$ rpki-client -vvf repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.mft File: F7D89AF4A6B49559B90BD1A11D2262692C406D9B.mft (raw, json) Hash identifier: gu7OSyB2PfIhaqTRurxAv5iVY9zTgWDEUyOHmnnXExw= Subject key identifier: DF:D4:F2:7F:02:88:82:BD:94:54:42:18:7C:67:88:95:27:34:EE:E3 Authority key identifier: F7:D8:9A:F4:A6:B4:95:59:B9:0B:D1:A1:1D:22:62:69:2C:40:6D:9B Certificate issuer: /CN=F7D89AF4A6B49559B90BD1A11D2262692C406D9B Certificate serial: 6A0EFC51BA3CACA2A69FFC1929E178B14C094ED4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.mft Manifest number: 01E1 Signing time: Thu 04 Sep 2025 10:31:19 +0000 Manifest this update: Thu 04 Sep 2025 10:26:19 +0000 Manifest next update: Sun 07 Sep 2025 15:15:19 +0000 Files and hashes: 1: 3130332e31332e3230352e302f32342d3234203d3e20313532333636.roa (hash: bNck8LpKpp26kW2UN16eMZ1fOvjILY8XEu10GDGQj+I=) 2: 3130332e31332e3230342e302f32342d3234203d3e203438343635.roa (hash: WBg+Oj5FDShLbz1I5ijbkQnlP4hqNRkJwhL0ngYl8bg=) 3: 3130332e31332e3230352e302f32342d3234203d3e203438343635.roa (hash: /BkZhdhHuWpr0COSSqEa5xQ/tUEnJqvOpL9FKXE/Mm4=) 4: F7D89AF4A6B49559B90BD1A11D2262692C406D9B.crl (hash: eN2oPZ3xHpIZy+ZhCCq364j/9WLG8hROWRYO2yNd03g=) 5: 3130332e31332e3230342e302f32342d3234203d3e203634333030.roa (hash: aoGZEwGfwxorrH0vm0ZUZnYbhYMMuOl+o+RcX6GAvoE=) 6: 3130332e31332e3230342e302f32332d3233203d3e203634333030.roa (hash: 2AxkviF5pv7j1kTQ3v8XjI6k7pg1zXnW3iJ2qwjQWV0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.crl rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 15:15:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:0e:fc:51:ba:3c:ac:a2:a6:9f:fc:19:29:e1:78:b1:4c:09:4e:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F7D89AF4A6B49559B90BD1A11D2262692C406D9B Validity Not Before: Sep 4 10:26:19 2025 GMT Not After : Sep 7 15:15:19 2025 GMT Subject: CN=DFD4F27F028882BD945442187C6788952734EEE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ff:9e:96:3d:2f:3d:cd:79:93:89:ed:9c:b4: b9:dc:fc:f7:26:e8:c2:75:a0:9e:3d:e1:2c:a2:5a: f2:fd:5c:f1:c9:5c:e2:a4:b2:76:95:85:bc:cf:92: ea:b1:09:dd:55:b4:18:ef:57:8c:80:34:ee:be:fe: 73:de:de:01:30:57:30:5d:97:ee:b6:10:aa:28:04: 74:66:d1:3d:e1:d4:7c:50:71:f0:4e:59:24:60:57: af:37:ca:81:9c:93:f4:dd:95:65:f4:86:51:70:cf: cb:71:f7:72:f7:90:e4:ce:36:c0:bd:4c:bf:a3:19: 68:a0:c5:e6:df:38:86:bb:0f:05:b2:90:6c:5a:63: 43:7e:37:d5:05:00:21:88:a9:f9:ea:0a:7f:14:d3: 11:d7:3f:26:79:27:a2:05:1c:5f:a1:0d:67:4f:f0: cf:86:c3:12:7e:5e:5b:e4:a3:83:9a:1c:44:0d:fe: 65:59:45:2a:60:05:bf:02:12:55:95:7b:6a:73:fd: 4a:65:8c:19:e9:53:36:4e:6f:a4:6f:ec:36:5a:d9: ce:b9:f9:8a:98:47:ab:66:8f:e2:80:3e:08:9f:ca: 42:60:c4:2e:73:7b:77:60:74:20:68:dc:64:b7:96: 1d:37:36:c3:31:03:86:f3:34:7b:87:a2:9b:14:8d: 