$ rpki-client -vvf repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.mft File: F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.mft (raw, json) Hash identifier: ZoJ8TLSQsfneT6m6guJTtnUwC1KGuXCB6+GssCrWWdg= Subject key identifier: 0F:74:FE:F9:74:67:CC:43:4E:83:2A:49:95:3E:BE:54:D3:DD:2E:53 Authority key identifier: F8:E1:2F:0A:43:3C:8B:73:3B:E3:1D:B5:E0:CD:1E:F2:02:FC:21:EA Certificate issuer: /CN=F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA Certificate serial: 2A55F52FC9D214FF1496432A59E33406440175CB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.mft Manifest number: 01A2 Signing time: Sun 14 Sep 2025 06:51:58 +0000 Manifest this update: Sun 14 Sep 2025 06:46:58 +0000 Manifest next update: Wed 17 Sep 2025 14:53:58 +0000 Files and hashes: 1: 3130332e3139352e36352e302f32342d3234203d3e20323131343037.roa (hash: YFqBunOn7BAxcRO9kxvgzIpLLgn70FZ5dEIXUOseJlA=) 2: 3130332e3139352e36352e302f32342d3234203d3e20313532333638.roa (hash: gnmrbZ6phBcjgkNgTfRN5xt+ZC7Cm6KFgCfrhOm4VXQ=) 3: 3130332e3139352e36352e302f32342d3234203d3e20323130353337.roa (hash: kIEXLbdHyNVR/2+p4R7baZ0vAlG7dZTeEpJcDfIBOIk=) 4: 3130332e3139352e36352e302f32342d3234203d3e203234333132.roa (hash: O6HbZbnpwvJlF71+0v/AvXMqBhHi9/+bK/SRCDPbapk=) 5: F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.crl (hash: TxW49KSOZ1vf87pj8CD2xUAga8v5YoRM1IpUi60W7UM=) 6: 3130332e3139352e36352e302f32342d3234203d3e2036393339.roa (hash: Iki/ujAUR2r8jEic7uIoweO5tx+ZoKhjiMwDTjulvbo=) 7: 3130332e3139352e36352e302f32342d3234203d3e203530313034.roa (hash: zq6FCBzDTt8AjXmbK9U4RXyugtl+khIAf1ju1PBBDs8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.crl rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Sep 2025 14:53:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:55:f5:2f:c9:d2:14:ff:14:96:43:2a:59:e3:34:06:44:01:75:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA Validity Not Before: Sep 14 06:46:58 2025 GMT Not After : Sep 17 14:53:58 2025 GMT Subject: CN=0F74FEF97467CC434E832A49953EBE54D3DD2E53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:8b:16:55:6e:8e:b4:e6:d0:28:c4:39:0c:54: bb:52:8e:aa:d2:5a:97:89:9e:5d:78:17:67:4f:80: 32:3e:9f:37:38:94:33:b2:6c:63:87:6c:10:af:aa: 70:b0:47:70:fb:29:21:bc:39:6a:7e:8e:36:84:63: 8a:5a:e1:68:82:5f:a8:28:6f:bd:84:18:5b:26:b2: 1c:7e:49:d7:90:32:17:4c:2d:c3:a4:ed:6d:cd:d9: 86:b2:ab:c2:90:f9:13:37:53:83:61:ec:51:bf:a0: c2:fc:ca:3e:74:63:2f:4c:47:5b:3d:36:91:61:7b: ea:0e:43:8c:75:15:b2:95:aa:36:27:8c:43:eb:75: 7d:7c:8a:78:59:c7:9d:58:67:45:9a:cc:75:db:e1: 98:0e:b0:86:93:fb:0e:ea:99:5a:58:ab:5a:78:e7: 9f:92:7c:e2:5e:99:7c:e3:a1:ff:08:e9:db:78:a7: 5c:b3:fc:d6:c2:36:71:a9:67:ed:06:b8:d9:17:72: 2a:ba:04:d2:73:16:14:57:d3:b3:0f:ef:16:9d:81: 00:16:a3:e0:ca:bf:28:54:a4:a0:6d:47:f5:46:71: 47:ca:72:99:76:e1:8d:cb:37:28:2b:1f:98:b5:29: 