$ rpki-client -vvf repo-rpki.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/F8DF40E4C95F9EBF81453870736995E91BBB92F7.mft File: F8DF40E4C95F9EBF81453870736995E91BBB92F7.mft (raw, json) Hash identifier: 5k4s4XNmm70B1uUK5kUN8xkoOVEdjwJH+Nxufb9r7MA= Subject key identifier: 23:B6:74:FE:30:8D:53:C6:9B:D3:68:70:F8:75:57:B2:31:E2:CB:A5 Authority key identifier: F8:DF:40:E4:C9:5F:9E:BF:81:45:38:70:73:69:95:E9:1B:BB:92:F7 Certificate issuer: /CN=F8DF40E4C95F9EBF81453870736995E91BBB92F7 Certificate serial: 5C38745FA115B4FBA32F2CC8FFDD7414843DA334 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8DF40E4C95F9EBF81453870736995E91BBB92F7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/F8DF40E4C95F9EBF81453870736995E91BBB92F7.mft Manifest number: 0272 Signing time: Wed 03 Sep 2025 18:40:01 +0000 Manifest this update: Wed 03 Sep 2025 18:35:01 +0000 Manifest next update: Sat 06 Sep 2025 22:15:01 +0000 Files and hashes: 1: 3130332e3234302e3130382e302f32342d3234203d3e203538383139.roa (hash: D+zqgakWFBdHD5/mV/z3ocZSo/C1/ZxuuNBMHS2Lcrc=) 2: 3130332e3234302e3131302e302f32342d3234203d3e203538383139.roa (hash: kInQZ6+a0szsE+89xOKFo2QCmfmxhWma36K3DO0bgYU=) 3: F8DF40E4C95F9EBF81453870736995E91BBB92F7.crl (hash: X8rvm4mH2oYiDRAIs2IGL0hmhroTVs+yz6SdiCk6/Xs=) 4: 3130332e3234302e3131312e302f32342d3234203d3e203538383139.roa (hash: qsAy9+8K3YocUUVABAHpwtAAQ9W+nqV1JTT37/pzGo4=) 5: 3130332e3234302e3130392e302f32342d3234203d3e203538383139.roa (hash: 5nvoiGj4OjH2+HTzWQu4bmTNWJXJYHQTVDrsbt8AseA=) 6: 3130332e3234302e3130382e302f32322d3234203d3e203538383139.roa (hash: XeC/h72IOu7dA+NCUWie+KTWNqBhpQyXbuk3uFJs7XQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/F8DF40E4C95F9EBF81453870736995E91BBB92F7.crl rsync://repo-rpki.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/F8DF40E4C95F9EBF81453870736995E91BBB92F7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8DF40E4C95F9EBF81453870736995E91BBB92F7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 22:15:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:38:74:5f:a1:15:b4:fb:a3:2f:2c:c8:ff:dd:74:14:84:3d:a3:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8DF40E4C95F9EBF81453870736995E91BBB92F7 Validity Not Before: Sep 3 18:35:01 2025 GMT Not After : Sep 6 22:15:01 2025 GMT Subject: CN=23B674FE308D53C69BD36870F87557B231E2CBA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:fc:0d:f0:02:4d:60:03:f4:0d:73:3b:a1:aa: 57:ef:7c:64:b2:4e:78:48:16:f4:6a:02:05:cd:cb: 87:93:79:e3:fa:c4:6b:7d:70:19:93:b2:e1:6c:ec: 60:76:42:5a:53:10:cb:70:83:44:43:83:f7:04:52: 61:10:4c:85:ee:be:32:58:aa:e3:a9:eb:68:a2:ec: 0d:b0:41:a6:91:90:ea:8b:b5:06:59:55:19:18:b4: 35:88:5b:fe:60:4f:1e:15:9d:65:c0:e8:2f:a8:9b: fa:e6:eb:df:03:53:49:15:b9:78:8d:a8:91:73:c7: 1e:66:cc:a5:70:b1:1c:dd:eb:41:20:a8:82:fe:44: df:8f:7d:a9:59:c1:17:44:69:31:59:2c:27:3f:46: 2e:cc:fe:3b:b6:04:99:fb:a3:c5:89:f3:95:7e:5c: 09:ae:c3:d7:7a:a0:cd:06:95:b6:c4:d6:09:2a:a6: 3e:55:55:6a:9f:2b:5d:1f:e1:6e:16:b8:fe:33:ff: de:56:fa:5c:e3:ca:79:97:a6:31:34:b9:3c:e9:f7: 6f:92:01:37:4e:72:5e:2c:ef:44:5e:37:97:9b:9d: a0:7b:24:ea:ee:fe:a3:f1:e7:1c:35:eb:4c:d4:09: 