$ rpki-client -vvf repo-rpki.idnic.net/repo/60eea08c-3fd2-488e-a574-9f9bb631a62b/0/FFCC3C879250F6351654AFE2ED137EED71DCACA1.mft File: FFCC3C879250F6351654AFE2ED137EED71DCACA1.mft (raw, json) Hash identifier: T+g1LpBjcc6Rholm/AUiyNhTUdgQwfvtYlEKzVWIAsQ= Subject key identifier: DC:9B:CE:81:6C:7C:7F:2B:79:4E:2C:6D:C7:02:34:BA:89:68:D3:63 Authority key identifier: FF:CC:3C:87:92:50:F6:35:16:54:AF:E2:ED:13:7E:ED:71:DC:AC:A1 Certificate issuer: /CN=FFCC3C879250F6351654AFE2ED137EED71DCACA1 Certificate serial: 77C0A6A5F5219F6421CF0034725682D3BCA54409 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FFCC3C879250F6351654AFE2ED137EED71DCACA1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/60eea08c-3fd2-488e-a574-9f9bb631a62b/0/FFCC3C879250F6351654AFE2ED137EED71DCACA1.mft Manifest number: 017B Signing time: Sat 07 Jun 2025 16:21:22 +0000 Manifest this update: Sat 07 Jun 2025 16:16:22 +0000 Manifest next update: Wed 11 Jun 2025 02:46:22 +0000 Files and hashes: 1: 3130332e38342e3230372e302f32342d3234203d3e203538343837.roa (hash: npR7FfMqPJWN/psfdfS+I3WrtVR+flJthIe7wMJ+s1k=) 2: 3130332e38342e3230362e302f32342d3234203d3e203538343837.roa (hash: 7arGMuC545SXWQKW/CPxALp6qAEVOocmqFJNcs6tC24=) 3: 3130332e38342e3230362e302f32332d3233203d3e203538343837.roa (hash: LWP4K69rTAmLzfZq+q8A6u6no/UP4pGP/p24TC0qbQA=) 4: FFCC3C879250F6351654AFE2ED137EED71DCACA1.crl (hash: 5jZp2QTuoYxNR+6OSNj/TcbdwEfI6+LfHdKjImmCVNQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/60eea08c-3fd2-488e-a574-9f9bb631a62b/0/FFCC3C879250F6351654AFE2ED137EED71DCACA1.crl rsync://repo-rpki.idnic.net/repo/60eea08c-3fd2-488e-a574-9f9bb631a62b/0/FFCC3C879250F6351654AFE2ED137EED71DCACA1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FFCC3C879250F6351654AFE2ED137EED71DCACA1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 02:27:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:c0:a6:a5:f5:21:9f:64:21:cf:00:34:72:56:82:d3:bc:a5:44:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FFCC3C879250F6351654AFE2ED137EED71DCACA1 Validity Not Before: Jun 7 16:16:22 2025 GMT Not After : Jun 11 02:46:22 2025 GMT Subject: CN=DC9BCE816C7C7F2B794E2C6DC70234BA8968D363 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c8:4f:33:ee:51:9b:bb:53:89:85:9c:89:87: 6e:3c:8e:64:3b:7c:ad:59:b2:4e:67:f8:d9:d0:0f: 33:9d:80:16:1a:24:48:72:2c:90:28:b8:13:43:51: 7b:98:4a:c1:33:78:86:10:bc:c4:24:6c:87:4c:33: 5f:0b:87:2e:9e:85:31:53:27:86:f1:ed:45:36:d7: 1c:66:f8:d5:a1:0b:e6:7f:e2:5d:f0:ec:ae:c5:fe: 7c:21:f3:2e:f9:9e:10:14:a9:df:39:c4:e7:00:7f: 3e:db:c6:76:99:63:54:e9:f6:55:ca:d9:72:52:71: 9b:fb:4c:4c:35:79:2b:1a:4c:6e:7d:b6:fe:14:b4: 30:2e:a4:e3:98:8d:ec:46:09:fa:d8:85:88:2b:8e: 11:ad:ae:02:b8:da:92:cd:62:08:ba:cc:80:37:7b: 33:cd:3e:d8:9e:3d:20:68:f7:0a:2a:02:a6:c0:30: 20:91:36:ff:e8:5d:c5:64:7d:7b:6e:4a:38:b4:38: e5:d9:f1:dd:46:07:a6:e0:fd:5e:81:50:3e:7f:b6: 2b:ea:6f:3d:eb:52:b6:e9:ba:0f:2c:31:6b:7d:41: 79:3e:32:af:9c:b1:78:05:46:a1:d5:84:10:63:41: 0b:80:62:c7:1d:e1:1e:37:cf:28:12:6f:5f:69:3d: 4c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:9B:CE:81:6C:7C:7F:2B:79:4E:2C:6D:C7:02:34:BA:89:68:D3:63 