$ rpki-client -vvf repo-rpki.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.mft File: F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.mft (raw, json) Hash identifier: Oqczz+djZUWseDsrofPtYGoqqYtyLLTJpLGnjIXTh1M= Subject key identifier: 12:F7:56:59:0C:C1:00:C7:E1:8D:0F:5E:0F:60:CE:E9:6C:92:BF:4F Authority key identifier: F8:B7:C8:E5:DD:BD:D0:36:51:3F:10:B8:7F:39:A9:4B:E1:DB:3D:CA Certificate issuer: /CN=F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA Certificate serial: 7B91BCAE1B74B42D5638F7D9118A2A34279F7A61 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.mft Manifest number: 01E1 Signing time: Tue 03 Jun 2025 05:11:07 +0000 Manifest this update: Tue 03 Jun 2025 05:06:07 +0000 Manifest next update: Fri 06 Jun 2025 13:47:07 +0000 Files and hashes: 1: 3130332e3138392e3131372e302f32342d3234203d3e20313439383738.roa (hash: DOr4kkGYLGRSmLcOevTF3B7Hy6DQ86EG8bZ/AC5agXc=) 2: F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.crl (hash: 5qZHWnC7o6nol83im0ljkUZLbSksl64j0VvGWIBRtjE=) 3: 3130332e3138392e3131362e302f32342d3234203d3e20313439383738.roa (hash: KqXfnSM3Zf6qKcNW2AyH6vBJa4OplROJDu965qDaJhk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.crl rsync://repo-rpki.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 13:47:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:91:bc:ae:1b:74:b4:2d:56:38:f7:d9:11:8a:2a:34:27:9f:7a:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA Validity Not Before: Jun 3 05:06:07 2025 GMT Not After : Jun 6 13:47:07 2025 GMT Subject: CN=12F756590CC100C7E18D0F5E0F60CEE96C92BF4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ff:63:9e:96:4c:a7:66:14:81:14:4a:dd:6c: cd:0a:c6:3a:49:f8:b3:32:de:5d:82:5e:6a:7b:8b: 30:ef:d4:03:ed:14:84:fd:48:77:5c:8f:ad:4e:3e: 4e:92:94:d2:12:d3:92:b5:62:98:de:aa:7e:8c:35: 3a:c0:32:bb:00:d3:40:d2:c9:d0:38:a2:34:58:ea: 51:53:aa:20:a5:6c:be:e3:c2:9b:a6:a2:ac:d6:67: 70:7f:1e:1d:c2:69:50:4e:31:6f:25:67:2e:39:a8: e8:9f:5b:34:87:f5:4e:72:94:81:9e:b8:ee:fa:80: 2d:c6:a3:77:f7:bf:a8:78:86:44:26:33:d3:9f:46: 68:dd:d3:2c:fc:2b:78:4b:a8:d9:c0:00:eb:99:e3: 31:2c:ae:25:db:c3:08:2f:45:24:95:ae:0d:a2:a4: cf:d5:9f:0c:76:b3:b8:a8:6e:f7:e0:51:a2:6b:65: ee:e3:2b:61:57:2e:47:d7:ef:1a:89:0a:39:b0:9e: e5:e5:67:0d:65:65:08:d4:c1:4a:ce:ba:11:fe:92: cd:c7:a1:d2:b0:0e:02:52:02:26:c7:f1:f7:11:cf: cc:76:cc:ed:c3:68:f0:a2:87:d2:b5:19:e8:81:fd: f1:7a:a0:8f:21:d1:9d:09:5d:e9:bb:22:59:f1:d5: e7:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:F7:56:59:0C:C1:00:C7:E1:8D:0F:5E:0F:60:CE:E9:6C:92:BF:4F X509v3 Authority Key Identifier: