$ rpki-client -vvf repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.mft File: FF947BE188D359EA7EDF887D86DA2C7CC7460B70.mft (raw, json) Hash identifier: XERA7dck2KDe3mVZE0pkFAWS8/WOCQi5LaHpe86xTAg= Subject key identifier: E5:1F:F4:53:10:E4:D5:1B:82:38:49:0A:AC:8C:95:5F:71:07:FF:CF Authority key identifier: FF:94:7B:E1:88:D3:59:EA:7E:DF:88:7D:86:DA:2C:7C:C7:46:0B:70 Certificate issuer: /CN=FF947BE188D359EA7EDF887D86DA2C7CC7460B70 Certificate serial: 42F3C4B7C4EB6877509EB68AAA6A5A05020E8477 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.mft Manifest number: 0221 Signing time: Fri 18 Jul 2025 23:11:59 +0000 Manifest this update: Fri 18 Jul 2025 23:06:59 +0000 Manifest next update: Tue 22 Jul 2025 01:38:59 +0000 Files and hashes: 1: 3130332e3136322e3134312e302f32342d3234203d3e20313431303833.roa (hash: 6+qzbxlDEMLlDFF8ZMTBVVGBQ81Jy42r6r5JLNvCfLQ=) 2: FF947BE188D359EA7EDF887D86DA2C7CC7460B70.crl (hash: t3DB9Hyd/jjWWPwcztoMcgET0ZG8UJr8S2LTuA79y+g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.crl rsync://repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 01:38:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:f3:c4:b7:c4:eb:68:77:50:9e:b6:8a:aa:6a:5a:05:02:0e:84:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF947BE188D359EA7EDF887D86DA2C7CC7460B70 Validity Not Before: Jul 18 23:06:59 2025 GMT Not After : Jul 22 01:38:59 2025 GMT Subject: CN=E51FF45310E4D51B8238490AAC8C955F7107FFCF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:7b:11:36:59:00:b0:7a:ef:c9:b4:14:64:ac: 9d:e1:74:4d:4e:d7:17:de:45:2f:01:4d:81:d2:b1: a6:02:92:0b:c3:a1:2b:9a:59:9e:01:22:cd:57:48: 43:9d:23:e5:db:f1:f6:e0:a1:55:de:bf:2c:71:23: f8:20:41:7c:19:42:b6:0d:5b:39:68:62:de:02:80: b2:f3:72:1f:d4:7c:e2:38:80:db:ca:85:26:23:cf: 4b:8b:b4:77:f1:e5:0a:f4:df:aa:0f:65:ae:0f:06: d4:15:94:7e:f0:c0:97:a7:33:4a:b7:ec:da:19:28: 0b:03:46:60:b2:a7:4d:98:1c:46:64:8f:7b:22:5d: d0:ef:bd:41:3c:99:a2:1f:23:33:97:6e:df:62:39: 2e:a4:a3:f9:78:36:f0:f1:a9:b6:77:9e:78:2c:51: 25:e8:e5:09:1d:e8:ac:8a:f5:74:7f:c7:27:f6:69: b2:8a:cd:11:6b:2d:38:a2:0a:19:4f:65:30:32:ae: d0:cd:9b:f2:a4:c8:88:1a:be:d8:31:12:8b:29:99: 18:28:75:72:93:31:de:50:54:87:ac:75:9e:4b:e8: 64:8b:8a:4b:13:45:65:1e:41:40:98:8b:08:9d:0b: 9f:49:df:eb:3f:ed:16:f2:2d:df:e4:fd:ab:fe:4a: e1:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:1F:F4:53:10:E4:D5:1B:82:38:49:0A:AC:8C:95:5F:71:07:FF:CF X509v3 Authority Key Identifier: keyid:FF:94:7B:E1:88:D3:59:EA:7E:DF:88:7D:86:DA:2C:7C:C7:46:0B:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:8c:7d:26:cc:58:40:21:f9:26:3d:f1:4e:c6:20:a5:59:0c: d4:d4:85:8c:f0:6a:a6:57:ef:76:c5:69:5a:45:a3:12:4a:60: e4:99:f1:8b:a8:05:aa:15:a3:4d:8c:67:e4:fa:36:c2:ac:c7: 8f:96:cf:1c:50:33:b5:f9:20:b7:66:60:77:a3:21:be:1d:85: ab:bc:3e:37:8a:db:ad:e3:c3:1c:6a:a3:c5:7b:66:ac:d0:a9: b6:93:32:12:f6:41:78:bd:d5:54:a5:f4:c1:f4:dd:c0:2f:76: 35:bd:48:13:0e:8b:31:2d:f3:ad:c1:fe:aa:20:bd:b1:e1:26: e7:40:02:16:d4:00:21:b9:b8:1a:72:d2:69:25:31:b1:b7:18: e2:01:26:55:59:b8:b6:a2:4b:bf:01:08:7a:b9:33:f9:00:f2: 25:22:83:f3:35:96:71:b7:56:1d:ac:07:40:38:7e:5c:bc:6b: 36:59:c2:77:1e:78:61:5b:f2:1a:56:9b:82:35:ad:6c:f4:e3: 5a:47:f0:08:0a:a9:5d:ee:df:c2:f0:6a:6e:c2:c9:a1:85:81: 98:f2:2a:39:58:3e:d4:f4:73:b7:0e:c7:c3:fb:8f:a7:ab:2a: 85:28:a3:8c:6b:30:a9:5c:a9:97:68:d9:17:7d:fe:80:9e:50: 51:80:30:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQvPEt8TraHdQnraKqmpaBQIOhHcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY5NDdCRTE4OEQzNTlFQTdFREY4ODdEODZEQTJDN0ND NzQ2MEI3MDAeFw0yNTA3MTgyMzA2NTlaFw0yNTA3MjIwMTM4NTlaMDMxMTAvBgNV BAMTKEU1MUZGNDUzMTBFNEQ1MUI4MjM4NDkwQUFDOEM5NTVGNzEwN0ZGQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0exE2WQCweu/JtBRkrJ3hdE1O 1xfeRS8BTYHSsaYCkgvDoSuaWZ4BIs1XSEOdI+Xb8fbgoVXevyxxI/ggQXwZQrYN WzloYt4CgLLzch/UfOI4gNvKhSYjz0uLtHfx5Qr036oPZa4PBtQVlH7wwJenM0q3 7NoZKAsDRmCyp02YHEZkj3siXdDvvUE8maIfIzOXbt9iOS6ko/l4NvDxqbZ3nngs USXo5Qkd6KyK9XR/xyf2abKKzRFrLTiiChlPZTAyrtDNm/KkyIgavtgxEospmRgo dXKTMd5QVIesdZ5L6GSLiksTRWUeQUCYiwidC59J3+s/7RbyLd/k/av+SuGxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5R/0UxDk1RuCOEkKrIyVX3EH/88wHwYDVR0j BBgwFoAU/5R74YjTWep+34h9htosfMdGC3AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OGE5MjM3YS03MjZjLTRjMTktOWI0ZS03Yjk0YjE0MjRjNGIvMC9GRjk0N0JFMTg4 RDM1OUVBN0VERjg4N0Q4NkRBMkM3Q0M3NDYwQjcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkY5NDdCRTE4OEQzNTlFQTdFREY4ODdEODZEQTJDN0NDNzQ2 MEI3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZThhOTIzN2EtNzI2Yy00YzE5LTli NGUtN2I5NGIxNDI0YzRiLzAvRkY5NDdCRTE4OEQzNTlFQTdFREY4ODdEODZEQTJD N0NDNzQ2MEI3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFaMfSbMWEAh+SY98U7GIKVZDNTUhYzwaqZX 73bFaVpFoxJKYOSZ8YuoBaoVo02MZ+T6NsKsx4+WzxxQM7X5ILdmYHejIb4dhau8 PjeK263jwxxqo8V7ZqzQqbaTMhL2QXi91VSl9MH03cAvdjW9SBMOizEt863B/qog vbHhJudAAhbUACG5uBpy0mklMbG3GOIBJlVZuLaiS78BCHq5M/kA8iUig/M1lnG3 Vh2sB0A4fly8azZZwnceeGFb8hpWm4I1rWz041pH8AgKqV3u38Lwam7CyaGFgZjy KjlYPtT0c7cOx8P7j6erKoUoo4xrMKlcqZdo2Rd9/oCeUFGAMEU= -----END CERTIFICATE-----Generated at Sun Jul 20 21:55:22 2025 by rpki-client