$ rpki-client -vvf repo-rpki.idnic.net/repo/60eea08c-3fd2-488e-a574-9f9bb631a62b/0/FFCC3C879250F6351654AFE2ED137EED71DCACA1.mft File: FFCC3C879250F6351654AFE2ED137EED71DCACA1.mft (raw, json) Hash identifier: 5+axHuwPGcoysUm8LCmfrZmTi8RrQRJZ+pc+6mCooxw= Subject key identifier: BA:1C:F6:5F:38:91:E5:3A:A1:8F:7D:C8:C6:08:04:EE:7E:EE:44:F4 Authority key identifier: FF:CC:3C:87:92:50:F6:35:16:54:AF:E2:ED:13:7E:ED:71:DC:AC:A1 Certificate issuer: /CN=FFCC3C879250F6351654AFE2ED137EED71DCACA1 Certificate serial: 0C24DE5AC7FCE2CF4CDB465B506C6243B49D264D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FFCC3C879250F6351654AFE2ED137EED71DCACA1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/60eea08c-3fd2-488e-a574-9f9bb631a62b/0/FFCC3C879250F6351654AFE2ED137EED71DCACA1.mft Manifest number: 017E Signing time: Sat 14 Jun 2025 20:11:30 +0000 Manifest this update: Sat 14 Jun 2025 20:06:30 +0000 Manifest next update: Tue 17 Jun 2025 21:05:30 +0000 Files and hashes: 1: FFCC3C879250F6351654AFE2ED137EED71DCACA1.crl (hash: kWBl6Ie56/FyDmAMkxMXOejTePQr00dN52+R36ViE2Q=) 2: 3130332e38342e3230362e302f32332d3233203d3e203538343837.roa (hash: LWP4K69rTAmLzfZq+q8A6u6no/UP4pGP/p24TC0qbQA=) 3: 3130332e38342e3230372e302f32342d3234203d3e203538343837.roa (hash: npR7FfMqPJWN/psfdfS+I3WrtVR+flJthIe7wMJ+s1k=) 4: 3130332e38342e3230362e302f32342d3234203d3e203538343837.roa (hash: 7arGMuC545SXWQKW/CPxALp6qAEVOocmqFJNcs6tC24=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/60eea08c-3fd2-488e-a574-9f9bb631a62b/0/FFCC3C879250F6351654AFE2ED137EED71DCACA1.crl rsync://repo-rpki.idnic.net/repo/60eea08c-3fd2-488e-a574-9f9bb631a62b/0/FFCC3C879250F6351654AFE2ED137EED71DCACA1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FFCC3C879250F6351654AFE2ED137EED71DCACA1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 21:05:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:24:de:5a:c7:fc:e2:cf:4c:db:46:5b:50:6c:62:43:b4:9d:26:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FFCC3C879250F6351654AFE2ED137EED71DCACA1 Validity Not Before: Jun 14 20:06:30 2025 GMT Not After : Jun 17 21:05:30 2025 GMT Subject: CN=BA1CF65F3891E53AA18F7DC8C60804EE7EEE44F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e0:13:93:aa:a3:05:d3:c7:e2:07:b0:8c:dc: 15:34:75:09:f1:d6:22:15:f5:c6:05:ca:f9:24:b7: c0:2d:b0:98:33:41:44:b0:44:b2:22:b5:f1:e3:86: a4:88:59:28:15:06:45:cb:09:d3:84:80:69:f3:f8: 46:07:40:b7:d5:c7:91:76:8e:c0:fc:f2:81:a2:61: 0d:fa:6b:e0:21:4e:ac:a7:bf:99:be:90:a1:41:5b: d2:97:9f:95:4f:75:dc:ec:e4:91:94:8d:fa:47:62: 75:4d:23:66:3c:f3:d4:22:a8:82:d9:80:79:77:45: 12:b9:f5:d9:ff:ee:0e:18:58:ae:36:ae:79:4a:40: df:a2:85:bf:43:ba:0e:18:24:51:09:df:16:51:01: 18:53:08:bf:95:c5:7b:d9:5c:99:ef:4f:f1:54:09: 90:32:be:22:bb:88:58:25:be:9c:2c:0d:bb:ab:63: 6f:86:13:ce:77:7c:6b:51:b7:85:c8:23:73:a4:4a: 5d:c0:7a:52:db:64:62:61:21:26:0b:25:4c:db:44: 9e:ab:ba:aa:80:1c:dc:8b:4c:9f:b5:34:5d:5b:d2: b7:60:33:70:e1:63:bd:52:33:2f:19:a8:80:27:97: 79:fd:cc:48:40:a3:e2:f5:a3:08:4c:e6:76:fe:16: f3:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:1C:F6:5F:38:91:E5:3A:A1:8F:7D:C8:C6:08:04:EE:7E:EE:44:F4 