$ rpki-client -vvf repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.mft File: FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.mft (raw, json) Hash identifier: hMkyG8xpPLVmkaaxh8wv4r2UU5vM3GW++XMnr7sK35c= Subject key identifier: 2A:68:7D:F3:AD:C3:49:E6:29:6C:C3:62:8F:CB:4C:CF:72:49:3D:07 Authority key identifier: FF:3F:06:6A:5E:9A:B8:F9:88:B8:E1:7C:7A:56:DD:2E:00:A6:6A:D8 Certificate issuer: /CN=FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8 Certificate serial: 3D90C7F34503A7580395C3727D08AAC7415F0BC4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.mft Manifest number: D0 Signing time: Sat 30 Aug 2025 22:02:24 +0000 Manifest this update: Sat 30 Aug 2025 21:57:24 +0000 Manifest next update: Wed 03 Sep 2025 10:01:24 +0000 Files and hashes: 1: 3135372e31352e38322e302f32342d3234203d3e20313532333633.roa (hash: LhdUiZ829jnCYzP+T/q1kR6KjN+CYgUrJ54OONbPWMo=) 2: 3135372e31352e38332e302f32342d3234203d3e20313532333633.roa (hash: tmwMaZpoyniOHlrA1Ev0DGw1sFkx/sRTma2ZD2CnpMQ=) 3: FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.crl (hash: qqeRrbNrrz5btJPy3KDyXp44nCZ1lp7BlnYOFwFAo2o=) 4: 3135372e31352e38322e302f32332d3233203d3e20313532333633.roa (hash: TxbDMhKSioNeR20MqOvnLPpYmLwOjXBp9YQNGW/Dswg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.crl rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 02 Sep 2025 02:27:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:90:c7:f3:45:03:a7:58:03:95:c3:72:7d:08:aa:c7:41:5f:0b:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8 Validity Not Before: Aug 30 21:57:24 2025 GMT Not After : Sep 3 10:01:24 2025 GMT Subject: CN=2A687DF3ADC349E6296CC3628FCB4CCF72493D07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2e:db:74:85:64:fe:48:ed:92:90:44:80:62: 7f:72:5f:c5:06:27:2f:35:4f:78:41:fb:4d:fd:32: b7:0c:79:56:7c:48:da:69:6e:6f:6b:a7:5d:bf:ca: ef:24:50:8b:ca:48:6c:ff:16:57:94:89:cd:dc:9a: 83:94:57:30:fe:96:e7:00:9c:0b:d9:81:14:96:1d: 9d:2e:17:a6:9d:f4:56:23:0c:d2:68:b0:35:33:d0: 24:20:1b:fd:e1:24:69:62:4c:a5:53:b6:c2:3d:04: c7:fe:51:81:86:16:6a:89:f9:1f:a2:ed:cc:5b:f5: e5:b4:37:ca:db:e5:88:53:4e:30:c7:48:e7:c5:3e: 7e:90:bc:59:8d:57:f4:0f:4e:08:50:dd:46:b7:9f: d2:d5:e8:63:87:14:fb:44:db:b3:da:20:d2:4e:10: af:78:d6:f9:13:7d:27:52:d2:2a:58:7d:57:54:ee: 2e:bf:f3:91:5f:eb:74:d2:20:84:aa:7b:5f:36:7d: 21:fc:24:ac:ee:f3:ae:fe:ab:de:52:19:eb:e2:ee: 15:35:d0:12:e4:7e:5d:89:80:9a:b8:a8:20:4f:00: b2:37:b9:43:24:f9:50:e7:7f:cf:d4:10:03:ac:3d: af:5d:38:7d:7a:62:d3:56:79:9e:33:9e:af:23:67: 73:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:68:7D:F3:AD:C3:49:E6:29:6C:C3:62:8F:CB:4C:CF:72:49:3D:07 X509v3 Authority Key