifest number: 018A Signing time: Tue 22 Jul 2025 01:01:55 +0000 Manifest this update: Tue 22 Jul 2025 00:56:55 +0000 Manifest next update: Fri 25 Jul 2025 01:56:55 +0000 Files and hashes: 1: 3130332e3139352e36352e302f32342d3234203d3e20323130353337.roa (hash: 2FbNCyBbTvgWS7aFYjsLlYd9SYY28PwsTt9mqOb3gc4=) 2: F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.crl (hash: KL3f/r5oRJ4bWsYehUeS/e9V4RbD+P5rlvk5drxleGc=) 3: 3130332e3139352e36352e302f32342d3234203d3e2036393339.roa (hash: Iki/ujAUR2r8jEic7uIoweO5tx+ZoKhjiMwDTjulvbo=) 4: 3130332e3139352e36352e302f32342d3234203d3e20313532333638.roa (hash: gnmrbZ6phBcjgkNgTfRN5xt+ZC7Cm6KFgCfrhOm4VXQ=) 5: 3130332e3139352e36352e302f32342d3234203d3e203530313034.roa (hash: zq6FCBzDTt8AjXmbK9U4RXyugtl+khIAf1ju1PBBDs8=) 6: 3130332e3139352e36352e302f32342d3234203d3e20323131343037.roa (hash: YFqBunOn7BAxcRO9kxvgzIpLLgn70FZ5dEIXUOseJlA=) 7: 3130332e3139352e36352e302f32342d3234203d3e203234333132.roa (hash: O6HbZbnpwvJlF71+0v/AvXMqBhHi9/+bK/SRCDPbapk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.crl rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 01:56:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:fa:b5:b2:1d:a7:89:6f:39:8e:b9:45:43:3f:13:ae:c5:43:c5:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA Validity Not Before: Jul 22 00:56:55 2025 GMT Not After : Jul 25 01:56:55 2025 GMT Subject: CN=30C1C26E271687C1358C8FBADFA321AF1ED4F1A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:34:d4:c9:1c:9e:c5:ba:64:0b:af:87:f0:db: 93:88:0e:29:cd:f4:1f:85:98:bb:ba:10:4d:db:8b: 78:d4:90:31:0e:47:73:e3:5d:ca:74:67:11:63:e6: 40:53:f2:66:8c:31:d6:a3:df:a9:cc:b7:e8:28:b7: d1:1a:ce:0c:99:6c:ff:c0:39:5c:39:ae:9b:ec:59: 0b:d3:8f:3a:88:83:24:9b:b4:ee:3d:63:ae:d2:c5: 04:3b:7f:5b:1e:b4:87:b3:ca:ef:42:fe:b5:b3:76: 40:5b:ce:f1:50:ee:b6:75:0a:81:98:29:a9:c3:46: 71:fa:f8:bb:2b:d3:89:2f:25:73:78:6d:c0:e8:30: 5c:5d:f7:7d:9d:e5:8b:22:68:e5:1e:05:f9:de:24: cf:d9:e2:e7:56:7d:91:9a:bd:f2:21:09:a8:05:fc: 1f:6f:49:d3:6d:3c:49:d9:88:41:13:a0:37:8b:87: c9:c4:fe:26:f1:3c:cf:36:fd:54:f7:08:27:c7:3c: b0:50:3a:65:0a:ab:8f:50:d5:e2:4b:c2:a7:43:a7: 07:c5:fb:b9:a1:21:ac:83:85:cf:0c:d4:71:c0:4e: 47:f7:ed:ee:a6:85:c6:3e:4d:f6:65:d1:46:ae:97: a4:01:4e:47:3d:48:fe:23:97:85:8a:e0:a3:cb:20: 54:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:C1:C2:6E:27:16:87:C1:35:8C:8F:BA:DF:A3:21:AF:1E:D4:F1:A7 X509v3 Authority Key Identifier: keyid:F8:E1:2F:0A:43:3C:8B:73:3B:E3:1D:B5:E0:CD:1E:F2:02:FC:21:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:74:6a:d9:0f:ad:2f:20:09:95:65:69:b0:d6:26:56:90:10: 