$ rpki-client -vvf repo-rpki.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.mft File: FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.mft (raw, json) Hash identifier: 3Vmy/W19ESuJxVwuWvcNigBLsVQl1+XfniiiOOUv7mE= Subject key identifier: 4C:22:DD:47:38:AC:74:43:BC:E6:73:26:B0:6D:3E:3E:83:53:47:E3 Authority key identifier: FF:75:AE:DD:C6:05:9E:8A:2B:83:0E:48:7D:72:BE:77:E3:30:BE:EF Certificate issuer: /CN=FF75AEDDC6059E8A2B830E487D72BE77E330BEEF Certificate serial: 525DA9E7315A3234444D3AC21EB1217820D3FB1D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.mft Manifest number: 0187 Signing time: Tue 17 Jun 2025 01:31:25 +0000 Manifest this update: Tue 17 Jun 2025 01:26:25 +0000 Manifest next update: Fri 20 Jun 2025 05:20:25 +0000 Files and hashes: 1: 3130332e3132312e3133342e302f32332d3234203d3e20313335343738.roa (hash: OByvPBeXjXgICf8nfRM4X/bYHAakXPJvdP6ikk90YbQ=) 2: 3130332e3132312e3133322e302f32332d3234203d3e20313335343738.roa (hash: GNOF8brVgXz3bvHl24vTCw4VN2iGlFmFeZUMDJKeFZw=) 3: FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.crl (hash: /VWmZEwus5FYuBBsmRWTmE5hFqN08FaaXi+hCAuwN4I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.crl rsync://repo-rpki.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 05:20:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:5d:a9:e7:31:5a:32:34:44:4d:3a:c2:1e:b1:21:78:20:d3:fb:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF75AEDDC6059E8A2B830E487D72BE77E330BEEF Validity Not Before: Jun 17 01:26:25 2025 GMT Not After : Jun 20 05:20:25 2025 GMT Subject: CN=4C22DD4738AC7443BCE67326B06D3E3E835347E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:30:e4:9c:93:67:98:b5:f3:de:cf:9f:8c:c2: 3d:20:68:e9:aa:47:5b:28:10:d5:73:2b:eb:c0:3f: 0c:ac:54:3d:f4:46:08:1e:f6:ce:47:c1:2d:36:79: 6d:ad:2f:05:bb:fb:7e:b8:78:5f:82:f1:5f:3d:a1: d7:f6:fd:69:b4:3e:3f:83:b8:2b:2e:9e:d0:6f:2e: 60:e7:57:67:ae:0d:18:72:4f:8f:7f:1c:6e:16:23: 8d:f4:aa:b7:4f:08:76:25:69:ec:de:2b:4c:6a:a5: fc:01:d4:42:d4:7b:9a:a1:fa:db:b7:27:41:20:c7: 30:cf:74:a1:1d:fe:c5:69:35:cd:78:87:34:d3:58: e7:72:f9:87:cf:16:e6:2e:60:90:48:4f:28:11:44: f8:e6:bf:78:46:3e:2b:2e:69:a1:bf:9d:52:ee:9f: a9:94:96:18:cd:65:6d:92:5d:b3:47:8d:6e:61:ea: 6b:30:37:56:ec:03:14:57:fa:9e:9d:52:2f:01:f9: 42:7e:e3:d3:1b:12:36:3d:fb:ad:4e:a6:74:fb:88: 1a:7b:71:83:71:3a:74:c3:ca:14:eb:14:94:c8:3c: 6d:c2:2e:3d:ba:36:b4:82:41:b2:db:53:1c:93:29: 81:50:0d:cc:74:78:6b:18:34:ba:bb:0d:a6:3f:0a: dd:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:22:DD:47:38:AC:74:43:BC:E6:73:26:B0:6D:3E:3E:83:53:47:E3 X509v3 Authority Key Identifier: keyid:FF:75:AE:DD:C6:05:9E:8A:2B:83:0E:48:7D:72:BE:77:E3:30:BE:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:cf:8d:8a:a1:65:86:8b:74:74:37:68:9c:b1:48:35:5a:94: 5b:72:26:41:4a:f8:ce:0a:0c:99:b6:f0:62:7d:fb:3b:39:38: c8:63:0f:23:c5:fd:97:36:1a:6a:01:e6:93:c4:e6:49:e3:4a: ed:16:85:2c:17:07:2a:41:ea:34:15:fa:66:43:c5:87:68:0a: 3d:fe:97:e7:9d:46:89:51:35:2a:fa:fd:d2:16:21:4e:7d:05: 96:06:c4:4b:02:e8:8b:66:0a:ee:eb:cf:c0:5d:75:e6:b0:87: 3b:f6:4f:44:43:26:48:a8:57:b7:a1:f5:f0:93:f3:fa:46:63: 12:f5:3e:44:a4:89:0a:16:92:ec:1d:f4:fd:78:f6:c2:bb:d3: 56:82:59:70:5f:b0:a7:76:68:55:15:e0:64:72:c0:f8:00:f5: 32:29:14:09:fc:05:37:9f:f4:47:62:30:a1:45:85:4d:25:d6: 98:1c:69:1c:29:c4:b7:3f:1a:0f:54:33:c2:f9:22:43:9b:d2: 84:a3:e9:63:ca:b7:bc:dd:97:15:b9:07:9f:c9:15:a1:ad:6e: db:35:0a:13:0d:d6:bd:96:d1:c3:28:dc:ad:33:f5:a0:c4:4c: 90:10:53:97:90:73:0d:c3:50:9f:7b:21:41:3b:5a:8d:5b:22: 4d:bc:44:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUl2p5zFaMjRETTrCHrEheCDT+x0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY3NUFFRERDNjA1OUU4QTJCODMwRTQ4N0Q3MkJFNzdF MzMwQkVFRjAeFw0yNTA2MTcwMTI2MjVaFw0yNTA2MjAwNTIwMjVaMDMxMTAvBgNV BAMTKDRDMjJERDQ3MzhBQzc0NDNCQ0U2NzMyNkIwNkQzRTNFODM1MzQ3RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWMOSck2eYtfPez5+Mwj0gaOmq R1soENVzK+vAPwysVD30Rgge9s5HwS02eW2tLwW7+364eF+C8V89odf2/Wm0Pj+D uCsuntBvLmDnV2euDRhyT49/HG4WI430qrdPCHYlaezeK0xqpfwB1ELUe5qh+tu3 J0EgxzDPdKEd/sVpNc14hzTTWOdy+YfPFuYuYJBITygRRPjmv3hGPisuaaG/nVLu n6mUlhjNZW2SXbNHjW5h6mswN1bsAxRX+p6dUi8B+UJ+49MbEjY9+61OpnT7iBp7 cYNxOnTDyhTrFJTIPG3CLj26NrSCQbLbUxyTKYFQDcx0eGsYNLq7DaY/Ct2XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTCLdRzisdEO85nMmsG0+PoNTR+MwHwYDVR0j BBgwFoAU/3Wu3cYFnoorgw5IfXK+d+Mwvu8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YjM3ODRmZS1mOWZlLTRjYmUtODc2OC0yNjNhNzY5ODZhM2EvMC9GRjc1QUVEREM2 MDU5RThBMkI4MzBFNDg3RDcyQkU3N0UzMzBCRUVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkY3NUFFRERDNjA1OUU4QTJCODMwRTQ4N0Q3MkJFNzdFMzMw QkVFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWIzNzg0ZmUtZjlmZS00Y2JlLTg3 NjgtMjYzYTc2OTg2YTNhLzAvRkY3NUFFRERDNjA1OUU4QTJCODMwRTQ4N0Q3MkJF NzdFMzMwQkVFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK3PjYqhZYaLdHQ3aJyxSDValFtyJkFK+M4K DJm28GJ9+zs5OMhjDyPF/Zc2GmoB5pPE5knjSu0WhSwXBypB6jQV+mZDxYdoCj3+ l+edRolRNSr6/dIWIU59BZYGxEsC6ItmCu7rz8Bddeawhzv2T0RDJkioV7eh9fCT 8/pGYxL1PkSkiQoWkuwd9P149sK701aCWXBfsKd2aFUV4GRywPgA9TIpFAn8BTef 9EdiMKFFhU0l1pgcaRwpxLc/Gg9UM8L5IkOb0oSj6WPKt7zdlxW5B5/JFaGtbts1 ChMN1r2W0cMo3K0z9aDETJAQU5eQcw3DUJ97IUE7Wo1bIk28RPQ= -----END CERTIFICATE-----Generated at Tue Jun 17 15:58:27 2025 by rpki-client