$ rpki-client -vvf repo-rpki.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/FF102371565831DDB9C06DF47DF79B1120C9861E.mft File: FF102371565831DDB9C06DF47DF79B1120C9861E.mft (raw, json) Hash identifier: rT/wW0BuIJnj+7sXhW/ma+gbW7HTMz9Qe9pvPjAR0Uo= Subject key identifier: 43:19:66:8B:E4:06:92:7E:E6:6A:98:94:08:79:37:AA:FD:D0:F2:E6 Authority key identifier: FF:10:23:71:56:58:31:DD:B9:C0:6D:F4:7D:F7:9B:11:20:C9:86:1E Certificate issuer: /CN=FF102371565831DDB9C06DF47DF79B1120C9861E Certificate serial: 6783260F0A637FE63D19C4BDEF895562566EC4F9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF102371565831DDB9C06DF47DF79B1120C9861E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/FF102371565831DDB9C06DF47DF79B1120C9861E.mft Manifest number: B6 Signing time: Fri 05 Sep 2025 14:11:08 +0000 Manifest this update: Fri 05 Sep 2025 14:06:08 +0000 Manifest next update: Mon 08 Sep 2025 14:16:08 +0000 Files and hashes: 1: 3130332e332e3233332e302f32342d3234203d3e203538343837.roa (hash: J+VrJkjfilmZKoAgsIWnKv1mOwdSs14Mc87IKiPWNdQ=) 2: FF102371565831DDB9C06DF47DF79B1120C9861E.crl (hash: UHCadTTIuuQO4qURq69tCcSVWFuwCwMKt8fk5c77/l4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/FF102371565831DDB9C06DF47DF79B1120C9861E.crl rsync://repo-rpki.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/FF102371565831DDB9C06DF47DF79B1120C9861E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF102371565831DDB9C06DF47DF79B1120C9861E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 14:16:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:83:26:0f:0a:63:7f:e6:3d:19:c4:bd:ef:89:55:62:56:6e:c4:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF102371565831DDB9C06DF47DF79B1120C9861E Validity Not Before: Sep 5 14:06:08 2025 GMT Not After : Sep 8 14:16:08 2025 GMT Subject: CN=4319668BE406927EE66A9894087937AAFDD0F2E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d7:3a:d1:db:c9:e1:eb:35:96:bc:f7:b9:eb: 29:6d:f4:f0:b3:70:dd:85:20:ad:e8:af:64:bb:e3: 34:9e:67:9f:e5:6a:a1:2d:a2:84:af:db:99:3a:0a: 02:92:1d:e3:a5:bf:d2:13:2f:c0:56:f6:e7:9f:d4: 53:f8:b9:20:75:c7:14:f2:b4:fe:ab:9e:eb:cc:ec: 03:9b:88:31:c4:e9:15:53:cd:2c:d8:1c:1c:74:14: 0b:de:a4:72:b9:69:75:c7:b5:8d:1b:54:b9:74:ff: 09:44:cb:2f:2f:79:3b:a6:25:83:3a:e3:54:a5:05: f8:5a:bf:e5:0d:86:c7:57:99:7f:29:eb:0e:7b:0c: 6d:4b:ce:ba:3f:b0:60:b0:68:82:22:db:0f:de:de: bc:9c:96:72:7d:f2:92:16:ca:28:53:9d:71:8b:a0: 20:42:00:88:14:69:28:83:ca:ce:32:3c:c2:cb:89: 3b:47:82:0c:03:21:13:58:f2:55:ff:b5:68:b7:8d: c3:ed:e5:37:d3:dc:f2:c7:3e:30:1d:b7:44:75:77: f4:72:75:c6:17:b8:33:dc:fe:9c:06:0b:41:30:57: 0c:e5:a4:7a:99:b1:6b:11:86:24:69:27:91:07:a7: 0c:03:8e:5f:d1:4a:f9:83:a0:79:e2:7b:d7:e3:32: c6:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:19:66:8B:E4:06:92:7E:E6:6A:98:94:08:79:37:AA:FD:D0:F2:E6 X509v3 Authority Key Identifier: keyid:FF:10:23:71:56:58:31:DD:B9:C0:6D:F4:7D:F7:9B:11:20:C9:86:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/FF102371565831DDB9C06DF47DF79B1120C9861E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF102371565831DDB9C06DF47DF79B1120C9861E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/FF102371565831DDB9C06DF47DF79B1120C9861E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:43:5f:01:0e:38:1b:55:3a:b5:10:99:85:53:f4:7f:60:3c: 22:54:e5:8c:a3:c9:45:df:8a:c0:d4:79:bf:a3:7a:88:30:22: 0f:ae:fa:b8:19:30:63:f3:43:51:0c:88:42:d9:52:b9:9d:39: ff:c7:96:a2:cf:3f:eb:28:f8:f0:71:e1:28:aa:0c:54:4e:92: 77:82:da:c5:9d:a5:8c:07:f9:1e:ff:36:e0:ce:5d:26:a9:e8: 6a:b9:1e:68:c2:13:92:08:dc:4a:d3:fa:c9:06:9a:65:4f:44: 65:22:cb:df:e7:38:ee:da:a5:ce:36:9f:db:af:ac:ec:72:02: 6b:7b:3a:6d:78:71:14:38:22:ca:3e:98:cc:20:e0:de:ad:92: 9e:fe:59:b4:67:36:9b:43:00:a1:db:33:be:cf:d4:4a:3c:9e: a5:a0:94:8d:44:d8:0b:11:21:91:1e:99:72:19:3f:05:63:1a: 91:6e:5b:14:57:d2:17:dd:91:f3:44:bd:9e:0b:0d:df:9a:6f: b0:18:27:fc:63:e3:e3:bb:8e:1d:37:82:ec:19:ed:83:33:d8: 8d:f4:29:cf:b0:0b:d0:90:16:1d:7e:19:ba:0e:29:2f:cf:08: b8:82:93:e4:fd:50:e1:f2:b9:12:ee:94:b6:e6:68:f3:d8:bf: 9c:d5:d4:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ4MmDwpjf+Y9GcS974lVYlZuxPkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkYxMDIzNzE1NjU4MzFEREI5QzA2REY0N0RGNzlCMTEy MEM5ODYxRTAeFw0yNTA5MDUxNDA2MDhaFw0yNTA5MDgxNDE2MDhaMDMxMTAvBgNV BAMTKDQzMTk2NjhCRTQwNjkyN0VFNjZBOTg5NDA4NzkzN0FBRkREMEYyRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCb1zrR28nh6zWWvPe56ylt9PCz cN2FIK3or2S74zSeZ5/laqEtooSv25k6CgKSHeOlv9ITL8BW9uef1FP4uSB1xxTy tP6rnuvM7AObiDHE6RVTzSzYHBx0FAvepHK5aXXHtY0bVLl0/wlEyy8veTumJYM6 41SlBfhav+UNhsdXmX8p6w57DG1Lzro/sGCwaIIi2w/e3ryclnJ98pIWyihTnXGL oCBCAIgUaSiDys4yPMLLiTtHggwDIRNY8lX/tWi3jcPt5TfT3PLHPjAdt0R1d/Ry dcYXuDPc/pwGC0EwVwzlpHqZsWsRhiRpJ5EHpwwDjl/RSvmDoHnie9fjMsatAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQxlmi+QGkn7mapiUCHk3qv3Q8uYwHwYDVR0j BBgwFoAU/xAjcVZYMd25wG30ffebESDJhh4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NDNmMjllYS04NzRhLTRkMWEtYWJjYy03NTI5M2NiNTFhNmQvMC9GRjEwMjM3MTU2 NTgzMUREQjlDMDZERjQ3REY3OUIxMTIwQzk4NjFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkYxMDIzNzE1NjU4MzFEREI5QzA2REY0N0RGNzlCMTEyMEM5 ODYxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzQzZjI5ZWEtODc0YS00ZDFhLWFi Y2MtNzUyOTNjYjUxYTZkLzAvRkYxMDIzNzE1NjU4MzFEREI5QzA2REY0N0RGNzlC MTEyMEM5ODYxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG5DXwEOOBtVOrUQmYVT9H9gPCJU5YyjyUXf isDUeb+jeogwIg+u+rgZMGPzQ1EMiELZUrmdOf/HlqLPP+so+PBx4SiqDFROkneC 2sWdpYwH+R7/NuDOXSap6Gq5HmjCE5II3ErT+skGmmVPRGUiy9/nOO7apc42n9uv rOxyAmt7Om14cRQ4Iso+mMwg4N6tkp7+WbRnNptDAKHbM77P1Eo8nqWglI1E2AsR IZEemXIZPwVjGpFuWxRX0hfdkfNEvZ4LDd+ab7AYJ/xj4+O7jh03guwZ7YMz2I30 Kc+wC9CQFh1+GboOKS/PCLiCk+T9UOHyuRLulLbmaPPYv5zV1OU= -----END CERTIFICATE-----Generated at Sun Sep 7 13:59:48 2025 by rpki-client