$ rpki-client -vvf repo-rpki.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/FF96D30557BDACE26C511E1F48A3514643130EA8.mft File: FF96D30557BDACE26C511E1F48A3514643130EA8.mft (raw, json) Hash identifier: 7+0SGlxLoAcLzIHj7bcXC7klBkuTQO5Qu5KpMWUnOVE= Subject key identifier: A6:62:18:F8:03:F6:99:F8:45:1E:F4:4B:BC:F6:9A:AC:5E:C2:AD:5D Authority key identifier: FF:96:D3:05:57:BD:AC:E2:6C:51:1E:1F:48:A3:51:46:43:13:0E:A8 Certificate issuer: /CN=FF96D30557BDACE26C511E1F48A3514643130EA8 Certificate serial: 4DB7B4B33F6203A59F30F1B29C2719C0219897E3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF96D30557BDACE26C511E1F48A3514643130EA8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/FF96D30557BDACE26C511E1F48A3514643130EA8.mft Manifest number: 89 Signing time: Tue 03 Jun 2025 07:23:16 +0000 Manifest this update: Tue 03 Jun 2025 07:18:16 +0000 Manifest next update: Fri 06 Jun 2025 09:58:16 +0000 Files and hashes: 1: FF96D30557BDACE26C511E1F48A3514643130EA8.crl (hash: vnPnzGb/MhEzcnIrTWK2zU6r2i3UmLI6dv7keL0oNWo=) 2: 3130332e3232392e3133312e302f32342d3234203d3e20313530393632.roa (hash: 0vqEjbzJ2oTN8YUg5plSL7bME0j1cq9HckeFz0ga7Y8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/FF96D30557BDACE26C511E1F48A3514643130EA8.crl rsync://repo-rpki.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/FF96D30557BDACE26C511E1F48A3514643130EA8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF96D30557BDACE26C511E1F48A3514643130EA8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 09:58:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:b7:b4:b3:3f:62:03:a5:9f:30:f1:b2:9c:27:19:c0:21:98:97:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF96D30557BDACE26C511E1F48A3514643130EA8 Validity Not Before: Jun 3 07:18:16 2025 GMT Not After : Jun 6 09:58:16 2025 GMT Subject: CN=A66218F803F699F8451EF44BBCF69AAC5EC2AD5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c2:06:a3:68:0c:63:b8:9d:59:08:a3:eb:44: 51:cf:16:10:ad:1f:89:19:14:83:e2:77:00:15:4f: f0:5e:34:ef:ec:f5:d2:ed:28:ee:6e:11:c4:80:e4: 4e:9e:16:53:5a:b2:c7:82:fd:86:e9:56:5a:0b:2d: ce:e8:7c:37:94:a3:db:63:6b:97:34:d9:08:f1:22: ec:b6:eb:68:6d:9f:11:3d:d3:1e:64:17:1d:95:95: f1:1a:ef:b7:71:77:a3:f2:8a:a6:50:13:ed:f6:09: f1:cb:94:4c:1c:19:2f:81:12:e6:e7:1b:3e:fc:8c: 8c:45:44:65:3a:5f:eb:3d:0b:39:bb:61:bc:a7:d8: 92:94:ba:1e:ea:d8:76:a2:27:5e:3b:02:f8:d8:d0: 9d:99:ff:2d:cf:4e:6c:9a:78:26:f1:1f:22:ae:a9: d3:23:71:f7:15:0e:03:4b:53:2e:e5:e1:23:0c:e2: f1:b1:3c:e7:6b:32:4b:d0:a6:d0:7a:54:09:af:f0: 74:34:87:0a:44:d8:6c:7c:8a:04:03:85:f3:fa:94: 0f:34:83:44:01:a4:16:ec:f7:e0:50:5b:b6:96:17: 60:6c:9d:f8:ca:dc:c8:d1:84:72:fa:c4:62:4b:70: e0:43:20:64:a1:f4:96:e8:69:cc:2c:d1:d6:4a:97: 42:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:62:18:F8:03:F6:99:F8:45:1E:F4:4B:BC:F6:9A:AC:5E:C2:AD:5D X509v3 Authority Key Identifier: keyid:FF:96:D3:05:57:BD:AC:E2:6C:51:1E:1F:48:A3:51:46:43:13:0E:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/FF96D30557BDACE26C511E1F48A3514643130EA8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF96D30557BDACE26C511E1F48A3514643130EA8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/FF96D30557BDACE26C511E1F48A3514643130EA8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:a6:32:7c:40:d3:85:90:bc:28:66:3d:10:18:e4:af:08:3c: 76:04:e5:06:c5:b7:68:85:7f:f0:ee:84:99:91:13:d8:f5:19: 36:ac:75:50:52:fb:98:97:97:3a:26:9d:04:b5:b4:ce:df:10: 1e:94:21:fe:65:9a:b2:66:73:cd:78:95:fa:4f:df:75:34:08: 28:12:16:3b:4c:26:fc:78:dd:60:e7:18:2c:68:e5:ee:6b:11: 7f:15:21:cf:b4:52:2e:19:92:6d:61:ad:c7:62:31:ee:68:9b: f2:a8:99:92:48:42:f2:a0:c7:e4:1e:b9:5e:76:32:9a:8a:87: 88:86:c8:a2:ba:b3:38:42:7b:1b:85:32:83:e3:33:92:ab:ce: d1:5b:a3:15:9e:75:de:cc:da:e3:54:02:79:f9:3a:29:a6:af: 6a:7f:ea:12:0c:0e:be:55:9a:3d:74:77:19:58:24:36:94:c4: fb:6f:0d:ec:5b:94:6e:22:1c:a9:f0:47:07:37:f7:7d:2c:6d: 6b:81:34:c2:da:cc:3d:f7:db:7d:b0:6f:5f:d2:54:ed:84:c9: cb:d0:d2:15:b4:9b:ec:6d:f3:df:d0:3d:57:d9:fa:d8:76:51: 09:45:ff:25:da:42:e5:e1:09:ba:a8:20:d5:89:df:d3:b8:e1: 5b:cb:06:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTbe0sz9iA6WfMPGynCcZwCGYl+MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY5NkQzMDU1N0JEQUNFMjZDNTExRTFGNDhBMzUxNDY0 MzEzMEVBODAeFw0yNTA2MDMwNzE4MTZaFw0yNTA2MDYwOTU4MTZaMDMxMTAvBgNV BAMTKEE2NjIxOEY4MDNGNjk5Rjg0NTFFRjQ0QkJDRjY5QUFDNUVDMkFENUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEwgajaAxjuJ1ZCKPrRFHPFhCt H4kZFIPidwAVT/BeNO/s9dLtKO5uEcSA5E6eFlNasseC/YbpVloLLc7ofDeUo9tj a5c02QjxIuy262htnxE90x5kFx2VlfEa77dxd6PyiqZQE+32CfHLlEwcGS+BEubn Gz78jIxFRGU6X+s9Czm7Ybyn2JKUuh7q2HaiJ147AvjY0J2Z/y3PTmyaeCbxHyKu qdMjcfcVDgNLUy7l4SMM4vGxPOdrMkvQptB6VAmv8HQ0hwpE2Gx8igQDhfP6lA80 g0QBpBbs9+BQW7aWF2BsnfjK3MjRhHL6xGJLcOBDIGSh9Jboacws0dZKl0JxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpmIY+AP2mfhFHvRLvPaarF7CrV0wHwYDVR0j BBgwFoAU/5bTBVe9rOJsUR4fSKNRRkMTDqgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NDJjMWYzMi04MWFjLTQxMTgtYmUyZi01NzRjYTViNTQxZWEvMC9GRjk2RDMwNTU3 QkRBQ0UyNkM1MTFFMUY0OEEzNTE0NjQzMTMwRUE4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkY5NkQzMDU1N0JEQUNFMjZDNTExRTFGNDhBMzUxNDY0MzEz MEVBOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzQyYzFmMzItODFhYy00MTE4LWJl MmYtNTc0Y2E1YjU0MWVhLzAvRkY5NkQzMDU1N0JEQUNFMjZDNTExRTFGNDhBMzUx NDY0MzEzMEVBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHqmMnxA04WQvChmPRAY5K8IPHYE5QbFt2iF f/DuhJmRE9j1GTasdVBS+5iXlzomnQS1tM7fEB6UIf5lmrJmc814lfpP33U0CCgS FjtMJvx43WDnGCxo5e5rEX8VIc+0Ui4Zkm1hrcdiMe5om/KomZJIQvKgx+QeuV52 MpqKh4iGyKK6szhCexuFMoPjM5KrztFboxWedd7M2uNUAnn5Oimmr2p/6hIMDr5V mj10dxlYJDaUxPtvDexblG4iHKnwRwc3930sbWuBNMLazD33232wb1/SVO2EycvQ 0hW0m+xt89/QPVfZ+th2UQlF/yXaQuXhCbqoINWJ39O44VvLBtc= -----END CERTIFICATE-----Generated at Tue Jun 3 23:38:23 2025 by rpki-client