$ rpki-client -vvf repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.mft File: FF947BE188D359EA7EDF887D86DA2C7CC7460B70.mft (raw, json) Hash identifier: rhgOQXU6s8we7zvJ6tEFhvKssmtniz1kg5pl4Ev3/4k= Subject key identifier: 4F:3D:3B:7C:9E:E9:55:E5:C4:45:AB:C4:4D:9F:AA:7E:D4:73:BC:5C Authority key identifier: FF:94:7B:E1:88:D3:59:EA:7E:DF:88:7D:86:DA:2C:7C:C7:46:0B:70 Certificate issuer: /CN=FF947BE188D359EA7EDF887D86DA2C7CC7460B70 Certificate serial: 15F9D8036CEB605F5A47275F421BCE069794AD8A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.mft Manifest number: 020C Signing time: Mon 02 Jun 2025 13:41:58 +0000 Manifest this update: Mon 02 Jun 2025 13:36:58 +0000 Manifest next update: Thu 05 Jun 2025 14:48:58 +0000 Files and hashes: 1: 3130332e3136322e3134312e302f32342d3234203d3e20313431303833.roa (hash: 6+qzbxlDEMLlDFF8ZMTBVVGBQ81Jy42r6r5JLNvCfLQ=) 2: FF947BE188D359EA7EDF887D86DA2C7CC7460B70.crl (hash: 3nSXKSC4j5iUpjO5zox1W03SH8djzLlO2hfoVeW+zWM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.crl rsync://repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 14:48:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:f9:d8:03:6c:eb:60:5f:5a:47:27:5f:42:1b:ce:06:97:94:ad:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF947BE188D359EA7EDF887D86DA2C7CC7460B70 Validity Not Before: Jun 2 13:36:58 2025 GMT Not After : Jun 5 14:48:58 2025 GMT Subject: CN=4F3D3B7C9EE955E5C445ABC44D9FAA7ED473BC5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:db:e0:9f:b3:7b:05:e2:15:59:bb:dd:d2:15: 3b:19:b5:d0:31:a2:d4:37:86:5a:c7:cc:b0:36:f4: 54:79:07:d0:67:e5:b1:1b:4e:bd:f7:8d:af:f0:bd: 6d:cd:d2:12:be:8d:3f:cc:7c:b1:32:f4:fc:5e:b5: fe:55:80:4d:50:e8:ad:33:17:c1:a1:8b:89:90:5b: 7a:ce:e2:41:ab:18:2d:d3:e5:d2:87:b3:c5:26:94: 83:93:cb:81:28:8d:a1:b7:7b:7d:0e:1d:20:64:f2: 78:2c:05:9b:0a:02:32:a7:85:a5:67:fe:5a:7d:e5: 95:b4:22:8d:b6:dc:51:8a:3f:f1:0e:d0:82:1f:51: 91:43:98:6d:a3:8e:c8:f4:2e:c2:8e:ec:44:b8:0e: 4b:aa:cb:fa:57:81:5a:6c:68:26:7f:c1:38:d2:b6: 08:44:4d:1a:2f:e2:f4:b9:a2:87:91:ec:74:0f:18: c7:37:9f:c8:59:10:9d:14:57:03:09:d1:f0:56:89: c2:4b:6e:36:aa:25:af:7b:f0:5e:12:5b:6a:29:7f: 33:96:e5:6e:b3:1a:e0:b6:d9:e6:71:37:57:3c:07: 6b:da:fc:21:8e:b9:5d:be:5a:f9:35:56:f9:8e:a6: ec:2c:76:f8:84:15:47:9a:16:5a:ac:fa:72:df:25: ea:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:3D:3B:7C:9E:E9:55:E5:C4:45:AB:C4:4D:9F:AA:7E:D4:73:BC:5C X509v3 Authority Key Identifier: keyid:FF:94:7B:E1:88:D3:59:EA:7E:DF:88:7D:86:DA:2C:7C:C7:46:0B:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:2c:34:d2:31:67:e3:25:d0:3f:2d:a9:e5:54:8f:7b:d3:29: 