$ rpki-client -vvf repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.mft File: FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.mft (raw, json) Hash identifier: XbStAwx6AZ+NZrZnvtNo4hKxgo1C3XeQiLMBJQiqvmI= Subject key identifier: 2F:32:AD:75:47:9D:41:D1:02:5C:5B:D0:82:D7:94:90:F1:16:7A:D0 Authority key identifier: FF:89:F2:3B:CB:C4:26:35:E9:7A:E1:5A:7F:B6:9E:1E:09:A9:7D:AF Certificate issuer: /CN=FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF Certificate serial: 70EBDFE51EDA25606FCE98036A1427491E5804D5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.mft Manifest number: 0252 Signing time: Sat 05 Apr 2025 07:52:07 +0000 Manifest this update: Sat 05 Apr 2025 07:47:07 +0000 Manifest next update: Tue 08 Apr 2025 15:17:07 +0000 Files and hashes: 1: FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.crl (hash: sYA/VkMnIZzbvR+fub1r3MltlvTuat6uvqLDDPjYbHQ=) 2: 3130332e3136332e3138352e302f32342d3234203d3e20313432333636.roa (hash: rBHXQQE56sq6EsG7xu2y3Ai8w3KX+cJsV+YvOEbZG7g=) 3: 3130332e3136332e3138342e302f32342d3234203d3e20313432333636.roa (hash: T0kgQ8xq7nBxfVnwpyYEmmzA0fn9DjLFvoVcfJfTj5g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.crl rsync://repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:eb:df:e5:1e:da:25:60:6f:ce:98:03:6a:14:27:49:1e:58:04:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF Validity Not Before: Apr 5 07:47:07 2025 GMT Not After : Apr 8 15:17:07 2025 GMT Subject: CN=2F32AD75479D41D1025C5BD082D79490F1167AD0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:19:94:32:ed:16:9f:33:cf:d7:f8:28:a2:90: 31:df:bf:27:f1:d5:6e:da:53:15:30:d6:bd:2d:5a: dd:d2:c9:05:d1:b5:ca:31:9d:d8:f8:08:76:a1:54: f2:73:09:2a:4d:55:cf:e3:a5:3a:61:f8:c6:d9:10: 8b:76:c2:7f:8f:35:5f:b7:64:67:37:51:68:40:8b: 12:3b:db:5a:10:52:28:9c:28:70:35:93:8b:f6:1b: 1b:4c:ae:94:8a:42:a1:d9:31:97:61:63:90:25:f8: b3:37:3f:62:26:6b:84:fd:1b:4e:8b:04:ae:b0:3d: 68:91:fd:0c:0c:3b:9c:c0:d6:35:2b:81:78:c9:7c: b0:b2:00:58:f8:0c:ad:5c:63:db:16:fc:a7:c8:df: 56:df:76:10:04:85:17:0c:b1:5d:33:de:04:22:53: 51:b9:09:a6:47:e9:cb:4c:e3:78:cd:bf:5e:1f:bf: 82:e1:80:f8:c2:b2:df:f4:79:b1:30:34:4f:06:b9: b8:62:7f:c3:26:f8:1f:50:8b:e8:c4:b7:2e:f9:b7: 60:c1:ef:bc:a9:0c:3f:db:7d:c0:6f:e8:0a:a7:93: 97:27:28:8d:4a:f5:d1:be:de:68:ae:31:89:b1:16: 44:cc:a6:c5:47:a1:50:be:3a:b7:de:ad:01:8f:08: 78:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:32:AD:75:47:9D:41:D1:02:5C:5B:D0:82:D7:94:90:F1:16:7A:D0 X509v3 Authority Key Identifier: