$ rpki-client -vvf repo-rpki.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/FF1246B1AF5B158EA26E75654D7B7A6DED645787.mft File: FF1246B1AF5B158EA26E75654D7B7A6DED645787.mft (raw, json) Hash identifier: jZWH4DnwXNaAOJHQK89+TFVZPZR2xV0aDnfMVgrVIT0= Subject key identifier: F9:08:AE:EF:B3:E5:8F:59:17:FA:4C:F8:3E:79:23:C8:76:25:4C:F6 Authority key identifier: FF:12:46:B1:AF:5B:15:8E:A2:6E:75:65:4D:7B:7A:6D:ED:64:57:87 Certificate issuer: /CN=FF1246B1AF5B158EA26E75654D7B7A6DED645787 Certificate serial: 292B7CC0246E76C4B7FCBFEDB7C1BC3A5838FD10 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF1246B1AF5B158EA26E75654D7B7A6DED645787.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/FF1246B1AF5B158EA26E75654D7B7A6DED645787.mft Manifest number: D6 Signing time: Wed 03 Sep 2025 12:41:58 +0000 Manifest this update: Wed 03 Sep 2025 12:36:58 +0000 Manifest next update: Sat 06 Sep 2025 18:38:58 +0000 Files and hashes: 1: 3130332e3136312e3130382e302f32342d3234203d3e20313431393132.roa (hash: uvIhcJu4c3esMkst4+88cWSmjSO0QaYXOH2ffUAXAVQ=) 2: FF1246B1AF5B158EA26E75654D7B7A6DED645787.crl (hash: bkNkcn+6mIuLV2T1TluC2IiZV6GHDCy3fPCtTBtIUOg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/FF1246B1AF5B158EA26E75654D7B7A6DED645787.crl rsync://repo-rpki.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/FF1246B1AF5B158EA26E75654D7B7A6DED645787.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF1246B1AF5B158EA26E75654D7B7A6DED645787.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 18:38:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:2b:7c:c0:24:6e:76:c4:b7:fc:bf:ed:b7:c1:bc:3a:58:38:fd:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF1246B1AF5B158EA26E75654D7B7A6DED645787 Validity Not Before: Sep 3 12:36:58 2025 GMT Not After : Sep 6 18:38:58 2025 GMT Subject: CN=F908AEEFB3E58F5917FA4CF83E7923C876254CF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ea:bb:d7:44:38:97:a9:e0:40:8e:66:7d:b7: d3:4e:f7:68:20:c6:4c:75:78:59:93:f3:67:e7:d5: e8:1f:68:71:f0:be:a5:2a:21:98:2a:74:ef:58:d9: 8c:c5:9c:0b:61:82:10:e5:41:60:65:df:47:c6:a6: 05:b2:9b:e9:27:92:29:d1:5c:83:cc:c6:2e:6a:65: bd:2d:b4:f1:27:be:3e:18:6e:ea:49:28:c1:99:e9: 02:54:14:5c:46:91:1c:e4:be:a8:4d:9e:37:f5:1b: 0d:75:f3:75:04:10:e8:13:33:6e:42:11:e7:d9:a6: f7:fe:75:a5:e0:c8:4b:b7:ce:b2:52:3b:83:62:20: 2c:d0:41:57:2d:1c:cd:38:02:c9:7b:56:c1:31:aa: 86:0a:58:27:5f:0f:02:87:85:73:cf:bc:dd:5f:af: 2e:5c:a4:59:6c:3f:43:d8:5f:ac:ef:5a:3b:81:cf: be:30:79:e0:35:f4:fc:b5:7e:6e:08:42:52:a7:64: 53:da:15:f5:2f:9b:5f:59:23:66:05:45:61:10:db: c2:0b:b6:e3:95:71:53:30:f5:d2:8f:ea:9a:cd:17: c1:11:e2:4d:e6:99:83:5d:b8:3f:0f:40:ff:4c:f8: cb:67:4b:62:b7:d8:0e:77:e6:95:60:6c:2a:c9:d1: e8:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:08:AE:EF:B3:E5:8F:59:17:FA:4C:F8:3E:79:23:C8:76:25:4C:F6 X509v3 Authority Key Identifier: keyid:FF:12:46:B1:AF:5B:15:8E:A2:6E:75:65:4D:7B:7A:6D:ED:64:57:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/FF1246B1AF5B158EA26E75654D7B7A6DED645787.