Identifier: keyid:FF:3F:06:6A:5E:9A:B8:F9:88:B8:E1:7C:7A:56:DD:2E:00:A6:6A:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:fe:34:65:bd:6f:aa:54:d3:27:a9:44:72:1c:08:3c:1b:a4: 46:42:77:19:67:e1:63:66:44:33:eb:b1:fc:48:52:b3:52:2c: 6f:c9:bf:c3:e5:06:86:c4:f0:67:cb:55:7f:a0:b4:09:56:52: 10:76:1d:27:9d:b8:07:39:2f:22:9d:bc:f2:16:34:d1:e8:33: f9:2a:5f:30:3b:db:59:ce:75:c9:a7:7a:69:ff:c9:3e:07:db: b1:c6:71:73:19:2f:47:a9:72:3b:26:52:c2:8b:55:25:d3:1f: 38:d9:81:79:e5:a6:1e:41:19:bd:b5:a3:73:a8:6b:05:c4:34: 7c:ae:9b:b1:44:03:48:da:75:90:37:43:02:94:68:dd:05:68: 4b:36:97:fa:bc:1c:82:59:af:99:6c:59:cf:6b:6a:6b:4e:33: 89:46:37:cc:7c:19:65:17:68:c3:4f:6d:e6:06:d8:47:90:82: 5a:03:07:c1:97:d4:75:b2:e2:a9:46:e7:45:31:4f:6e:9e:ed: ba:46:e9:27:21:04:ae:3d:07:05:3d:c9:8a:44:5f:5c:38:4c: b8:cd:ea:b6:75:11:eb:b4:90:94:c8:a1:8f:ea:09:da:67:92: 9f:e0:75:ed:77:ac:9d:40:61:f4:75:56:1c:c5:59:8f:81:e5: 07:92:84:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPZDH80UDp1gDlcNyfQiqx0FfC8QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkYzRjA2NkE1RTlBQjhGOTg4QjhFMTdDN0E1NkREMkUw MEE2NkFEODAeFw0yNTA4MzAyMTU3MjRaFw0yNTA5MDMxMDAxMjRaMDMxMTAvBgNV BAMTKDJBNjg3REYzQURDMzQ5RTYyOTZDQzM2MjhGQ0I0Q0NGNzI0OTNEMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDLtt0hWT+SO2SkESAYn9yX8UG Jy81T3hB+039MrcMeVZ8SNppbm9rp12/yu8kUIvKSGz/FleUic3cmoOUVzD+lucA nAvZgRSWHZ0uF6ad9FYjDNJosDUz0CQgG/3hJGliTKVTtsI9BMf+UYGGFmqJ+R+i 7cxb9eW0N8rb5YhTTjDHSOfFPn6QvFmNV/QPTghQ3Ua3n9LV6GOHFPtE27PaINJO EK941vkTfSdS0ipYfVdU7i6/85Ff63TSIISqe182fSH8JKzu867+q95SGevi7hU1 0BLkfl2JgJq4qCBPALI3uUMk+VDnf8/UEAOsPa9dOH16YtNWeZ4znq8jZ3P3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKmh9863DSeYpbMNij8tMz3JJPQcwHwYDVR0j BBgwFoAU/z8Gal6auPmIuOF8elbdLgCmatgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZDAxMWExYy1hMGFkLTRkOTMtODZhZi0zZjBhYWRkOTY4NGYvMC9GRjNGMDY2QTVF OUFCOEY5ODhCOEUxN0M3QTU2REQyRTAwQTY2QUQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkYzRjA2NkE1RTlBQjhGOTg4QjhFMTdDN0E1NkREMkUwMEE2 NkFEOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWQwMTFhMWMtYTBhZC00ZDkzLTg2 YWYtM2YwYWFkZDk2ODRmLzAvRkYzRjA2NkE1RTlBQjhGOTg4QjhFMTdDN0E1NkRE MkUwMEE2NkFEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHD+NGW9b6pU0yepRHIcCDwbpEZCdxln4WNm RDPrsfxIUrNSLG/Jv8PlBobE8GfLVX+gtAlWUhB2HSeduAc5LyKdvPIWNNHoM/kq XzA721nOdcmnemn/yT4H27HGcXMZL0epcjsmUsKLVSXTHzjZgXnlph5BGb21o3Oo awXENHyum7FEA0jadZA3QwKUaN0FaEs2l/q8HIJZr5lsWc9ramtOM4lGN8x8GWUX aMNPbeYG2EeQgloDB8GX1HWy4qlG50UxT26e7bpG6SchBK49BwU9yYpEX1w4TLjN 6rZ1Eeu0kJTIoY/qCdpnkp/gde13rJ1AYfR1VhzFWY+B5QeShJE= -----END CERTIFICATE-----Generated at Sun Aug 31 12:43:09 2025 by rpki-client