$ rpki-client -vvf repo-rpki.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.mft File: FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.mft (raw, json) Hash identifier: Zw+rMVyQcPSYunIAq4w8lSouVgybTXzKmF2FowLc3Sw= Subject key identifier: 19:E0:11:5A:D3:F9:34:BD:A3:7C:15:05:75:AD:3D:37:6E:0F:B1:B7 Authority key identifier: FF:EF:EB:2C:96:B1:BE:D5:C5:D6:D8:23:EE:3C:6D:80:69:8B:9F:D6 Certificate issuer: /CN=FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6 Certificate serial: 7D16DEC2278DD86F19D3A08C06EB4C2F5D5092CE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.mft Manifest number: 03AF Signing time: Wed 06 Aug 2025 19:31:14 +0000 Manifest this update: Wed 06 Aug 2025 19:26:14 +0000 Manifest next update: Sat 09 Aug 2025 19:45:14 +0000 Files and hashes: 1: 3130332e3135322e34352e302f32342d3234203d3e20313430343335.roa (hash: SMhDRBgq/CGhFdJAkZwZrQC241Gwys1Efn+WNzlHpsA=) 2: FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.crl (hash: wCrNd7vBIatMMDRNxUeLcpl5R4Z4SmfbhIPiy8WFY1M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.crl rsync://repo-rpki.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 19:45:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:16:de:c2:27:8d:d8:6f:19:d3:a0:8c:06:eb:4c:2f:5d:50:92:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6 Validity Not Before: Aug 6 19:26:14 2025 GMT Not After : Aug 9 19:45:14 2025 GMT Subject: CN=19E0115AD3F934BDA37C150575AD3D376E0FB1B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:aa:37:83:31:b8:3f:0f:c1:70:ef:35:a1:0e: 3f:32:93:8b:c4:8a:6e:bf:db:a8:56:6d:44:c3:9d: 91:4a:d5:8d:4a:7b:16:76:af:dd:c8:ae:49:fe:9c: 3b:35:c8:b2:48:b0:e9:69:7a:06:13:fb:3c:84:c7: 52:1c:1f:25:b7:55:13:d9:bd:7e:0a:bc:8b:97:ff: 37:19:fc:68:a2:8d:9a:4d:fb:0e:ea:a7:8f:95:13: 83:38:f7:c3:4d:39:1e:16:a9:47:13:88:cb:7c:d4: 37:b7:76:9c:94:a8:8d:f1:00:80:9c:e4:f2:a3:54: c5:aa:40:06:f5:de:dd:7d:59:47:9d:53:5b:09:10: 33:32:04:68:fd:06:3f:8f:cc:65:d8:51:58:fa:41: 9d:0d:3a:fc:49:34:92:26:f6:9d:17:53:e6:36:2c: 9e:35:55:29:e8:0f:a9:42:cb:88:4b:12:02:7c:d1: 70:20:35:45:fd:54:91:30:d4:5b:52:8c:63:e7:6c: 7e:3f:09:c7:46:d0:36:a4:2f:e7:39:91:de:ff:e0: 77:37:5c:6a:b7:4f:dd:6d:fd:ba:e0:eb:eb:05:45: 62:a7:27:a5:33:91:a9:a1:d6:f2:9f:63:fe:e6:ed: 12:1a:b8:0c:cd:84:1f:37:1c:c6:12:7b:0f:0f:9a: 2d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:E0:11:5A:D3:F9:34:BD:A3:7C:15:05:75:AD:3D:37:6E:0F:B1:B7 X509v3 Authority Key Identifier: keyid:FF:EF:EB:2C:96:B1:BE:D5:C5:D6:D8:23:EE:3C:6D:80:69:8B:9F:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:6e:56:2f:da:a5:e9:a4:7a:93:fb:1b:a3:c9:7c:7d:27:cd: 