$ rpki-client -vvf repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.mft File: FF947BE188D359EA7EDF887D86DA2C7CC7460B70.mft (raw, json) Hash identifier: A+UPIOsFjiFxl+SXs+/amdmUBC3/IEtp1wpyc3grpjQ= Subject key identifier: 7F:40:63:D3:20:02:DD:4D:2F:62:4B:1F:F3:A4:F5:0B:FB:5E:B6:50 Authority key identifier: FF:94:7B:E1:88:D3:59:EA:7E:DF:88:7D:86:DA:2C:7C:C7:46:0B:70 Certificate issuer: /CN=FF947BE188D359EA7EDF887D86DA2C7CC7460B70 Certificate serial: 507A869B8F8E6205559736A201559BD4EE732911 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.mft Manifest number: 0236 Signing time: Wed 03 Sep 2025 18:42:02 +0000 Manifest this update: Wed 03 Sep 2025 18:37:02 +0000 Manifest next update: Sun 07 Sep 2025 00:16:02 +0000 Files and hashes: 1: 3130332e3136322e3134312e302f32342d3234203d3e20313431303833.roa (hash: 6+qzbxlDEMLlDFF8ZMTBVVGBQ81Jy42r6r5JLNvCfLQ=) 2: FF947BE188D359EA7EDF887D86DA2C7CC7460B70.crl (hash: VWr/0nnbCIApuuJujMFqohdrKsIObfLjXXv8QdWFx58=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.crl rsync://repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 00:16:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:7a:86:9b:8f:8e:62:05:55:97:36:a2:01:55:9b:d4:ee:73:29:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF947BE188D359EA7EDF887D86DA2C7CC7460B70 Validity Not Before: Sep 3 18:37:02 2025 GMT Not After : Sep 7 00:16:02 2025 GMT Subject: CN=7F4063D32002DD4D2F624B1FF3A4F50BFB5EB650 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:19:0a:90:94:a8:0e:cd:b6:11:33:99:d5:23: 13:c7:6f:03:8a:b1:c7:c6:d1:f5:87:b2:00:b1:af: 5a:ba:85:bd:be:1b:34:11:31:3d:27:d3:f5:ad:6a: ab:5f:b6:47:92:8d:ee:c4:ce:bf:e7:36:1f:36:c1: 54:82:97:94:17:38:ee:30:8e:4e:1f:a1:9b:c0:79: b0:ce:e0:2a:25:43:1b:f4:09:cb:2f:0f:01:0d:1e: 5c:07:11:eb:83:93:9c:2c:43:f8:db:0c:aa:c9:e0: 28:59:d6:5c:98:2d:c4:f1:53:69:38:33:31:d5:6c: 9c:89:27:e7:c3:fb:10:0d:be:2f:98:2b:d3:e4:e6: bb:34:cb:87:0a:39:ca:bb:e8:61:94:df:90:12:f1: b7:96:e8:40:11:c0:c2:21:6f:13:59:8a:39:32:6d: 27:12:01:a5:b6:74:a4:9f:7b:72:67:63:8b:5f:b0: 23:be:b2:86:9e:18:03:3e:ed:b1:1e:d6:03:b9:1a: 9d:6d:3a:48:68:c1:01:27:57:6b:96:42:18:79:6d: 2a:ba:73:bb:e9:ba:8c:79:ac:f7:34:1b:58:9b:8b: db:94:1d:7b:d5:56:7a:70:55:c1:5f:31:47:6c:43: 82:4c:38:17:d0:e3:c7:ed:9a:9a:39:c0:18:5c:c8: 07:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:40:63:D3:20:02:DD:4D:2F:62:4B:1F:F3:A4:F5:0B:FB:5E:B6:50 X509v3 Authority Key Identifier: keyid:FF:94:7B:E1:88:D3:59:EA:7E:DF:88:7D:86:DA:2C:7C:C7:46:0B:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:81:55:0d:8c:c8:0e:2a:69:62:a4:dc:55:44:c5:24:a7:5a: 