$ rpki-client -vvf repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.mft File: F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.mft (raw, json) Hash identifier: xLXmxoevjWQCI/PISysTO3nc261d3eQrgFJooDI44WE= Subject key identifier: 51:70:C8:B2:B0:0F:04:8E:A3:25:3B:33:DE:6C:65:EA:8C:4E:A4:56 Authority key identifier: F8:FA:AE:F9:7E:D3:DB:A7:D2:72:43:70:7C:7C:0D:16:05:89:6B:AF Certificate issuer: /CN=F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF Certificate serial: 43E77DFF2AEB735E0A1A13DCBFE169F253B5CCD5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.mft Manifest number: C1 Signing time: Sat 07 Jun 2025 14:11:02 +0000 Manifest this update: Sat 07 Jun 2025 14:06:02 +0000 Manifest next update: Tue 10 Jun 2025 23:07:02 +0000 Files and hashes: 1: F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.crl (hash: G+4Nug5syzmIDEGTgBXWK2k0HFb23B1W78aixzHb96A=) 2: 3135372e32302e3133302e302f32342d3234203d3e20313532343134.roa (hash: yredKIZP9xr2lB528+R6ApvkXgeNpX2Bu3+xAbm9RU0=) 3: 3135372e32302e3133312e302f32342d3234203d3e20313532343134.roa (hash: W4ACU/xOnpQ+wB4eCIEuEDxQIvNhZYjdjmTdf9J25lk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.crl rsync://repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 06:30:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:e7:7d:ff:2a:eb:73:5e:0a:1a:13:dc:bf:e1:69:f2:53:b5:cc:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF Validity Not Before: Jun 7 14:06:02 2025 GMT Not After : Jun 10 23:07:02 2025 GMT Subject: CN=5170C8B2B00F048EA3253B33DE6C65EA8C4EA456 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:2a:5f:d5:55:90:ba:fa:2b:bd:93:01:55:3c: c6:a8:36:99:fc:50:10:a9:64:4c:de:4f:bd:ce:2c: 91:77:cb:89:36:42:ab:76:b3:83:c7:15:25:25:7e: 77:47:dc:d6:27:69:a9:2b:0f:4f:b0:1c:c9:52:f0: 1f:90:24:5b:c9:9e:e0:f8:fa:73:1e:f5:94:35:e5: 2b:51:bd:40:90:82:01:50:9d:13:d7:8d:29:32:58: d7:71:77:00:e4:d2:c3:45:3e:2f:45:72:40:61:ea: 36:9e:c9:da:77:57:33:06:da:c4:0d:7c:56:39:6c: 62:b2:96:96:7b:f8:5b:7e:84:1b:4c:66:6d:3c:32: e7:94:be:28:58:0d:39:67:44:a2:01:62:77:ef:62: 9a:dc:61:ae:e4:ce:63:c8:3a:42:26:44:05:82:4c: 99:63:ce:9a:89:80:70:59:2d:57:c0:1b:8b:b3:27: a8:35:90:5c:6b:76:b8:71:5f:8e:ba:c4:9c:c5:c7: cf:3a:5b:74:b4:d9:75:27:6c:c9:84:43:b3:f1:7d: 1a:bb:e7:e4:3b:4b:98:07:d6:96:f4:31:45:3a:37: 3a:83:e5:2b:64:71:0b:7a:81:72:01:74:6e:46:86: ed:6a:6b:a4:1e:2d:f9:2a:ae:f0:0f:ac:e8:e5:14: 47:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:70:C8:B2:B0:0F:04:8E:A3:25:3B:33:DE:6C:65:EA:8C:4E:A4:56 X509v3 Authority Key Identifier: keyid:F8:FA:AE:F9:7E:D3:DB:A7:D2:72:43:70:7C:7C:0D:16:05:89:6B:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:6c:5b:34:1e:d0:2a:52:47:68:85:63:b0:e0:67:a7:60:65: e0:a7:47:7a:f1:9c:15:0b:74:42:af:68:5c:c6:52:de:b3:08: 08:f3:1e:fe:bd:b2:53:f4:65:ea:bb:b6:51:00:4f:ce:d6:8e: bd:35:9b:0c:a7:a9:15:20:a1:07:ef:43:f7:0c:37:a8:b3:3a: e5:9b:00:3e:4e:88:2b:91:f4:41:ba:05:5d:ac:78:56:c9:15: 91:bc:f4:99:55:06:d2:32:de:e8:dc:5f:88:3a:41:55:a1:f5: 96:e7:48:f8:e8:1c:97:75:df:4e:11:8c:1d:19:05:28:e9:7b: b9:4c:63:84:28:55:a6:e1:bc:ef:c8:cf:e3:9f:a9:e1:c4:a8: c6:17:94:a1:c0:df:6d:d5:34:62:1b:fd:d8:a5:b7:03:38:39: 9e:a2:af:1e:27:69:ee:65:07:9b:52:f5:d2:02:04:26:85:33: c5:3d:12:ab:a9:bf:bc:03:9b:c4:35:8e:b5:2b:f2:ac:40:38: 96:12:15:c6:46:66:e2:21:55:1e:e0:ec:ce:73:3e:31:87:7a: 59:2a:42:8f:f2:b0:b3:35:3a:13:23:b5:e0:be:4f:56:73:27: 2c:2b:51:30:a6:08:bb:3b:fb:a9:a5:33:b6:c7:e3:42:9f:b3: 89:94:9c:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ+d9/yrrc14KGhPcv+Fp8lO1zNUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhGQUFFRjk3RUQzREJBN0QyNzI0MzcwN0M3QzBEMTYw NTg5NkJBRjAeFw0yNTA2MDcxNDA2MDJaFw0yNTA2MTAyMzA3MDJaMDMxMTAvBgNV BAMTKDUxNzBDOEIyQjAwRjA0OEVBMzI1M0IzM0RFNkM2NUVBOEM0RUE0NTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKKl/VVZC6+iu9kwFVPMaoNpn8 UBCpZEzeT73OLJF3y4k2Qqt2s4PHFSUlfndH3NYnaakrD0+wHMlS8B+QJFvJnuD4 +nMe9ZQ15StRvUCQggFQnRPXjSkyWNdxdwDk0sNFPi9FckBh6jaeydp3VzMG2sQN fFY5bGKylpZ7+Ft+hBtMZm08MueUvihYDTlnRKIBYnfvYprcYa7kzmPIOkImRAWC TJljzpqJgHBZLVfAG4uzJ6g1kFxrdrhxX466xJzFx886W3S02XUnbMmEQ7PxfRq7 5+Q7S5gH1pb0MUU6NzqD5StkcQt6gXIBdG5Ghu1qa6QeLfkqrvAPrOjlFEcVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUXDIsrAPBI6jJTsz3mxl6oxOpFYwHwYDVR0j BBgwFoAU+Pqu+X7T26fSckNwfHwNFgWJa68wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ODZmZjI2NC1mZjI1LTRmZTYtODZlZi1kODRiN2QyODgzNTQvMC9GOEZBQUVGOTdF RDNEQkE3RDI3MjQzNzA3QzdDMEQxNjA1ODk2QkFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjhGQUFFRjk3RUQzREJBN0QyNzI0MzcwN0M3QzBEMTYwNTg5 NkJBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzg2ZmYyNjQtZmYyNS00ZmU2LTg2 ZWYtZDg0YjdkMjg4MzU0LzAvRjhGQUFFRjk3RUQzREJBN0QyNzI0MzcwN0M3QzBE MTYwNTg5NkJBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD9sWzQe0CpSR2iFY7DgZ6dgZeCnR3rxnBUL dEKvaFzGUt6zCAjzHv69slP0Zeq7tlEAT87Wjr01mwynqRUgoQfvQ/cMN6izOuWb AD5OiCuR9EG6BV2seFbJFZG89JlVBtIy3ujcX4g6QVWh9ZbnSPjoHJd1304RjB0Z BSjpe7lMY4QoVabhvO/Iz+OfqeHEqMYXlKHA323VNGIb/diltwM4OZ6irx4nae5l B5tS9dICBCaFM8U9Equpv7wDm8Q1jrUr8qxAOJYSFcZGZuIhVR7g7M5zPjGHelkq Qo/ysLM1OhMjteC+T1ZzJywrUTCmCLs7+6mlM7bH40Kfs4mUnBA= -----END CERTIFICATE-----Generated at Sat Jun 7 21:03:20 2025 by rpki-client