9a:a0:e7:4d:1c:98:7e:81:a8:57:9c:10:60:a2:48: 23:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:B6:74:FE:30:8D:53:C6:9B:D3:68:70:F8:75:57:B2:31:E2:CB:A5 X509v3 Authority Key Identifier: keyid:F8:DF:40:E4:C9:5F:9E:BF:81:45:38:70:73:69:95:E9:1B:BB:92:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/F8DF40E4C95F9EBF81453870736995E91BBB92F7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8DF40E4C95F9EBF81453870736995E91BBB92F7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/F8DF40E4C95F9EBF81453870736995E91BBB92F7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:a6:c7:56:25:2e:3f:35:a4:e7:a1:b7:a8:4f:06:44:93:09: 70:1d:be:7b:e3:b6:e3:2e:ac:20:3b:d2:09:35:f5:95:91:99: 5c:9a:90:c6:7d:a4:2e:c3:fd:9b:ea:ea:18:06:04:bf:47:a8: 49:06:9b:b4:50:24:1f:93:4c:93:51:22:94:bf:93:45:a1:fd: 9e:2e:e3:08:79:ad:e0:66:73:00:ca:24:0d:6e:87:c8:6a:c2: 93:e9:fd:d0:4b:8a:c7:55:a4:6d:cc:43:52:6c:2b:c1:69:65: c5:73:c2:82:e6:40:bc:d0:0b:3b:fe:33:15:fb:a7:3f:8c:9e: 00:a1:5d:6c:0a:46:7e:b0:fe:06:5a:ab:ec:0d:c5:ba:cc:1a: 3e:10:b5:16:85:ca:2d:93:ae:67:b6:3f:05:25:82:74:ed:ce: 42:d7:83:da:ad:06:c5:70:22:66:31:f0:c4:6d:0b:a6:c1:ef: 23:af:b6:d2:58:0f:ee:9a:ce:83:af:b4:c2:f4:c7:8d:2d:02: ca:37:cb:ca:10:b6:ee:d2:a6:87:6c:ff:a5:d0:d1:3c:53:ef: 99:c9:74:46:9b:cb:48:f2:10:7f:21:19:ad:14:9d:58:ac:cc: c0:ea:0b:8a:51:62:69:0c:aa:60:7f:64:1b:d9:63:af:7d:d2: 49:92:a2:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXDh0X6EVtPujLyzI/910FIQ9ozQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhERjQwRTRDOTVGOUVCRjgxNDUzODcwNzM2OTk1RTkx QkJCOTJGNzAeFw0yNTA5MDMxODM1MDFaFw0yNTA5MDYyMjE1MDFaMDMxMTAvBgNV BAMTKDIzQjY3NEZFMzA4RDUzQzY5QkQzNjg3MEY4NzU1N0IyMzFFMkNCQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP/A3wAk1gA/QNczuhqlfvfGSy TnhIFvRqAgXNy4eTeeP6xGt9cBmTsuFs7GB2QlpTEMtwg0RDg/cEUmEQTIXuvjJY quOp62ii7A2wQaaRkOqLtQZZVRkYtDWIW/5gTx4VnWXA6C+om/rm698DU0kVuXiN qJFzxx5mzKVwsRzd60EgqIL+RN+PfalZwRdEaTFZLCc/Ri7M/ju2BJn7o8WJ85V+ XAmuw9d6oM0GlbbE1gkqpj5VVWqfK10f4W4WuP4z/95W+lzjynmXpjE0uTzp92+S ATdOcl4s70ReN5ebnaB7JOru/qPx5xw160zUCZqg500cmH6BqFecEGCiSCMhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUI7Z0/jCNU8ab02hw+HVXsjHiy6UwHwYDVR0j BBgwFoAU+N9A5Mlfnr+BRThwc2mV6Ru7kvcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDAzYWYwMS1mMjM5LTRhMWYtODFjZC00MTA2YmViYjJhMjIvMC9GOERGNDBFNEM5 NUY5RUJGODE0NTM4NzA3MzY5OTVFOTFCQkI5MkY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjhERjQwRTRDOTVGOUVCRjgxNDUzODcwNzM2OTk1RTkxQkJC OTJGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQwM2FmMDEtZjIzOS00YTFmLTgx Y2QtNDEwNmJlYmIyYTIyLzAvRjhERjQwRTRDOTVGOUVCRjgxNDUzODcwNzM2OTk1 RTkxQkJCOTJGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADumx1YlLj81pOeht6hPBkSTCXAdvnvjtuMu rCA70gk19ZWRmVyakMZ9pC7D/Zvq6hgGBL9HqEkGm7RQJB+TTJNRIpS/k0Wh/Z4u 4wh5reBmcwDKJA1uh8hqwpPp/dBLisdVpG3MQ1JsK8FpZcVzwoLmQLzQCzv+MxX7 pz+MngChXWwKRn6w/gZaq+wNxbrMGj4QtRaFyi2Trme2PwUlgnTtzkLXg9qtBsVw ImYx8MRtC6bB7yOvttJYD+6azoOvtML0x40tAso3y8oQtu7Spods/6XQ0TxT75nJ dEaby0jyEH8hGa0UnViszMDqC4pRYmkMqmB/ZBvZY6990kmSotI= -----END CERTIFICATE-----Generated at Fri Sep 5 10:13:41 2025 by rpki-client