$ rpki-client -vvf repo-rpki.idnic.net/repo/60eea08c-3fd2-488e-a574-9f9bb631a62b/0/FFCC3C879250F6351654AFE2ED137EED71DCACA1.mft File: FFCC3C879250F6351654AFE2ED137EED71DCACA1.mft (raw, json) Hash identifier: SP5J2qZ1hNz64fhiHFxdS0kIt/ilJUAL/3v3Fl5oSQw= Subject key identifier: D2:3B:3F:67:67:AC:AF:BC:EB:6A:30:8B:A7:EA:5F:7C:13:C5:9A:DD Authority key identifier: FF:CC:3C:87:92:50:F6:35:16:54:AF:E2:ED:13:7E:ED:71:DC:AC:A1 Certificate issuer: /CN=FFCC3C879250F6351654AFE2ED137EED71DCACA1 Certificate serial: 3D2A6126E3F009F01B4BEF67E6DE52C4C9212D5A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FFCC3C879250F6351654AFE2ED137EED71DCACA1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/60eea08c-3fd2-488e-a574-9f9bb631a62b/0/FFCC3C879250F6351654AFE2ED137EED71DCACA1.mft Manifest number: 0194 Signing time: Sun 03 Aug 2025 15:21:28 +0000 Manifest this update: Sun 03 Aug 2025 15:16:28 +0000 Manifest next update: Wed 06 Aug 2025 20:46:28 +0000 Files and hashes: 1: FFCC3C879250F6351654AFE2ED137EED71DCACA1.crl (hash: GhLieHjDupx/JBimsxhFHX9j/zai6qnSpSYDq+Azo9M=) 2: 3130332e38342e3230362e302f32342d3234203d3e203538343837.roa (hash: 7arGMuC545SXWQKW/CPxALp6qAEVOocmqFJNcs6tC24=) 3: 3130332e38342e3230372e302f32342d3234203d3e203538343837.roa (hash: npR7FfMqPJWN/psfdfS+I3WrtVR+flJthIe7wMJ+s1k=) 4: 3130332e38342e3230362e302f32332d3233203d3e203538343837.roa (hash: LWP4K69rTAmLzfZq+q8A6u6no/UP4pGP/p24TC0qbQA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/60eea08c-3fd2-488e-a574-9f9bb631a62b/0/FFCC3C879250F6351654AFE2ED137EED71DCACA1.crl rsync://repo-rpki.idnic.net/repo/60eea08c-3fd2-488e-a574-9f9bb631a62b/0/FFCC3C879250F6351654AFE2ED137EED71DCACA1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FFCC3C879250F6351654AFE2ED137EED71DCACA1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 Aug 2025 20:46:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:2a:61:26:e3:f0:09:f0:1b:4b:ef:67:e6:de:52:c4:c9:21:2d:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FFCC3C879250F6351654AFE2ED137EED71DCACA1 Validity Not Before: Aug 3 15:16:28 2025 GMT Not After : Aug 6 20:46:28 2025 GMT Subject: CN=D23B3F6767ACAFBCEB6A308BA7EA5F7C13C59ADD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:88:cb:17:5d:79:e8:8d:35:94:44:41:49:b6: 7b:30:f0:0d:2a:23:0d:ef:7a:8b:db:ab:66:10:3f: a6:56:b0:14:e8:b3:41:51:8a:b0:f3:d7:57:bc:66: 5f:a6:23:bd:d3:e1:09:df:73:e0:c2:fa:f8:34:bd: b2:da:a2:89:1c:47:cf:dc:99:39:1a:e3:d8:e0:92: 78:87:7b:51:af:b9:10:0b:88:a6:4c:29:cf:d5:5b: f3:1f:3f:14:04:83:c6:48:2c:91:9d:30:30:fc:3c: fe:17:7e:41:59:c5:8b:03:bb:47:7d:19:06:d2:d1: 6e:aa:3e:ce:5e:89:7a:56:24:df:70:76:01:ec:11: d0:7a:20:cd:18:7e:06:82:99:da:9d:a2:e1:27:9b: d9:35:3a:29:c5:62:8f:e1:5f:a6:fe:7e:66:a7:b9: 58:55:37:7d:3e:96:43:d8:12:50:b1:6f:01:05:7d: ac:d3:24:36:65:a2:16:5f:f8:92:a8:61:9f:86:75: c3:75:84:44:6b:25:9e:2e:3b:8e:89:75:95:53:62: 5f:77:c9:bf:6c:4e:fd:9a:7f:9b:b1:c0:16:3f:00: cd:7c:c1:fa:bf:31:cf:de:75:e5:25:bf:eb:30:a4: c3:0c:f7:5a:bf:ef:7b:11:c4:cc:8f:7e:e1:8d:23: 37:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:3B:3F:67:67:AC:AF:BC:EB:6A:30:8B:A7:EA:5F:7C:13:C5:9A:DD