$ rpki-client -vvf repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.mft File: FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.mft (raw, json) Hash identifier: oLqHoA85QRUefShM/qRU73VRnjxwzjxPI+lPbC8xTQs= Subject key identifier: 76:33:64:DC:FC:55:48:F0:F2:0B:F2:03:DB:A6:B3:3C:C5:A6:6B:4D Authority key identifier: FF:89:F2:3B:CB:C4:26:35:E9:7A:E1:5A:7F:B6:9E:1E:09:A9:7D:AF Certificate issuer: /CN=FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF Certificate serial: 746DCC223C64D7527F4AB490B89BD1105C7B94C0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.mft Manifest number: 026D Signing time: Thu 05 Jun 2025 13:42:08 +0000 Manifest this update: Thu 05 Jun 2025 13:37:08 +0000 Manifest next update: Mon 09 Jun 2025 00:15:08 +0000 Files and hashes: 1: FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.crl (hash: Qp+Ebz6/c7F2s2iwMdVhrYA5B9vxBCp/4G+RMlfpJR8=) 2: 3130332e3136332e3138352e302f32342d3234203d3e20313432333636.roa (hash: rBHXQQE56sq6EsG7xu2y3Ai8w3KX+cJsV+YvOEbZG7g=) 3: 3130332e3136332e3138342e302f32342d3234203d3e20313432333636.roa (hash: T0kgQ8xq7nBxfVnwpyYEmmzA0fn9DjLFvoVcfJfTj5g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.crl rsync://repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 00:15:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:6d:cc:22:3c:64:d7:52:7f:4a:b4:90:b8:9b:d1:10:5c:7b:94:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF Validity Not Before: Jun 5 13:37:08 2025 GMT Not After : Jun 9 00:15:08 2025 GMT Subject: CN=763364DCFC5548F0F20BF203DBA6B33CC5A66B4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:f7:63:bb:ff:ba:34:9e:a1:8a:0a:c3:6d:45: bd:73:a7:af:8b:5f:5f:83:a5:01:83:e4:89:75:0f: 98:2b:b3:23:c6:4f:08:f2:e7:90:c9:e0:f3:a7:b5: 44:9c:91:6a:71:52:d5:f7:26:38:eb:58:7d:4b:28: 08:1d:33:ed:fb:70:0f:fd:95:eb:67:57:9d:db:5e: fd:91:f8:e2:12:9e:b1:84:17:be:83:ae:42:78:e0: 1a:aa:a9:f3:e5:60:71:7d:9e:6b:35:5c:f9:90:f3: 68:82:01:d5:3e:e1:f0:5e:c8:2c:7b:c0:0f:70:05: f0:14:0c:10:a4:a9:82:34:eb:98:b8:26:07:50:c1: 22:d2:e4:ec:0b:d4:97:ad:83:8a:6f:d8:d4:6a:b7: d8:46:ed:26:a0:ba:17:43:89:7b:19:36:c2:a9:1d: 9a:69:c0:17:fa:ee:9c:9a:a3:ab:05:fe:73:c3:73: 47:ce:1d:b4:69:1d:c0:c1:9b:f3:89:05:eb:72:53: 36:50:3f:01:3d:9f:bf:ac:13:e5:ea:01:36:13:4d: ab:6f:21:d3:21:c1:e2:6e:13:8c:21:89:9f:bc:49: 4d:68:99:1a:26:02:36:00:c1:85:73:89:4c:c6:f6: 7d:88:9e:89:40:73:b2:eb:bd:1e:91:fd:b1:cd:55: ea:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:33:64:DC:FC:55:48:F0:F2:0B:F2:03:DB:A6:B3:3C:C5:A6:6B:4D X509v3 Authority Key Identifier: keyid:FF:89:F2:3B:CB:C4:26:35:E9:7A:E1:5A:7F:B6:9E:1E:09:A9:7D:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:64:ae:83:37:92:ad:8b:05:33:79:56:a2:42:8e:1b:25:83: aa:60:19:8a:2d:ed:f3:46:2a:d6:ea:16:33:a1:b2:ea:05:88: 70:5f:95:48:19:8b:17:7e:a6:4e:e5:48:56:1d:b9:57:0c:b1: 89:49:c2:c2:6a:a8:9e:4c:2e:a4:cd:83:23:36:b3:d4:63:a2: 0e:71:07:fb:77:3b:ff:04:09:8b:e4:ff:58:0e:7b:32:c7:48: 8c:6a:90:99:da:65:d4:14:31:e7:86:42:ca:b8:f4:d2:28:c0: ae:1f:8d:1a:03:a3:3c:e6:8e:a5:56:10:3c:33:fc:e9:89:c6: ca:1c:40:f3:dd:05:dc:6a:5f:d6:d8:72:0a:0b:c6:5e:c1:41: 8f:d3:f3:85:9a:e5:0f:5b:d4:c9:24:07:a0:26:22:6c:31:4a: a9:ff:41:75:d9:d9:33:5e:f6:96:f6:1f:d2:50:47:65:c3:42: 0c:c4:b9:f3:70:04:35:df:15:2a:8e:de:37:8d:e1:12:28:25: a4:3f:37:a7:f9:37:83:db:8d:46:39:e5:b8:4d:bc:68:76:86: 02:8c:ed:f8:de:5c:d0:fb:2a:96:8f:00:cc:02:99:8e:3d:d8: b1:2c:ce:31:70:42:20:f1:15:ae:8a:c5:e0:6d:c8:b0:6b:3c: 3f:e5:e8:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdG3MIjxk11J/SrSQuJvREFx7lMAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY4OUYyM0JDQkM0MjYzNUU5N0FFMTVBN0ZCNjlFMUUw OUE5N0RBRjAeFw0yNTA2MDUxMzM3MDhaFw0yNTA2MDkwMDE1MDhaMDMxMTAvBgNV BAMTKDc2MzM2NERDRkM1NTQ4RjBGMjBCRjIwM0RCQTZCMzNDQzVBNjZCNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDn92O7/7o0nqGKCsNtRb1zp6+L X1+DpQGD5Il1D5grsyPGTwjy55DJ4POntUSckWpxUtX3JjjrWH1LKAgdM+37cA/9 letnV53bXv2R+OISnrGEF76DrkJ44BqqqfPlYHF9nms1XPmQ82iCAdU+4fBeyCx7 wA9wBfAUDBCkqYI065i4JgdQwSLS5OwL1Jetg4pv2NRqt9hG7SaguhdDiXsZNsKp HZppwBf67pyao6sF/nPDc0fOHbRpHcDBm/OJBetyUzZQPwE9n7+sE+XqATYTTatv IdMhweJuE4whiZ+8SU1omRomAjYAwYVziUzG9n2InolAc7LrvR6R/bHNVepDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdjNk3PxVSPDyC/ID26azPMWma00wHwYDVR0j BBgwFoAU/4nyO8vEJjXpeuFaf7aeHgmpfa8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YjE2NjRhNy1jOWM5LTQ0NDItODcxOC05YWVjOWUyMTEwYTIvMC9GRjg5RjIzQkNC QzQyNjM1RTk3QUUxNUE3RkI2OUUxRTA5QTk3REFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkY4OUYyM0JDQkM0MjYzNUU5N0FFMTVBN0ZCNjlFMUUwOUE5 N0RBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGIxNjY0YTctYzljOS00NDQyLTg3 MTgtOWFlYzllMjExMGEyLzAvRkY4OUYyM0JDQkM0MjYzNUU5N0FFMTVBN0ZCNjlF MUUwOUE5N0RBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHNkroM3kq2LBTN5VqJCjhslg6pgGYot7fNG KtbqFjOhsuoFiHBflUgZixd+pk7lSFYduVcMsYlJwsJqqJ5MLqTNgyM2s9Rjog5x B/t3O/8ECYvk/1gOezLHSIxqkJnaZdQUMeeGQsq49NIowK4fjRoDozzmjqVWEDwz /OmJxsocQPPdBdxqX9bYcgoLxl7BQY/T84Wa5Q9b1MkkB6AmImwxSqn/QXXZ2TNe 9pb2H9JQR2XDQgzEufNwBDXfFSqO3jeN4RIoJaQ/N6f5N4PbjUY55bhNvGh2hgKM 7fjeXND7KpaPAMwCmY492LEszjFwQiDxFa6KxeBtyLBrPD/l6Aw= -----END CERTIFICATE-----Generated at Fri Jun 6 16:53:10 2025 by rpki-client