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF1246B1AF5B158EA26E75654D7B7A6DED645787.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/FF1246B1AF5B158EA26E75654D7B7A6DED645787.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:77:a0:8e:01:58:18:bb:90:8a:fd:4b:ab:6b:39:43:63:b2: de:c9:a6:c1:71:71:61:4d:b4:c0:43:e1:69:38:db:f0:9f:02: 06:00:7c:0a:b0:96:2d:fd:37:0d:b7:da:9b:4e:65:45:a7:85: 25:9b:8b:5a:b2:91:32:9d:7a:86:e3:32:ba:26:b9:43:f8:36: 21:af:b7:bb:bc:10:55:5e:dd:a9:7f:01:dd:2e:13:15:76:95: 8e:be:65:27:c2:38:ad:a9:92:c8:7e:1d:f9:4f:71:ac:02:47: 99:7d:b3:12:81:be:9f:ff:71:0d:5e:7f:b7:ee:72:31:b4:d1: 43:6e:f7:9f:64:fc:95:9b:c4:c7:e5:6f:96:9d:d7:d9:e4:b8: 02:57:06:f4:51:8f:4c:cc:79:a9:d3:96:32:3f:16:9c:80:22: 6a:ee:15:17:1d:52:7f:a4:0e:61:8f:49:4d:00:c7:29:1a:60: 36:05:ff:d5:15:78:34:e0:44:29:b3:e3:6a:2d:39:ca:0c:19: f1:e5:b4:95:73:63:b0:fa:3c:a0:d7:0a:78:63:70:08:09:78: 82:ca:17:97:86:54:4b:f8:05:d9:e5:ab:c7:5a:ee:4f:6c:a6: 19:f2:0a:c9:30:cf:0d:05:2f:f1:73:1e:29:54:d9:11:68:64: aa:65:d2:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKSt8wCRudsS3/L/tt8G8Olg4/RAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkYxMjQ2QjFBRjVCMTU4RUEyNkU3NTY1NEQ3QjdBNkRF RDY0NTc4NzAeFw0yNTA5MDMxMjM2NThaFw0yNTA5MDYxODM4NThaMDMxMTAvBgNV BAMTKEY5MDhBRUVGQjNFNThGNTkxN0ZBNENGODNFNzkyM0M4NzYyNTRDRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL6rvXRDiXqeBAjmZ9t9NO92gg xkx1eFmT82fn1egfaHHwvqUqIZgqdO9Y2YzFnAthghDlQWBl30fGpgWym+knkinR XIPMxi5qZb0ttPEnvj4YbupJKMGZ6QJUFFxGkRzkvqhNnjf1Gw1183UEEOgTM25C EefZpvf+daXgyEu3zrJSO4NiICzQQVctHM04Asl7VsExqoYKWCdfDwKHhXPPvN1f ry5cpFlsP0PYX6zvWjuBz74weeA19Py1fm4IQlKnZFPaFfUvm19ZI2YFRWEQ28IL tuOVcVMw9dKP6prNF8ER4k3mmYNduD8PQP9M+MtnS2K32A535pVgbCrJ0ejnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+Qiu77Plj1kX+kz4PnkjyHYlTPYwHwYDVR0j BBgwFoAU/xJGsa9bFY6ibnVlTXt6be1kV4cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ODlhMDY2MS0zMWVlLTQ5YTItYWU5Zi1mNmQ1NzNhMTdkZjcvMC9GRjEyNDZCMUFG NUIxNThFQTI2RTc1NjU0RDdCN0E2REVENjQ1Nzg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkYxMjQ2QjFBRjVCMTU4RUEyNkU3NTY1NEQ3QjdBNkRFRDY0 NTc4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTg5YTA2NjEtMzFlZS00OWEyLWFl OWYtZjZkNTczYTE3ZGY3LzAvRkYxMjQ2QjFBRjVCMTU4RUEyNkU3NTY1NEQ3QjdB NkRFRDY0NTc4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADl3oI4BWBi7kIr9S6trOUNjst7JpsFxcWFN tMBD4Wk42/CfAgYAfAqwli39Nw232ptOZUWnhSWbi1qykTKdeobjMromuUP4NiGv t7u8EFVe3al/Ad0uExV2lY6+ZSfCOK2pksh+HflPcawCR5l9sxKBvp//cQ1ef7fu cjG00UNu959k/JWbxMflb5ad19nkuAJXBvRRj0zMeanTljI/FpyAImruFRcdUn+k DmGPSU0AxykaYDYF/9UVeDTgRCmz42otOcoMGfHltJVzY7D6PKDXCnhjcAgJeILK F5eGVEv4Bdnlq8da7k9sphnyCskwzw0FL/FzHilU2RFoZKpl0rw= -----END CERTIFICATE-----Generated at Fri Sep 5 10:29:32 2025 by rpki-client