$ rpki-client -vvf repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.mft File: FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.mft (raw, json) Hash identifier: 6PuIMvuoCB4E9MiDh62dOyYkLXbF9fB9R/Jhn2ll7dQ= Subject key identifier: 81:E2:00:28:6D:FD:D2:CF:2F:8F:94:8D:7D:C7:66:DB:C0:40:99:8B Authority key identifier: FF:3F:06:6A:5E:9A:B8:F9:88:B8:E1:7C:7A:56:DD:2E:00:A6:6A:D8 Certificate issuer: /CN=FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8 Certificate serial: 01EF5FB0DEE5D22795EC18E1BCF530F960BAF09F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.mft Manifest number: C5 Signing time: Wed 06 Aug 2025 09:42:21 +0000 Manifest this update: Wed 06 Aug 2025 09:37:21 +0000 Manifest next update: Sat 09 Aug 2025 11:56:21 +0000 Files and hashes: 1: 3135372e31352e38332e302f32342d3234203d3e20313532333633.roa (hash: tmwMaZpoyniOHlrA1Ev0DGw1sFkx/sRTma2ZD2CnpMQ=) 2: 3135372e31352e38322e302f32332d3233203d3e20313532333633.roa (hash: TxbDMhKSioNeR20MqOvnLPpYmLwOjXBp9YQNGW/Dswg=) 3: 3135372e31352e38322e302f32342d3234203d3e20313532333633.roa (hash: LhdUiZ829jnCYzP+T/q1kR6KjN+CYgUrJ54OONbPWMo=) 4: FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.crl (hash: VaE0fPZ2HUxs+e86hRM2u8BjBFpn2IaG9La/CSg7XtU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.crl rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 09:26:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:ef:5f:b0:de:e5:d2:27:95:ec:18:e1:bc:f5:30:f9:60:ba:f0:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8 Validity Not Before: Aug 6 09:37:21 2025 GMT Not After : Aug 9 11:56:21 2025 GMT Subject: CN=81E200286DFDD2CF2F8F948D7DC766DBC040998B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:e8:02:a5:ee:4f:d5:41:38:00:0c:d8:9b:d2: 64:5f:3f:ae:c6:c8:70:03:40:93:91:d6:6b:d7:b8: 8c:2a:3b:40:ba:dc:d7:e7:81:f8:29:85:24:3e:3b: 5c:a9:4d:1f:ae:b8:24:89:42:c8:5c:de:8e:0f:ee: d6:14:ea:d9:e4:2c:48:d2:1c:1e:70:e4:54:0c:59: c7:f2:54:8b:bc:d1:7f:13:80:41:86:68:59:c9:6a: d0:5f:6e:e6:70:5f:f7:9d:98:c0:2a:99:2d:bd:f8: b4:fb:68:49:7b:5d:50:e5:31:3e:88:cf:40:a6:13: 9a:7a:86:cc:f3:d3:97:ac:4d:25:5c:75:38:dc:73: 45:a0:f0:8c:50:a7:44:dd:03:10:a1:1a:e5:5c:96: 73:ec:c8:29:da:e1:dc:9d:d4:d6:9d:fe:83:a3:a8: 9e:62:76:a3:14:75:18:e2:ec:31:d5:a9:01:1f:a9: 43:7c:99:b4:60:80:17:ab:99:61:d7:34:d5:fd:d4: 90:d7:bf:dd:08:ef:19:d8:f7:69:fe:ac:2f:2e:29: 75:ff:fa:92:8e:4c:fe:ce:e1:fc:a2:79:3e:4b:02: a6:fa:d9:3a:4b:5f:0a:bd:06:02:dd:21:9f:23:a8: 94:9e:e2:be:a6:bc:8a:5f:a4:4e:31:df:47:2b:1c: e2:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:E2:00:28:6D:FD:D2:CF:2F:8F:94:8D:7D:C7:66:DB:C0:40:99:8B X509v3 Authority Key Identifier: keyid:FF:3F:06:6A:5E:9A:B8:F9:88:B8:E1:7C:7A:56:DD:2E:00:A6:6A:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:82:8e:4b:9b:3d:3b:80:31:8c:7e:c9:76:b4:68:7e:e3:79: f8:d7:63:65:80:a1:6c:77:93:c2:b2:51:63:8a:05:93:53:44: f6:c2:d0:3d:34:b8:53:0c:b0:81:22:d2:21:3f:0b:33:ab:2f: e2:f4:49:66:03:57:6a:58:98:f8:94:54:94:e3:eb:17:dc:e8: ba:52:f8:35:46:a2:f4:58:a7:a2:f0:2e:09:a3:fe:72:4f:90: 6c:8f:b6:f7:0d:f4:9e:d5:ae:38:8f:52:9d:b6:b4:88:76:9c: 58:36:3d:8b:89:a9:97:50:83:5e:73:07:8c:3b:53:a1:81:41: 66:91:ad:94:1e:88:29:32:47:f0:e5:72:b6:f0:30:7d:c3:49: 16:52:f7:84:bb:3d:2a:3e:f9:31:f1:1d:d6:80:28:3a:1d:6a: d8:8c:27:c1:44:bd:48:f8:dc:00:71:62:a1:f5:1c:f2:fe:64: 5e:0b:0e:96:15:51:55:3d:ac:6c:6d:00:53:95:93:66:1d:cd: 05:68:a2:cc:9c:06:c0:f1:4e:00:f1:b9:2d:ab:bd:fc:68:48: ca:d9:29:5e:e2:2d:5e:4e:aa:5c:15:78:88:b2:5c:b0:41:d5: 43:b0:47:6e:b8:05:91:8e:86:36:29:76:bd:90:0d:9d:28:be: bd:03:bf:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAe9fsN7l0ieV7BjhvPUw+WC68J8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkYzRjA2NkE1RTlBQjhGOTg4QjhFMTdDN0E1NkREMkUw MEE2NkFEODAeFw0yNTA4MDYwOTM3MjFaFw0yNTA4MDkxMTU2MjFaMDMxMTAvBgNV BAMTKDgxRTIwMDI4NkRGREQyQ0YyRjhGOTQ4RDdEQzc2NkRCQzA0MDk5OEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg6AKl7k/VQTgADNib0mRfP67G yHADQJOR1mvXuIwqO0C63NfngfgphSQ+O1ypTR+uuCSJQshc3o4P7tYU6tnkLEjS HB5w5FQMWcfyVIu80X8TgEGGaFnJatBfbuZwX/edmMAqmS29+LT7aEl7XVDlMT6I z0CmE5p6hszz05esTSVcdTjcc0Wg8IxQp0TdAxChGuVclnPsyCna4dyd1Nad/oOj qJ5idqMUdRji7DHVqQEfqUN8mbRggBermWHXNNX91JDXv90I7xnY92n+rC8uKXX/ +pKOTP7O4fyieT5LAqb62TpLXwq9BgLdIZ8jqJSe4r6mvIpfpE4x30crHOJ9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgeIAKG390s8vj5SNfcdm28BAmYswHwYDVR0j BBgwFoAU/z8Gal6auPmIuOF8elbdLgCmatgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZDAxMWExYy1hMGFkLTRkOTMtODZhZi0zZjBhYWRkOTY4NGYvMC9GRjNGMDY2QTVF OUFCOEY5ODhCOEUxN0M3QTU2REQyRTAwQTY2QUQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkYzRjA2NkE1RTlBQjhGOTg4QjhFMTdDN0E1NkREMkUwMEE2 NkFEOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWQwMTFhMWMtYTBhZC00ZDkzLTg2 YWYtM2YwYWFkZDk2ODRmLzAvRkYzRjA2NkE1RTlBQjhGOTg4QjhFMTdDN0E1NkRE MkUwMEE2NkFEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK2CjkubPTuAMYx+yXa0aH7jefjXY2WAoWx3 k8KyUWOKBZNTRPbC0D00uFMMsIEi0iE/CzOrL+L0SWYDV2pYmPiUVJTj6xfc6LpS +DVGovRYp6LwLgmj/nJPkGyPtvcN9J7VrjiPUp22tIh2nFg2PYuJqZdQg15zB4w7 U6GBQWaRrZQeiCkyR/DlcrbwMH3DSRZS94S7PSo++THxHdaAKDodatiMJ8FEvUj4 3ABxYqH1HPL+ZF4LDpYVUVU9rGxtAFOVk2YdzQVoosycBsDxTgDxuS2rvfxoSMrZ KV7iLV5OqlwVeIiyXLBB1UOwR264BZGOhjYpdr2QDZ0ovr0Dv7M= -----END CERTIFICATE-----Generated at Wed Aug 6 12:33:17 2025 by rpki-client