$ rpki-client -vvf repo-rpki.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.mft File: FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.mft (raw, json) Hash identifier: 2XHZXDiAFU2JNG1ghS6xCcYLFclfIJCvpi8y0qiRmrc= Subject key identifier: 29:B6:62:9C:6B:40:7B:E8:2D:53:62:77:4D:54:CD:EB:ED:69:EA:23 Authority key identifier: FF:EF:EB:2C:96:B1:BE:D5:C5:D6:D8:23:EE:3C:6D:80:69:8B:9F:D6 Certificate issuer: /CN=FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6 Certificate serial: 22640F8B38BDE6C747BEED290F3BC27492285300 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.mft Manifest number: 03A7 Signing time: Sun 20 Jul 2025 02:01:06 +0000 Manifest this update: Sun 20 Jul 2025 01:56:06 +0000 Manifest next update: Wed 23 Jul 2025 02:01:06 +0000 Files and hashes: 1: FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.crl (hash: lKR5cM/nBfph3WvmyRh1ISzyN7lHMfyoesKPzpnl484=) 2: 3130332e3135322e34352e302f32342d3234203d3e20313430343335.roa (hash: SMhDRBgq/CGhFdJAkZwZrQC241Gwys1Efn+WNzlHpsA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.crl rsync://repo-rpki.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 02:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:64:0f:8b:38:bd:e6:c7:47:be:ed:29:0f:3b:c2:74:92:28:53:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6 Validity Not Before: Jul 20 01:56:06 2025 GMT Not After : Jul 23 02:01:06 2025 GMT Subject: CN=29B6629C6B407BE82D5362774D54CDEBED69EA23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:0c:ab:88:2c:89:54:41:e2:31:88:ff:46:2f: b8:e4:cc:cf:1c:9c:ea:90:65:68:b0:c1:b8:d6:4a: dc:53:11:02:05:23:75:03:b7:91:e7:4c:f2:4b:67: 02:87:d1:0f:20:f1:79:ea:a2:60:d9:76:98:e2:c7: 72:7b:50:3e:ad:79:0a:ab:a5:8f:a9:58:c2:96:da: 05:2c:56:e4:c0:1d:03:41:e7:c3:9b:a6:0a:ee:4d: 2d:9b:49:83:a5:62:72:ac:92:82:c4:e2:05:21:66: 96:46:56:c9:fa:14:2e:72:4b:94:66:c9:fb:b1:0a: 2b:3f:8d:83:3f:d5:e1:cb:e0:25:f3:59:26:70:a0: d4:8d:e4:ad:56:39:17:a8:c1:c4:11:7a:94:e5:4e: 77:06:94:89:5f:e1:bb:d8:6f:21:44:aa:10:ee:e6: 92:79:b5:d5:7d:f2:db:a4:c0:77:5d:d6:66:ba:83: f3:84:e9:72:31:db:0f:d0:e2:06:2f:63:6a:92:20: f6:84:02:e0:b9:e0:2d:65:71:d3:d4:b6:cc:17:b4: e9:cd:47:85:e9:49:a0:ac:ee:86:58:c3:20:53:a7: 88:66:cf:61:a9:a8:2b:34:8f:3d:59:42:1a:da:cb: ae:93:fe:7e:2c:e5:e5:50:3a:8f:9e:d4:d9:e1:5e: 13:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:B6:62:9C:6B:40:7B:E8:2D:53:62:77:4D:54:CD:EB:ED:69:EA:23 X509v3 Authority Key Identifier: keyid:FF:EF:EB:2C:96:B1:BE:D5:C5:D6:D8:23:EE:3C:6D:80:69:8B:9F:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:fe:21:14:d6:5a:58:c5:ec:de:1e:a0:f9:d5:cb:e9:d6:71: 