45:56:4e:13:e7:72:0c:32:30:a9:08:17:59:84:58:66:e0:54: 76:35:72:87:7b:a9:34:c1:1a:5c:9c:8a:65:a1:6c:b7:e3:1f: 0f:7f:04:d1:fa:73:34:3e:fa:3b:36:ea:ff:d9:ed:0a:4e:81: d8:d5:c8:5b:75:b3:eb:32:44:42:de:76:5b:86:a2:5e:b0:79: d4:ba:0e:f6:96:f9:86:92:3a:59:56:d7:b7:a2:0c:7a:e2:91: 30:f6:6b:6c:0e:75:81:af:24:b8:b1:11:7e:b0:db:43:98:29: f4:d5:8c:96:cb:30:40:3d:77:97:69:13:f1:de:e5:b8:80:4a: 2f:e8:40:98:f0:82:74:df:b3:fa:cd:47:70:b3:00:7f:34:a6: 5e:18:d0:2b:5b:c5:15:f8:7b:80:8a:9a:4e:fd:02:13:2e:25: 5d:40:33:d1:6b:34:bd:70:fc:b3:1f:bd:a9:f9:84:8c:fe:2d: d8:79:38:89:46:a9:96:c6:49:c3:e5:4d:12:48:bf:e8:ba:41: 75:57:a0:1d:1e:df:4b:51:a2:40:11:a0:fa:fe:ff:64:20:00: a9:00:5a:ee:58:54:89:ff:b5:e6:17:64:26:66:9c:4b:5e:f1: 87:0e:40:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFfnYA2zrYF9aRydfQhvOBpeUrYowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY5NDdCRTE4OEQzNTlFQTdFREY4ODdEODZEQTJDN0ND NzQ2MEI3MDAeFw0yNTA2MDIxMzM2NThaFw0yNTA2MDUxNDQ4NThaMDMxMTAvBgNV BAMTKDRGM0QzQjdDOUVFOTU1RTVDNDQ1QUJDNDREOUZBQTdFRDQ3M0JDNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF2+Cfs3sF4hVZu93SFTsZtdAx otQ3hlrHzLA29FR5B9Bn5bEbTr33ja/wvW3N0hK+jT/MfLEy9Pxetf5VgE1Q6K0z F8Ghi4mQW3rO4kGrGC3T5dKHs8UmlIOTy4EojaG3e30OHSBk8ngsBZsKAjKnhaVn /lp95ZW0Io223FGKP/EO0IIfUZFDmG2jjsj0LsKO7ES4Dkuqy/pXgVpsaCZ/wTjS tghETRov4vS5ooeR7HQPGMc3n8hZEJ0UVwMJ0fBWicJLbjaqJa978F4SW2opfzOW 5W6zGuC22eZxN1c8B2va/CGOuV2+Wvk1VvmOpuwsdviEFUeaFlqs+nLfJerfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTz07fJ7pVeXERavETZ+qftRzvFwwHwYDVR0j BBgwFoAU/5R74YjTWep+34h9htosfMdGC3AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OGE5MjM3YS03MjZjLTRjMTktOWI0ZS03Yjk0YjE0MjRjNGIvMC9GRjk0N0JFMTg4 RDM1OUVBN0VERjg4N0Q4NkRBMkM3Q0M3NDYwQjcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkY5NDdCRTE4OEQzNTlFQTdFREY4ODdEODZEQTJDN0NDNzQ2 MEI3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZThhOTIzN2EtNzI2Yy00YzE5LTli NGUtN2I5NGIxNDI0YzRiLzAvRkY5NDdCRTE4OEQzNTlFQTdFREY4ODdEODZEQTJD N0NDNzQ2MEI3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJssNNIxZ+Ml0D8tqeVUj3vTKUVWThPncgwy MKkIF1mEWGbgVHY1cod7qTTBGlycimWhbLfjHw9/BNH6czQ++js26v/Z7QpOgdjV yFt1s+syRELedluGol6wedS6DvaW+YaSOllW17eiDHrikTD2a2wOdYGvJLixEX6w 20OYKfTVjJbLMEA9d5dpE/He5biASi/oQJjwgnTfs/rNR3CzAH80pl4Y0CtbxRX4 e4CKmk79AhMuJV1AM9FrNL1w/LMfvan5hIz+Ldh5OIlGqZbGScPlTRJIv+i6QXVX oB0e30tRokARoPr+/2QgAKkAWu5YVIn/teYXZCZmnEte8YcOQOc= -----END CERTIFICATE-----Generated at Tue Jun 3 23:13:18 2025 by rpki-client