$ rpki-client -vvf repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.mft File: F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.mft (raw, json) Hash identifier: fQoea4vCTvLEwZ+hTr1UAsRk2z5wwpLO103i3DCUKGg= Subject key identifier: B7:41:F4:81:0A:C5:00:FB:1C:79:B4:7D:84:74:86:71:2F:86:2B:DD Authority key identifier: F1:B7:1C:4F:9F:FB:EC:16:8C:86:45:DF:F7:9B:A9:06:BE:B2:3F:E8 Certificate issuer: /CN=F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8 Certificate serial: 677FA94AC64B83AB7AD03E666D6BB1855E4D8722 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.mft Manifest number: 0512 Signing time: Sat 06 Sep 2025 09:40:46 +0000 Manifest this update: Sat 06 Sep 2025 09:35:46 +0000 Manifest next update: Tue 09 Sep 2025 19:30:46 +0000 Files and hashes: 1: 3131382e3135312e3232322e302f32342d3234203d3e203436303332.roa (hash: c7lD2035nwAuocF3S+Kkx7XFX+D5GmobD9VRSTS7t1w=) 2: 3131382e3135312e3232312e302f32342d3234203d3e203436303332.roa (hash: omzII3ixbtOuAnPW3RG0el7+Kj2LR6H6b/zYKpPBQBo=) 3: 3131382e3135312e3232302e302f32342d3234203d3e203436303332.roa (hash: JFOIJs50h687qC8bpxxJdwCT4qWgGzzf4owWeGTBCcg=) 4: F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.crl (hash: oVLw/V/1QyPUrB7HzkvpJhvdoVq/2T2qTIGcAvm3tiQ=) 5: 3131382e3135312e3232332e302f32342d3234203d3e203436303332.roa (hash: PqeFBMmCxWfD824pPn9xm7j9NLtgK4mpMJgmDQzThss=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.crl rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 19:30:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:7f:a9:4a:c6:4b:83:ab:7a:d0:3e:66:6d:6b:b1:85:5e:4d:87:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8 Validity Not Before: Sep 6 09:35:46 2025 GMT Not After : Sep 9 19:30:46 2025 GMT Subject: CN=B741F4810AC500FB1C79B47D847486712F862BDD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1c:f1:47:7f:90:2d:56:27:81:68:5a:15:34: 2f:50:12:ba:07:46:93:3f:a7:88:c2:00:c9:bd:9c: a5:51:45:f3:7b:3b:7b:f8:1c:12:4d:df:68:2a:6c: 2c:d3:17:6e:0d:1d:8f:ee:8f:f7:8a:f8:99:e3:ab: fb:e1:96:d6:53:1c:4a:35:08:fa:2b:ff:b0:23:0d: 8b:fa:38:ad:16:b2:d0:c1:7c:c1:5b:49:11:ca:6c: 93:3f:70:b4:ae:62:0d:e7:dc:22:9a:fc:1b:13:51: ec:85:a9:e5:3b:40:51:06:89:28:e3:cb:11:6f:c1: c1:8b:8d:94:9d:0f:3c:5e:41:7e:cb:a7:df:0b:10: 66:b7:35:ee:b1:ff:fb:c2:c8:f1:09:34:47:57:61: d3:60:2a:78:8e:ea:62:ae:88:42:cd:15:d5:2c:1f: 01:66:a4:52:68:92:f6:61:d8:c3:37:11:ee:8c:32: 7b:b3:e4:eb:b9:08:62:e8:1d:0b:42:d9:fc:1a:12: 5c:14:c8:6f:9e:3b:66:0d:7a:54:2c:b8:3c:a1:19: 9e:33:3c:56:ed:3a:d0:f0:ca:7c:48:5f:72:57:8b: 8b:d0:1e:19:e1:51:08:f1:77:db:58:a8:18:bf:76: 9a:06:25:77:b6:87:26:1d:ed:21:4b:e7:cf:81:18: 59:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:41:F4:81:0A:C5:00:FB:1C:79:B4:7D:84:74:86:71:2F:86:2B:DD