$ rpki-client -vvf repo-rpki.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/FF1246B1AF5B158EA26E75654D7B7A6DED645787.mft File: FF1246B1AF5B158EA26E75654D7B7A6DED645787.mft (raw, json) Hash identifier: zowBxuDJ7Wekr374f/af778yqmj3sftIFD/by3OTrgI= Subject key identifier: 27:C8:1E:99:BD:C9:39:A2:8F:1D:4A:59:56:93:EB:26:9C:5B:CC:92 Authority key identifier: FF:12:46:B1:AF:5B:15:8E:A2:6E:75:65:4D:7B:7A:6D:ED:64:57:87 Certificate issuer: /CN=FF1246B1AF5B158EA26E75654D7B7A6DED645787 Certificate serial: 0B1676F2ADC3E570505C7617ADB839A7790ACCA3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF1246B1AF5B158EA26E75654D7B7A6DED645787.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/FF1246B1AF5B158EA26E75654D7B7A6DED645787.mft Manifest number: AF Signing time: Fri 06 Jun 2025 13:31:57 +0000 Manifest this update: Fri 06 Jun 2025 13:26:57 +0000 Manifest next update: Mon 09 Jun 2025 17:16:57 +0000 Files and hashes: 1: 3130332e3136312e3130382e302f32342d3234203d3e20313431393132.roa (hash: uvIhcJu4c3esMkst4+88cWSmjSO0QaYXOH2ffUAXAVQ=) 2: FF1246B1AF5B158EA26E75654D7B7A6DED645787.crl (hash: Hm0XlN3+MIlx11I4H9J5DnL5adLMAXzXG1gMiJ/9gs8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/FF1246B1AF5B158EA26E75654D7B7A6DED645787.crl rsync://repo-rpki.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/FF1246B1AF5B158EA26E75654D7B7A6DED645787.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF1246B1AF5B158EA26E75654D7B7A6DED645787.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 17:16:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:16:76:f2:ad:c3:e5:70:50:5c:76:17:ad:b8:39:a7:79:0a:cc:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF1246B1AF5B158EA26E75654D7B7A6DED645787 Validity Not Before: Jun 6 13:26:57 2025 GMT Not After : Jun 9 17:16:57 2025 GMT Subject: CN=27C81E99BDC939A28F1D4A595693EB269C5BCC92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8b:53:ac:0a:15:51:9a:50:aa:bc:86:69:c0: 30:fe:91:ea:e5:c9:1d:26:0c:0b:ec:65:ec:9f:c3: 9d:e7:8a:5b:a1:cc:77:d3:15:74:e9:40:1b:5c:7b: 09:17:d8:5c:61:d6:a4:4f:97:f8:a3:62:53:6e:11: fe:97:32:53:97:e1:96:52:1e:b1:75:ba:e6:03:34: 8a:4f:ae:ba:af:e1:33:9d:64:8c:3e:bd:30:a2:76: 89:df:06:e9:7e:a8:2d:24:ab:22:71:69:b4:46:3c: 21:85:f8:88:9d:3a:75:66:32:e4:26:4a:10:5d:d6: 41:33:bb:cd:cb:b6:93:56:13:2b:f5:f0:80:3e:f6: 42:9d:90:d1:09:1f:63:49:36:5e:30:9c:5f:2d:a3: 16:71:1b:ef:a8:3d:4c:50:b9:8a:8c:3f:e8:07:12: 41:60:5e:b4:1c:ae:23:5c:52:50:c4:63:77:03:5e: 0a:00:ba:2a:19:b5:ab:c5:72:bd:d0:38:f9:fb:a8: 3e:23:8f:d9:8c:57:6b:92:6d:b0:65:d4:d6:ec:9d: 97:cb:db:b0:3b:05:5e:fb:6e:62:1f:28:c3:7c:0c: 9f:df:eb:16:ea:49:bc:d6:bd:85:ed:ab:94:22:fc: a9:35:03:e5:e4:72:3d:f2:07:52:c8:e8:e9:ce:85: 65:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:C8:1E:99:BD:C9:39:A2:8F:1D:4A:59:56:93:EB:26:9C:5B:CC:92 X509v3 Authority Key Identifier: keyid:FF:12:46:B1:AF:5B:15:8E:A2:6E:75:65:4D:7B:7A:6D:ED:64:57:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/FF1246B1AF5B158EA26E75654D7B7A6DED645787.