60:e1:c9:55:ca:73:3e:f1:52:01:c6:be:5b:7d:91:8d:28:67: 3b:79:34:4c:a6:20:a4:31:83:bf:d8:74:7c:66:9d:a4:4f:0e: 73:a2:c4:74:ca:86:cd:9b:eb:3f:c4:b3:ed:51:88:17:6a:72: ae:c8:17:7d:fe:f3:42:f0:31:b8:75:bd:f2:60:d3:05:26:5b: 3d:73:08:c0:11:cb:2b:1e:af:7d:c3:9b:89:6a:32:a2:84:b6: b0:fb:4f:f3:60:b4:72:33:58:1f:59:b8:f2:6f:76:c1:a5:49: 92:47:fd:69:74:f6:6b:17:b0:58:2e:09:65:ce:3a:1e:60:05: bb:89:4e:7a:4f:80:45:d2:1d:ad:e6:2c:ec:13:05:d9:9d:8e: d8:b5:ab:fb:23:62:14:77:09:3b:7e:a8:1a:20:fc:5b:1e:56: fe:33:53:37:88:dc:05:2f:69:6e:77:c4:4f:45:e3:1b:a0:59: 44:6c:15:eb:69:e9:51:08:d0:34:b0:ec:b2:2b:9a:d8:12:27: 29:d0:3a:25:32:c5:88:97:86:6a:de:ec:b2:f6:22:84:3a:24: 3a:c2:a8:36:c2:6b:82:53:40:8e:bd:1c:5e:42:cc:0f:11:9f: fa:d9:6b:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUefq1sh2niW85jrlFQz8TrsVDxTIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhFMTJGMEE0MzNDOEI3MzNCRTMxREI1RTBDRDFFRjIw MkZDMjFFQTAeFw0yNTA3MjIwMDU2NTVaFw0yNTA3MjUwMTU2NTVaMDMxMTAvBgNV BAMTKDMwQzFDMjZFMjcxNjg3QzEzNThDOEZCQURGQTMyMUFGMUVENEYxQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqNNTJHJ7FumQLr4fw25OIDinN 9B+FmLu6EE3bi3jUkDEOR3PjXcp0ZxFj5kBT8maMMdaj36nMt+got9EazgyZbP/A OVw5rpvsWQvTjzqIgySbtO49Y67SxQQ7f1setIezyu9C/rWzdkBbzvFQ7rZ1CoGY KanDRnH6+Lsr04kvJXN4bcDoMFxd932d5YsiaOUeBfneJM/Z4udWfZGavfIhCagF /B9vSdNtPEnZiEEToDeLh8nE/ibxPM82/VT3CCfHPLBQOmUKq49Q1eJLwqdDpwfF +7mhIayDhc8M1HHATkf37e6mhcY+TfZl0Uaul6QBTkc9SP4jl4WK4KPLIFQ5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMMHCbicWh8E1jI+636Mhrx7U8acwHwYDVR0j BBgwFoAU+OEvCkM8i3M74x214M0e8gL8IeowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MGNlNDc5Ni00OWRlLTQzYjEtYTE1Mi1iMThkMTFhZGE1MjkvMC9GOEUxMkYwQTQz M0M4QjczM0JFMzFEQjVFMENEMUVGMjAyRkMyMUVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjhFMTJGMEE0MzNDOEI3MzNCRTMxREI1RTBDRDFFRjIwMkZD MjFFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODBjZTQ3OTYtNDlkZS00M2IxLWEx NTItYjE4ZDExYWRhNTI5LzAvRjhFMTJGMEE0MzNDOEI3MzNCRTMxREI1RTBDRDFF RjIwMkZDMjFFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJl0atkPrS8gCZVlabDWJlaQEGDhyVXKcz7x UgHGvlt9kY0oZzt5NEymIKQxg7/YdHxmnaRPDnOixHTKhs2b6z/Es+1RiBdqcq7I F33+80LwMbh1vfJg0wUmWz1zCMARyyser33Dm4lqMqKEtrD7T/NgtHIzWB9ZuPJv dsGlSZJH/Wl09msXsFguCWXOOh5gBbuJTnpPgEXSHa3mLOwTBdmdjti1q/sjYhR3 CTt+qBog/FseVv4zUzeI3AUvaW53xE9F4xugWURsFetp6VEI0DSw7LIrmtgSJynQ OiUyxYiXhmre7LL2IoQ6JDrCqDbCa4JTQI69HF5CzA8Rn/rZazU= -----END CERTIFICATE-----Generated at Tue Jul 22 11:53:24 2025 by rpki-client