X509v3 Authority Key Identifier: keyid:FF:CC:3C:87:92:50:F6:35:16:54:AF:E2:ED:13:7E:ED:71:DC:AC:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/60eea08c-3fd2-488e-a574-9f9bb631a62b/0/FFCC3C879250F6351654AFE2ED137EED71DCACA1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FFCC3C879250F6351654AFE2ED137EED71DCACA1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/60eea08c-3fd2-488e-a574-9f9bb631a62b/0/FFCC3C879250F6351654AFE2ED137EED71DCACA1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:dc:fa:42:54:6b:15:fd:5b:98:c8:97:92:75:0f:a4:03:94: e9:52:b5:59:1e:8c:61:53:3f:37:41:80:f9:8b:2f:63:3b:af: 10:ef:ec:7b:ff:7f:5d:55:09:be:dc:2b:cf:8f:e9:df:90:b6: c8:73:78:d8:ee:dd:81:e5:6c:3e:ee:7f:a2:f7:0a:94:39:1b: be:34:b4:c7:ac:38:4d:ae:7b:f2:33:dd:21:53:0a:af:3f:b2: cb:4c:fe:41:50:fe:ac:e1:0b:3f:3a:fc:01:27:d8:24:e0:0f: ab:f8:73:d7:10:14:c8:47:e0:1b:48:56:fd:9b:b3:7c:be:17: 5e:0a:81:43:c6:a5:65:be:d4:e1:81:99:fa:94:9a:84:71:bf: e3:ad:a4:0c:10:14:ba:39:24:c2:87:b3:40:ff:fe:f6:4f:f6: 6d:0c:aa:87:4b:5b:2d:73:c2:f6:5a:cb:51:52:7f:d2:cf:f5: 4b:f3:4b:70:4f:7a:3b:fd:38:68:5d:71:88:2c:aa:84:dc:d3: 33:77:93:c4:c5:b4:df:31:4d:a3:97:79:bd:0a:bc:aa:f0:eb: 21:c8:67:db:a9:62:e1:2b:34:de:5e:aa:03:3b:36:f2:73:1a: f6:7c:f8:84:fd:b6:45:85:0b:ee:77:d1:69:22:d0:ab:d6:56: 53:fd:26:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd8CmpfUhn2QhzwA0claC07ylRAkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkZDQzNDODc5MjUwRjYzNTE2NTRBRkUyRUQxMzdFRUQ3 MURDQUNBMTAeFw0yNTA2MDcxNjE2MjJaFw0yNTA2MTEwMjQ2MjJaMDMxMTAvBgNV BAMTKERDOUJDRTgxNkM3QzdGMkI3OTRFMkM2REM3MDIzNEJBODk2OEQzNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAyE8z7lGbu1OJhZyJh248jmQ7 fK1Zsk5n+NnQDzOdgBYaJEhyLJAouBNDUXuYSsEzeIYQvMQkbIdMM18Lhy6ehTFT J4bx7UU21xxm+NWhC+Z/4l3w7K7F/nwh8y75nhAUqd85xOcAfz7bxnaZY1Tp9lXK 2XJScZv7TEw1eSsaTG59tv4UtDAupOOYjexGCfrYhYgrjhGtrgK42pLNYgi6zIA3 ezPNPtiePSBo9woqAqbAMCCRNv/oXcVkfXtuSji0OOXZ8d1GB6bg/V6BUD5/tivq bz3rUrbpug8sMWt9QXk+Mq+csXgFRqHVhBBjQQuAYscd4R43zygSb19pPUyvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3JvOgWx8fyt5TixtxwI0uolo02MwHwYDVR0j BBgwFoAU/8w8h5JQ9jUWVK/i7RN+7XHcrKEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MGVlYTA4Yy0zZmQyLTQ4OGUtYTU3NC05ZjliYjYzMWE2MmIvMC9GRkNDM0M4Nzky NTBGNjM1MTY1NEFGRTJFRDEzN0VFRDcxRENBQ0ExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkZDQzNDODc5MjUwRjYzNTE2NTRBRkUyRUQxMzdFRUQ3MURD QUNBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjBlZWEwOGMtM2ZkMi00ODhlLWE1 NzQtOWY5YmI2MzFhNjJiLzAvRkZDQzNDODc5MjUwRjYzNTE2NTRBRkUyRUQxMzdF RUQ3MURDQUNBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGvc+kJUaxX9W5jIl5J1D6QDlOlStVkejGFT PzdBgPmLL2M7rxDv7Hv/f11VCb7cK8+P6d+QtshzeNju3YHlbD7uf6L3CpQ5G740 tMesOE2ue/Iz3SFTCq8/sstM/kFQ/qzhCz86/AEn2CTgD6v4c9cQFMhH4BtIVv2b s3y+F14KgUPGpWW+1OGBmfqUmoRxv+OtpAwQFLo5JMKHs0D//vZP9m0MqodLWy1z wvZay1FSf9LP9UvzS3BPejv9OGhdcYgsqoTc0zN3k8TFtN8xTaOXeb0KvKrw6yHI Z9upYuErNN5eqgM7NvJzGvZ8+IT9tkWFC+530Wki0KvWVlP9JjQ= -----END CERTIFICATE-----Generated at Sat Jun 7 21:55:52 2025 by rpki-client