$ rpki-client -vvf repo-rpki.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/FF102371565831DDB9C06DF47DF79B1120C9861E.mft File: FF102371565831DDB9C06DF47DF79B1120C9861E.mft (raw, json) Hash identifier: mez2DD1Hzhh3Md+h2umbKgbv5vPWzID41eeLXEEWrvs= Subject key identifier: 2B:10:EF:41:7D:84:B2:39:DA:42:3C:2A:2F:47:BF:70:74:45:65:B7 Authority key identifier: FF:10:23:71:56:58:31:DD:B9:C0:6D:F4:7D:F7:9B:11:20:C9:86:1E Certificate issuer: /CN=FF102371565831DDB9C06DF47DF79B1120C9861E Certificate serial: 627FF01FF0F293A995AF04570692243677C67785 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF102371565831DDB9C06DF47DF79B1120C9861E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/FF102371565831DDB9C06DF47DF79B1120C9861E.mft Manifest number: 8C Signing time: Fri 06 Jun 2025 01:31:08 +0000 Manifest this update: Fri 06 Jun 2025 01:26:08 +0000 Manifest next update: Mon 09 Jun 2025 05:52:08 +0000 Files and hashes: 1: FF102371565831DDB9C06DF47DF79B1120C9861E.crl (hash: mC8sVIc8jfo77hERZR9pWat2Hk9iZvXTOKETEup6wRc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/FF102371565831DDB9C06DF47DF79B1120C9861E.crl rsync://repo-rpki.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/FF102371565831DDB9C06DF47DF79B1120C9861E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF102371565831DDB9C06DF47DF79B1120C9861E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 05:52:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:7f:f0:1f:f0:f2:93:a9:95:af:04:57:06:92:24:36:77:c6:77:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF102371565831DDB9C06DF47DF79B1120C9861E Validity Not Before: Jun 6 01:26:08 2025 GMT Not After : Jun 9 05:52:08 2025 GMT Subject: CN=2B10EF417D84B239DA423C2A2F47BF70744565B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ff:39:02:37:03:06:26:d3:4c:9c:b4:0d:06: 23:1f:8e:d2:10:b5:aa:85:da:9a:32:2f:f5:87:58: 28:90:16:a1:d0:bc:33:b5:5c:f6:c9:71:13:ab:80: 6f:aa:48:be:97:7e:ca:14:8b:13:f9:1a:bb:5d:a0: c8:33:78:73:2e:58:11:44:d4:51:d6:70:d8:fe:d0: 34:42:f6:9a:cc:ab:d0:7a:c8:bd:04:69:b9:71:aa: b4:5e:b7:a8:38:a8:7b:b6:bf:a9:ec:d3:3d:44:c6: 34:04:12:84:9b:7a:7c:3e:4c:dc:9d:05:4a:f5:f8: bd:c7:25:63:64:10:b9:0c:7c:8f:47:04:c0:a7:e0: de:ad:9b:f4:98:01:b0:ce:49:0d:36:ed:cb:53:16: e9:b2:1f:7f:84:fb:23:9f:25:d1:a0:53:84:b1:80: c2:67:f4:9b:8f:45:dc:65:cf:ed:28:70:f1:af:da: 77:7d:78:cb:b0:0b:96:8a:3d:34:e9:1f:e8:cb:cf: cb:a0:84:9d:85:f7:25:64:5b:07:10:0b:94:68:24: a8:8a:ad:4f:6d:48:d1:bd:4b:99:99:c4:da:25:89: d8:46:dc:42:46:66:02:e4:c0:1a:6a:ff:12:0a:2d: c4:19:a0:a8:65:3b:bf:f8:b4:ae:f3:3b:01:7e:c2: fe:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:10:EF:41:7D:84:B2:39:DA:42:3C:2A:2F:47:BF:70:74:45:65:B7 X509v3 Authority Key Identifier: keyid:FF:10:23:71:56:58:31:DD:B9:C0:6D:F4:7D:F7:9B:11:20:C9:86:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/FF102371565831DDB9C06DF47DF79B1120C9861E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF102371565831DDB9C06DF47DF79B1120C9861E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/FF102371565831DDB9C06DF47DF79B1120C9861E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:be:df:48:5d:fc:d3:51:f6:66:1f:cc:9f:0b:04:f9:c0:43: 0b:d6:85:66:dc:b4:f3:e9:87:9d:c9:ec:60:85:5c:a6:9e:1b: 7b:be:6a:b9:6a:ad:61:8f:7c:63:b9:d6:80:0a:69:9e:39:ac: ed:be:46:32:3d:c9:d7:68:49:c8:aa:f3:4e:b9:81:54:1f:57: 4d:41:10:b8:4a:b8:a9:51:55:f4:e3:2b:c2:4d:87:a2:df:cf: 36:8f:94:3d:29:fc:86:75:17:96:81:e9:93:78:ff:e2:5b:af: 57:67:05:1a:9b:9e:a4:03:5f:f2:43:16:e2:48:d4:de:dc:79: 53:bf:b1:08:94:3f:2d:3c:e5:d1:ee:43:0e:89:3d:ab:bc:90: 58:80:38:e3:b9:6f:79:27:29:fa:f7:3f:7d:75:fd:ba:e4:7f: 9f:f1:81:c5:81:89:71:ee:1c:12:c0:00:da:f0:f8:f3:e2:ca: d5:d3:c7:9f:fb:27:70:ae:68:71:40:fe:c4:cd:87:7a:da:0e: 81:f2:a2:49:28:1c:54:c9:51:66:43:66:f2:93:17:35:9a:40: c8:01:90:a2:ef:12:d5:97:e5:2f:19:af:fc:28:6e:61:d5:8d: b5:49:51:31:ee:b5:9b:38:d6:a6:af:d1:08:35:21:b9:f3:a3: 38:64:49:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYn/wH/Dyk6mVrwRXBpIkNnfGd4UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkYxMDIzNzE1NjU4MzFEREI5QzA2REY0N0RGNzlCMTEy MEM5ODYxRTAeFw0yNTA2MDYwMTI2MDhaFw0yNTA2MDkwNTUyMDhaMDMxMTAvBgNV BAMTKDJCMTBFRjQxN0Q4NEIyMzlEQTQyM0MyQTJGNDdCRjcwNzQ0NTY1QjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG/zkCNwMGJtNMnLQNBiMfjtIQ taqF2poyL/WHWCiQFqHQvDO1XPbJcROrgG+qSL6XfsoUixP5GrtdoMgzeHMuWBFE 1FHWcNj+0DRC9prMq9B6yL0EablxqrRet6g4qHu2v6ns0z1ExjQEEoSbenw+TNyd BUr1+L3HJWNkELkMfI9HBMCn4N6tm/SYAbDOSQ027ctTFumyH3+E+yOfJdGgU4Sx gMJn9JuPRdxlz+0ocPGv2nd9eMuwC5aKPTTpH+jLz8ughJ2F9yVkWwcQC5RoJKiK rU9tSNG9S5mZxNolidhG3EJGZgLkwBpq/xIKLcQZoKhlO7/4tK7zOwF+wv6XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKxDvQX2EsjnaQjwqL0e/cHRFZbcwHwYDVR0j BBgwFoAU/xAjcVZYMd25wG30ffebESDJhh4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NDNmMjllYS04NzRhLTRkMWEtYWJjYy03NTI5M2NiNTFhNmQvMC9GRjEwMjM3MTU2 NTgzMUREQjlDMDZERjQ3REY3OUIxMTIwQzk4NjFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkYxMDIzNzE1NjU4MzFEREI5QzA2REY0N0RGNzlCMTEyMEM5 ODYxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzQzZjI5ZWEtODc0YS00ZDFhLWFi Y2MtNzUyOTNjYjUxYTZkLzAvRkYxMDIzNzE1NjU4MzFEREI5QzA2REY0N0RGNzlC MTEyMEM5ODYxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEq+30hd/NNR9mYfzJ8LBPnAQwvWhWbctPPp h53J7GCFXKaeG3u+arlqrWGPfGO51oAKaZ45rO2+RjI9yddoSciq8065gVQfV01B ELhKuKlRVfTjK8JNh6LfzzaPlD0p/IZ1F5aB6ZN4/+Jbr1dnBRqbnqQDX/JDFuJI 1N7ceVO/sQiUPy085dHuQw6JPau8kFiAOOO5b3knKfr3P311/brkf5/xgcWBiXHu HBLAANrw+PPiytXTx5/7J3CuaHFA/sTNh3raDoHyokkoHFTJUWZDZvKTFzWaQMgB kKLvEtWX5S8Zr/wobmHVjbVJUTHutZs41qav0Qg1IbnzozhkSbc= -----END CERTIFICATE-----Generated at Sat Jun 7 04:07:34 2025 by rpki-client