$ rpki-client -vvf repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.mft File: FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.mft (raw, json) Hash identifier: MHio8FtSxuiv9gqR8XGBi2rJuEjUvl4LFSKxbfdTZ7w= Subject key identifier: F3:F4:47:01:22:41:27:3A:55:68:51:B6:D7:E0:B5:CA:E5:79:3C:42 Authority key identifier: FF:77:50:7E:6D:1F:0E:0B:6E:B0:11:2E:9C:FB:D1:AF:1C:1F:6D:D4 Certificate issuer: /CN=FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4 Certificate serial: 38DB3BE923644610EC9DD5552ADBF7CFE4049E9E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.mft Manifest number: 01DF Signing time: Wed 04 Jun 2025 09:22:17 +0000 Manifest this update: Wed 04 Jun 2025 09:17:17 +0000 Manifest next update: Sat 07 Jun 2025 16:10:17 +0000 Files and hashes: 1: 3130332e3137372e31342e302f32342d3234203d3e20313437313338.roa (hash: 2HLKDZ4NotrKv5eD+avvVTu9dBP+/6Ewaq5ipG+lyWE=) 2: 3130332e3137372e31352e302f32342d3234203d3e20313437313338.roa (hash: eF9NB+BjEkYpNET986L8/mFTnt6eJT0/RWpF2VpYMW8=) 3: 3130332e3137372e31342e302f32332d3233203d3e20313437313338.roa (hash: 5z8wRtouH3UZuHrJrJfhmhXWcm8bh9b9rb8I23FOiCg=) 4: FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.crl (hash: zWz0RF1LYqhawr2OovC3AY8Jd4Q2h4tTLVnND+8nRis=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.crl rsync://repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 16:10:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:db:3b:e9:23:64:46:10:ec:9d:d5:55:2a:db:f7:cf:e4:04:9e:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4 Validity Not Before: Jun 4 09:17:17 2025 GMT Not After : Jun 7 16:10:17 2025 GMT Subject: CN=F3F447012241273A556851B6D7E0B5CAE5793C42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:7e:cf:65:22:a3:61:89:b2:71:a3:7b:6e:e6: 7a:ca:52:1e:d3:eb:8c:fc:b7:e5:8d:8e:34:1a:c4: 01:c3:5f:b7:41:cb:9e:b5:1f:19:ac:43:68:2e:d4: 7a:2e:ef:f7:04:e6:80:8e:6d:17:db:d5:0e:45:40: 37:1a:99:9e:5b:aa:37:15:58:81:dc:cb:78:75:59: 9c:8a:d7:26:9f:ae:b2:1e:36:cc:e5:6d:ea:09:59: 19:47:49:ca:e2:be:56:55:35:c2:24:40:a2:69:65: 78:31:6d:b7:47:4d:ed:c5:2c:7e:9c:ba:18:94:f9: 57:ba:fd:86:6e:d8:7a:25:a3:c9:58:d7:bd:a5:60: 62:a1:99:0b:64:0b:0b:d5:46:f9:a9:0e:ce:33:3a: 9b:d0:29:bf:89:a9:25:da:8e:03:31:2a:27:0e:45: af:58:c2:20:9c:36:e9:78:47:96:df:43:5e:6d:88: ac:4d:57:34:de:33:71:ef:b3:5c:d0:dc:75:21:8e: 0a:cd:dd:89:6c:e8:21:71:61:55:98:1e:01:a5:62: 0a:b7:79:f1:2d:5e:5b:63:2b:30:cf:80:d6:6c:ef: ef:fd:99:ca:ea:ec:2e:bf:08:cf:be:65:cf:e5:89: 07:06:59:88:ec:5d:5a:2d:21:11:ae:68:3e:3a:6b: c6:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:F4:47:01:22:41:27:3A:55:68:51:B6:D7:E0:B5:CA:E5:79:3C:42 X509v3 Authority