$ rpki-client -vvf repo-rpki.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.mft File: FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.mft (raw, json) Hash identifier: qAgG+rZ4GciNwmCbtkVOOdz4YQ78RjK8WpfO69MywXQ= Subject key identifier: B8:4B:19:9C:68:B9:58:10:C7:9E:CF:DD:6B:0A:16:5B:94:6C:44:F0 Authority key identifier: FF:75:AE:DD:C6:05:9E:8A:2B:83:0E:48:7D:72:BE:77:E3:30:BE:EF Certificate issuer: /CN=FF75AEDDC6059E8A2B830E487D72BE77E330BEEF Certificate serial: 5234703F8054C85F0AFEBFE384E3D650E60EC736 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.mft Manifest number: 0170 Signing time: Sat 26 Apr 2025 20:31:20 +0000 Manifest this update: Sat 26 Apr 2025 20:26:20 +0000 Manifest next update: Wed 30 Apr 2025 00:25:20 +0000 Files and hashes: 1: 3130332e3132312e3133322e302f32332d3234203d3e20313335343738.roa (hash: GNOF8brVgXz3bvHl24vTCw4VN2iGlFmFeZUMDJKeFZw=) 2: FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.crl (hash: YoRb5pbzLBJkVX09z0sqYRTffCypFCDFY5IysuWgx9I=) 3: 3130332e3132312e3133342e302f32332d3234203d3e20313335343738.roa (hash: OByvPBeXjXgICf8nfRM4X/bYHAakXPJvdP6ikk90YbQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.crl rsync://repo-rpki.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 00:25:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:34:70:3f:80:54:c8:5f:0a:fe:bf:e3:84:e3:d6:50:e6:0e:c7:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF75AEDDC6059E8A2B830E487D72BE77E330BEEF Validity Not Before: Apr 26 20:26:20 2025 GMT Not After : Apr 30 00:25:20 2025 GMT Subject: CN=B84B199C68B95810C79ECFDD6B0A165B946C44F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:f7:81:7f:32:f8:ee:51:70:c2:f9:01:2b:bb: 6c:ac:7f:eb:69:59:5c:13:6d:a9:b8:68:41:64:0e: 5f:3d:54:ed:9c:da:e0:02:0c:97:37:0b:5d:83:09: 50:11:e6:ad:84:3f:fe:5c:e8:14:a4:9e:97:f0:a9: 59:06:d4:c4:8f:30:e3:f5:61:0a:bc:c7:b9:5c:27: c1:b7:55:d0:32:07:65:24:76:05:c6:c4:45:d1:29: 8c:a6:f2:66:ad:26:5f:1b:c2:75:f2:93:b7:61:64: e3:02:c9:65:3c:2e:7a:7b:6b:96:e1:25:be:91:55: 16:a7:a7:5e:0b:7c:6b:40:5f:ce:03:79:f9:d4:d1: 45:8c:44:91:b0:0f:ab:93:b4:53:2b:52:ee:51:e4: 72:27:78:1e:9f:9b:ab:91:da:ad:09:63:23:9d:d4: d6:da:e8:f4:74:71:d3:16:b1:c1:25:f3:81:13:c9: 96:e6:7d:8f:03:45:87:f3:cf:9c:84:3f:d3:e6:ee: 30:d3:75:f5:11:38:b8:03:b4:7f:b9:06:03:4c:1e: 34:e3:bd:36:48:2b:a8:e6:c4:14:84:08:ba:d4:53: 11:92:64:cd:4a:08:42:5b:9e:57:b9:f7:3c:31:e9: 89:0e:a3:be:2c:3e:ce:9c:ad:b5:8e:da:d5:88:82: ab:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:4B:19:9C:68:B9:58:10:C7:9E:CF:DD:6B:0A:16:5B:94:6C:44:F0 X509v3 Authority Key Identifier: keyid:FF:75:AE:DD:C6:05:9E:8A:2B:83:0E:48:7D:72:BE:77:E3:30:BE:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:2b:f8:f5:63:73:7b:64:71:17:e7:e7:ae:4d:b5:10:95:12: 88:a3:c2:08:fd:f5:6e:f9:03:4d:5c:4f:2d:d1:1e:8a:25:26: 9a:5e:aa:36:62:e4:fa:11:aa:22:6d:1b:d7:12:71:bf:2b:55: 9d:f2:62:03:bb:5e:c6:d4:f7:3c:cb:bf:a0:80:c6:ff:4a:b5: 81:06:a5:8b:4f:05:5a:b3:38:3f:02:b3:8f:f4:75:c0:de:b4: 76:f0:c5:0e:67:24:ea:7f:84:16:97:58:66:c0:eb:3a:3b:d3: 9e:0d:3a:21:c7:33:77:84:83:89:db:8b:ee:9d:36:44:ea:6d: 7a:69:4a:8b:39:01:0d:c0:31:e3:63:14:95:b7:2b:a5:f6:ed: 63:97:25:73:84:1d:36:73:be:70:bc:26:bb:42:3b:f1:3a:4f: 45:e0:95:95:90:89:31:ec:d6:ca:d9:d9:0d:1d:70:5a:05:a3: c0:df:78:89:0d:90:49:fd:7b:14:bc:6e:f0:1f:65:73:c9:e0: 3a:7a:71:c1:f1:ac:2a:98:3d:eb:c7:39:ac:46:70:dc:e4:ae: 5d:5d:b7:f1:8a:e7:72:dd:aa:a8:88:3f:50:3f:4f:b4:da:d2: 9c:7a:5c:99:6c:41:6e:53:05:5c:d9:c3:c4:b6:e2:17:ec:d6: 52:ce:75:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUjRwP4BUyF8K/r/jhOPWUOYOxzYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY3NUFFRERDNjA1OUU4QTJCODMwRTQ4N0Q3MkJFNzdF MzMwQkVFRjAeFw0yNTA0MjYyMDI2MjBaFw0yNTA0MzAwMDI1MjBaMDMxMTAvBgNV BAMTKEI4NEIxOTlDNjhCOTU4MTBDNzlFQ0ZERDZCMEExNjVCOTQ2QzQ0RjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDm94F/MvjuUXDC+QEru2ysf+tp WVwTbam4aEFkDl89VO2c2uACDJc3C12DCVAR5q2EP/5c6BSknpfwqVkG1MSPMOP1 YQq8x7lcJ8G3VdAyB2UkdgXGxEXRKYym8matJl8bwnXyk7dhZOMCyWU8Lnp7a5bh Jb6RVRanp14LfGtAX84DefnU0UWMRJGwD6uTtFMrUu5R5HIneB6fm6uR2q0JYyOd 1Nba6PR0cdMWscEl84ETyZbmfY8DRYfzz5yEP9Pm7jDTdfUROLgDtH+5BgNMHjTj vTZIK6jmxBSECLrUUxGSZM1KCEJbnle59zwx6YkOo74sPs6crbWO2tWIgqsdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuEsZnGi5WBDHns/dawoWW5RsRPAwHwYDVR0j BBgwFoAU/3Wu3cYFnoorgw5IfXK+d+Mwvu8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YjM3ODRmZS1mOWZlLTRjYmUtODc2OC0yNjNhNzY5ODZhM2EvMC9GRjc1QUVEREM2 MDU5RThBMkI4MzBFNDg3RDcyQkU3N0UzMzBCRUVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkY3NUFFRERDNjA1OUU4QTJCODMwRTQ4N0Q3MkJFNzdFMzMw QkVFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWIzNzg0ZmUtZjlmZS00Y2JlLTg3 NjgtMjYzYTc2OTg2YTNhLzAvRkY3NUFFRERDNjA1OUU4QTJCODMwRTQ4N0Q3MkJF NzdFMzMwQkVFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADcr+PVjc3tkcRfn565NtRCVEoijwgj99W75 A01cTy3RHoolJppeqjZi5PoRqiJtG9cScb8rVZ3yYgO7XsbU9zzLv6CAxv9KtYEG pYtPBVqzOD8Cs4/0dcDetHbwxQ5nJOp/hBaXWGbA6zo7054NOiHHM3eEg4nbi+6d NkTqbXppSos5AQ3AMeNjFJW3K6X27WOXJXOEHTZzvnC8JrtCO/E6T0XglZWQiTHs 1srZ2Q0dcFoFo8DfeIkNkEn9exS8bvAfZXPJ4Dp6ccHxrCqYPevHOaxGcNzkrl1d t/GK53LdqqiIP1A/T7Ta0px6XJlsQW5TBVzZw8S24hfs1lLOdTM= -----END CERTIFICATE-----Generated at Sun Apr 27 23:53:10 2025 by rpki-client