55:b5:ba:da:27:3e:fe:d0:a7:56:d8:d8:05:56:7c:28:cc:ea: f8:45:18:46:30:d4:57:bb:a2:88:78:69:2f:81:a6:6b:86:50: 9c:65:53:57:6b:1d:a5:c5:16:84:db:2b:01:53:23:6b:aa:fa: 45:6e:6b:4e:b6:76:a0:f7:db:1c:7a:eb:c6:09:08:d2:c9:f9: f3:91:45:03:6b:fd:2a:36:40:4c:ef:e9:c1:67:b8:77:5e:a6: 23:2b:5b:20:e1:e1:42:a2:98:5b:8b:70:df:29:7b:bc:5b:66: 70:9b:c1:15:ae:a0:ab:0b:91:2e:cd:c6:7b:81:2a:83:19:9d: 42:0e:73:f7:a6:27:c2:ca:6f:5a:f3:a0:82:ac:e5:e2:c1:79: 75:25:90:34:b3:51:3e:2a:6f:b3:b0:c0:c4:2b:1c:81:5a:26: ff:1d:ab:38:45:12:75:f5:2e:bd:5f:ed:e1:5b:8a:52:10:53: 14:3e:6a:05:f0:20:a8:be:92:f3:9e:9a:e4:2b:a8:70:0b:e8: cf:f9:39:ce:3f:f7:93:e8:d7:e2:77:f3:c1:44:b2:ff:d9:01: f0:58:49:a1:ba:88:04:f1:a9:36:eb:f0:f4:bd:a1:83:e4:60: 31:7b:39:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfRbewieN2G8Z06CMButML11Qks4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkZFRkVCMkM5NkIxQkVENUM1RDZEODIzRUUzQzZEODA2 OThCOUZENjAeFw0yNTA4MDYxOTI2MTRaFw0yNTA4MDkxOTQ1MTRaMDMxMTAvBgNV BAMTKDE5RTAxMTVBRDNGOTM0QkRBMzdDMTUwNTc1QUQzRDM3NkUwRkIxQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYqjeDMbg/D8Fw7zWhDj8yk4vE im6/26hWbUTDnZFK1Y1KexZ2r93Irkn+nDs1yLJIsOlpegYT+zyEx1IcHyW3VRPZ vX4KvIuX/zcZ/GiijZpN+w7qp4+VE4M498NNOR4WqUcTiMt81De3dpyUqI3xAICc 5PKjVMWqQAb13t19WUedU1sJEDMyBGj9Bj+PzGXYUVj6QZ0NOvxJNJIm9p0XU+Y2 LJ41VSnoD6lCy4hLEgJ80XAgNUX9VJEw1FtSjGPnbH4/CcdG0DakL+c5kd7/4Hc3 XGq3T91t/brg6+sFRWKnJ6Uzkamh1vKfY/7m7RIauAzNhB83HMYSew8Pmi3vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGeARWtP5NL2jfBUFda09N24PsbcwHwYDVR0j BBgwFoAU/+/rLJaxvtXF1tgj7jxtgGmLn9YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZWZiOTBiMS1iNjhmLTQ0NjMtYTFiZC1lOTA4YzhhMWVkMWEvMC9GRkVGRUIyQzk2 QjFCRUQ1QzVENkQ4MjNFRTNDNkQ4MDY5OEI5RkQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkZFRkVCMkM5NkIxQkVENUM1RDZEODIzRUUzQzZEODA2OThC OUZENi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmVmYjkwYjEtYjY4Zi00NDYzLWEx YmQtZTkwOGM4YTFlZDFhLzAvRkZFRkVCMkM5NkIxQkVENUM1RDZEODIzRUUzQzZE ODA2OThCOUZENi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKxuVi/apemkepP7G6PJfH0nzVW1utonPv7Q p1bY2AVWfCjM6vhFGEYw1Fe7ooh4aS+BpmuGUJxlU1drHaXFFoTbKwFTI2uq+kVu a062dqD32xx668YJCNLJ+fORRQNr/So2QEzv6cFnuHdepiMrWyDh4UKimFuLcN8p e7xbZnCbwRWuoKsLkS7NxnuBKoMZnUIOc/emJ8LKb1rzoIKs5eLBeXUlkDSzUT4q b7OwwMQrHIFaJv8dqzhFEnX1Lr1f7eFbilIQUxQ+agXwIKi+kvOemuQrqHAL6M/5 Oc4/95Po1+J388FEsv/ZAfBYSaG6iATxqTbr8PS9oYPkYDF7Ob8= -----END CERTIFICATE-----Generated at Thu Aug 7 00:25:56 2025 by rpki-client