$ rpki-client -vvf repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.mft File: F256ED0C68D48E70DDBE3473644FDBA420E82FBC.mft (raw, json) Hash identifier: Yw2sgEVsATL0F3Gci10iJUnKI/5mGGQkuuDCxTXIPh4= Subject key identifier: FB:7D:02:DE:8C:61:FB:3B:41:CD:B6:22:AE:9D:8E:68:5F:2B:B2:A2 Authority key identifier: F2:56:ED:0C:68:D4:8E:70:DD:BE:34:73:64:4F:DB:A4:20:E8:2F:BC Certificate issuer: /CN=F256ED0C68D48E70DDBE3473644FDBA420E82FBC Certificate serial: 6C02CBAF1930D170FA4E90FAA270316E9A1F3607 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.mft Manifest number: 0462 Signing time: Sun 07 Sep 2025 10:11:37 +0000 Manifest this update: Sun 07 Sep 2025 10:06:37 +0000 Manifest next update: Wed 10 Sep 2025 18:07:37 +0000 Files and hashes: 1: 3130332e3136312e3133302e302f32332d3233203d3e20313431363133.roa (hash: KW5knR4ALt6hLV7qJyhXL5J0Aia4lk+P8+shKebFztw=) 2: 3130332e3136312e3133312e302f32342d3234203d3e20313431363133.roa (hash: k4MdP+pLjawFS04xVNJ5Qw3RpHb/EN1we0LXgjwR3jc=) 3: 3130332e3136312e3133302e302f32342d3234203d3e20313431363133.roa (hash: ZmtyjH4esGBpYxS6kg8mvGLf2n4U5Kw19ahenRHRz1U=) 4: F256ED0C68D48E70DDBE3473644FDBA420E82FBC.crl (hash: JL1qrN1PRzgq4cYZHp3VoDCdm/txIemmL7a75+ZqMyU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.crl rsync://repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 10:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:02:cb:af:19:30:d1:70:fa:4e:90:fa:a2:70:31:6e:9a:1f:36:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F256ED0C68D48E70DDBE3473644FDBA420E82FBC Validity Not Before: Sep 7 10:06:37 2025 GMT Not After : Sep 10 18:07:37 2025 GMT Subject: CN=FB7D02DE8C61FB3B41CDB622AE9D8E685F2BB2A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:3c:dd:1d:7b:d5:6a:52:06:50:d3:91:3e:da: 37:9f:72:65:21:b3:51:c9:e8:db:2b:81:99:9d:d7: d6:89:31:4e:cf:ec:0a:24:21:05:a2:9e:5b:bc:0e: 62:93:11:88:3c:25:2f:73:12:85:8b:ec:ca:07:bd: 8c:29:b2:20:e6:84:be:22:eb:9c:04:5a:95:16:9d: 79:ef:32:66:71:5e:67:dd:3d:fc:24:cb:19:a4:d5: 20:0d:39:48:f9:e8:1d:2d:a3:aa:db:67:d0:3c:05: 36:e9:83:1c:44:75:ba:40:c5:df:0a:2b:b9:24:42: af:6b:dc:5f:93:2f:62:46:a5:8a:00:79:b4:c8:ad: 62:38:61:1a:47:93:34:83:c4:7c:c8:18:56:8a:4c: 1f:16:7e:48:8d:57:c6:18:50:c3:e9:c0:ba:2b:b1: 1a:55:b4:9e:90:eb:82:1e:11:62:b8:f0:85:5b:5f: 30:5c:5c:e7:6d:c1:65:61:85:d8:83:c2:2a:59:a4: bc:72:e7:20:a4:10:96:46:2b:76:94:55:36:37:2f: c3:0f:46:ac:65:ba:96:0b:93:c7:59:09:c8:45:17: a3:ad:d0:62:9b:49:57:2a:c1:6f:19:70:a7:ef:c0: 15:0a:fe:49:9c:f1:d0:40:df:e1:19:03:dd:a7:06: da:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:7D:02:DE:8C:61:FB:3B:41:CD:B6:22:AE:9D:8E:68:5F:2B:B2:A2 X509v3 Authority