X509v3 Authority Key Identifier: keyid:FF:CC:3C:87:92:50:F6:35:16:54:AF:E2:ED:13:7E:ED:71:DC:AC:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/60eea08c-3fd2-488e-a574-9f9bb631a62b/0/FFCC3C879250F6351654AFE2ED137EED71DCACA1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FFCC3C879250F6351654AFE2ED137EED71DCACA1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/60eea08c-3fd2-488e-a574-9f9bb631a62b/0/FFCC3C879250F6351654AFE2ED137EED71DCACA1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:40:51:33:b3:9d:93:ee:6e:f2:a8:b8:8b:dd:3a:60:54:03: 0a:24:94:8f:0d:79:17:2d:f5:c2:6c:ae:26:43:48:46:f5:ac: ab:62:48:8e:ec:d2:cd:9b:5b:f7:aa:a9:72:c2:c5:f2:1b:de: 0a:63:88:57:03:dc:0e:c7:6c:02:0c:ab:52:d5:28:d9:de:9e: c7:8d:76:48:28:1c:83:af:05:d1:4c:d3:43:7d:8b:6a:f7:05: 8c:9e:d3:ea:e1:97:74:74:13:ec:72:bf:7a:5b:7e:95:8b:28: 75:d1:bc:14:17:4e:30:95:46:e8:7b:4b:0a:6a:53:5c:ff:3b: a1:29:85:6b:27:16:62:64:b7:de:ba:b1:38:de:8e:75:a8:1c: da:7d:22:e6:c6:81:66:e9:aa:1a:4d:25:d8:cb:ec:73:f8:4b: 91:55:36:e4:02:56:49:c3:b9:8f:04:b9:94:e5:60:b9:57:01: 9d:67:0b:dc:e7:ac:c3:ff:56:2d:a9:e3:78:23:9c:3d:ee:84: b1:ba:d9:b0:37:08:be:11:39:f2:79:37:98:07:8a:d4:47:06: 9e:6e:fc:95:04:2c:29:61:a3:03:ca:af:26:20:63:32:65:0a: 1b:e6:5a:0e:01:73:d9:34:32:36:cf:ab:89:fd:11:7b:63:e6: 99:c5:cf:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDCTeWsf84s9M20ZbUGxiQ7SdJk0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkZDQzNDODc5MjUwRjYzNTE2NTRBRkUyRUQxMzdFRUQ3 MURDQUNBMTAeFw0yNTA2MTQyMDA2MzBaFw0yNTA2MTcyMTA1MzBaMDMxMTAvBgNV BAMTKEJBMUNGNjVGMzg5MUU1M0FBMThGN0RDOEM2MDgwNEVFN0VFRTQ0RjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC94BOTqqMF08fiB7CM3BU0dQnx 1iIV9cYFyvkkt8AtsJgzQUSwRLIitfHjhqSIWSgVBkXLCdOEgGnz+EYHQLfVx5F2 jsD88oGiYQ36a+AhTqynv5m+kKFBW9KXn5VPddzs5JGUjfpHYnVNI2Y889QiqILZ gHl3RRK59dn/7g4YWK42rnlKQN+ihb9Dug4YJFEJ3xZRARhTCL+VxXvZXJnvT/FU CZAyviK7iFglvpwsDburY2+GE853fGtRt4XII3OkSl3AelLbZGJhISYLJUzbRJ6r uqqAHNyLTJ+1NF1b0rdgM3DhY71SMy8ZqIAnl3n9zEhAo+L1owhM5nb+FvNzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuhz2XziR5Tqhj33IxggE7n7uRPQwHwYDVR0j BBgwFoAU/8w8h5JQ9jUWVK/i7RN+7XHcrKEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MGVlYTA4Yy0zZmQyLTQ4OGUtYTU3NC05ZjliYjYzMWE2MmIvMC9GRkNDM0M4Nzky NTBGNjM1MTY1NEFGRTJFRDEzN0VFRDcxRENBQ0ExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkZDQzNDODc5MjUwRjYzNTE2NTRBRkUyRUQxMzdFRUQ3MURD QUNBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjBlZWEwOGMtM2ZkMi00ODhlLWE1 NzQtOWY5YmI2MzFhNjJiLzAvRkZDQzNDODc5MjUwRjYzNTE2NTRBRkUyRUQxMzdF RUQ3MURDQUNBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACdAUTOznZPubvKouIvdOmBUAwoklI8NeRct 9cJsriZDSEb1rKtiSI7s0s2bW/eqqXLCxfIb3gpjiFcD3A7HbAIMq1LVKNnenseN dkgoHIOvBdFM00N9i2r3BYye0+rhl3R0E+xyv3pbfpWLKHXRvBQXTjCVRuh7Swpq U1z/O6EphWsnFmJkt966sTjejnWoHNp9IubGgWbpqhpNJdjL7HP4S5FVNuQCVknD uY8EuZTlYLlXAZ1nC9znrMP/Vi2p43gjnD3uhLG62bA3CL4ROfJ5N5gHitRHBp5u /JUELClhowPKryYgYzJlChvmWg4Bc9k0MjbPq4n9EXtj5pnFz4A= -----END CERTIFICATE-----Generated at Mon Jun 16 10:40:24 2025 by rpki-client