$ rpki-client -vvf repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.mft File: FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.mft (raw, json) Hash identifier: L0XB01fOxCms+qLHkhATeuxLREUNrKFz6N7UK0xLq0s= Subject key identifier: B2:0E:0A:E1:66:7E:F9:EB:C6:64:1E:B6:D7:DB:AB:05:E0:E8:17:AE Authority key identifier: FF:77:50:7E:6D:1F:0E:0B:6E:B0:11:2E:9C:FB:D1:AF:1C:1F:6D:D4 Certificate issuer: /CN=FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4 Certificate serial: 02EBF923DE220E7C97484B48381BCAC32C8371AE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.mft Manifest number: 01FC Signing time: Thu 07 Aug 2025 19:42:22 +0000 Manifest this update: Thu 07 Aug 2025 19:37:22 +0000 Manifest next update: Mon 11 Aug 2025 00:27:22 +0000 Files and hashes: 1: 3130332e3137372e31352e302f32342d3234203d3e20313437313338.roa (hash: eF9NB+BjEkYpNET986L8/mFTnt6eJT0/RWpF2VpYMW8=) 2: FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.crl (hash: MJ7D9cF6F9YKNt7EOiULbO9OZyoZOOz+JGVaJ7I0UII=) 3: 3130332e3137372e31342e302f32332d3233203d3e20313437313338.roa (hash: 5z8wRtouH3UZuHrJrJfhmhXWcm8bh9b9rb8I23FOiCg=) 4: 3130332e3137372e31342e302f32342d3234203d3e20313437313338.roa (hash: 2HLKDZ4NotrKv5eD+avvVTu9dBP+/6Ewaq5ipG+lyWE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.crl rsync://repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 00:27:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:eb:f9:23:de:22:0e:7c:97:48:4b:48:38:1b:ca:c3:2c:83:71:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4 Validity Not Before: Aug 7 19:37:22 2025 GMT Not After : Aug 11 00:27:22 2025 GMT Subject: CN=B20E0AE1667EF9EBC6641EB6D7DBAB05E0E817AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:97:08:77:f5:9e:8e:ed:b5:c2:a8:7f:f7:67: a6:07:a9:fa:3c:7f:a7:35:46:cf:48:ac:c6:8e:f8: 6d:87:78:23:8e:5d:08:3c:99:6d:6a:11:32:e6:e8: d5:35:7b:65:f9:ea:5c:fc:86:33:50:06:97:80:74: bb:db:c7:7c:2f:b7:2b:6f:c0:56:b9:03:ad:86:34: 90:d8:44:21:fd:b6:7b:a1:16:22:ef:5a:4a:9d:25: c9:74:04:f5:bd:fa:04:31:98:2d:8c:bc:64:d7:5c: d2:2d:0b:e3:e2:1d:65:b4:d4:68:66:f1:e0:31:21: f9:ab:f3:0f:ce:2a:09:80:1a:05:5d:04:0d:09:35: 0c:a0:18:a3:65:d4:64:e9:3d:8e:b8:59:fd:74:b0: 8a:37:92:19:9f:8a:90:64:66:0d:f0:55:87:c9:b5: 2d:23:af:68:7c:ef:8b:d5:e2:be:b8:d6:83:71:72: 81:4b:aa:a5:99:9a:ae:a0:17:f8:ac:67:e3:d5:e9: e0:28:61:ca:31:99:1f:02:70:25:1d:67:9f:3d:c5: 33:a7:d3:1c:8b:38:e0:2d:e9:d9:93:e0:83:89:9c: a7:a4:49:3c:47:3d:25:ce:c2:af:42:9c:e0:3e:3a: 0d:f3:48:e7:72:59:87:70:7e:ff:92:56:f5:a5:b9: fb:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:0E:0A:E1:66:7E:F9:EB:C6:64:1E:B6:D7:DB:AB:05:E0:E8:17:AE X509v3 Authority Key