$ rpki-client -vvf repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.mft File: 0FAFA39AA3875A4CF63BCF7E873087927B499D2F.mft (raw, json) Hash identifier: uWjIO9xOtD6it8RcOAVbn3HwunarYNQ5rk7vSqla93w= Subject key identifier: 76:00:1A:42:84:A2:CB:72:64:6C:74:B2:D8:D8:1C:E2:3E:22:C5:1D Authority key identifier: 0F:AF:A3:9A:A3:87:5A:4C:F6:3B:CF:7E:87:30:87:92:7B:49:9D:2F Certificate issuer: /CN=0FAFA39AA3875A4CF63BCF7E873087927B499D2F Certificate serial: 2AF6EE42BDD813220F57ADB934D7F673BC3B4624 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.mft Manifest number: 01FA Signing time: Tue 22 Jul 2025 03:31:13 +0000 Manifest this update: Tue 22 Jul 2025 03:26:13 +0000 Manifest next update: Fri 25 Jul 2025 13:04:13 +0000 Files and hashes: 1: 0FAFA39AA3875A4CF63BCF7E873087927B499D2F.crl (hash: OAqPn590KkjrnmJB0jzAeUd+3waCLHTTfH0VLnwOX08=) 2: 323030313a6466313a326430303a3a2f34382d3438203d3e20313336313132.roa (hash: uiZFjhvQ9ciRjJRK7vZMZHXsl+bdrRUmgcpl6MwjW4M=) 3: 3130332e39322e3233322e302f32332d3233203d3e20313336313132.roa (hash: 5yT7jld1qwMjQ1Wxg8xXgEk9H98NQ/9bvOuTLpVK3wE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.crl rsync://repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 13:04:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:f6:ee:42:bd:d8:13:22:0f:57:ad:b9:34:d7:f6:73:bc:3b:46:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FAFA39AA3875A4CF63BCF7E873087927B499D2F Validity Not Before: Jul 22 03:26:13 2025 GMT Not After : Jul 25 13:04:13 2025 GMT Subject: CN=76001A4284A2CB72646C74B2D8D81CE23E22C51D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:be:0f:f2:0f:72:95:03:c4:3e:59:90:d8:06: 9b:0f:c0:aa:02:3f:f7:9b:bd:83:fc:5e:e3:3e:31: 2b:ec:a5:ab:80:b3:0a:24:18:a3:96:0c:6d:ee:62: d4:d3:72:9a:2b:ae:92:89:78:94:6a:72:5f:53:8f: 69:c5:70:ae:fa:38:90:0d:be:a3:fe:a5:6d:72:5e: 27:85:eb:4d:2b:aa:b2:8b:21:bb:b7:20:67:85:33: 7f:2f:00:37:8f:31:f7:d9:d9:a7:11:11:0a:c1:36: ac:6b:c3:0f:04:31:4a:09:c9:9a:5f:6d:d5:d5:7b: 6b:4f:37:32:1c:bf:7c:c6:7a:0a:b7:53:49:10:83: 14:a6:9e:8d:85:83:58:17:0f:04:61:03:93:c6:22: 1c:b2:84:de:d6:78:b5:0e:e7:4c:b1:85:4d:1f:e6: 89:ef:b8:07:49:99:cc:3a:7d:b1:c5:10:75:f9:5e: 46:f8:de:14:4d:5f:d1:65:e0:a4:12:e5:90:c6:59: 17:75:fa:8f:ec:c4:eb:cf:3a:7b:d9:f3:9d:c1:26: 58:fc:52:96:08:8d:c6:47:78:27:9e:1c:57:2e:b7: 1f:40:83:84:89:d5:0f:b8:5a:55:7f:53:30:25:0a: 0e:58:9e:c1:cc:c8:fa:58:19:4a:b6:1f:50:6b:ae: f3:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:00:1A:42:84:A2:CB:72:64:6C:74:B2:D8:D8:1C:E2:3E:22:C5:1D X509v3 Authority Key Identifier: keyid:0F:AF:A3:9A:A3:87:5A:4C:F6:3B:CF:7E:87:30:87:92:7B:49:9D:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:16:41:d6:88:35:1f:9b:0f:00:6e:79:38:4d:34:ff:ee:f9: fb:71:d6:31:3f:dc:ac:dc:27:e1:55:f3:f2:e3:44:de:4b:8a: e3:76:28:8a:5a:d0:51:ad:c5:2c:fe:11:f5:97:e4:03:66:81: a7:dd:a0:29:33:0b:de:bc:59:b6:f6:d3:8f:d5:0f:df:c7:13: 99:40:26:10:b3:1b:f4:5b:f1:0e:4d:8d:e9:e1:0c:44:54:b4: d3:c2:8e:2c:26:37:e1:7b:ab:5b:84:26:90:33:f8:9e:66:fa: 8a:d5:37:21:c7:df:de:a5:9d:4e:d5:bb:8b:97:91:69:04:67: 0c:e9:9e:df:28:4e:78:bc:8c:ba:08:b3:8a:2c:b6:0a:f0:ad: 77:5c:df:78:c4:70:c9:af:b2:3c:7f:5c:57:77:52:27:d7:48: c1:c6:4b:a6:58:a9:ad:00:a8:1a:6f:6c:07:7e:d2:28:90:87: 4a:5c:9f:cb:4a:31:51:07:67:62:c4:1b:e8:b9:c0:b2:2b:c3: de:2c:c3:ff:aa:d3:4d:26:4b:2e:4e:0d:3e:1e:da:d6:6b:46: 7a:b9:ab:b7:08:88:8f:31:e8:f3:f4:7c:04:d1:59:89:3f:e2: d0:3a:1c:e9:47:5a:82:6a:d4:29:0b:ed:52:52:7f:7a:07:46: be:ff:ee:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKvbuQr3YEyIPV625NNf2c7w7RiQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZBRkEzOUFBMzg3NUE0Q0Y2M0JDRjdFODczMDg3OTI3 QjQ5OUQyRjAeFw0yNTA3MjIwMzI2MTNaFw0yNTA3MjUxMzA0MTNaMDMxMTAvBgNV BAMTKDc2MDAxQTQyODRBMkNCNzI2NDZDNzRCMkQ4RDgxQ0UyM0UyMkM1MUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4vg/yD3KVA8Q+WZDYBpsPwKoC P/ebvYP8XuM+MSvspauAswokGKOWDG3uYtTTcporrpKJeJRqcl9Tj2nFcK76OJAN vqP+pW1yXieF600rqrKLIbu3IGeFM38vADePMffZ2acREQrBNqxrww8EMUoJyZpf bdXVe2tPNzIcv3zGegq3U0kQgxSmno2Fg1gXDwRhA5PGIhyyhN7WeLUO50yxhU0f 5onvuAdJmcw6fbHFEHX5Xkb43hRNX9Fl4KQS5ZDGWRd1+o/sxOvPOnvZ853BJlj8 UpYIjcZHeCeeHFcutx9Ag4SJ1Q+4WlV/UzAlCg5YnsHMyPpYGUq2H1BrrvN/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdgAaQoSiy3JkbHSy2Ngc4j4ixR0wHwYDVR0j BBgwFoAUD6+jmqOHWkz2O89+hzCHkntJnS8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MGUxMWZmYy1lNzVhLTRiZjQtODQ0OC1jNjhlMjAzMzVlZTgvMC8wRkFGQTM5QUEz ODc1QTRDRjYzQkNGN0U4NzMwODc5MjdCNDk5RDJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEZBRkEzOUFBMzg3NUE0Q0Y2M0JDRjdFODczMDg3OTI3QjQ5 OUQyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjBlMTFmZmMtZTc1YS00YmY0LTg0 NDgtYzY4ZTIwMzM1ZWU4LzAvMEZBRkEzOUFBMzg3NUE0Q0Y2M0JDRjdFODczMDg3 OTI3QjQ5OUQyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAkWQdaINR+bDwBueThNNP/u+ftx1jE/3Kzc J+FV8/LjRN5LiuN2KIpa0FGtxSz+EfWX5ANmgafdoCkzC968Wbb204/VD9/HE5lA JhCzG/Rb8Q5NjenhDERUtNPCjiwmN+F7q1uEJpAz+J5m+orVNyHH396lnU7Vu4uX kWkEZwzpnt8oTni8jLoIs4ostgrwrXdc33jEcMmvsjx/XFd3UifXSMHGS6ZYqa0A qBpvbAd+0iiQh0pcn8tKMVEHZ2LEG+i5wLIrw94sw/+q000mSy5ODT4e2tZrRnq5 q7cIiI8x6PP0fATRWYk/4tA6HOlHWoJq1CkL7VJSf3oHRr7/7mA= -----END CERTIFICATE-----Generated at Thu Jul 24 04:51:57 2025 by rpki-client