$ rpki-client -vvf repo-rpki.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.mft File: FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.mft (raw, json) Hash identifier: pxbaaihIY2D0o2Qvsu5KpD8qQhoXst3E+zBO5vthMwU= Subject key identifier: FA:5A:CD:33:15:33:61:FF:49:3C:F8:D4:89:97:F1:40:9D:46:04:2D Authority key identifier: FF:75:AE:DD:C6:05:9E:8A:2B:83:0E:48:7D:72:BE:77:E3:30:BE:EF Certificate issuer: /CN=FF75AEDDC6059E8A2B830E487D72BE77E330BEEF Certificate serial: 0A6641C33CD6C4BB4D3BBB4F095813B0434E90A7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.mft Manifest number: 019D Signing time: Wed 06 Aug 2025 01:31:24 +0000 Manifest this update: Wed 06 Aug 2025 01:26:24 +0000 Manifest next update: Sat 09 Aug 2025 05:11:24 +0000 Files and hashes: 1: FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.crl (hash: Vc0BflQ0/NcjEkoZVCyd3onELJzeLcsRIZByAQ1r9GU=) 2: 3130332e3132312e3133342e302f32332d3234203d3e20313335343738.roa (hash: OByvPBeXjXgICf8nfRM4X/bYHAakXPJvdP6ikk90YbQ=) 3: 3130332e3132312e3133322e302f32332d3234203d3e20313335343738.roa (hash: GNOF8brVgXz3bvHl24vTCw4VN2iGlFmFeZUMDJKeFZw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.crl rsync://repo-rpki.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 05:11:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:66:41:c3:3c:d6:c4:bb:4d:3b:bb:4f:09:58:13:b0:43:4e:90:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF75AEDDC6059E8A2B830E487D72BE77E330BEEF Validity Not Before: Aug 6 01:26:24 2025 GMT Not After : Aug 9 05:11:24 2025 GMT Subject: CN=FA5ACD33153361FF493CF8D48997F1409D46042D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d7:1c:4d:5e:8a:1d:79:a1:ce:5b:e7:e9:76: 39:5e:74:fe:36:c8:f9:65:e7:f6:a2:51:bc:ad:b9: 57:f6:c3:ba:c7:09:95:e7:d4:28:fa:e9:9e:65:ab: b4:c3:5f:14:76:15:4e:ec:48:db:63:d7:8f:74:47: 2f:f7:01:bf:85:76:94:84:00:0b:3c:fa:00:b2:78: e2:e3:d9:82:3d:b3:a2:e3:fc:f9:cf:43:95:ae:17: 0c:d0:5f:89:1c:73:75:31:4f:e9:ec:f6:5e:7e:02: 27:a6:94:e0:49:ce:48:82:f9:3e:77:12:8e:db:02: 54:57:c9:8d:b9:36:58:0e:e5:c0:04:eb:8d:9e:63: 48:7c:31:57:19:2c:99:2f:79:f3:0e:1a:b1:7d:cd: 74:11:e6:64:39:32:f2:cf:08:2a:3f:6b:f5:f1:b7: dc:ee:4b:ad:0f:5e:b9:b8:46:f4:a5:10:df:21:c3: 28:1f:78:6c:3d:02:a2:8f:c7:55:6d:7f:4a:d5:9e: 7c:84:78:95:9f:71:ba:89:b4:3d:71:f9:c4:0e:14: 36:37:02:dc:26:cf:8f:6c:66:af:40:35:6b:7c:42: 38:d2:70:ce:c5:6d:a9:3e:53:41:95:ec:e2:02:95: 0d:b6:b8:c6:1b:a1:74:c1:e4:09:67:be:21:66:6b: 7f:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:5A:CD:33:15:33:61:FF:49:3C:F8:D4:89:97:F1:40:9D:46:04:2D X509v3 Authority Key Identifier: keyid:FF:75:AE:DD:C6:05:9E:8A:2B:83:0E:48:7D:72:BE:77:E3:30:BE:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:87:53:63:86:6a:fd:33:49:5a:ef:9b:31:09:de:6b:bd:92: f5:25:32:29:9f:45:f8:54:21:85:be:f2:e5:bc:1c:f8:c7:41: 10:e2:2b:7e:aa:18:94:05:31:8a:48:48:83:b2:6d:6c:4c:bb: b9:21:e7:14:2c:2d:10:b2:a2:4c:9a:68:d3:7b:c0:b6:87:84: ce:c9:02:4a:ad:c2:9f:5e:74:8f:1b:b2:82:6c:5c:8d:4d:cf: d3:9b:24:76:ed:ac:86:f4:54:1f:30:c6:d1:32:29:e3:30:77: 75:c8:80:a0:2c:a4:59:00:b8:4d:e0:49:fe:85:ab:4c:3c:ae: 3f:77:d5:01:16:fd:e4:d7:95:0f:59:e1:f1:08:6c:fb:3b:f5: 56:ea:b1:7e:23:5f:2b:42:d6:c8:a1:58:30:38:46:5c:ab:8c: 21:b4:fc:b6:25:f9:b2:43:05:55:f9:f3:d2:f8:f1:f3:72:e8: dc:29:c6:1d:cc:8e:b8:09:7c:03:f7:cd:48:df:df:d7:ae:80: 36:8c:fa:86:54:3d:d2:1f:b1:8b:b1:86:09:cc:f2:23:4d:e4: ae:fe:b7:bd:1f:ad:da:97:86:18:6c:d9:ea:f2:7d:c4:8e:b9: 88:d3:df:a0:f1:da:b3:c0:4d:37:d7:0d:2a:b0:06:93:c1:c4: 4b:95:6e:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCmZBwzzWxLtNO7tPCVgTsENOkKcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY3NUFFRERDNjA1OUU4QTJCODMwRTQ4N0Q3MkJFNzdF MzMwQkVFRjAeFw0yNTA4MDYwMTI2MjRaFw0yNTA4MDkwNTExMjRaMDMxMTAvBgNV BAMTKEZBNUFDRDMzMTUzMzYxRkY0OTNDRjhENDg5OTdGMTQwOUQ0NjA0MkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE1xxNXoodeaHOW+fpdjledP42 yPll5/aiUbytuVf2w7rHCZXn1Cj66Z5lq7TDXxR2FU7sSNtj1490Ry/3Ab+FdpSE AAs8+gCyeOLj2YI9s6Lj/PnPQ5WuFwzQX4kcc3UxT+ns9l5+AiemlOBJzkiC+T53 Eo7bAlRXyY25NlgO5cAE642eY0h8MVcZLJkvefMOGrF9zXQR5mQ5MvLPCCo/a/Xx t9zuS60PXrm4RvSlEN8hwygfeGw9AqKPx1Vtf0rVnnyEeJWfcbqJtD1x+cQOFDY3 Atwmz49sZq9ANWt8QjjScM7Fbak+U0GV7OIClQ22uMYboXTB5AlnviFma395AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+lrNMxUzYf9JPPjUiZfxQJ1GBC0wHwYDVR0j BBgwFoAU/3Wu3cYFnoorgw5IfXK+d+Mwvu8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YjM3ODRmZS1mOWZlLTRjYmUtODc2OC0yNjNhNzY5ODZhM2EvMC9GRjc1QUVEREM2 MDU5RThBMkI4MzBFNDg3RDcyQkU3N0UzMzBCRUVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkY3NUFFRERDNjA1OUU4QTJCODMwRTQ4N0Q3MkJFNzdFMzMw QkVFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWIzNzg0ZmUtZjlmZS00Y2JlLTg3 NjgtMjYzYTc2OTg2YTNhLzAvRkY3NUFFRERDNjA1OUU4QTJCODMwRTQ4N0Q3MkJF NzdFMzMwQkVFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADqHU2OGav0zSVrvmzEJ3mu9kvUlMimfRfhU IYW+8uW8HPjHQRDiK36qGJQFMYpISIOybWxMu7kh5xQsLRCyokyaaNN7wLaHhM7J Akqtwp9edI8bsoJsXI1Nz9ObJHbtrIb0VB8wxtEyKeMwd3XIgKAspFkAuE3gSf6F q0w8rj931QEW/eTXlQ9Z4fEIbPs79VbqsX4jXytC1sihWDA4RlyrjCG0/LYl+bJD BVX589L48fNy6Nwpxh3MjrgJfAP3zUjf39eugDaM+oZUPdIfsYuxhgnM8iNN5K7+ t70frdqXhhhs2eryfcSOuYjT36Dx2rPATTfXDSqwBpPBxEuVbls= -----END CERTIFICATE-----Generated at Thu Aug 7 07:21:22 2025 by rpki-client