X509v3 Authority Key Identifier: keyid:FF:CC:3C:87:92:50:F6:35:16:54:AF:E2:ED:13:7E:ED:71:DC:AC:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/60eea08c-3fd2-488e-a574-9f9bb631a62b/0/FFCC3C879250F6351654AFE2ED137EED71DCACA1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FFCC3C879250F6351654AFE2ED137EED71DCACA1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/60eea08c-3fd2-488e-a574-9f9bb631a62b/0/FFCC3C879250F6351654AFE2ED137EED71DCACA1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:70:67:ca:b8:3e:9f:95:21:3f:f6:c4:c7:aa:82:ca:9d:f3: 6a:39:48:f6:58:d1:4b:a0:9d:ac:42:ae:7d:79:f3:aa:70:2b: 0c:0e:1e:5a:98:33:eb:97:c6:37:c9:af:e1:26:18:54:fc:d1: 56:3c:51:ef:1a:38:30:49:0a:5a:71:77:ad:90:ee:64:a8:f5: 01:3c:d4:1a:32:b0:12:58:cb:1b:ec:0c:41:dd:71:28:8f:7e: 67:84:6d:ef:8f:f7:81:d1:10:66:cc:40:ce:c3:81:21:65:3d: da:de:aa:15:db:09:f0:31:7e:b6:35:75:8c:ca:59:29:ae:51: 05:e9:77:4a:78:d3:18:d5:e9:d2:41:b0:1e:75:25:79:cd:c5: af:f6:ee:4d:32:6b:89:41:69:6e:db:53:28:18:2d:4f:ae:ae: 48:f1:11:85:f5:14:04:e2:78:8b:82:56:86:3e:e6:c3:90:7a: 8e:2e:84:0f:4a:1f:38:77:bc:9e:66:e3:08:6b:d7:f5:12:81: 64:5b:57:77:d3:10:f3:07:6c:08:f8:c9:33:7a:ff:19:45:ae: a2:cd:af:8f:44:97:eb:04:3a:f1:66:f0:f2:a8:96:78:0b:bb: e2:26:c4:63:ce:fa:9f:8a:51:b7:16:6a:40:fa:8f:7b:0c:b0: d2:e6:02:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPSphJuPwCfAbS+9n5t5SxMkhLVowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkZDQzNDODc5MjUwRjYzNTE2NTRBRkUyRUQxMzdFRUQ3 MURDQUNBMTAeFw0yNTA4MDMxNTE2MjhaFw0yNTA4MDYyMDQ2MjhaMDMxMTAvBgNV BAMTKEQyM0IzRjY3NjdBQ0FGQkNFQjZBMzA4QkE3RUE1RjdDMTNDNTlBREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD6iMsXXXnojTWUREFJtnsw8A0q Iw3veovbq2YQP6ZWsBTos0FRirDz11e8Zl+mI73T4Qnfc+DC+vg0vbLaookcR8/c mTka49jgkniHe1GvuRALiKZMKc/VW/MfPxQEg8ZILJGdMDD8PP4XfkFZxYsDu0d9 GQbS0W6qPs5eiXpWJN9wdgHsEdB6IM0YfgaCmdqdouEnm9k1OinFYo/hX6b+fman uVhVN30+lkPYElCxbwEFfazTJDZlohZf+JKoYZ+GdcN1hERrJZ4uO46JdZVTYl93 yb9sTv2af5uxwBY/AM18wfq/Mc/edeUlv+swpMMM91q/73sRxMyPfuGNIzcvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0js/Z2esr7zrajCLp+pffBPFmt0wHwYDVR0j BBgwFoAU/8w8h5JQ9jUWVK/i7RN+7XHcrKEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MGVlYTA4Yy0zZmQyLTQ4OGUtYTU3NC05ZjliYjYzMWE2MmIvMC9GRkNDM0M4Nzky NTBGNjM1MTY1NEFGRTJFRDEzN0VFRDcxRENBQ0ExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkZDQzNDODc5MjUwRjYzNTE2NTRBRkUyRUQxMzdFRUQ3MURD QUNBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjBlZWEwOGMtM2ZkMi00ODhlLWE1 NzQtOWY5YmI2MzFhNjJiLzAvRkZDQzNDODc5MjUwRjYzNTE2NTRBRkUyRUQxMzdF RUQ3MURDQUNBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABlwZ8q4Pp+VIT/2xMeqgsqd82o5SPZY0Uug naxCrn1586pwKwwOHlqYM+uXxjfJr+EmGFT80VY8Ue8aODBJClpxd62Q7mSo9QE8 1BoysBJYyxvsDEHdcSiPfmeEbe+P94HREGbMQM7DgSFlPdreqhXbCfAxfrY1dYzK WSmuUQXpd0p40xjV6dJBsB51JXnNxa/27k0ya4lBaW7bUygYLU+urkjxEYX1FATi eIuCVoY+5sOQeo4uhA9KHzh3vJ5m4whr1/USgWRbV3fTEPMHbAj4yTN6/xlFrqLN r49El+sEOvFm8PKolngLu+ImxGPO+p+KUbcWakD6j3sMsNLmAts= -----END CERTIFICATE-----Generated at Tue Aug 5 16:34:51 2025 by rpki-client