8b:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:D4:F2:7F:02:88:82:BD:94:54:42:18:7C:67:88:95:27:34:EE:E3 X509v3 Authority Key Identifier: keyid:F7:D8:9A:F4:A6:B4:95:59:B9:0B:D1:A1:1D:22:62:69:2C:40:6D:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:c6:71:21:ee:9b:50:bf:b8:ad:38:01:75:57:a8:7e:2d:50: 94:ba:bd:cb:49:12:78:ff:da:50:7d:98:09:49:fa:9d:78:91: 8c:bb:74:e3:61:f5:d5:59:37:b1:76:61:fb:02:70:c4:74:ce: 0e:e2:67:6f:a3:df:a7:c0:b6:6d:d5:80:89:14:e5:a8:b5:57: 78:6b:a2:08:7f:23:71:40:93:1f:b5:12:a1:56:1b:f0:4c:42: 5e:95:74:38:bc:d9:af:87:26:52:01:e6:d9:99:d1:d4:2a:03: 00:96:17:b5:f1:3b:ea:46:c9:3b:e9:47:c6:7b:7d:01:1a:68: 8e:3e:37:c2:64:41:53:11:1e:4d:e3:7d:85:b0:7b:bb:98:9f: 61:76:bb:c3:5d:1e:e1:a1:1f:c1:e0:5e:26:d7:c3:0c:81:b5: d7:83:41:43:19:33:2a:c0:e8:1b:3f:53:04:93:4e:1d:1c:09: 04:32:62:77:6f:51:58:49:25:92:b3:cc:da:86:14:33:0f:84: 95:af:48:2d:eb:a6:69:dd:7f:c5:92:8c:74:95:44:79:9b:2c: de:3d:be:54:12:80:18:c3:7b:83:e2:15:ef:71:5e:b0:2f:6f: 6c:b0:42:3a:82:37:5f:33:6c:df:61:84:5f:87:22:3b:f3:d1: b1:94:fb:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUag78Ubo8rKKmn/wZKeF4sUwJTtQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjdEODlBRjRBNkI0OTU1OUI5MEJEMUExMUQyMjYyNjky QzQwNkQ5QjAeFw0yNTA5MDQxMDI2MTlaFw0yNTA5MDcxNTE1MTlaMDMxMTAvBgNV BAMTKERGRDRGMjdGMDI4ODgyQkQ5NDU0NDIxODdDNjc4ODk1MjczNEVFRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7/56WPS89zXmTie2ctLnc/Pcm 6MJ1oJ494SyiWvL9XPHJXOKksnaVhbzPkuqxCd1VtBjvV4yANO6+/nPe3gEwVzBd l+62EKooBHRm0T3h1HxQcfBOWSRgV683yoGck/TdlWX0hlFwz8tx93L3kOTONsC9 TL+jGWigxebfOIa7DwWykGxaY0N+N9UFACGIqfnqCn8U0xHXPyZ5J6IFHF+hDWdP 8M+GwxJ+Xlvko4OaHEQN/mVZRSpgBb8CElWVe2pz/UpljBnpUzZOb6Rv7DZa2c65 +YqYR6tmj+KAPgifykJgxC5ze3dgdCBo3GS3lh03NsMxA4bzNHuHopsUjYuVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU39TyfwKIgr2UVEIYfGeIlSc07uMwHwYDVR0j BBgwFoAU99ia9Ka0lVm5C9GhHSJiaSxAbZswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZmM5MDk2Yy0yOGRjLTQ0ZTQtYjRjZi05NmQ2MzFiNzNhYzAvMC9GN0Q4OUFGNEE2 QjQ5NTU5QjkwQkQxQTExRDIyNjI2OTJDNDA2RDlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjdEODlBRjRBNkI0OTU1OUI5MEJEMUExMUQyMjYyNjkyQzQw NkQ5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmZjOTA5NmMtMjhkYy00NGU0LWI0 Y2YtOTZkNjMxYjczYWMwLzAvRjdEODlBRjRBNkI0OTU1OUI5MEJEMUExMUQyMjYy NjkyQzQwNkQ5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJnGcSHum1C/uK04AXVXqH4tUJS6vctJEnj/ 2lB9mAlJ+p14kYy7dONh9dVZN7F2YfsCcMR0zg7iZ2+j36fAtm3VgIkU5ai1V3hr ogh/I3FAkx+1EqFWG/BMQl6VdDi82a+HJlIB5tmZ0dQqAwCWF7XxO+pGyTvpR8Z7 fQEaaI4+N8JkQVMRHk3jfYWwe7uYn2F2u8NdHuGhH8HgXibXwwyBtdeDQUMZMyrA 6Bs/UwSTTh0cCQQyYndvUVhJJZKzzNqGFDMPhJWvSC3rpmndf8WSjHSVRHmbLN49 vlQSgBjDe4PiFe9xXrAvb2ywQjqCN18zbN9hhF+HIjvz0bGU+7w= -----END CERTIFICATE-----Generated at Fri Sep 5 19:49:14 2025 by rpki-client