$ rpki-client -vvf repo-rpki.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/FF1246B1AF5B158EA26E75654D7B7A6DED645787.mft File: FF1246B1AF5B158EA26E75654D7B7A6DED645787.mft (raw, json) Hash identifier: eRaW37PaecTn5HtowpwIrz2neniJWPVoasK8nVlwOec= Subject key identifier: C3:AE:F3:34:D2:A1:32:DF:7A:92:90:85:34:0A:6F:78:11:F3:1B:36 Authority key identifier: FF:12:46:B1:AF:5B:15:8E:A2:6E:75:65:4D:7B:7A:6D:ED:64:57:87 Certificate issuer: /CN=FF1246B1AF5B158EA26E75654D7B7A6DED645787 Certificate serial: 30B0D6AD3D79ED5785080D9CA0FADC7FCA8E4571 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF1246B1AF5B158EA26E75654D7B7A6DED645787.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/FF1246B1AF5B158EA26E75654D7B7A6DED645787.mft Manifest number: CB Signing time: Sat 09 Aug 2025 02:12:00 +0000 Manifest this update: Sat 09 Aug 2025 02:07:00 +0000 Manifest next update: Tue 12 Aug 2025 12:36:00 +0000 Files and hashes: 1: FF1246B1AF5B158EA26E75654D7B7A6DED645787.crl (hash: fyesyC094+cU+LCU5Q2fkpYfVZ4fE5BEGXk6ICp6UzI=) 2: 3130332e3136312e3130382e302f32342d3234203d3e20313431393132.roa (hash: uvIhcJu4c3esMkst4+88cWSmjSO0QaYXOH2ffUAXAVQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/FF1246B1AF5B158EA26E75654D7B7A6DED645787.crl rsync://repo-rpki.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/FF1246B1AF5B158EA26E75654D7B7A6DED645787.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF1246B1AF5B158EA26E75654D7B7A6DED645787.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 12:36:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:b0:d6:ad:3d:79:ed:57:85:08:0d:9c:a0:fa:dc:7f:ca:8e:45:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF1246B1AF5B158EA26E75654D7B7A6DED645787 Validity Not Before: Aug 9 02:07:00 2025 GMT Not After : Aug 12 12:36:00 2025 GMT Subject: CN=C3AEF334D2A132DF7A929085340A6F7811F31B36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f6:fa:28:b2:19:ac:0b:38:ea:46:e0:b0:71: 0f:1a:5b:cd:12:91:a5:ff:d6:47:9b:18:27:f4:87: c0:8c:60:26:0c:b5:b3:29:a9:6b:f4:b1:d4:dc:62: 9a:d1:dc:1b:41:9a:8a:36:15:e1:a7:ca:a6:41:4e: 28:85:00:ac:c1:5e:f6:33:5b:b7:93:19:d4:02:82: cd:b1:6e:bb:90:a1:0f:65:a1:29:c3:d6:de:ac:e9: f7:92:8b:e4:f8:f7:46:f0:c4:f6:f3:74:f0:da:f0: 2a:f2:61:a5:de:1a:03:ec:b5:69:23:e2:a9:8f:01: 79:39:3f:b7:47:67:aa:c0:c1:1f:0c:9e:28:e4:fe: 46:a1:da:b0:07:06:aa:8e:39:d0:d3:34:58:0d:78: 05:a7:90:a4:1e:58:d0:08:fc:78:a7:e0:51:dd:c3: 5a:6a:12:f7:c1:62:c6:73:76:9a:a2:b1:fc:3f:c3: 48:2a:ea:05:b5:86:93:3d:de:d4:93:b8:67:2b:1f: 9a:98:d6:e5:69:f0:9d:19:1c:0a:94:24:6c:4a:70: 8d:f5:ae:29:5e:58:1b:88:22:06:9c:80:83:bc:c9: 5d:cd:4d:d0:ce:dd:db:e4:5f:6d:52:c0:fc:c5:aa: c9:cc:66:5c:26:25:9c:ae:07:6d:ea:fb:92:18:ff: b3:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:AE:F3:34:D2:A1:32:DF:7A:92:90:85:34:0A:6F:78:11:F3:1B:36 X509v3 Authority Key Identifier: keyid:FF:12:46:B1:AF:5B:15:8E:A2:6E:75:65:4D:7B:7A:6D:ED:64:57:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/FF1246B1AF5B158EA26E75654D7B7A6DED645787.