$ rpki-client -vvf repo-rpki.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.mft File: FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.mft (raw, json) Hash identifier: vG+xEvdsKD9Wo22DVTgIKLlku38ZykUCh82nvncpOSU= Subject key identifier: 25:D7:4F:54:D4:5E:45:03:14:08:A4:A4:58:DB:B5:27:AF:51:D0:44 Authority key identifier: FF:75:AE:DD:C6:05:9E:8A:2B:83:0E:48:7D:72:BE:77:E3:30:BE:EF Certificate issuer: /CN=FF75AEDDC6059E8A2B830E487D72BE77E330BEEF Certificate serial: 4F9BA9A4262449A134C938C8026BF85161DBFB8C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.mft Manifest number: 0196 Signing time: Sun 20 Jul 2025 19:51:34 +0000 Manifest this update: Sun 20 Jul 2025 19:46:34 +0000 Manifest next update: Thu 24 Jul 2025 07:17:34 +0000 Files and hashes: 1: FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.crl (hash: YfZkOfqe1+HFr6sp+yxfW7o4O1rvsqKv9jicPIi7+zg=) 2: 3130332e3132312e3133322e302f32332d3234203d3e20313335343738.roa (hash: GNOF8brVgXz3bvHl24vTCw4VN2iGlFmFeZUMDJKeFZw=) 3: 3130332e3132312e3133342e302f32332d3234203d3e20313335343738.roa (hash: OByvPBeXjXgICf8nfRM4X/bYHAakXPJvdP6ikk90YbQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.crl rsync://repo-rpki.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 07:17:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:9b:a9:a4:26:24:49:a1:34:c9:38:c8:02:6b:f8:51:61:db:fb:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF75AEDDC6059E8A2B830E487D72BE77E330BEEF Validity Not Before: Jul 20 19:46:34 2025 GMT Not After : Jul 24 07:17:34 2025 GMT Subject: CN=25D74F54D45E45031408A4A458DBB527AF51D044 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:41:85:97:76:7c:01:47:4d:01:54:f9:c9:d0: 42:2f:dd:f1:80:36:26:e6:e5:83:02:31:63:1c:61: 9c:94:b9:ae:b9:9b:c2:d1:04:ce:9d:13:27:62:fe: 70:ba:52:36:7b:02:46:d2:5f:44:8c:45:fb:e7:e7: 67:e7:c9:6f:9a:65:c2:c9:d8:50:18:e7:5c:6e:9d: b8:6f:9b:d6:46:75:11:a0:1b:96:ef:5d:62:c1:56: d9:45:d8:10:6f:06:59:62:c1:65:06:54:1b:ad:63: fb:29:7e:04:9e:4c:77:8b:83:9d:80:0e:33:db:35: db:25:68:16:44:60:5b:f6:04:19:f8:cd:08:e6:47: 12:98:e5:c8:a1:59:89:7a:91:dd:02:f0:f5:78:6a: 82:ce:03:93:65:8c:47:f2:88:95:52:fd:a4:26:fc: d4:e7:46:65:8a:f5:37:f3:f2:af:7d:19:b1:f0:bf: 7d:e4:c1:fe:eb:46:98:7c:83:6c:e4:30:5b:35:a3: e3:2c:15:33:44:9f:01:2b:a4:82:25:24:02:ee:95: 14:66:d5:59:a3:71:44:6f:41:f4:00:57:2e:dc:51: ec:8b:a5:82:80:71:c6:f4:9f:3f:2a:36:97:1a:6b: 4e:63:91:63:21:dc:c9:db:30:73:fe:37:ad:bb:cf: 16:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:D7:4F:54:D4:5E:45:03:14:08:A4:A4:58:DB:B5:27:AF:51:D0:44 X509v3 Authority Key Identifier: keyid:FF:75:AE:DD:C6:05:9E:8A:2B:83:0E:48:7D:72:BE:77:E3:30:BE:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:7a:2c:5f:1c:eb:ea:ff:ae:69:14:2d:3b:16:8d:ed:a6:7c: 12:02:df:f5:39:5c:19:6a:ca:e7:79:0d:30:17:a5:fa:5c:c7: ae:46:a4:e0:e8:8b:a3:92:11:7d:1c:fe:0d:e1:4e:44:ea:8f: ad:11:ab:2d:1e:5c:16:94:4c:23:65:06:17:db:75:15:20:39: bd:12:64:79:7b:bf:60:b6:8c:91:d6:80:4f:2e:f6:ae:b3:78: 1a:04:cd:4d:72:b6:57:18:64:f7:39:3a:1f:8b:91:41:a1:ec: a8:a9:fc:d0:06:73:82:98:bf:31:9e:a8:fb:d0:64:7c:62:e5: 4e:01:84:b5:45:66:2d:87:8c:f5:4d:2c:60:95:9d:f9:b7:12: 9b:a8:23:2d:c8:29:b4:87:75:9a:c8:eb:bc:a3:5e:db:e7:1d: c4:b5:fa:25:1a:60:ac:ae:fa:af:a5:fb:93:36:a8:04:53:ea: 2c:81:1e:63:c1:b0:1f:b5:fa:80:90:c8:f3:28:37:09:05:b6: 52:a8:59:74:82:42:bc:12:07:80:b0:66:59:1d:ae:77:5b:8c: 67:23:87:01:87:b0:65:6e:e6:db:d8:c6:e5:5d:58:94:e5:c4: 1c:f0:63:35:01:a9:6b:09:4e:34:eb:e1:7e:50:9a:dc:e1:37: d8:03:04:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT5uppCYkSaE0yTjIAmv4UWHb+4wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY3NUFFRERDNjA1OUU4QTJCODMwRTQ4N0Q3MkJFNzdF MzMwQkVFRjAeFw0yNTA3MjAxOTQ2MzRaFw0yNTA3MjQwNzE3MzRaMDMxMTAvBgNV BAMTKDI1RDc0RjU0RDQ1RTQ1MDMxNDA4QTRBNDU4REJCNTI3QUY1MUQwNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkQYWXdnwBR00BVPnJ0EIv3fGA Nibm5YMCMWMcYZyUua65m8LRBM6dEydi/nC6UjZ7AkbSX0SMRfvn52fnyW+aZcLJ 2FAY51xunbhvm9ZGdRGgG5bvXWLBVtlF2BBvBlliwWUGVButY/spfgSeTHeLg52A DjPbNdslaBZEYFv2BBn4zQjmRxKY5cihWYl6kd0C8PV4aoLOA5NljEfyiJVS/aQm /NTnRmWK9Tfz8q99GbHwv33kwf7rRph8g2zkMFs1o+MsFTNEnwErpIIlJALulRRm 1VmjcURvQfQAVy7cUeyLpYKAccb0nz8qNpcaa05jkWMh3MnbMHP+N627zxbBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJddPVNReRQMUCKSkWNu1J69R0EQwHwYDVR0j BBgwFoAU/3Wu3cYFnoorgw5IfXK+d+Mwvu8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YjM3ODRmZS1mOWZlLTRjYmUtODc2OC0yNjNhNzY5ODZhM2EvMC9GRjc1QUVEREM2 MDU5RThBMkI4MzBFNDg3RDcyQkU3N0UzMzBCRUVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkY3NUFFRERDNjA1OUU4QTJCODMwRTQ4N0Q3MkJFNzdFMzMw QkVFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWIzNzg0ZmUtZjlmZS00Y2JlLTg3 NjgtMjYzYTc2OTg2YTNhLzAvRkY3NUFFRERDNjA1OUU4QTJCODMwRTQ4N0Q3MkJF NzdFMzMwQkVFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALN6LF8c6+r/rmkULTsWje2mfBIC3/U5XBlq yud5DTAXpfpcx65GpODoi6OSEX0c/g3hTkTqj60Rqy0eXBaUTCNlBhfbdRUgOb0S ZHl7v2C2jJHWgE8u9q6zeBoEzU1ytlcYZPc5Oh+LkUGh7Kip/NAGc4KYvzGeqPvQ ZHxi5U4BhLVFZi2HjPVNLGCVnfm3EpuoIy3IKbSHdZrI67yjXtvnHcS1+iUaYKyu +q+l+5M2qART6iyBHmPBsB+1+oCQyPMoNwkFtlKoWXSCQrwSB4CwZlkdrndbjGcj hwGHsGVu5tvYxuVdWJTlxBzwYzUBqWsJTjTr4X5QmtzhN9gDBCE= -----END CERTIFICATE-----Generated at Mon Jul 21 23:24:16 2025 by rpki-client