Identifier: keyid:FF:77:50:7E:6D:1F:0E:0B:6E:B0:11:2E:9C:FB:D1:AF:1C:1F:6D:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:25:4e:0c:12:88:56:56:fb:a3:f2:c9:8e:0e:7c:b8:5c:61: 94:c6:29:85:bc:ea:d9:5c:21:c2:c8:cf:b8:4b:d3:34:ff:bf: 10:d4:a6:bf:bf:aa:1a:0e:9c:4d:13:34:4a:4d:26:40:e8:b3: 64:8e:98:dc:d0:7b:71:ee:52:31:f3:43:15:32:8c:09:61:66: 8b:d8:f0:a3:4c:85:16:e2:fe:9b:7a:f3:87:b9:95:38:34:36: f2:7b:3c:53:e2:4d:a9:67:bf:cd:3d:46:12:07:60:ca:76:c6: 31:7e:0b:00:a3:9f:a9:54:c0:38:b2:b9:e2:92:4f:15:21:e2: b0:1a:47:3b:04:3c:ea:d7:9d:bd:78:b9:a0:a7:85:bb:14:67: 57:5f:32:54:1d:e5:7d:0a:35:2f:96:de:eb:25:80:8e:dc:14: 61:bc:3a:ee:df:24:c1:64:e5:ce:f1:92:2e:9b:e8:5a:c7:08: 16:27:c6:f1:9b:70:db:a1:4a:95:08:89:4a:40:71:74:fe:a4: 0f:fa:ca:2a:aa:ac:71:41:2e:bd:7b:de:5b:af:08:83:da:9a: f0:83:b8:83:e0:de:c5:5c:4a:20:de:d1:42:01:3a:1d:cb:cb: e8:a5:0e:56:96:da:5c:5d:6b:c5:98:9c:34:04:41:e2:05:e3: 99:a2:85:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAuv5I94iDnyXSEtIOBvKwyyDca4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY3NzUwN0U2RDFGMEUwQjZFQjAxMTJFOUNGQkQxQUYx QzFGNkRENDAeFw0yNTA4MDcxOTM3MjJaFw0yNTA4MTEwMDI3MjJaMDMxMTAvBgNV BAMTKEIyMEUwQUUxNjY3RUY5RUJDNjY0MUVCNkQ3REJBQjA1RTBFODE3QUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPlwh39Z6O7bXCqH/3Z6YHqfo8 f6c1Rs9IrMaO+G2HeCOOXQg8mW1qETLm6NU1e2X56lz8hjNQBpeAdLvbx3wvtytv wFa5A62GNJDYRCH9tnuhFiLvWkqdJcl0BPW9+gQxmC2MvGTXXNItC+PiHWW01Ghm 8eAxIfmr8w/OKgmAGgVdBA0JNQygGKNl1GTpPY64Wf10sIo3khmfipBkZg3wVYfJ tS0jr2h874vV4r641oNxcoFLqqWZmq6gF/isZ+PV6eAoYcoxmR8CcCUdZ589xTOn 0xyLOOAt6dmT4IOJnKekSTxHPSXOwq9CnOA+Og3zSOdyWYdwfv+SVvWluftPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsg4K4WZ++evGZB6219urBeDoF64wHwYDVR0j BBgwFoAU/3dQfm0fDgtusBEunPvRrxwfbdQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YmUwNDAzOC1hMWI2LTQzMmMtODU0Yi1jYzZlOGNmMzJlMDYvMC9GRjc3NTA3RTZE MUYwRTBCNkVCMDExMkU5Q0ZCRDFBRjFDMUY2REQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkY3NzUwN0U2RDFGMEUwQjZFQjAxMTJFOUNGQkQxQUYxQzFG NkRENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmJlMDQwMzgtYTFiNi00MzJjLTg1 NGItY2M2ZThjZjMyZTA2LzAvRkY3NzUwN0U2RDFGMEUwQjZFQjAxMTJFOUNGQkQx QUYxQzFGNkRENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADklTgwSiFZW+6PyyY4OfLhcYZTGKYW86tlc IcLIz7hL0zT/vxDUpr+/qhoOnE0TNEpNJkDos2SOmNzQe3HuUjHzQxUyjAlhZovY 8KNMhRbi/pt684e5lTg0NvJ7PFPiTalnv809RhIHYMp2xjF+CwCjn6lUwDiyueKS TxUh4rAaRzsEPOrXnb14uaCnhbsUZ1dfMlQd5X0KNS+W3uslgI7cFGG8Ou7fJMFk 5c7xki6b6FrHCBYnxvGbcNuhSpUIiUpAcXT+pA/6yiqqrHFBLr173luvCIPamvCD uIPg3sVcSiDe0UIBOh3Ly+ilDlaW2lxda8WYnDQEQeIF45mihbU= -----END CERTIFICATE-----Generated at Sat Aug 9 10:32:39 2025 by rpki-client