$ rpki-client -vvf repo-rpki.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/FF96D30557BDACE26C511E1F48A3514643130EA8.mft File: FF96D30557BDACE26C511E1F48A3514643130EA8.mft (raw, json) Hash identifier: dX0QBJJMWIilhhsuSyhzcgQkHioq2Te76jMyNXBsHtE= Subject key identifier: 9B:30:F6:47:1C:F5:F3:73:4E:CA:88:21:D6:D6:CF:71:B5:C1:99:6C Authority key identifier: FF:96:D3:05:57:BD:AC:E2:6C:51:1E:1F:48:A3:51:46:43:13:0E:A8 Certificate issuer: /CN=FF96D30557BDACE26C511E1F48A3514643130EA8 Certificate serial: 0CBB83B71F3C24F3472F757974F9F213C855FA09 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF96D30557BDACE26C511E1F48A3514643130EA8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/FF96D30557BDACE26C511E1F48A3514643130EA8.mft Manifest number: A0 Signing time: Tue 22 Jul 2025 08:31:28 +0000 Manifest this update: Tue 22 Jul 2025 08:26:28 +0000 Manifest next update: Fri 25 Jul 2025 20:24:28 +0000 Files and hashes: 1: FF96D30557BDACE26C511E1F48A3514643130EA8.crl (hash: SL5fP65yYtOnC624HMoNlxrYDZVmZ7k8Bj7Tq3J0fZQ=) 2: 3130332e3232392e3133312e302f32342d3234203d3e20313530393632.roa (hash: ATfPtcSN9IeC66O3vEUygO5SRQOxL5VmkMshCygiymo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/FF96D30557BDACE26C511E1F48A3514643130EA8.crl rsync://repo-rpki.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/FF96D30557BDACE26C511E1F48A3514643130EA8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF96D30557BDACE26C511E1F48A3514643130EA8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 20:24:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:bb:83:b7:1f:3c:24:f3:47:2f:75:79:74:f9:f2:13:c8:55:fa:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF96D30557BDACE26C511E1F48A3514643130EA8 Validity Not Before: Jul 22 08:26:28 2025 GMT Not After : Jul 25 20:24:28 2025 GMT Subject: CN=9B30F6471CF5F3734ECA8821D6D6CF71B5C1996C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b9:6a:41:df:e3:77:c6:89:4d:d5:21:f3:eb: 3b:c5:25:80:ce:b8:39:e8:9a:93:0f:07:0a:4d:19: 85:f5:7b:59:d2:38:a3:e2:8e:af:68:2d:42:31:b9: 9a:07:62:91:d7:64:3a:f0:53:35:ab:8f:dc:c9:7f: b9:3e:31:36:3f:fe:ce:62:21:65:9c:be:09:ad:50: 0e:4d:a8:cc:54:4f:30:d9:c3:ea:1c:9c:b5:64:0f: ec:76:ba:cf:7b:98:01:ed:87:d1:93:0c:82:4b:a7: da:b4:14:f9:dd:f4:7e:86:81:18:c7:39:92:c7:a0: d0:73:9e:37:69:e6:3d:62:2e:7a:48:2d:5f:94:7f: 96:b6:26:c5:11:e3:0f:7d:37:90:ec:11:5a:5c:d4: 42:66:b0:e1:93:c9:54:e1:d0:d5:c8:c9:7f:79:da: 79:c8:37:24:78:ae:46:1a:aa:6b:27:bf:80:4d:1e: dd:5c:01:fd:0f:0b:25:c9:a3:83:1b:1c:e4:fa:67: 72:83:5f:e0:ed:6a:6c:38:39:cf:69:9f:df:c2:36: 56:43:2e:c6:6d:98:66:6f:7c:77:88:7c:61:c9:30: ba:d1:90:78:0d:53:7d:be:9c:5e:c6:76:8a:cf:aa: 39:99:d5:ae:78:de:72:74:a2:1a:a0:b6:6c:d0:6f: 1a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:30:F6:47:1C:F5:F3:73:4E:CA:88:21:D6:D6:CF:71:B5:C1:99:6C X509v3 Authority Key Identifier: keyid:FF:96:D3:05:57:BD:AC:E2:6C:51:1E:1F:48:A3:51:46:43:13:0E:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/FF96D30557BDACE26C511E1F48A3514643130EA8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF96D30557BDACE26C511E1F48A3514643130EA8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/FF96D30557BDACE26C511E1F48A3514643130EA8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:19:08:d7:6d:c0:d4:09:7b:69:57:a3:8c:5e:58:fe:4e:df: b0:87:02:65:8b:73:c8:8f:d5:7e:21:1a:e5:77:bb:4a:4c:85: 78:b7:89:3e:e0:f7:9a:a3:98:e8:de:ec:bb:13:34:a2:cd:be: 42:71:38:4c:aa:40:c3:8e:95:5d:eb:f2:87:84:79:4e:2f:0f: 99:50:a0:e6:d5:33:98:d5:32:8f:b6:46:6a:5a:c8:bb:b7:f6: 05:41:6b:72:7f:57:93:65:e9:1b:eb:f7:66:ac:5e:e6:35:00: 89:3b:7b:e4:d0:5a:ba:bb:30:07:eb:d8:ea:51:09:bd:bc:86: 3d:d3:13:30:f3:8b:93:8e:cd:d0:89:0e:f1:3e:c3:84:88:f8: 10:ff:e6:82:b5:5f:25:98:20:3b:eb:8e:f5:ff:60:54:b9:42: 76:7e:6a:a3:3b:0d:c0:97:58:97:43:0a:d9:16:3c:f6:48:d5: f9:c9:37:ba:bf:ab:93:f8:66:72:82:05:ff:c1:b3:d2:77:dd: c5:7c:cc:dc:86:88:b9:ab:eb:a8:71:08:db:81:93:e5:0d:e8: c5:b9:98:06:09:e3:8c:2c:63:ea:a4:b4:4f:5c:dc:ef:da:7a: 3c:01:d8:49:43:a3:37:3e:40:c2:f3:9a:ae:88:68:4e:0a:33: 55:93:c1:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDLuDtx88JPNHL3V5dPnyE8hV+gkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY5NkQzMDU1N0JEQUNFMjZDNTExRTFGNDhBMzUxNDY0 MzEzMEVBODAeFw0yNTA3MjIwODI2MjhaFw0yNTA3MjUyMDI0MjhaMDMxMTAvBgNV BAMTKDlCMzBGNjQ3MUNGNUYzNzM0RUNBODgyMUQ2RDZDRjcxQjVDMTk5NkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFuWpB3+N3xolN1SHz6zvFJYDO uDnompMPBwpNGYX1e1nSOKPijq9oLUIxuZoHYpHXZDrwUzWrj9zJf7k+MTY//s5i IWWcvgmtUA5NqMxUTzDZw+ocnLVkD+x2us97mAHth9GTDIJLp9q0FPnd9H6GgRjH OZLHoNBznjdp5j1iLnpILV+Uf5a2JsUR4w99N5DsEVpc1EJmsOGTyVTh0NXIyX95 2nnINyR4rkYaqmsnv4BNHt1cAf0PCyXJo4MbHOT6Z3KDX+Dtamw4Oc9pn9/CNlZD LsZtmGZvfHeIfGHJMLrRkHgNU32+nF7GdorPqjmZ1a543nJ0ohqgtmzQbxoLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmzD2Rxz183NOyogh1tbPcbXBmWwwHwYDVR0j BBgwFoAU/5bTBVe9rOJsUR4fSKNRRkMTDqgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NDJjMWYzMi04MWFjLTQxMTgtYmUyZi01NzRjYTViNTQxZWEvMC9GRjk2RDMwNTU3 QkRBQ0UyNkM1MTFFMUY0OEEzNTE0NjQzMTMwRUE4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkY5NkQzMDU1N0JEQUNFMjZDNTExRTFGNDhBMzUxNDY0MzEz MEVBOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzQyYzFmMzItODFhYy00MTE4LWJl MmYtNTc0Y2E1YjU0MWVhLzAvRkY5NkQzMDU1N0JEQUNFMjZDNTExRTFGNDhBMzUx NDY0MzEzMEVBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJUZCNdtwNQJe2lXo4xeWP5O37CHAmWLc8iP 1X4hGuV3u0pMhXi3iT7g95qjmOje7LsTNKLNvkJxOEyqQMOOlV3r8oeEeU4vD5lQ oObVM5jVMo+2RmpayLu39gVBa3J/V5Nl6Rvr92asXuY1AIk7e+TQWrq7MAfr2OpR Cb28hj3TEzDzi5OOzdCJDvE+w4SI+BD/5oK1XyWYIDvrjvX/YFS5QnZ+aqM7DcCX WJdDCtkWPPZI1fnJN7q/q5P4ZnKCBf/Bs9J33cV8zNyGiLmr66hxCNuBk+UN6MW5 mAYJ44wsY+qktE9c3O/aejwB2ElDozc+QMLzmq6IaE4KM1WTwew= -----END CERTIFICATE-----Generated at Wed Jul 23 02:15:55 2025 by rpki-client