X509v3 Authority Key Identifier: keyid:F1:B7:1C:4F:9F:FB:EC:16:8C:86:45:DF:F7:9B:A9:06:BE:B2:3F:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:85:3e:f0:e6:b7:2d:d0:58:b1:3f:04:e6:bd:d6:3c:74:39: 78:df:4b:0d:0b:cd:db:45:d8:4a:f0:c5:44:63:2a:76:0c:40: 8a:de:ee:38:97:46:6c:5b:47:72:a0:b8:0b:57:34:cf:4f:75: 5a:91:a3:6e:ba:c4:4f:d4:fc:f2:df:28:f1:f2:91:dc:66:38: e3:85:bf:e5:32:4a:01:e1:4f:21:d1:59:89:6c:f7:fe:44:bf: 2b:ee:48:a8:07:2f:d6:26:ac:cf:1a:14:29:6f:c1:69:fd:16: f8:36:fb:cd:c0:32:49:a6:37:3e:e0:36:5d:85:a4:34:c2:4e: 11:8e:73:e1:bb:8b:c5:7b:db:42:ad:b6:06:ab:72:fb:a9:14: 2d:14:c4:25:cd:29:f7:a3:26:fa:33:b0:f7:9a:9b:1a:e3:78: 50:e0:6b:d1:8b:23:e1:1a:ac:d1:cf:ef:78:1d:53:2b:d4:ef: a2:c9:b8:ac:35:50:1e:86:df:98:bf:85:df:84:3e:1f:33:a4: 99:92:9e:b2:58:df:3e:68:66:3e:3e:7c:0f:8a:e7:24:d9:97: 49:07:a2:f8:b6:36:2c:b8:63:2f:df:bb:7d:ab:62:37:b0:0c: b9:e4:73:dc:eb:a9:54:5f:46:f9:35:6a:0b:d1:81:07:a9:c5: d9:87:ac:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ3+pSsZLg6t60D5mbWuxhV5NhyIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjFCNzFDNEY5RkZCRUMxNjhDODY0NURGRjc5QkE5MDZC RUIyM0ZFODAeFw0yNTA5MDYwOTM1NDZaFw0yNTA5MDkxOTMwNDZaMDMxMTAvBgNV BAMTKEI3NDFGNDgxMEFDNTAwRkIxQzc5QjQ3RDg0NzQ4NjcxMkY4NjJCREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6HPFHf5AtVieBaFoVNC9QEroH RpM/p4jCAMm9nKVRRfN7O3v4HBJN32gqbCzTF24NHY/uj/eK+Jnjq/vhltZTHEo1 CPor/7AjDYv6OK0WstDBfMFbSRHKbJM/cLSuYg3n3CKa/BsTUeyFqeU7QFEGiSjj yxFvwcGLjZSdDzxeQX7Lp98LEGa3Ne6x//vCyPEJNEdXYdNgKniO6mKuiELNFdUs HwFmpFJokvZh2MM3Ee6MMnuz5Ou5CGLoHQtC2fwaElwUyG+eO2YNelQsuDyhGZ4z PFbtOtDwynxIX3JXi4vQHhnhUQjxd9tYqBi/dpoGJXe2hyYd7SFL58+BGFl9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt0H0gQrFAPscebR9hHSGcS+GK90wHwYDVR0j BBgwFoAU8bccT5/77BaMhkXf95upBr6yP+gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NTdiOTBjYi04ZWJkLTRjN2ItOGMzMS0xMzNhOGI0ZWQ2OWMvMC9GMUI3MUM0RjlG RkJFQzE2OEM4NjQ1REZGNzlCQTkwNkJFQjIzRkU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjFCNzFDNEY5RkZCRUMxNjhDODY0NURGRjc5QkE5MDZCRUIy M0ZFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzU3YjkwY2ItOGViZC00YzdiLThj MzEtMTMzYThiNGVkNjljLzAvRjFCNzFDNEY5RkZCRUMxNjhDODY0NURGRjc5QkE5 MDZCRUIyM0ZFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIuFPvDmty3QWLE/BOa91jx0OXjfSw0LzdtF 2ErwxURjKnYMQIre7jiXRmxbR3KguAtXNM9PdVqRo266xE/U/PLfKPHykdxmOOOF v+UySgHhTyHRWYls9/5EvyvuSKgHL9YmrM8aFClvwWn9Fvg2+83AMkmmNz7gNl2F pDTCThGOc+G7i8V720KttgarcvupFC0UxCXNKfejJvozsPeamxrjeFDga9GLI+Ea rNHP73gdUyvU76LJuKw1UB6G35i/hd+EPh8zpJmSnrJY3z5oZj4+fA+K5yTZl0kH ovi2Niy4Yy/fu32rYjewDLnkc9zrqVRfRvk1agvRgQepxdmHrME= -----END CERTIFICATE-----Generated at Sun Sep 7 14:05:19 2025 by rpki-client