keyid:FF:89:F2:3B:CB:C4:26:35:E9:7A:E1:5A:7F:B6:9E:1E:09:A9:7D:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:94:88:1d:1c:ad:48:26:f9:88:07:f6:18:e0:71:b2:87:cc: 2c:15:1b:88:0c:50:73:78:5c:47:15:03:b4:81:78:7f:74:aa: bd:52:f3:e5:58:5b:9b:74:2a:7e:9b:1e:86:c6:27:c9:85:7f: 49:cc:6a:fc:a2:62:db:50:27:ab:88:ed:69:e8:44:7a:c8:ca: ef:d8:9a:44:96:0d:d7:75:fd:f3:30:5b:b5:f4:0b:ff:d8:27: 18:ca:e5:1d:91:7f:f8:39:8a:4a:5d:1a:78:2b:89:93:2a:cd: fa:e0:91:da:4a:ac:c7:14:57:43:79:07:d3:0d:99:98:22:68: 7d:b4:9a:72:46:86:1b:65:50:d5:96:8c:6d:e3:cf:bb:f0:2a: 05:71:0d:9d:25:ad:78:3e:3f:af:10:bc:7b:c0:cc:4e:4e:df: b6:fe:57:f9:99:ec:8b:d4:59:25:b9:0c:91:39:d2:89:27:77: 35:68:46:c2:9e:48:57:7d:3c:67:63:3c:8b:a6:39:cd:f1:1b: 73:9f:64:16:9c:da:3d:31:43:83:77:3d:7d:45:b4:73:cd:11: ff:e0:94:c0:65:b8:e2:e0:d3:b3:64:57:8e:d4:b2:71:bd:f7: 55:b5:af:03:ff:0f:61:ca:17:cf:1e:04:25:82:3f:70:c1:83: 43:79:b3:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcOvf5R7aJWBvzpgDahQnSR5YBNUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY4OUYyM0JDQkM0MjYzNUU5N0FFMTVBN0ZCNjlFMUUw OUE5N0RBRjAeFw0yNTA0MDUwNzQ3MDdaFw0yNTA0MDgxNTE3MDdaMDMxMTAvBgNV BAMTKDJGMzJBRDc1NDc5RDQxRDEwMjVDNUJEMDgyRDc5NDkwRjExNjdBRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEGZQy7RafM8/X+CiikDHfvyfx 1W7aUxUw1r0tWt3SyQXRtcoxndj4CHahVPJzCSpNVc/jpTph+MbZEIt2wn+PNV+3 ZGc3UWhAixI721oQUiicKHA1k4v2GxtMrpSKQqHZMZdhY5Al+LM3P2Ima4T9G06L BK6wPWiR/QwMO5zA1jUrgXjJfLCyAFj4DK1cY9sW/KfI31bfdhAEhRcMsV0z3gQi U1G5CaZH6ctM43jNv14fv4LhgPjCst/0ebEwNE8Gubhif8Mm+B9Qi+jEty75t2DB 77ypDD/bfcBv6Aqnk5cnKI1K9dG+3miuMYmxFkTMpsVHoVC+OrferQGPCHiTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULzKtdUedQdECXFvQgteUkPEWetAwHwYDVR0j BBgwFoAU/4nyO8vEJjXpeuFaf7aeHgmpfa8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YjE2NjRhNy1jOWM5LTQ0NDItODcxOC05YWVjOWUyMTEwYTIvMC9GRjg5RjIzQkNC QzQyNjM1RTk3QUUxNUE3RkI2OUUxRTA5QTk3REFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkY4OUYyM0JDQkM0MjYzNUU5N0FFMTVBN0ZCNjlFMUUwOUE5 N0RBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGIxNjY0YTctYzljOS00NDQyLTg3 MTgtOWFlYzllMjExMGEyLzAvRkY4OUYyM0JDQkM0MjYzNUU5N0FFMTVBN0ZCNjlF MUUwOUE5N0RBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE2UiB0crUgm+YgH9hjgcbKHzCwVG4gMUHN4 XEcVA7SBeH90qr1S8+VYW5t0Kn6bHobGJ8mFf0nMavyiYttQJ6uI7WnoRHrIyu/Y mkSWDdd1/fMwW7X0C//YJxjK5R2Rf/g5ikpdGngriZMqzfrgkdpKrMcUV0N5B9MN mZgiaH20mnJGhhtlUNWWjG3jz7vwKgVxDZ0lrXg+P68QvHvAzE5O37b+V/mZ7IvU WSW5DJE50okndzVoRsKeSFd9PGdjPIumOc3xG3OfZBac2j0xQ4N3PX1FtHPNEf/g lMBluOLg07NkV47UsnG991W1rwP/D2HKF88eBCWCP3DBg0N5s8I= -----END CERTIFICATE-----Generated at Sat Apr 5 16:45:19 2025 by rpki-client