$ rpki-client -vvf repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.mft File: FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.mft (raw, json) Hash identifier: FSMGtKhAkQi3huARmaNkbD5mIWufqKctGHR3HiF2ofE= Subject key identifier: 08:FF:95:1B:EA:37:F3:8B:F7:A7:46:79:DA:50:C9:C4:9B:90:26:B5 Authority key identifier: FF:89:F2:3B:CB:C4:26:35:E9:7A:E1:5A:7F:B6:9E:1E:09:A9:7D:AF Certificate issuer: /CN=FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF Certificate serial: 038C845600016BFD97DFBAE849E1389A82E0A06F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.mft Manifest number: 0297 Signing time: Mon 08 Sep 2025 17:32:07 +0000 Manifest this update: Mon 08 Sep 2025 17:27:07 +0000 Manifest next update: Thu 11 Sep 2025 21:52:07 +0000 Files and hashes: 1: 3130332e3136332e3138342e302f32342d3234203d3e20313432333636.roa (hash: T0kgQ8xq7nBxfVnwpyYEmmzA0fn9DjLFvoVcfJfTj5g=) 2: FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.crl (hash: j3mYoYu564y0lXgGYPrCfWiJ4J9WrqNWkrv6J62i6wo=) 3: 3130332e3136332e3138352e302f32342d3234203d3e20313432333636.roa (hash: rBHXQQE56sq6EsG7xu2y3Ai8w3KX+cJsV+YvOEbZG7g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.crl rsync://repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 21:52:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:8c:84:56:00:01:6b:fd:97:df:ba:e8:49:e1:38:9a:82:e0:a0:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF Validity Not Before: Sep 8 17:27:07 2025 GMT Not After : Sep 11 21:52:07 2025 GMT Subject: CN=08FF951BEA37F38BF7A74679DA50C9C49B9026B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:2d:2a:ab:e4:f9:48:fa:e6:c3:94:45:bf:af: a5:ae:90:02:cf:ce:8b:7a:40:a7:a3:08:f8:19:f0: cc:b1:f3:2a:bc:b5:64:94:a9:e5:b7:6a:99:5f:93: 44:7b:24:5a:19:9c:2d:f2:79:eb:a5:0e:5e:5b:c3: e5:fb:51:45:4a:06:25:2a:c8:02:b7:5b:7a:98:73: 1e:62:53:b5:b7:07:ed:98:94:cf:b2:c7:8f:1d:49: 95:ee:5b:15:5c:75:4c:04:9d:bc:19:f1:52:5e:57: 57:1d:53:4e:bd:83:55:fe:91:56:82:df:78:f3:a6: 97:8b:3c:2b:ed:06:59:80:b7:cf:7f:1d:d3:2b:b2: 07:78:10:21:f7:3f:a8:71:d1:6f:a8:81:b6:76:93: 62:ae:83:b5:9c:01:38:4a:ac:f2:8c:15:42:13:e6: ac:19:d6:bc:78:ce:9a:8d:4e:07:d9:0a:e7:3f:ad: fd:ff:5d:b9:c3:a6:fe:38:ed:51:97:b4:be:36:3c: 86:9e:9f:3f:cb:45:7b:fd:dc:e0:f9:e6:63:8a:c7: 86:2d:2f:25:e7:d0:c0:cb:b8:02:56:a9:c7:80:90: d0:1a:29:05:de:0e:a2:a9:0d:93:40:ca:38:88:f1: 7d:9a:c8:b4:90:ac:7d:3a:2f:81:3f:9e:83:d5:05: 82:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:FF:95:1B:EA:37:F3:8B:F7:A7:46:79:DA:50:C9:C4:9B:90:26:B5 X509v3 Authority Key Identifier: keyid:FF:89:F2:3B:CB:C4:26:35:E9:7A:E1:5A:7F:B6:9E:1E:09:A9:7D:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:e5:45:b4:a6:c2:2c:d5:a0:08:18:f4:80:9c:c1:69:70:6f: 43:5e:ff:55:8f:f4:4c:3a:a7:13:82:3a:a8:b0:54:b3:09:97: 6d:69:03:15:63:d2:3d:50:f4:b7:b1:99:08:7b:f8:09:4c:af: bb:0c:ca:e1:c0:55:52:bc:f4:6f:f2:94:ae:9a:16:19:12:83: 87:20:db:d9:76:7b:f0:65:39:b0:1e:fb:bc:51:50:c6:85:38: 7a:4b:48:23:6e:6b:7d:9f:03:ef:38:6d:6f:9c:e1:6b:e8:3c: 38:55:f8:7e:ea:7b:8c:48:ac:65:f2:cc:06:f9:07:f5:bf:2e: ba:9c:96:7a:ca:5b:36:d2:3d:bf:13:06:8c:2f:fd:f1:68:f3: a8:89:d2:3c:03:82:68:01:12:80:40:ae:d5:49:6c:89:08:81: 2d:37:c1:2a:45:8d:80:44:16:e8:4f:1c:f4:4f:6c:d9:5b:97: 3a:e2:9f:74:53:3e:9b:ad:4e:7d:24:93:63:9b:a7:88:bf:59: 51:0e:43:b8:b7:51:d7:7a:f6:8c:f6:3d:4d:cf:1d:83:41:b1: 06:f6:7d:15:9a:43:7a:23:ea:7b:82:1b:5c:7b:6b:77:1c:4c: e9:d4:42:27:cc:29:55:83:97:62:64:19:50:52:ae:3f:da:1b: 09:9f:ba:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA4yEVgABa/2X37roSeE4moLgoG8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY4OUYyM0JDQkM0MjYzNUU5N0FFMTVBN0ZCNjlFMUUw OUE5N0RBRjAeFw0yNTA5MDgxNzI3MDdaFw0yNTA5MTEyMTUyMDdaMDMxMTAvBgNV BAMTKDA4RkY5NTFCRUEzN0YzOEJGN0E3NDY3OURBNTBDOUM0OUI5MDI2QjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnLSqr5PlI+ubDlEW/r6WukALP zot6QKejCPgZ8Myx8yq8tWSUqeW3aplfk0R7JFoZnC3yeeulDl5bw+X7UUVKBiUq yAK3W3qYcx5iU7W3B+2YlM+yx48dSZXuWxVcdUwEnbwZ8VJeV1cdU069g1X+kVaC 33jzppeLPCvtBlmAt89/HdMrsgd4ECH3P6hx0W+ogbZ2k2Kug7WcAThKrPKMFUIT 5qwZ1rx4zpqNTgfZCuc/rf3/XbnDpv447VGXtL42PIaenz/LRXv93OD55mOKx4Yt LyXn0MDLuAJWqceAkNAaKQXeDqKpDZNAyjiI8X2ayLSQrH06L4E/noPVBYIDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCP+VG+o384v3p0Z52lDJxJuQJrUwHwYDVR0j BBgwFoAU/4nyO8vEJjXpeuFaf7aeHgmpfa8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YjE2NjRhNy1jOWM5LTQ0NDItODcxOC05YWVjOWUyMTEwYTIvMC9GRjg5RjIzQkNC QzQyNjM1RTk3QUUxNUE3RkI2OUUxRTA5QTk3REFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkY4OUYyM0JDQkM0MjYzNUU5N0FFMTVBN0ZCNjlFMUUwOUE5 N0RBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGIxNjY0YTctYzljOS00NDQyLTg3 MTgtOWFlYzllMjExMGEyLzAvRkY4OUYyM0JDQkM0MjYzNUU5N0FFMTVBN0ZCNjlF MUUwOUE5N0RBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEzlRbSmwizVoAgY9ICcwWlwb0Ne/1WP9Ew6 pxOCOqiwVLMJl21pAxVj0j1Q9LexmQh7+AlMr7sMyuHAVVK89G/ylK6aFhkSg4cg 29l2e/BlObAe+7xRUMaFOHpLSCNua32fA+84bW+c4WvoPDhV+H7qe4xIrGXyzAb5 B/W/LrqclnrKWzbSPb8TBowv/fFo86iJ0jwDgmgBEoBArtVJbIkIgS03wSpFjYBE FuhPHPRPbNlblzrin3RTPputTn0kk2Obp4i/WVEOQ7i3Udd69oz2PU3PHYNBsQb2 fRWaQ3oj6nuCG1x7a3ccTOnUQifMKVWDl2JkGVBSrj/aGwmfuoU= -----END CERTIFICATE-----Generated at Tue Sep 9 13:28:06 2025 by rpki-client