8a:e8:02:19:fe:18:8a:bf:3a:42:a9:af:e6:d7:d8:c6:2d:57: 1b:ce:bf:b3:2e:12:cc:e1:5d:af:9c:df:a9:9a:16:c7:2c:ba: 10:34:d6:67:ef:bc:7a:a4:80:40:e6:23:f8:f5:ce:a7:fb:f1: 2a:7a:f7:c2:f4:4b:a6:47:a4:5e:c2:21:6e:a7:76:07:50:d3: 54:64:f9:61:4d:c4:08:35:07:14:69:7e:1f:b6:80:95:98:23: 27:8d:12:fb:f4:0c:e8:5e:df:56:2b:24:42:ce:09:60:4a:5b: 6d:e9:4c:c4:de:76:cb:ab:8f:0b:fc:49:00:51:3c:5b:6e:87: 62:ae:82:8f:1b:ae:cd:f4:ba:26:d9:eb:61:4d:5f:02:66:c3: 8f:fa:1d:97:11:78:56:e3:2f:b5:ff:c6:77:72:aa:13:17:50: d4:10:61:39:f5:d3:eb:dc:56:ec:2f:c7:4a:fe:46:9a:4c:47: 2f:db:a0:03:a0:e9:8a:cb:23:d4:82:1a:bf:e0:84:00:30:24: 90:be:aa:66:c3:29:63:a0:0c:68:0d:7e:e3:5a:77:31:25:b0: 1b:91:02:38:32:d0:f8:97:c9:90:e5:9a:dd:ef:5f:f4:bd:de: 60:e1:44:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUImQPizi95sdHvu0pDzvCdJIoUwAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkZFRkVCMkM5NkIxQkVENUM1RDZEODIzRUUzQzZEODA2 OThCOUZENjAeFw0yNTA3MjAwMTU2MDZaFw0yNTA3MjMwMjAxMDZaMDMxMTAvBgNV BAMTKDI5QjY2MjlDNkI0MDdCRTgyRDUzNjI3NzRENTRDREVCRUQ2OUVBMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtDKuILIlUQeIxiP9GL7jkzM8c nOqQZWiwwbjWStxTEQIFI3UDt5HnTPJLZwKH0Q8g8XnqomDZdpjix3J7UD6teQqr pY+pWMKW2gUsVuTAHQNB58ObpgruTS2bSYOlYnKskoLE4gUhZpZGVsn6FC5yS5Rm yfuxCis/jYM/1eHL4CXzWSZwoNSN5K1WOReowcQRepTlTncGlIlf4bvYbyFEqhDu 5pJ5tdV98tukwHdd1ma6g/OE6XIx2w/Q4gYvY2qSIPaEAuC54C1lcdPUtswXtOnN R4XpSaCs7oZYwyBTp4hmz2GpqCs0jz1ZQhray66T/n4s5eVQOo+e1NnhXhOpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKbZinGtAe+gtU2J3TVTN6+1p6iMwHwYDVR0j BBgwFoAU/+/rLJaxvtXF1tgj7jxtgGmLn9YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZWZiOTBiMS1iNjhmLTQ0NjMtYTFiZC1lOTA4YzhhMWVkMWEvMC9GRkVGRUIyQzk2 QjFCRUQ1QzVENkQ4MjNFRTNDNkQ4MDY5OEI5RkQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkZFRkVCMkM5NkIxQkVENUM1RDZEODIzRUUzQzZEODA2OThC OUZENi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmVmYjkwYjEtYjY4Zi00NDYzLWEx YmQtZTkwOGM4YTFlZDFhLzAvRkZFRkVCMkM5NkIxQkVENUM1RDZEODIzRUUzQzZE ODA2OThCOUZENi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABn+IRTWWljF7N4eoPnVy+nWcYroAhn+GIq/ OkKpr+bX2MYtVxvOv7MuEszhXa+c36maFscsuhA01mfvvHqkgEDmI/j1zqf78Sp6 98L0S6ZHpF7CIW6ndgdQ01Rk+WFNxAg1BxRpfh+2gJWYIyeNEvv0DOhe31YrJELO CWBKW23pTMTedsurjwv8SQBRPFtuh2Kugo8brs30uibZ62FNXwJmw4/6HZcReFbj L7X/xndyqhMXUNQQYTn10+vcVuwvx0r+RppMRy/boAOg6YrLI9SCGr/ghAAwJJC+ qmbDKWOgDGgNfuNadzElsBuRAjgy0PiXyZDlmt3vX/S93mDhREY= -----END CERTIFICATE-----Generated at Sun Jul 20 21:25:20 2025 by rpki-client