$ rpki-client -vvf repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.mft File: FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.mft (raw, json) Hash identifier: oXqZPI+ic3JHaCadtUTcRqpeFZDd64HEMYOKXRzAxVo= Subject key identifier: 07:2F:C1:BA:C1:F9:75:8F:30:15:38:34:32:07:E3:6B:25:EC:A4:BC Authority key identifier: FF:3F:06:6A:5E:9A:B8:F9:88:B8:E1:7C:7A:56:DD:2E:00:A6:6A:D8 Certificate issuer: /CN=FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8 Certificate serial: 222A70D9496E2AAB0BD5B58E1A203A71475E5349 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.mft Manifest number: AA Signing time: Fri 06 Jun 2025 02:02:20 +0000 Manifest this update: Fri 06 Jun 2025 01:57:20 +0000 Manifest next update: Mon 09 Jun 2025 08:35:20 +0000 Files and hashes: 1: 3135372e31352e38322e302f32342d3234203d3e20313532333633.roa (hash: LhdUiZ829jnCYzP+T/q1kR6KjN+CYgUrJ54OONbPWMo=) 2: 3135372e31352e38322e302f32332d3233203d3e20313532333633.roa (hash: TxbDMhKSioNeR20MqOvnLPpYmLwOjXBp9YQNGW/Dswg=) 3: FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.crl (hash: lJJRaAopDsLaRyO9cHVDAk6Wd1cqZ95SSulVwk7MUzc=) 4: 3135372e31352e38332e302f32342d3234203d3e20313532333633.roa (hash: tmwMaZpoyniOHlrA1Ev0DGw1sFkx/sRTma2ZD2CnpMQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.crl rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 08:35:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:2a:70:d9:49:6e:2a:ab:0b:d5:b5:8e:1a:20:3a:71:47:5e:53:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8 Validity Not Before: Jun 6 01:57:20 2025 GMT Not After : Jun 9 08:35:20 2025 GMT Subject: CN=072FC1BAC1F9758F301538343207E36B25ECA4BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:29:fc:9a:ed:a7:13:37:b3:50:6b:ab:f3:43: cf:e2:45:49:00:6e:44:39:48:2a:86:52:09:a2:3b: eb:c0:09:a7:a6:5a:af:9e:0c:24:13:40:a4:eb:31: 8b:6c:37:8d:44:34:e7:4e:19:49:52:98:74:cc:5e: 28:43:fa:e5:19:fa:4f:17:1b:1f:9d:de:21:01:38: 62:32:39:05:8b:0d:09:49:d5:62:ac:db:a1:74:72: 04:0b:c0:95:b4:cb:7b:67:8f:9c:92:8b:1a:8b:22: de:9b:13:8a:86:c8:6d:42:0f:fa:bb:27:d8:7a:99: a8:4c:d8:bf:bd:a1:1d:01:e8:39:a3:46:f1:b5:ad: 81:bf:00:07:ba:aa:60:7d:57:48:c7:dc:6c:f7:bd: 3f:ab:59:ea:9b:e4:05:5b:77:9e:cc:b6:7c:ad:f5: 9e:e9:ba:50:7e:e3:28:b3:24:82:b6:ba:dc:ed:95: bc:ce:f1:8e:5d:c6:4c:b2:02:5a:70:ca:53:0e:64: f9:53:16:24:7f:de:a4:10:1f:f7:9b:42:46:52:c4: 58:c0:e3:05:ec:f4:2b:b2:b1:ce:2b:08:39:d0:6c: 0a:63:10:30:bc:64:8a:7b:7d:0d:85:09:ab:47:e5: 06:4c:2a:b0:55:8b:e9:92:75:c6:93:15:8f:5d:92: 7f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:2F:C1:BA:C1:F9:75:8F:30:15:38:34:32:07:E3:6B:25:EC:A4:BC X509v3 Authority Key Identifier: keyid:FF:3F:06:6A:5E:9A:B8:F9:88:B8:E1:7C:7A:56:DD:2E:00:A6:6A:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:33:cf:06:8d:5e:6a:b1:ae:91:54:78:c5:47:37:c2:6d:c1: a3:ad:4e:7e:29:5b:ca:f3:77:a5:4c:fb:75:9f:8a:e8:01:dc: 9d:69:f5:e9:94:ea:8d:74:bd:72:59:1c:f1:13:9f:0a:26:11: d2:58:76:9a:ae:54:de:89:bf:12:50:a8:27:33:1d:a6:b0:64: c2:ab:ab:fa:4f:80:82:ee:a5:11:66:8c:31:f2:8a:b6:20:b5: 76:62:3d:f3:f4:c8:89:2d:2b:71:e2:d5:77:54:39:e7:55:e2: 08:df:5c:95:55:af:aa:b3:61:aa:c6:88:83:12:73:3e:69:5e: f7:75:38:10:7d:4a:af:5c:3c:5f:9a:97:ac:1f:92:f1:dd:03: 4c:80:1e:83:ea:e4:48:30:1d:ae:0d:78:80:4e:50:01:36:5d: 0f:30:bd:c7:4a:8f:b0:40:88:97:17:04:72:88:e5:fe:db:48: ff:e6:ca:ab:30:60:95:34:16:9c:cc:5f:00:b0:5f:24:18:72: dd:3d:c9:2f:82:ef:43:60:b5:51:12:6c:dc:c6:43:e1:28:67: 69:e0:74:06:f2:78:c5:16:f7:b4:92:18:ef:6d:59:1d:18:ba: a0:89:a5:92:cd:f6:92:d3:57:a0:bf:3d:4d:ba:1f:fe:e0:20: 2d:51:20:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIipw2UluKqsL1bWOGiA6cUdeU0kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkYzRjA2NkE1RTlBQjhGOTg4QjhFMTdDN0E1NkREMkUw MEE2NkFEODAeFw0yNTA2MDYwMTU3MjBaFw0yNTA2MDkwODM1MjBaMDMxMTAvBgNV BAMTKDA3MkZDMUJBQzFGOTc1OEYzMDE1MzgzNDMyMDdFMzZCMjVFQ0E0QkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTKfya7acTN7NQa6vzQ8/iRUkA bkQ5SCqGUgmiO+vACaemWq+eDCQTQKTrMYtsN41ENOdOGUlSmHTMXihD+uUZ+k8X Gx+d3iEBOGIyOQWLDQlJ1WKs26F0cgQLwJW0y3tnj5ySixqLIt6bE4qGyG1CD/q7 J9h6mahM2L+9oR0B6DmjRvG1rYG/AAe6qmB9V0jH3Gz3vT+rWeqb5AVbd57Mtnyt 9Z7pulB+4yizJIK2utztlbzO8Y5dxkyyAlpwylMOZPlTFiR/3qQQH/ebQkZSxFjA 4wXs9Cuysc4rCDnQbApjEDC8ZIp7fQ2FCatH5QZMKrBVi+mSdcaTFY9dkn91AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBy/BusH5dY8wFTg0MgfjayXspLwwHwYDVR0j BBgwFoAU/z8Gal6auPmIuOF8elbdLgCmatgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZDAxMWExYy1hMGFkLTRkOTMtODZhZi0zZjBhYWRkOTY4NGYvMC9GRjNGMDY2QTVF OUFCOEY5ODhCOEUxN0M3QTU2REQyRTAwQTY2QUQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkYzRjA2NkE1RTlBQjhGOTg4QjhFMTdDN0E1NkREMkUwMEE2 NkFEOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWQwMTFhMWMtYTBhZC00ZDkzLTg2 YWYtM2YwYWFkZDk2ODRmLzAvRkYzRjA2NkE1RTlBQjhGOTg4QjhFMTdDN0E1NkRE MkUwMEE2NkFEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK4zzwaNXmqxrpFUeMVHN8JtwaOtTn4pW8rz d6VM+3WfiugB3J1p9emU6o10vXJZHPETnwomEdJYdpquVN6JvxJQqCczHaawZMKr q/pPgILupRFmjDHyirYgtXZiPfP0yIktK3Hi1XdUOedV4gjfXJVVr6qzYarGiIMS cz5pXvd1OBB9Sq9cPF+al6wfkvHdA0yAHoPq5EgwHa4NeIBOUAE2XQ8wvcdKj7BA iJcXBHKI5f7bSP/myqswYJU0FpzMXwCwXyQYct09yS+C70NgtVESbNzGQ+EoZ2ng dAbyeMUW97SSGO9tWR0YuqCJpZLN9pLTV6C/PU26H/7gIC1RIKE= -----END CERTIFICATE-----Generated at Sat Jun 7 04:17:11 2025 by rpki-client