$ rpki-client -vvf repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.mft File: FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.mft (raw, json) Hash identifier: meEeDh1M1A8eB1pRCJ3/j2JQdAfK988iWZRbZ2vC7tI= Subject key identifier: 64:4C:72:3C:8A:9B:00:8C:4A:0C:86:DF:1E:82:A2:02:AF:CD:18:EC Authority key identifier: FF:3F:06:6A:5E:9A:B8:F9:88:B8:E1:7C:7A:56:DD:2E:00:A6:6A:D8 Certificate issuer: /CN=FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8 Certificate serial: 5D167490B9E71C67C172DEA2FB16A4BF38893BCD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.mft Manifest number: AE Signing time: Sun 15 Jun 2025 00:02:17 +0000 Manifest this update: Sat 14 Jun 2025 23:57:17 +0000 Manifest next update: Wed 18 Jun 2025 05:00:17 +0000 Files and hashes: 1: FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.crl (hash: qzTzyDjRScfTJaQWgo5CPtkP1Kd6cLlR90xo72aujxo=) 2: 3135372e31352e38332e302f32342d3234203d3e20313532333633.roa (hash: tmwMaZpoyniOHlrA1Ev0DGw1sFkx/sRTma2ZD2CnpMQ=) 3: 3135372e31352e38322e302f32342d3234203d3e20313532333633.roa (hash: LhdUiZ829jnCYzP+T/q1kR6KjN+CYgUrJ54OONbPWMo=) 4: 3135372e31352e38322e302f32332d3233203d3e20313532333633.roa (hash: TxbDMhKSioNeR20MqOvnLPpYmLwOjXBp9YQNGW/Dswg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.crl rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 05:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:16:74:90:b9:e7:1c:67:c1:72:de:a2:fb:16:a4:bf:38:89:3b:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8 Validity Not Before: Jun 14 23:57:17 2025 GMT Not After : Jun 18 05:00:17 2025 GMT Subject: CN=644C723C8A9B008C4A0C86DF1E82A202AFCD18EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:9b:1e:40:57:a5:cc:8a:3f:64:8b:2a:29:a2: b5:f5:f1:24:20:1e:b0:36:d6:5c:57:9a:df:57:07: 82:b1:ae:02:c9:83:0b:1b:26:d4:8c:c5:c3:8c:fa: ed:5a:4f:23:ef:47:54:d4:26:e8:a0:58:dd:aa:95: 06:66:0a:d9:af:d4:1a:40:f8:96:31:6f:64:e5:b0: f5:5a:4a:a6:c3:d1:45:da:4f:5a:8b:5a:e9:6a:93: 38:f7:93:5c:23:14:f4:ec:dd:ed:87:94:0d:64:3b: 60:f3:6e:8c:c7:47:fc:a9:06:f1:dd:e3:66:63:f9: 1d:60:c7:24:df:60:53:1d:39:05:62:49:9f:84:f3: 75:c6:1e:6b:e0:3e:92:d9:85:d8:84:49:77:91:88: 31:a5:91:34:6e:88:f6:1f:e6:82:e8:1b:80:c9:2b: c4:cc:05:20:1a:7e:80:fd:df:18:be:a0:65:98:12: 5f:da:fd:5d:0b:55:4d:11:08:38:21:01:6f:30:33: 7e:07:b9:b0:1d:cd:f4:91:c6:13:0d:a2:27:84:61: b6:6e:78:34:3e:4a:11:39:61:40:ba:7f:e8:83:7f: 0b:9d:c7:b7:c1:c8:f3:5b:60:a1:16:e5:56:c8:83: 74:b2:5c:7b:47:c8:c2:88:f2:7c:c3:24:31:0e:35: d6:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:4C:72:3C:8A:9B:00:8C:4A:0C:86:DF:1E:82:A2:02:AF:CD:18:EC X509v3 Authority Key Identifier: keyid:FF:3F:06:6A:5E:9A:B8:F9:88:B8:E1:7C:7A:56:DD:2E:00:A6:6A:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:67:11:e2:88:b6:52:eb:4e:41:81:cb:a6:f0:1d:3d:4c:30: da:c9:ea:6f:2e:11:9b:93:7b:db:f5:b2:aa:ea:3b:93:11:d8: c4:29:3a:93:19:4d:22:0a:cb:62:e1:94:82:74:53:7e:f2:b9: 2d:5a:fe:1e:53:9e:e9:a6:69:ee:29:8d:aa:5b:29:ef:95:c8: 12:ca:8a:b9:05:c3:b3:27:93:67:c9:3a:80:83:db:89:e8:05: c5:95:65:e3:4e:dc:3b:5c:1e:25:90:fa:48:31:b6:e0:e1:d8: a6:76:26:56:94:30:25:8b:c3:09:00:1e:57:af:30:26:22:e2: 0c:e5:fd:db:ca:2d:f9:23:de:bb:0e:6c:09:b8:d5:1d:ee:f2: c3:d4:88:d7:03:ad:01:f8:32:ce:cf:6c:76:a5:c4:d6:9f:83: d8:77:0b:4b:08:ee:77:05:be:6a:98:19:6d:8d:e5:2b:b9:a0: e1:93:3d:19:66:94:9c:1e:9f:e6:e3:63:0d:d9:28:1d:52:d8: 79:85:89:c8:99:5f:32:92:df:9f:eb:88:14:2b:48:12:63:6e: 61:c4:6d:bf:fe:9c:eb:ce:d4:29:1b:ae:36:a6:af:5e:e0:e7: db:37:55:d5:10:fa:62:33:ae:ae:a6:1a:63:62:f4:93:8a:22: dc:ce:90:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXRZ0kLnnHGfBct6i+xakvziJO80wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkYzRjA2NkE1RTlBQjhGOTg4QjhFMTdDN0E1NkREMkUw MEE2NkFEODAeFw0yNTA2MTQyMzU3MTdaFw0yNTA2MTgwNTAwMTdaMDMxMTAvBgNV BAMTKDY0NEM3MjNDOEE5QjAwOEM0QTBDODZERjFFODJBMjAyQUZDRDE4RUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJmx5AV6XMij9kiyoporX18SQg HrA21lxXmt9XB4KxrgLJgwsbJtSMxcOM+u1aTyPvR1TUJuigWN2qlQZmCtmv1BpA +JYxb2TlsPVaSqbD0UXaT1qLWulqkzj3k1wjFPTs3e2HlA1kO2DzbozHR/ypBvHd 42Zj+R1gxyTfYFMdOQViSZ+E83XGHmvgPpLZhdiESXeRiDGlkTRuiPYf5oLoG4DJ K8TMBSAafoD93xi+oGWYEl/a/V0LVU0RCDghAW8wM34HubAdzfSRxhMNoieEYbZu eDQ+ShE5YUC6f+iDfwudx7fByPNbYKEW5VbIg3SyXHtHyMKI8nzDJDEONdbRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZExyPIqbAIxKDIbfHoKiAq/NGOwwHwYDVR0j BBgwFoAU/z8Gal6auPmIuOF8elbdLgCmatgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZDAxMWExYy1hMGFkLTRkOTMtODZhZi0zZjBhYWRkOTY4NGYvMC9GRjNGMDY2QTVF OUFCOEY5ODhCOEUxN0M3QTU2REQyRTAwQTY2QUQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkYzRjA2NkE1RTlBQjhGOTg4QjhFMTdDN0E1NkREMkUwMEE2 NkFEOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWQwMTFhMWMtYTBhZC00ZDkzLTg2 YWYtM2YwYWFkZDk2ODRmLzAvRkYzRjA2NkE1RTlBQjhGOTg4QjhFMTdDN0E1NkRE MkUwMEE2NkFEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKFnEeKItlLrTkGBy6bwHT1MMNrJ6m8uEZuT e9v1sqrqO5MR2MQpOpMZTSIKy2LhlIJ0U37yuS1a/h5Tnummae4pjapbKe+VyBLK irkFw7Mnk2fJOoCD24noBcWVZeNO3DtcHiWQ+kgxtuDh2KZ2JlaUMCWLwwkAHlev MCYi4gzl/dvKLfkj3rsObAm41R3u8sPUiNcDrQH4Ms7PbHalxNafg9h3C0sI7ncF vmqYGW2N5Su5oOGTPRlmlJwen+bjYw3ZKB1S2HmFiciZXzKS35/riBQrSBJjbmHE bb/+nOvO1Ckbrjamr17g59s3VdUQ+mIzrq6mGmNi9JOKItzOkMk= -----END CERTIFICATE-----Generated at Mon Jun 16 15:53:31 2025 by rpki-client