32:21:ec:eb:50:1d:92:6a:dc:89:4d:0a:93:71:e9:b5:99:f7: 17:73:cc:ab:b0:de:cd:ab:76:59:99:7b:ba:37:1a:fc:8c:d9: 69:10:98:ec:01:e9:c8:a5:4e:42:8b:f3:c2:85:31:a9:e5:41: 15:d8:d6:95:e1:2a:20:22:d9:6a:12:1e:3b:fb:ef:6e:a3:42: 47:f0:91:4f:e2:46:74:43:2c:6e:38:72:70:ce:5a:0a:cd:4e: 3b:6d:1d:50:46:2f:b0:4d:d5:b4:2a:70:6d:f9:31:aa:e7:31: c4:f0:ab:c9:3d:df:15:19:b3:13:cc:a5:70:f6:94:bd:94:27: 6a:dd:08:4c:b6:32:1b:a9:72:54:4c:f5:a3:68:90:ee:27:4b: 49:e2:e6:68:8d:e3:2e:06:f9:e1:00:81:e6:35:fc:6f:71:cc: 09:dd:73:7d:2e:5e:30:30:1f:65:c6:72:a6:44:f9:df:98:57: dd:42:5f:c3:73:5a:f3:bf:81:40:93:ff:be:34:bd:74:ab:2b: 6e:a6:0c:04:eb:b8:a6:12:9e:6b:b8:d0:c2:50:a1:62:6b:af: f7:21:2b:29:59:e2:d0:b6:c3:d2:ba:47:49:c1:45:df:fc:9d: ee:12:25:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUHqGm4+OYgVVlzaiAVWb1O5zKREwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY5NDdCRTE4OEQzNTlFQTdFREY4ODdEODZEQTJDN0ND NzQ2MEI3MDAeFw0yNTA5MDMxODM3MDJaFw0yNTA5MDcwMDE2MDJaMDMxMTAvBgNV BAMTKDdGNDA2M0QzMjAwMkRENEQyRjYyNEIxRkYzQTRGNTBCRkI1RUI2NTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhGQqQlKgOzbYRM5nVIxPHbwOK scfG0fWHsgCxr1q6hb2+GzQRMT0n0/WtaqtftkeSje7Ezr/nNh82wVSCl5QXOO4w jk4foZvAebDO4ColQxv0CcsvDwENHlwHEeuDk5wsQ/jbDKrJ4ChZ1lyYLcTxU2k4 MzHVbJyJJ+fD+xANvi+YK9Pk5rs0y4cKOcq76GGU35AS8beW6EARwMIhbxNZijky bScSAaW2dKSfe3JnY4tfsCO+soaeGAM+7bEe1gO5Gp1tOkhowQEnV2uWQhh5bSq6 c7vpuox5rPc0G1ibi9uUHXvVVnpwVcFfMUdsQ4JMOBfQ48ftmpo5wBhcyAdJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUf0Bj0yAC3U0vYksf86T1C/tetlAwHwYDVR0j BBgwFoAU/5R74YjTWep+34h9htosfMdGC3AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OGE5MjM3YS03MjZjLTRjMTktOWI0ZS03Yjk0YjE0MjRjNGIvMC9GRjk0N0JFMTg4 RDM1OUVBN0VERjg4N0Q4NkRBMkM3Q0M3NDYwQjcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkY5NDdCRTE4OEQzNTlFQTdFREY4ODdEODZEQTJDN0NDNzQ2 MEI3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZThhOTIzN2EtNzI2Yy00YzE5LTli NGUtN2I5NGIxNDI0YzRiLzAvRkY5NDdCRTE4OEQzNTlFQTdFREY4ODdEODZEQTJD N0NDNzQ2MEI3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJWBVQ2MyA4qaWKk3FVExSSnWjIh7OtQHZJq 3IlNCpNx6bWZ9xdzzKuw3s2rdlmZe7o3GvyM2WkQmOwB6cilTkKL88KFManlQRXY 1pXhKiAi2WoSHjv7726jQkfwkU/iRnRDLG44cnDOWgrNTjttHVBGL7BN1bQqcG35 MarnMcTwq8k93xUZsxPMpXD2lL2UJ2rdCEy2MhupclRM9aNokO4nS0ni5miN4y4G +eEAgeY1/G9xzAndc30uXjAwH2XGcqZE+d+YV91CX8NzWvO/gUCT/740vXSrK26m DATruKYSnmu40MJQoWJrr/chKylZ4tC2w9K6R0nBRd/8ne4SJRU= -----END CERTIFICATE-----Generated at Fri Sep 5 12:38:44 2025 by rpki-client