keyid:F8:B7:C8:E5:DD:BD:D0:36:51:3F:10:B8:7F:39:A9:4B:E1:DB:3D:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:4d:c4:f0:3b:af:42:76:cf:bb:ac:25:7e:23:d0:bf:95:f7: 03:49:1e:cf:64:57:3e:a0:a4:46:d4:d6:e0:f7:36:81:75:6c: e2:b7:62:bb:28:73:b2:44:d4:f0:59:ab:db:ec:db:82:b3:17: 24:0b:1f:88:54:f2:e0:fc:62:0a:34:d2:ca:c3:83:1a:e3:1e: b8:3d:3a:15:f2:4e:06:0b:cc:66:b1:8a:84:2e:ad:31:6f:6b: e4:c8:e4:22:3f:30:0c:9f:17:29:8f:26:bc:5d:bf:1c:25:50: 4d:f6:b5:1c:b9:a1:e8:4d:09:0d:db:e4:42:63:f3:91:c7:1e: f3:15:d1:45:5c:26:f1:f6:07:c4:48:9f:c2:bd:d0:e1:1f:f3: ba:b1:b3:b6:e2:2f:14:0f:e2:d1:7b:cf:45:5a:e1:7b:0c:0b: e0:ed:84:cd:44:dc:e0:98:98:35:90:b3:f4:9f:84:69:98:58: f2:bf:d7:32:5f:f1:7e:12:d3:73:0d:fd:79:7f:b1:38:3e:7f: e8:2e:d7:76:83:f6:48:2b:d9:64:94:92:f9:8c:47:e1:35:54: 68:0c:2c:a8:60:bf:dc:58:8e:56:85:4d:ce:0a:fe:b4:a4:86: 19:58:b2:90:43:fc:6f:46:0c:12:48:d0:70:6e:e9:c1:8d:dc: 67:ca:4e:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe5G8rht0tC1WOPfZEYoqNCefemEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhCN0M4RTVEREJERDAzNjUxM0YxMEI4N0YzOUE5NEJF MURCM0RDQTAeFw0yNTA2MDMwNTA2MDdaFw0yNTA2MDYxMzQ3MDdaMDMxMTAvBgNV BAMTKDEyRjc1NjU5MENDMTAwQzdFMThEMEY1RTBGNjBDRUU5NkM5MkJGNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq/2OelkynZhSBFErdbM0KxjpJ +LMy3l2CXmp7izDv1APtFIT9SHdcj61OPk6SlNIS05K1Ypjeqn6MNTrAMrsA00DS ydA4ojRY6lFTqiClbL7jwpumoqzWZ3B/Hh3CaVBOMW8lZy45qOifWzSH9U5ylIGe uO76gC3Go3f3v6h4hkQmM9OfRmjd0yz8K3hLqNnAAOuZ4zEsriXbwwgvRSSVrg2i pM/Vnwx2s7iobvfgUaJrZe7jK2FXLkfX7xqJCjmwnuXlZw1lZQjUwUrOuhH+ks3H odKwDgJSAibH8fcRz8x2zO3DaPCih9K1GeiB/fF6oI8h0Z0JXem7Ilnx1efHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEvdWWQzBAMfhjQ9eD2DO6WySv08wHwYDVR0j BBgwFoAU+LfI5d290DZRPxC4fzmpS+HbPcowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MzA1YWIzMC01NjUzLTQyYmMtOWMzZi1hYWY1NjdlYWU3MDEvMC9GOEI3QzhFNURE QkREMDM2NTEzRjEwQjg3RjM5QTk0QkUxREIzRENBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjhCN0M4RTVEREJERDAzNjUxM0YxMEI4N0YzOUE5NEJFMURC M0RDQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzMwNWFiMzAtNTY1My00MmJjLTlj M2YtYWFmNTY3ZWFlNzAxLzAvRjhCN0M4RTVEREJERDAzNjUxM0YxMEI4N0YzOUE5 NEJFMURCM0RDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFFNxPA7r0J2z7usJX4j0L+V9wNJHs9kVz6g pEbU1uD3NoF1bOK3Yrsoc7JE1PBZq9vs24KzFyQLH4hU8uD8Ygo00srDgxrjHrg9 OhXyTgYLzGaxioQurTFva+TI5CI/MAyfFymPJrxdvxwlUE32tRy5oehNCQ3b5EJj 85HHHvMV0UVcJvH2B8RIn8K90OEf87qxs7biLxQP4tF7z0Va4XsMC+DthM1E3OCY mDWQs/SfhGmYWPK/1zJf8X4S03MN/Xl/sTg+f+gu13aD9kgr2WSUkvmMR+E1VGgM LKhgv9xYjlaFTc4K/rSkhhlYspBD/G9GDBJI0HBu6cGN3GfKTmY= -----END CERTIFICATE-----Generated at Tue Jun 3 23:43:37 2025 by rpki-client