32:89:ca:3b:59:14:70:8d:ee:10:de:be:ae:f7:33: 7c:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:74:FE:F9:74:67:CC:43:4E:83:2A:49:95:3E:BE:54:D3:DD:2E:53 X509v3 Authority Key Identifier: keyid:F8:E1:2F:0A:43:3C:8B:73:3B:E3:1D:B5:E0:CD:1E:F2:02:FC:21:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:b9:77:c2:f2:87:4a:a0:f1:b6:5b:d9:2b:2b:80:62:90:5c: 10:d7:78:a4:c2:76:f2:6a:dd:fb:91:59:a2:b8:f3:4d:10:c9: 6c:54:c5:58:70:da:82:58:16:8c:95:e1:ae:a6:59:23:6e:ac: 34:7e:c8:92:41:34:ad:0b:92:dc:30:0b:16:a8:0b:14:4a:64: 96:64:13:a0:87:d6:8a:14:85:a4:d2:7a:fe:4f:43:5e:21:81: 78:82:9c:ac:18:ac:d7:0d:2d:82:d3:d6:9c:a6:af:5a:74:c6: bb:e8:8b:06:09:cd:25:54:60:ed:7f:0a:4c:21:e5:ab:4b:65: 10:7e:8d:49:2b:2e:a1:d7:90:ca:3e:ac:7e:a4:73:ae:e9:8a: 2c:08:13:17:21:8d:77:9e:85:bc:e8:01:81:4c:3b:a4:fd:47: f7:2c:7a:17:3b:25:67:17:3b:2c:df:82:05:4b:17:9b:72:13: bb:3e:cb:95:6d:d5:43:73:9e:db:3b:97:77:be:09:55:08:02: e2:62:e3:59:8e:db:b2:f3:7e:76:77:9d:61:55:02:0c:fa:92: 7d:8d:a2:1f:97:21:ce:31:01:55:2f:64:c7:5f:89:69:a3:4f: 7e:2c:b1:ec:03:e4:94:08:59:ea:b8:be:46:a8:00:e1:9c:d9: de:5b:cd:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKlX1L8nSFP8UlkMqWeM0BkQBdcswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhFMTJGMEE0MzNDOEI3MzNCRTMxREI1RTBDRDFFRjIw MkZDMjFFQTAeFw0yNTA5MTQwNjQ2NThaFw0yNTA5MTcxNDUzNThaMDMxMTAvBgNV BAMTKDBGNzRGRUY5NzQ2N0NDNDM0RTgzMkE0OTk1M0VCRTU0RDNERDJFNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIixZVbo605tAoxDkMVLtSjqrS WpeJnl14F2dPgDI+nzc4lDOybGOHbBCvqnCwR3D7KSG8OWp+jjaEY4pa4WiCX6go b72EGFsmshx+SdeQMhdMLcOk7W3N2Yayq8KQ+RM3U4Nh7FG/oML8yj50Yy9MR1s9 NpFhe+oOQ4x1FbKVqjYnjEPrdX18inhZx51YZ0WazHXb4ZgOsIaT+w7qmVpYq1p4 55+SfOJemXzjof8I6dt4p1yz/NbCNnGpZ+0GuNkXciq6BNJzFhRX07MP7xadgQAW o+DKvyhUpKBtR/VGcUfKcpl24Y3LNygrH5i1KTKJyjtZFHCN7hDevq73M3yHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUD3T++XRnzENOgypJlT6+VNPdLlMwHwYDVR0j BBgwFoAU+OEvCkM8i3M74x214M0e8gL8IeowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MGNlNDc5Ni00OWRlLTQzYjEtYTE1Mi1iMThkMTFhZGE1MjkvMC9GOEUxMkYwQTQz M0M4QjczM0JFMzFEQjVFMENEMUVGMjAyRkMyMUVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjhFMTJGMEE0MzNDOEI3MzNCRTMxREI1RTBDRDFFRjIwMkZD MjFFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODBjZTQ3OTYtNDlkZS00M2IxLWEx NTItYjE4ZDExYWRhNTI5LzAvRjhFMTJGMEE0MzNDOEI3MzNCRTMxREI1RTBDRDFF RjIwMkZDMjFFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEe5d8Lyh0qg8bZb2SsrgGKQXBDXeKTCdvJq 3fuRWaK4800QyWxUxVhw2oJYFoyV4a6mWSNurDR+yJJBNK0LktwwCxaoCxRKZJZk E6CH1ooUhaTSev5PQ14hgXiCnKwYrNcNLYLT1pymr1p0xrvoiwYJzSVUYO1/Ckwh 5atLZRB+jUkrLqHXkMo+rH6kc67piiwIExchjXeehbzoAYFMO6T9R/csehc7JWcX OyzfggVLF5tyE7s+y5Vt1UNznts7l3e+CVUIAuJi41mO27LzfnZ3nWFVAgz6kn2N oh+XIc4xAVUvZMdfiWmjT34ssewD5JQIWeq4vkaoAOGc2d5bzUE= -----END CERTIFICATE-----Generated at Mon Sep 15 16:11:45 2025 by rpki-client