Key Identifier: keyid:F2:56:ED:0C:68:D4:8E:70:DD:BE:34:73:64:4F:DB:A4:20:E8:2F:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:55:e4:c9:61:26:91:c5:93:f2:76:68:ea:da:da:d3:b3:82: 9c:c7:c7:d0:b8:0a:23:65:e6:0c:90:4b:a2:d0:18:a0:c7:b4: d5:08:c8:28:48:e7:92:dc:00:c7:39:99:72:5f:84:ae:a0:11: 41:d9:d7:e8:93:af:01:06:a7:03:3b:85:79:2e:1b:fe:1f:bf: 0f:4b:af:e6:ed:0e:c1:29:d6:47:f9:78:a9:5d:ef:01:71:b8: 89:27:ee:1c:a3:8f:03:42:84:d6:cb:22:97:ab:e1:2d:81:0a: 01:36:e1:46:42:ba:7f:a6:21:36:4d:60:e8:9f:30:f6:6a:29: 7d:3d:47:b2:67:7f:46:26:36:cb:49:4a:fc:8a:b7:71:91:3a: 55:51:6d:39:7c:05:10:50:48:fc:bb:9b:ff:1b:46:4c:5a:89: 7e:9b:63:89:65:ad:58:a2:05:81:75:ef:04:15:c8:93:b6:ed: 11:ab:05:b0:1f:ce:bb:9f:cb:a7:12:53:a9:6b:72:13:a1:e6: a1:cc:39:22:14:68:8b:17:a8:b9:71:d2:2f:48:82:a7:cb:e2: 88:b4:0c:d2:1e:c8:41:00:69:fd:4a:1b:c9:10:ca:0d:b5:1b: fd:c5:5d:06:19:07:be:ec:d5:36:01:06:7d:64:7d:05:57:1c: 71:61:69:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbALLrxkw0XD6TpD6onAxbpofNgcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1NkVEMEM2OEQ0OEU3MEREQkUzNDczNjQ0RkRCQTQy MEU4MkZCQzAeFw0yNTA5MDcxMDA2MzdaFw0yNTA5MTAxODA3MzdaMDMxMTAvBgNV BAMTKEZCN0QwMkRFOEM2MUZCM0I0MUNEQjYyMkFFOUQ4RTY4NUYyQkIyQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSPN0de9VqUgZQ05E+2jefcmUh s1HJ6NsrgZmd19aJMU7P7AokIQWinlu8DmKTEYg8JS9zEoWL7MoHvYwpsiDmhL4i 65wEWpUWnXnvMmZxXmfdPfwkyxmk1SANOUj56B0to6rbZ9A8BTbpgxxEdbpAxd8K K7kkQq9r3F+TL2JGpYoAebTIrWI4YRpHkzSDxHzIGFaKTB8WfkiNV8YYUMPpwLor sRpVtJ6Q64IeEWK48IVbXzBcXOdtwWVhhdiDwipZpLxy5yCkEJZGK3aUVTY3L8MP RqxlupYLk8dZCchFF6Ot0GKbSVcqwW8ZcKfvwBUK/kmc8dBA3+EZA92nBtorAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+30C3oxh+ztBzbYirp2OaF8rsqIwHwYDVR0j BBgwFoAU8lbtDGjUjnDdvjRzZE/bpCDoL7wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTVjNzNjYy05ODVlLTRlOTItYmE2OS1jZDhiZmZlNGE1M2QvMC9GMjU2RUQwQzY4 RDQ4RTcwRERCRTM0NzM2NDRGREJBNDIwRTgyRkJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjI1NkVEMEM2OEQ0OEU3MEREQkUzNDczNjQ0RkRCQTQyMEU4 MkZCQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U1YzczY2MtOTg1ZS00ZTkyLWJh NjktY2Q4YmZmZTRhNTNkLzAvRjI1NkVEMEM2OEQ0OEU3MEREQkUzNDczNjQ0RkRC QTQyMEU4MkZCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACdV5MlhJpHFk/J2aOra2tOzgpzHx9C4CiNl 5gyQS6LQGKDHtNUIyChI55LcAMc5mXJfhK6gEUHZ1+iTrwEGpwM7hXkuG/4fvw9L r+btDsEp1kf5eKld7wFxuIkn7hyjjwNChNbLIper4S2BCgE24UZCun+mITZNYOif MPZqKX09R7Jnf0YmNstJSvyKt3GROlVRbTl8BRBQSPy7m/8bRkxaiX6bY4llrVii BYF17wQVyJO27RGrBbAfzrufy6cSU6lrchOh5qHMOSIUaIsXqLlx0i9IgqfL4oi0 DNIeyEEAaf1KG8kQyg21G/3FXQYZB77s1TYBBn1kfQVXHHFhaWw= -----END CERTIFICATE-----Generated at Sun Sep 7 13:59:06 2025 by rpki-client