$ rpki-client -vvf repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.mft File: F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.mft (raw, json) Hash identifier: 9XiyquFt4G/YdcJQKlDyO//Ck4Wji8Kby4L7J6ZTrTs= Subject key identifier: 6C:BC:E7:3E:16:7B:3C:81:85:9C:FC:EA:45:5D:BA:6A:CE:3B:01:68 Authority key identifier: F8:FA:AE:F9:7E:D3:DB:A7:D2:72:43:70:7C:7C:0D:16:05:89:6B:AF Certificate issuer: /CN=F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF Certificate serial: 56E401A2A0F616EBAA4F45B6436EA528FC34571D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.mft Manifest number: E7 Signing time: Sat 30 Aug 2025 23:31:04 +0000 Manifest this update: Sat 30 Aug 2025 23:26:04 +0000 Manifest next update: Wed 03 Sep 2025 03:40:04 +0000 Files and hashes: 1: 3135372e32302e3133312e302f32342d3234203d3e20313532343134.roa (hash: W4ACU/xOnpQ+wB4eCIEuEDxQIvNhZYjdjmTdf9J25lk=) 2: 3135372e32302e3133302e302f32342d3234203d3e20313532343134.roa (hash: yredKIZP9xr2lB528+R6ApvkXgeNpX2Bu3+xAbm9RU0=) 3: F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.crl (hash: Zo7nL/we4GW9v4LJ+l+3stR9XAnRIjh6L4Hg9tw/fcU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.crl rsync://repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 02 Sep 2025 02:27:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:e4:01:a2:a0:f6:16:eb:aa:4f:45:b6:43:6e:a5:28:fc:34:57:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF Validity Not Before: Aug 30 23:26:04 2025 GMT Not After : Sep 3 03:40:04 2025 GMT Subject: CN=6CBCE73E167B3C81859CFCEA455DBA6ACE3B0168 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:fc:e5:77:19:70:f8:03:72:39:af:d2:00:52: 78:f0:4f:2d:5d:bb:84:f8:87:18:f4:1d:19:11:88: 51:77:2a:8a:75:bb:09:fa:54:05:f1:4e:a6:46:93: b6:11:6d:ae:1e:d0:3a:75:11:5a:fb:2c:d5:93:7d: f9:f5:d5:de:e7:65:66:d9:76:72:d4:1a:ae:93:32: 16:b3:26:31:42:ba:33:80:7a:7f:7b:ac:43:d5:59: 1a:97:4a:7a:b7:e0:30:67:60:a3:2e:5a:0c:0c:0d: a3:5b:4f:e5:5d:07:7b:da:82:de:b6:80:c4:98:31: ae:bc:f3:8d:65:36:21:47:2b:f0:b3:01:7e:97:36: cb:6b:16:44:7f:9a:fd:03:be:94:46:ac:21:b1:68: cd:c9:96:3f:55:3d:ce:ef:ae:fd:ee:6e:78:1d:1f: 9e:02:9c:a2:07:06:55:55:ea:05:84:79:75:88:0b: cb:b3:0f:a9:7d:f1:09:fe:6b:04:4b:40:0c:b3:2e: 9f:7c:66:7e:c7:fa:cd:14:fa:99:9e:83:d4:2b:14: 7a:1d:e2:ee:95:94:b2:a1:81:1c:5f:a1:7c:18:ed: e4:2a:73:5b:a4:20:4e:ed:7f:10:db:9c:49:13:87: f9:09:d4:27:f4:25:e6:ef:91:3c:e7:2c:04:bd:2e: 0c:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:BC:E7:3E:16:7B:3C:81:85:9C:FC:EA:45:5D:BA:6A:CE:3B:01:68 X509v3 Authority Key Identifier: keyid:F8:FA:AE:F9:7E:D3:DB:A7:D2:72:43:70:7C:7C:0D:16:05:89:6B:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:27:88:46:48:2d:19:f4:b0:17:3f:fe:f3:1c:83:13:0c:b8: 49:73:f8:70:cb:42:18:3a:fb:00:5c:a3:1a:c4:d0:ca:8c:8f: 21:42:9e:bb:81:94:8a:8f:0e:b0:f9:ac:93:52:66:4e:82:44: cc:15:cc:0f:ac:30:7d:9a:4e:7b:8e:03:96:12:19:f1:c9:39: 05:41:1b:7c:7a:23:25:89:a5:7a:dd:17:1c:4e:e7:4b:81:27: cc:d0:79:49:94:11:d3:1d:1a:40:e4:89:d0:5b:00:c8:61:4e: 79:3f:15:9e:28:70:83:f9:44:c9:9e:7f:5d:94:83:9f:9e:7e: 8b:26:60:ad:cf:b7:23:a0:a7:7e:ab:36:d8:1f:e7:31:b5:41: ae:a7:95:3f:4c:d4:f3:13:fc:d9:c2:0d:2d:20:69:d0:66:cd: 90:ef:9c:10:1f:9b:c5:91:00:22:bf:93:d1:4b:4e:4c:31:7e: d6:10:1a:e0:f3:c0:74:f1:b6:a7:fa:a9:ec:93:27:cd:08:58: b0:fd:64:ef:38:fd:8f:f6:92:af:28:43:08:d7:f3:22:3a:bd: 26:7c:75:a1:5c:ff:a7:f3:1a:dc:7d:dc:99:68:fe:c7:cf:22: 92:e9:e5:ce:52:35:ab:78:a4:95:ab:c6:c6:73:46:e5:69:12: cb:76:ae:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVuQBoqD2FuuqT0W2Q26lKPw0Vx0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhGQUFFRjk3RUQzREJBN0QyNzI0MzcwN0M3QzBEMTYw NTg5NkJBRjAeFw0yNTA4MzAyMzI2MDRaFw0yNTA5MDMwMzQwMDRaMDMxMTAvBgNV BAMTKDZDQkNFNzNFMTY3QjNDODE4NTlDRkNFQTQ1NURCQTZBQ0UzQjAxNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG/OV3GXD4A3I5r9IAUnjwTy1d u4T4hxj0HRkRiFF3Kop1uwn6VAXxTqZGk7YRba4e0Dp1EVr7LNWTffn11d7nZWbZ dnLUGq6TMhazJjFCujOAen97rEPVWRqXSnq34DBnYKMuWgwMDaNbT+VdB3vagt62 gMSYMa68841lNiFHK/CzAX6XNstrFkR/mv0DvpRGrCGxaM3Jlj9VPc7vrv3ubngd H54CnKIHBlVV6gWEeXWIC8uzD6l98Qn+awRLQAyzLp98Zn7H+s0U+pmeg9QrFHod 4u6VlLKhgRxfoXwY7eQqc1ukIE7tfxDbnEkTh/kJ1Cf0JebvkTznLAS9LgxVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbLznPhZ7PIGFnPzqRV26as47AWgwHwYDVR0j BBgwFoAU+Pqu+X7T26fSckNwfHwNFgWJa68wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ODZmZjI2NC1mZjI1LTRmZTYtODZlZi1kODRiN2QyODgzNTQvMC9GOEZBQUVGOTdF RDNEQkE3RDI3MjQzNzA3QzdDMEQxNjA1ODk2QkFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjhGQUFFRjk3RUQzREJBN0QyNzI0MzcwN0M3QzBEMTYwNTg5 NkJBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzg2ZmYyNjQtZmYyNS00ZmU2LTg2 ZWYtZDg0YjdkMjg4MzU0LzAvRjhGQUFFRjk3RUQzREJBN0QyNzI0MzcwN0M3QzBE MTYwNTg5NkJBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJgniEZILRn0sBc//vMcgxMMuElz+HDLQhg6 +wBcoxrE0MqMjyFCnruBlIqPDrD5rJNSZk6CRMwVzA+sMH2aTnuOA5YSGfHJOQVB G3x6IyWJpXrdFxxO50uBJ8zQeUmUEdMdGkDkidBbAMhhTnk/FZ4ocIP5RMmef12U g5+efosmYK3PtyOgp36rNtgf5zG1Qa6nlT9M1PMT/NnCDS0gadBmzZDvnBAfm8WR ACK/k9FLTkwxftYQGuDzwHTxtqf6qeyTJ80IWLD9ZO84/Y/2kq8oQwjX8yI6vSZ8 daFc/6fzGtx93Jlo/sfPIpLp5c5SNat4pJWrxsZzRuVpEst2rjY= -----END CERTIFICATE-----Generated at Sun Aug 31 04:53:39 2025 by rpki-client