$ rpki-client -vvf repo-rpki.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.mft File: FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.mft (raw, json) Hash identifier: zbdOcsY9W+Qjp/XnQQw0jXdZjLwsZEDv6N90OhQmfL4= Subject key identifier: B2:C9:0C:D4:D0:D7:A4:77:75:0A:05:6A:14:3A:6C:26:DC:4C:F2:8B Authority key identifier: FF:EF:EB:2C:96:B1:BE:D5:C5:D6:D8:23:EE:3C:6D:80:69:8B:9F:D6 Certificate issuer: /CN=FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6 Certificate serial: 45FC80E7052605928C5590AB1BA33A5718DE2602 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.mft Manifest number: 0397 Signing time: Sat 14 Jun 2025 01:01:05 +0000 Manifest this update: Sat 14 Jun 2025 00:56:05 +0000 Manifest next update: Tue 17 Jun 2025 11:01:05 +0000 Files and hashes: 1: FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.crl (hash: 73B1FVJKAOC3d7BpuTHoLgZpOYtBEwyvtyYyGog46Cg=) 2: 3130332e3135322e34352e302f32342d3234203d3e20313430343335.roa (hash: SMhDRBgq/CGhFdJAkZwZrQC241Gwys1Efn+WNzlHpsA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.crl rsync://repo-rpki.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 11:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:fc:80:e7:05:26:05:92:8c:55:90:ab:1b:a3:3a:57:18:de:26:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6 Validity Not Before: Jun 14 00:56:05 2025 GMT Not After : Jun 17 11:01:05 2025 GMT Subject: CN=B2C90CD4D0D7A477750A056A143A6C26DC4CF28B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:85:1b:6e:6a:98:83:fa:34:13:5b:67:45:4f: eb:30:ef:d2:62:3c:ca:af:a3:40:cd:1d:21:f0:9d: 2f:06:49:2b:71:ef:74:53:7e:ff:3f:11:24:2e:91: 16:95:af:fc:fd:2c:31:fa:fe:ba:9d:89:f2:8b:d6: 43:3b:3f:b4:b4:cc:0a:d2:38:7d:a8:85:78:2e:4a: 79:3a:c8:fc:c5:d0:36:5b:01:6a:aa:91:e7:fd:c6: 9b:0f:56:c6:f8:88:32:a1:7f:f0:df:b4:e7:d9:4e: 37:42:0c:bf:83:b3:ba:96:ac:3f:7a:da:1b:e7:62: 90:66:d8:a1:b3:bd:6e:f4:1c:19:a9:d5:b5:e0:2f: 03:7d:d2:d2:c3:e6:84:b4:1f:f5:f1:19:04:33:00: 4e:e4:8c:43:6b:f1:98:6b:95:1e:79:85:c7:51:f2: ec:e9:da:05:41:29:b6:69:89:b6:82:84:0c:96:66: 12:53:51:5c:e8:ab:a2:55:b9:e0:40:9f:c8:79:bb: 85:4c:7f:29:ee:52:a0:0e:1e:48:d4:7d:ab:f6:41: bc:9f:ad:bb:3c:71:b8:75:e2:ff:e0:af:e1:de:ad: a3:63:c7:c2:57:e2:0d:2c:0a:31:12:c0:49:2b:54: be:e0:08:ac:05:56:5b:c2:d8:d3:2a:8f:6a:1a:42: 64:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:C9:0C:D4:D0:D7:A4:77:75:0A:05:6A:14:3A:6C:26:DC:4C:F2:8B X509v3 Authority Key Identifier: keyid:FF:EF:EB:2C:96:B1:BE:D5:C5:D6:D8:23:EE:3C:6D:80:69:8B:9F:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:bf:a7:f0:29:7c:33:35:ad:d9:c0:6e:87:93:0f:5c:0b:24: 