$ rpki-client -vvf repo-rpki.idnic.net/repo/3248d27b-ccb0-4fc7-abca-9fc0a3e15754/0/FF45D0F44B7B63B976B41EEE18CC92393CF8184F.mft File: FF45D0F44B7B63B976B41EEE18CC92393CF8184F.mft (raw, json) Hash identifier: czh2Wbbh0m/ZQuU2i29hkahi9ppqLs4R8esDrxERydw= Subject key identifier: AA:BA:E3:B9:CB:B7:83:FA:9B:D2:15:45:35:99:1E:0A:6F:C4:EF:82 Authority key identifier: FF:45:D0:F4:4B:7B:63:B9:76:B4:1E:EE:18:CC:92:39:3C:F8:18:4F Certificate issuer: /CN=FF45D0F44B7B63B976B41EEE18CC92393CF8184F Certificate serial: 5F4AD1BA5F0A5C3D3BCE1AEBB57662126B1DF9FD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF45D0F44B7B63B976B41EEE18CC92393CF8184F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3248d27b-ccb0-4fc7-abca-9fc0a3e15754/0/FF45D0F44B7B63B976B41EEE18CC92393CF8184F.mft Manifest number: 01B6 Signing time: Thu 05 Jun 2025 02:10:03 +0000 Manifest this update: Thu 05 Jun 2025 02:05:03 +0000 Manifest next update: Sun 08 Jun 2025 13:41:03 +0000 Files and hashes: 1: FF45D0F44B7B63B976B41EEE18CC92393CF8184F.crl (hash: j2Epj1qrO/KEnx7aALci/Js85sq8dyD2V1lUAFEa5w0=) 2: 3130332e3136392e33382e302f32332d3234203d3e20313432333331.roa (hash: qtyZ9raTN/ay3QbY1ITdDYTNx2mGOoDZFy/XPZmK4ng=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3248d27b-ccb0-4fc7-abca-9fc0a3e15754/0/FF45D0F44B7B63B976B41EEE18CC92393CF8184F.crl rsync://repo-rpki.idnic.net/repo/3248d27b-ccb0-4fc7-abca-9fc0a3e15754/0/FF45D0F44B7B63B976B41EEE18CC92393CF8184F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF45D0F44B7B63B976B41EEE18CC92393CF8184F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 13:41:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:4a:d1:ba:5f:0a:5c:3d:3b:ce:1a:eb:b5:76:62:12:6b:1d:f9:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF45D0F44B7B63B976B41EEE18CC92393CF8184F Validity Not Before: Jun 5 02:05:03 2025 GMT Not After : Jun 8 13:41:03 2025 GMT Subject: CN=AABAE3B9CBB783FA9BD2154535991E0A6FC4EF82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:af:47:00:18:dc:22:8d:ea:a2:8e:50:9d:93: 91:f1:fa:82:72:e3:cf:94:1b:1c:f6:6a:08:8e:e8: 88:7d:8c:ce:4e:38:2f:8b:14:14:b1:e9:16:89:dc: 2e:5e:cd:58:b7:1f:40:7d:02:cb:33:db:67:43:8f: bf:bb:da:4a:07:23:0f:ef:7f:9c:ee:80:ee:3a:36: 24:e7:e9:c0:c4:57:73:7d:11:9a:f0:d1:59:75:cb: 76:6d:67:29:1f:70:ef:75:98:6e:90:e0:fd:60:bc: fd:de:ad:18:16:4f:02:40:f1:89:58:42:19:e6:64: 1e:63:56:84:33:39:20:2d:65:c4:e8:a9:b7:2d:db: af:74:9c:2d:74:66:e0:03:83:a3:1f:4f:54:1a:a9: d4:8f:0c:8a:df:5d:22:b6:6f:bd:d1:27:c0:c3:11: 98:e5:30:e6:b5:01:4a:25:87:ae:a5:67:6f:69:11: 2f:af:ed:ef:aa:26:b2:a2:7c:9f:94:8a:08:c9:77: 1b:2f:19:51:12:7e:2a:6f:11:fd:52:85:4b:89:84: f0:9c:5d:57:b7:fe:8d:cf:94:27:d1:c2:6b:85:c0: 5c:80:c6:34:6a:e1:ed:88:2e:ab:73:53:6d:ba:01: 30:ec:1a:3f:3d:da:2e:6e:5d:53:bd:f4:82:7b:85: 7f:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:BA:E3:B9:CB:B7:83:FA:9B:D2:15:45:35:99:1E:0A:6F:C4:EF:82 X509v3 Authority Key Identifier: keyid:FF:45:D0:F4:4B:7B:63:B9:76:B4:1E:EE:18:CC:92:39:3C:F8:18:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3248d27b-ccb0-4fc7-abca-9fc0a3e15754/0/FF45D0F44B7B63B976B41EEE18CC92393CF8184F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF45D0F44B7B63B976B41EEE18CC92393CF8184F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3248d27b-ccb0-4fc7-abca-9fc0a3e15754/0/FF45D0F44B7B63B976B41EEE18CC92393CF8184F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:8e:8a:02:8e:99:eb:00:b6:e8:c3:94:69:7e:dd:de:f4:51: bf:ef:2b:c4:05:ea:a3:d2:06:fa:2b:72:b1:77:fa:61:f9:4d: 13:78:14:15:63:a7:a4:a2:75:35:fd:f4:40:81:99:f2:88:6d: f5:b4:87:2c:e2:a8:29:40:9b:78:e8:1a:2f:65:69:c2:d6:09: 67:cd:8f:27:71:b3:a3:c9:28:e9:50:b8:e5:f0:b8:51:1e:b0: 6d:fe:1f:7f:3a:02:36:9c:09:fd:a2:ae:c3:80:73:7e:a0:88: 4f:af:7b:cf:55:40:5c:2b:ea:24:04:06:ba:e4:67:d3:55:e2: 11:d9:12:97:e6:3f:f9:40:65:e2:8a:c9:1b:ef:0a:bd:79:40: 98:b1:f9:9f:54:c3:6f:22:aa:a6:68:d6:d7:c0:c5:d2:0f:75: 87:1c:9e:60:78:50:31:da:6b:f1:f9:22:4f:dc:e7:cd:fb:3b: 3f:db:13:cb:7f:9e:f7:2f:0b:3d:67:f8:57:54:02:18:53:09: db:4a:db:76:32:d2:77:1e:29:7a:a2:b7:f7:61:3e:eb:b0:1f: c8:40:a7:dd:c1:f1:74:b2:6d:8e:6d:a2:2b:53:c4:e9:da:39: cf:7b:1e:bc:92:a2:e3:f2:66:bf:fb:f6:9a:72:2b:f1:c7:d0: ec:d7:03:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX0rRul8KXD07zhrrtXZiEmsd+f0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY0NUQwRjQ0QjdCNjNCOTc2QjQxRUVFMThDQzkyMzkz Q0Y4MTg0RjAeFw0yNTA2MDUwMjA1MDNaFw0yNTA2MDgxMzQxMDNaMDMxMTAvBgNV BAMTKEFBQkFFM0I5Q0JCNzgzRkE5QkQyMTU0NTM1OTkxRTBBNkZDNEVGODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAr0cAGNwijeqijlCdk5Hx+oJy 48+UGxz2agiO6Ih9jM5OOC+LFBSx6RaJ3C5ezVi3H0B9Assz22dDj7+72koHIw/v f5zugO46NiTn6cDEV3N9EZrw0Vl1y3ZtZykfcO91mG6Q4P1gvP3erRgWTwJA8YlY QhnmZB5jVoQzOSAtZcToqbct2690nC10ZuADg6MfT1QaqdSPDIrfXSK2b73RJ8DD EZjlMOa1AUolh66lZ29pES+v7e+qJrKifJ+UigjJdxsvGVESfipvEf1ShUuJhPCc XVe3/o3PlCfRwmuFwFyAxjRq4e2ILqtzU226ATDsGj892i5uXVO99IJ7hX+lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqrrjucu3g/qb0hVFNZkeCm/E74IwHwYDVR0j BBgwFoAU/0XQ9Et7Y7l2tB7uGMySOTz4GE8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MjQ4ZDI3Yi1jY2IwLTRmYzctYWJjYS05ZmMwYTNlMTU3NTQvMC9GRjQ1RDBGNDRC N0I2M0I5NzZCNDFFRUUxOENDOTIzOTNDRjgxODRGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkY0NUQwRjQ0QjdCNjNCOTc2QjQxRUVFMThDQzkyMzkzQ0Y4 MTg0Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzI0OGQyN2ItY2NiMC00ZmM3LWFi Y2EtOWZjMGEzZTE1NzU0LzAvRkY0NUQwRjQ0QjdCNjNCOTc2QjQxRUVFMThDQzky MzkzQ0Y4MTg0Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAaOigKOmesAtujDlGl+3d70Ub/vK8QF6qPS BvorcrF3+mH5TRN4FBVjp6SidTX99ECBmfKIbfW0hyziqClAm3joGi9lacLWCWfN jydxs6PJKOlQuOXwuFEesG3+H386AjacCf2irsOAc36giE+ve89VQFwr6iQEBrrk Z9NV4hHZEpfmP/lAZeKKyRvvCr15QJix+Z9Uw28iqqZo1tfAxdIPdYccnmB4UDHa a/H5Ik/c5837Oz/bE8t/nvcvCz1n+FdUAhhTCdtK23Yy0nceKXqit/dhPuuwH8hA p93B8XSybY5toitTxOnaOc97HrySouPyZr/79ppyK/HH0OzXA3Y= -----END CERTIFICATE-----Generated at Thu Jun 5 18:23:37 2025 by rpki-client