Key Identifier: keyid:FF:77:50:7E:6D:1F:0E:0B:6E:B0:11:2E:9C:FB:D1:AF:1C:1F:6D:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:86:95:d3:6f:75:85:dd:a1:dd:f6:d7:e4:00:ba:8d:a4:68: 14:28:49:35:d1:e2:a8:40:de:60:38:4f:af:6c:3a:96:45:b7: 65:0b:a0:22:35:1f:f2:82:f0:c2:97:63:6f:56:c2:a6:16:db: e9:fc:4e:a1:ad:be:96:11:7b:a8:9d:e5:ad:36:54:46:92:51: 59:74:5b:9b:c4:68:77:f9:a5:34:cc:d6:3c:e4:ae:0d:ff:cf: 49:4b:35:ac:ce:db:3c:5b:3f:28:13:4c:a2:15:d7:14:d0:44: e6:9c:78:7d:c7:f8:13:22:ab:70:27:67:fa:2c:5b:03:53:33: 71:30:35:7f:a4:4d:39:f0:b8:45:b0:98:96:80:8f:41:64:8f: f9:16:8d:e6:b3:84:83:d9:20:56:fb:c2:bb:ee:fa:ba:83:0c: b3:bc:52:cd:c7:2f:3e:1c:d8:b4:df:67:f4:22:f3:8b:95:cc: c4:5f:bb:8c:8b:c8:9f:f4:b4:34:1a:85:b5:40:95:90:ca:0d: 14:be:ba:bf:a3:f1:84:8c:5f:b6:35:ea:a9:f4:d9:93:e1:09: 8f:7d:46:b5:c8:5f:2d:cc:cb:fd:69:af:d7:8b:c3:7b:67:88: e7:26:23:16:9b:d8:43:7a:5c:4e:a3:84:fa:be:6b:7b:ce:5b: c9:14:e0:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUONs76SNkRhDsndVVKtv3z+QEnp4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY3NzUwN0U2RDFGMEUwQjZFQjAxMTJFOUNGQkQxQUYx QzFGNkRENDAeFw0yNTA2MDQwOTE3MTdaFw0yNTA2MDcxNjEwMTdaMDMxMTAvBgNV BAMTKEYzRjQ0NzAxMjI0MTI3M0E1NTY4NTFCNkQ3RTBCNUNBRTU3OTNDNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCfs9lIqNhibJxo3tu5nrKUh7T 64z8t+WNjjQaxAHDX7dBy561HxmsQ2gu1Hou7/cE5oCObRfb1Q5FQDcamZ5bqjcV WIHcy3h1WZyK1yafrrIeNszlbeoJWRlHScrivlZVNcIkQKJpZXgxbbdHTe3FLH6c uhiU+Ve6/YZu2Holo8lY172lYGKhmQtkCwvVRvmpDs4zOpvQKb+JqSXajgMxKicO Ra9YwiCcNul4R5bfQ15tiKxNVzTeM3Hvs1zQ3HUhjgrN3Yls6CFxYVWYHgGlYgq3 efEtXltjKzDPgNZs7+/9mcrq7C6/CM++Zc/liQcGWYjsXVotIRGuaD46a8aHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8/RHASJBJzpVaFG21+C1yuV5PEIwHwYDVR0j BBgwFoAU/3dQfm0fDgtusBEunPvRrxwfbdQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YmUwNDAzOC1hMWI2LTQzMmMtODU0Yi1jYzZlOGNmMzJlMDYvMC9GRjc3NTA3RTZE MUYwRTBCNkVCMDExMkU5Q0ZCRDFBRjFDMUY2REQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkY3NzUwN0U2RDFGMEUwQjZFQjAxMTJFOUNGQkQxQUYxQzFG NkRENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmJlMDQwMzgtYTFiNi00MzJjLTg1 NGItY2M2ZThjZjMyZTA2LzAvRkY3NzUwN0U2RDFGMEUwQjZFQjAxMTJFOUNGQkQx QUYxQzFGNkRENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJyGldNvdYXdod321+QAuo2kaBQoSTXR4qhA 3mA4T69sOpZFt2ULoCI1H/KC8MKXY29WwqYW2+n8TqGtvpYRe6id5a02VEaSUVl0 W5vEaHf5pTTM1jzkrg3/z0lLNazO2zxbPygTTKIV1xTQROaceH3H+BMiq3AnZ/os WwNTM3EwNX+kTTnwuEWwmJaAj0Fkj/kWjeazhIPZIFb7wrvu+rqDDLO8Us3HLz4c 2LTfZ/Qi84uVzMRfu4yLyJ/0tDQahbVAlZDKDRS+ur+j8YSMX7Y16qn02ZPhCY99 RrXIXy3My/1pr9eLw3tniOcmIxab2EN6XE6jhPq+a3vOW8kU4HA= -----END CERTIFICATE-----Generated at Thu Jun 5 18:29:47 2025 by rpki-client