9a:41:86:d8:15:33:aa:20:7b:ad:59:10:d6:64:ef:60:1d:35: 18:69:17:34:dd:3e:16:a6:f9:ef:2e:4a:49:fe:f7:b9:ad:75: 34:e0:41:96:7c:4e:d7:53:65:08:32:81:d2:7b:10:80:da:cb: cd:41:7a:e2:e2:b0:eb:d5:f0:6b:c7:30:a0:51:c5:7d:4c:0a: d6:a4:07:02:22:34:39:36:ec:76:1e:ef:35:41:13:20:52:79: ff:86:bc:3b:ce:f6:d5:58:3d:ae:52:19:0c:ad:e8:73:6c:31: 2c:bd:bd:2a:83:21:d3:57:b3:35:b3:64:9a:8d:0c:18:5d:f6: 1d:7f:4f:8e:f3:4c:2b:2f:70:5e:8f:06:64:40:88:88:a9:e3: 5a:02:73:ff:6a:14:ef:89:f1:3b:68:bc:43:0b:8d:c1:ba:61: b2:18:7f:bd:b9:f2:81:c3:5b:e5:7e:25:cf:6e:4f:d3:86:45: ca:be:2f:54:81:44:81:95:ef:b4:e6:67:1e:4a:30:08:2b:16: b0:d8:fd:63:a9:f6:10:7d:6a:d0:b2:96:c0:bd:7c:6c:7e:ec: 6a:af:60:4a:d1:b9:20:e2:da:ec:e2:e6:3c:85:ed:74:e8:7e: da:5a:71:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURfyA5wUmBZKMVZCrG6M6VxjeJgIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkZFRkVCMkM5NkIxQkVENUM1RDZEODIzRUUzQzZEODA2 OThCOUZENjAeFw0yNTA2MTQwMDU2MDVaFw0yNTA2MTcxMTAxMDVaMDMxMTAvBgNV BAMTKEIyQzkwQ0Q0RDBEN0E0Nzc3NTBBMDU2QTE0M0E2QzI2REM0Q0YyOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOhRtuapiD+jQTW2dFT+sw79Ji PMqvo0DNHSHwnS8GSStx73RTfv8/ESQukRaVr/z9LDH6/rqdifKL1kM7P7S0zArS OH2ohXguSnk6yPzF0DZbAWqqkef9xpsPVsb4iDKhf/DftOfZTjdCDL+Ds7qWrD96 2hvnYpBm2KGzvW70HBmp1bXgLwN90tLD5oS0H/XxGQQzAE7kjENr8ZhrlR55hcdR 8uzp2gVBKbZpibaChAyWZhJTUVzoq6JVueBAn8h5u4VMfynuUqAOHkjUfav2Qbyf rbs8cbh14v/gr+HeraNjx8JX4g0sCjESwEkrVL7gCKwFVlvC2NMqj2oaQmTBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsskM1NDXpHd1CgVqFDpsJtxM8oswHwYDVR0j BBgwFoAU/+/rLJaxvtXF1tgj7jxtgGmLn9YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZWZiOTBiMS1iNjhmLTQ0NjMtYTFiZC1lOTA4YzhhMWVkMWEvMC9GRkVGRUIyQzk2 QjFCRUQ1QzVENkQ4MjNFRTNDNkQ4MDY5OEI5RkQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkZFRkVCMkM5NkIxQkVENUM1RDZEODIzRUUzQzZEODA2OThC OUZENi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmVmYjkwYjEtYjY4Zi00NDYzLWEx YmQtZTkwOGM4YTFlZDFhLzAvRkZFRkVCMkM5NkIxQkVENUM1RDZEODIzRUUzQzZE ODA2OThCOUZENi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHC/p/ApfDM1rdnAboeTD1wLJJpBhtgVM6og e61ZENZk72AdNRhpFzTdPham+e8uSkn+97mtdTTgQZZ8TtdTZQgygdJ7EIDay81B euLisOvV8GvHMKBRxX1MCtakBwIiNDk27HYe7zVBEyBSef+GvDvO9tVYPa5SGQyt 6HNsMSy9vSqDIdNXszWzZJqNDBhd9h1/T47zTCsvcF6PBmRAiIip41oCc/9qFO+J 8TtovEMLjcG6YbIYf7258oHDW+V+Jc9uT9OGRcq+L1SBRIGV77TmZx5KMAgrFrDY /WOp9hB9atCylsC9fGx+7GqvYErRuSDi2uzi5jyF7XToftpacds= -----END CERTIFICATE-----Generated at Mon Jun 16 04:38:42 2025 by rpki-client