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF1246B1AF5B158EA26E75654D7B7A6DED645787.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/FF1246B1AF5B158EA26E75654D7B7A6DED645787.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:cf:25:55:a3:91:0d:18:55:ef:4a:d6:88:2d:84:31:21:f0: 51:ca:3c:5e:87:87:19:e0:a8:83:34:24:68:7e:f4:69:24:fc: a7:f4:fc:ac:17:83:c0:84:6a:e3:76:89:4a:b4:1e:90:d8:81: e4:60:61:d3:b3:0c:31:f8:b1:f7:47:98:19:f7:a4:53:b5:42: 68:cd:2f:8f:6d:76:4d:ca:7e:f8:bf:bd:19:af:32:f1:f8:af: 34:9f:4f:c7:15:56:0c:1f:71:07:a6:7e:a7:5f:5e:87:f5:63: a2:56:44:b4:eb:4f:bc:64:4c:27:59:dd:b2:31:d0:10:46:60: 4c:ee:d7:05:02:b6:57:b2:f5:11:3f:d6:9c:b6:1d:c8:41:2f: f1:4b:32:10:64:6f:a6:01:a7:e4:4a:5f:15:d3:c8:17:7c:da: 83:12:de:4f:9b:0b:13:d0:7a:a4:5b:5d:0e:31:c8:9b:9c:49: b0:55:1a:6b:4c:60:0c:ea:7b:70:15:20:6a:58:df:fb:9b:c9: d3:63:76:3a:d2:0c:41:a9:82:78:ac:70:a8:2a:d1:ec:08:e5: 56:8a:70:55:6e:aa:b8:2b:37:2e:5f:b0:15:74:f0:6b:3c:2d: 4e:d9:a8:21:98:a2:39:39:98:c4:6b:e0:d1:a0:f0:24:5b:c8: d5:08:fc:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMLDWrT157VeFCA2coPrcf8qORXEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkYxMjQ2QjFBRjVCMTU4RUEyNkU3NTY1NEQ3QjdBNkRF RDY0NTc4NzAeFw0yNTA4MDkwMjA3MDBaFw0yNTA4MTIxMjM2MDBaMDMxMTAvBgNV BAMTKEMzQUVGMzM0RDJBMTMyREY3QTkyOTA4NTM0MEE2Rjc4MTFGMzFCMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC59vooshmsCzjqRuCwcQ8aW80S kaX/1kebGCf0h8CMYCYMtbMpqWv0sdTcYprR3BtBmoo2FeGnyqZBTiiFAKzBXvYz W7eTGdQCgs2xbruQoQ9loSnD1t6s6feSi+T490bwxPbzdPDa8CryYaXeGgPstWkj 4qmPAXk5P7dHZ6rAwR8Mnijk/kah2rAHBqqOOdDTNFgNeAWnkKQeWNAI/Hin4FHd w1pqEvfBYsZzdpqisfw/w0gq6gW1hpM93tSTuGcrH5qY1uVp8J0ZHAqUJGxKcI31 rileWBuIIgacgIO8yV3NTdDO3dvkX21SwPzFqsnMZlwmJZyuB23q+5IY/7OpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUw67zNNKhMt96kpCFNApveBHzGzYwHwYDVR0j BBgwFoAU/xJGsa9bFY6ibnVlTXt6be1kV4cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ODlhMDY2MS0zMWVlLTQ5YTItYWU5Zi1mNmQ1NzNhMTdkZjcvMC9GRjEyNDZCMUFG NUIxNThFQTI2RTc1NjU0RDdCN0E2REVENjQ1Nzg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkYxMjQ2QjFBRjVCMTU4RUEyNkU3NTY1NEQ3QjdBNkRFRDY0 NTc4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTg5YTA2NjEtMzFlZS00OWEyLWFl OWYtZjZkNTczYTE3ZGY3LzAvRkYxMjQ2QjFBRjVCMTU4RUEyNkU3NTY1NEQ3QjdB NkRFRDY0NTc4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACjPJVWjkQ0YVe9K1ogthDEh8FHKPF6Hhxng qIM0JGh+9Gkk/Kf0/KwXg8CEauN2iUq0HpDYgeRgYdOzDDH4sfdHmBn3pFO1QmjN L49tdk3Kfvi/vRmvMvH4rzSfT8cVVgwfcQemfqdfXof1Y6JWRLTrT7xkTCdZ3bIx 0BBGYEzu1wUCtley9RE/1py2HchBL/FLMhBkb6YBp+RKXxXTyBd82oMS3k+bCxPQ eqRbXQ4xyJucSbBVGmtMYAzqe3AVIGpY3/ubydNjdjrSDEGpgniscKgq0ewI5VaK cFVuqrgrNy5fsBV08Gs8LU7ZqCGYojk5mMRr4NGg8CRbyNUI/Bk= -----END CERTIFICATE-----Generated at Sat Aug 9 05:50:23 2025 by rpki-client