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF1246B1AF5B158EA26E75654D7B7A6DED645787.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/FF1246B1AF5B158EA26E75654D7B7A6DED645787.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:07:d5:dc:eb:33:90:52:ca:47:1e:e1:c7:80:8f:70:92:b6: 0d:11:de:7f:3c:5a:75:c9:34:f4:68:98:e9:0d:f7:8e:79:74: 91:84:42:a7:39:39:76:c2:b0:57:87:1b:59:21:3f:e5:23:43: ae:62:3c:d8:24:bd:e7:06:64:29:16:56:cf:8a:59:2d:87:e9: ff:46:9d:55:5b:42:25:b2:fc:b9:d8:98:b5:e2:a0:f2:c6:98: f5:8c:37:74:31:b1:06:e8:30:6e:9a:c5:07:bf:83:67:21:04: ee:22:ee:fe:82:e3:c3:cd:ec:02:ed:24:d0:d5:00:2b:33:fb: 15:06:29:b7:ac:2d:71:a9:62:55:38:63:ee:7c:4f:a9:5f:ec: 8b:30:eb:bd:fb:bb:b8:6a:ff:39:cd:7c:16:01:d7:bd:f1:68: 8c:2b:46:d1:2d:1e:d6:11:8e:6d:ea:6e:7f:6d:a3:fa:b8:ce: 71:13:0a:9a:0c:27:4f:47:aa:ce:d0:6b:ee:1b:48:f7:ec:94: e8:25:e7:36:ef:cd:33:a2:70:b6:63:a9:61:9b:b4:fe:92:fa: ee:c4:bc:e2:2f:54:97:62:60:f6:82:cb:e6:89:d0:10:03:30: d4:d3:b4:a6:db:d7:41:4f:ea:76:b9:55:6e:25:42:16:9f:ac: d5:a4:be:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCxZ28q3D5XBQXHYXrbg5p3kKzKMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkYxMjQ2QjFBRjVCMTU4RUEyNkU3NTY1NEQ3QjdBNkRF RDY0NTc4NzAeFw0yNTA2MDYxMzI2NTdaFw0yNTA2MDkxNzE2NTdaMDMxMTAvBgNV BAMTKDI3QzgxRTk5QkRDOTM5QTI4RjFENEE1OTU2OTNFQjI2OUM1QkNDOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8i1OsChVRmlCqvIZpwDD+kerl yR0mDAvsZeyfw53niluhzHfTFXTpQBtcewkX2Fxh1qRPl/ijYlNuEf6XMlOX4ZZS HrF1uuYDNIpPrrqv4TOdZIw+vTCidonfBul+qC0kqyJxabRGPCGF+IidOnVmMuQm ShBd1kEzu83LtpNWEyv18IA+9kKdkNEJH2NJNl4wnF8toxZxG++oPUxQuYqMP+gH EkFgXrQcriNcUlDEY3cDXgoAuioZtavFcr3QOPn7qD4jj9mMV2uSbbBl1NbsnZfL 27A7BV77bmIfKMN8DJ/f6xbqSbzWvYXtq5Qi/Kk1A+Xkcj3yB1LI6OnOhWUVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJ8gemb3JOaKPHUpZVpPrJpxbzJIwHwYDVR0j BBgwFoAU/xJGsa9bFY6ibnVlTXt6be1kV4cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ODlhMDY2MS0zMWVlLTQ5YTItYWU5Zi1mNmQ1NzNhMTdkZjcvMC9GRjEyNDZCMUFG NUIxNThFQTI2RTc1NjU0RDdCN0E2REVENjQ1Nzg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkYxMjQ2QjFBRjVCMTU4RUEyNkU3NTY1NEQ3QjdBNkRFRDY0 NTc4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTg5YTA2NjEtMzFlZS00OWEyLWFl OWYtZjZkNTczYTE3ZGY3LzAvRkYxMjQ2QjFBRjVCMTU4RUEyNkU3NTY1NEQ3QjdB NkRFRDY0NTc4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG8H1dzrM5BSykce4ceAj3CStg0R3n88WnXJ NPRomOkN9455dJGEQqc5OXbCsFeHG1khP+UjQ65iPNgkvecGZCkWVs+KWS2H6f9G nVVbQiWy/LnYmLXioPLGmPWMN3QxsQboMG6axQe/g2chBO4i7v6C48PN7ALtJNDV ACsz+xUGKbesLXGpYlU4Y+58T6lf7Isw6737u7hq/znNfBYB173xaIwrRtEtHtYR jm3qbn9to/q4znETCpoMJ09Hqs7Qa+4bSPfslOgl5zbvzTOicLZjqWGbtP6S+u7E vOIvVJdiYPaCy+aJ0BADMNTTtKbb10FP6na5VW4lQhafrNWkvnY= -----END CERTIFICATE-----Generated at Sun Jun 8 00:39:19 2025 by rpki-client