$ rpki-client -vvf repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.mft File: FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.mft (raw, json) Hash identifier: XQPOH+q5vsMBT/Ki4tkQDfxOExfFbk9BbNvD//0UbzM= Subject key identifier: 33:22:EF:A4:28:51:48:3B:71:FB:D6:5C:41:81:A7:91:4F:2E:EF:8F Authority key identifier: FF:89:F2:3B:CB:C4:26:35:E9:7A:E1:5A:7F:B6:9E:1E:09:A9:7D:AF Certificate issuer: /CN=FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF Certificate serial: 10C85D6DACD18C3B438E064218A14522FB79FC2E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.mft Manifest number: 0282 Signing time: Tue 22 Jul 2025 05:02:08 +0000 Manifest this update: Tue 22 Jul 2025 04:57:08 +0000 Manifest next update: Fri 25 Jul 2025 09:25:08 +0000 Files and hashes: 1: FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.crl (hash: Huo3nKfdDBfZlG3ZOnD8bEekJPt7l9TZUPCrLCZSVAo=) 2: 3130332e3136332e3138352e302f32342d3234203d3e20313432333636.roa (hash: rBHXQQE56sq6EsG7xu2y3Ai8w3KX+cJsV+YvOEbZG7g=) 3: 3130332e3136332e3138342e302f32342d3234203d3e20313432333636.roa (hash: T0kgQ8xq7nBxfVnwpyYEmmzA0fn9DjLFvoVcfJfTj5g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.crl rsync://repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 09:25:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:c8:5d:6d:ac:d1:8c:3b:43:8e:06:42:18:a1:45:22:fb:79:fc:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF Validity Not Before: Jul 22 04:57:08 2025 GMT Not After : Jul 25 09:25:08 2025 GMT Subject: CN=3322EFA42851483B71FBD65C4181A7914F2EEF8F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:17:b5:d5:51:da:c0:e9:24:41:b5:96:01:39: b7:04:dd:1a:a9:51:d5:a6:c5:00:5e:b0:a9:33:15: 70:d5:30:f5:0e:3c:2f:b6:93:91:82:2f:28:b4:5c: 5a:9a:43:da:07:9d:6b:6a:36:32:ee:a0:78:53:cf: 26:46:99:f2:54:90:bc:7b:da:15:51:44:7b:6c:05: b3:fc:6e:29:c1:8b:4f:58:fb:91:a9:bc:2e:62:27: 2f:b7:78:ec:cc:f6:04:64:9e:2b:de:7b:05:3c:a4: 18:31:22:d4:96:52:1b:ac:b5:79:16:d9:3f:d9:ff: b1:f9:63:cf:f9:92:1b:e4:bc:c7:ce:ea:0f:28:44: b0:a1:40:ff:46:7b:4e:22:98:c9:0e:df:cb:b4:98: 0d:10:4f:b2:ca:be:09:19:c5:45:87:52:fb:aa:74: 0f:54:51:2b:3b:69:a1:fb:ce:75:21:bf:d3:59:8f: f4:65:e9:2e:b4:b7:cc:ec:c9:a5:53:18:23:5a:3d: 4c:12:7e:d4:4a:f3:65:7f:a8:5a:1e:0a:d0:94:35: 01:9f:8c:d1:59:03:5e:ac:7f:e8:ab:cd:79:26:ca: 1d:00:8a:d5:b9:72:3c:71:e5:dd:61:03:53:87:4d: 4a:02:e1:88:fe:c2:ec:67:88:60:c1:bb:85:b3:b7: 9f:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:22:EF:A4:28:51:48:3B:71:FB:D6:5C:41:81:A7:91:4F:2E:EF:8F X509v3 Authority Key Identifier: keyid:FF:89:F2:3B:CB:C4:26:35:E9:7A:E1:5A:7F:B6:9E:1E:09:A9:7D:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:f6:1a:ad:8f:7d:c0:2e:e3:10:3c:53:3c:c1:9d:cc:7d:48: 3e:c1:13:af:a0:ea:73:64:4f:19:0f:e4:c2:00:4b:36:bf:51: 68:4c:78:19:5f:f1:0b:cd:33:61:e2:d8:6e:c0:e2:17:2b:36: c8:b3:9d:ac:f1:8f:4a:aa:d4:96:82:27:63:c2:74:9a:9a:9e: d7:70:37:aa:a6:52:59:d1:0a:92:f8:3e:ca:ce:73:18:73:c0: ce:67:19:b3:8c:00:20:a3:7b:54:13:d1:e1:86:c3:4b:b1:5a: f9:8f:e7:56:3f:04:bd:ac:c4:b5:e4:e0:2b:b4:4b:61:2c:b6: eb:61:43:d9:76:37:95:b3:80:5e:d5:1a:88:d1:53:3b:17:4f: 3c:ae:f3:c2:5f:94:8f:d6:eb:c9:b9:bf:88:cd:47:60:4c:cd: 21:45:03:bf:c3:6f:e4:1a:07:8b:bb:49:7f:2c:fa:c7:87:fa: f8:a3:87:0d:a5:4b:74:3a:d8:55:3e:9d:b7:5f:db:5a:4c:80: b3:81:32:00:b1:a1:9a:a5:aa:c5:3c:e0:18:e5:20:44:7b:33: 64:49:a6:94:e4:78:8e:e0:71:6b:e7:b8:24:6e:5a:0b:7e:bb: 2c:df:51:ce:23:02:96:38:ff:63:87:e1:ee:eb:c4:ec:d9:71: ac:dc:42:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEMhdbazRjDtDjgZCGKFFIvt5/C4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY4OUYyM0JDQkM0MjYzNUU5N0FFMTVBN0ZCNjlFMUUw OUE5N0RBRjAeFw0yNTA3MjIwNDU3MDhaFw0yNTA3MjUwOTI1MDhaMDMxMTAvBgNV BAMTKDMzMjJFRkE0Mjg1MTQ4M0I3MUZCRDY1QzQxODFBNzkxNEYyRUVGOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBF7XVUdrA6SRBtZYBObcE3Rqp UdWmxQBesKkzFXDVMPUOPC+2k5GCLyi0XFqaQ9oHnWtqNjLuoHhTzyZGmfJUkLx7 2hVRRHtsBbP8binBi09Y+5GpvC5iJy+3eOzM9gRkniveewU8pBgxItSWUhustXkW 2T/Z/7H5Y8/5khvkvMfO6g8oRLChQP9Ge04imMkO38u0mA0QT7LKvgkZxUWHUvuq dA9UUSs7aaH7znUhv9NZj/Rl6S60t8zsyaVTGCNaPUwSftRK82V/qFoeCtCUNQGf jNFZA16sf+irzXkmyh0AitW5cjxx5d1hA1OHTUoC4Yj+wuxniGDBu4Wzt5/bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMyLvpChRSDtx+9ZcQYGnkU8u748wHwYDVR0j BBgwFoAU/4nyO8vEJjXpeuFaf7aeHgmpfa8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YjE2NjRhNy1jOWM5LTQ0NDItODcxOC05YWVjOWUyMTEwYTIvMC9GRjg5RjIzQkNC QzQyNjM1RTk3QUUxNUE3RkI2OUUxRTA5QTk3REFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkY4OUYyM0JDQkM0MjYzNUU5N0FFMTVBN0ZCNjlFMUUwOUE5 N0RBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGIxNjY0YTctYzljOS00NDQyLTg3 MTgtOWFlYzllMjExMGEyLzAvRkY4OUYyM0JDQkM0MjYzNUU5N0FFMTVBN0ZCNjlF MUUwOUE5N0RBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABb2Gq2PfcAu4xA8UzzBncx9SD7BE6+g6nNk TxkP5MIASza/UWhMeBlf8QvNM2Hi2G7A4hcrNsiznazxj0qq1JaCJ2PCdJqantdw N6qmUlnRCpL4PsrOcxhzwM5nGbOMACCje1QT0eGGw0uxWvmP51Y/BL2sxLXk4Cu0 S2EstuthQ9l2N5WzgF7VGojRUzsXTzyu88JflI/W68m5v4jNR2BMzSFFA7/Db+Qa B4u7SX8s+seH+vijhw2lS3Q62FU+nbdf21pMgLOBMgCxoZqlqsU84BjlIER7M2RJ ppTkeI7gcWvnuCRuWgt+uyzfUc4jApY4/2OH4e7rxOzZcazcQhs= -----END CERTIFICATE-----Generated at Wed Jul 23 18:47:16 2025 by rpki-client