$ rpki-client -vvf repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.mft File: FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.mft (raw, json) Hash identifier: muAWSWoKQ0jx7m+nConPEJ7BACiaVg3Bu0lRcVgEnlA= Subject key identifier: 22:B7:4B:E5:09:D5:E2:13:4A:C8:80:4E:81:B1:56:BC:C3:38:B8:74 Authority key identifier: FF:3F:06:6A:5E:9A:B8:F9:88:B8:E1:7C:7A:56:DD:2E:00:A6:6A:D8 Certificate issuer: /CN=FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8 Certificate serial: 3D1393B5F9D86A80D9EA12DB50BB47CA0FDB87C6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.mft Manifest number: CC Signing time: Fri 22 Aug 2025 00:42:20 +0000 Manifest this update: Fri 22 Aug 2025 00:37:20 +0000 Manifest next update: Mon 25 Aug 2025 01:19:20 +0000 Files and hashes: 1: 3135372e31352e38322e302f32332d3233203d3e20313532333633.roa (hash: TxbDMhKSioNeR20MqOvnLPpYmLwOjXBp9YQNGW/Dswg=) 2: FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.crl (hash: jwoGUDGIjerD0BdNu7NUKEFAyLJlJOwXUlnn3C3huOU=) 3: 3135372e31352e38322e302f32342d3234203d3e20313532333633.roa (hash: LhdUiZ829jnCYzP+T/q1kR6KjN+CYgUrJ54OONbPWMo=) 4: 3135372e31352e38332e302f32342d3234203d3e20313532333633.roa (hash: tmwMaZpoyniOHlrA1Ev0DGw1sFkx/sRTma2ZD2CnpMQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.crl rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 01:19:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:13:93:b5:f9:d8:6a:80:d9:ea:12:db:50:bb:47:ca:0f:db:87:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8 Validity Not Before: Aug 22 00:37:20 2025 GMT Not After : Aug 25 01:19:20 2025 GMT Subject: CN=22B74BE509D5E2134AC8804E81B156BCC338B874 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:7d:3a:17:f0:c9:07:67:a6:b1:f2:49:07:55: 1c:91:49:d0:4f:7c:e1:3b:29:43:2c:f2:74:4d:9d: 3a:ba:fd:bd:c3:6a:8f:b9:21:8e:e9:29:71:0f:94: 2b:b3:81:1a:87:33:e8:04:22:22:12:69:ee:78:b1: 6b:b7:0c:b7:e5:aa:3a:b9:df:88:62:52:11:b9:2a: 56:10:bd:b6:03:1d:50:b6:79:1e:ec:70:2c:3f:32: 7e:bc:1f:2f:3e:e5:92:eb:90:f7:35:5b:ae:36:ad: e3:2b:a0:50:30:64:3a:bd:9c:1d:8c:47:01:87:c6: 3d:fe:07:d8:f6:62:ae:5e:91:2d:0b:47:39:44:a3: 9b:be:21:28:76:01:c9:53:ce:2c:72:22:ad:3f:28: d6:1f:ac:53:95:45:39:70:5f:b3:67:6e:51:92:54: d4:c9:7a:35:b5:7e:be:9d:46:1f:a6:88:2f:b1:46: a8:af:e9:dd:91:36:64:75:81:3b:27:3f:d0:2c:08: 1a:7e:05:67:d6:0b:e7:9d:88:13:c3:55:9a:1b:ec: ce:dd:63:29:24:a5:d2:1c:53:99:c0:bf:d5:af:22: 52:12:39:53:5a:dc:1b:2f:a5:0e:bb:24:c3:38:b0: 9f:39:41:0d:87:43:3c:17:08:44:8d:0b:57:0d:e9: f6:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:B7:4B:E5:09:D5:E2:13:4A:C8:80:4E:81:B1:56:BC:C3:38:B8:74 X509v3 Authority Key Identifier: keyid:FF:3F:06:6A:5E:9A:B8:F9:88:B8:E1:7C:7A:56:DD:2E:00:A6:6A:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:88:82:94:09:ec:95:08:46:86:0c:ad:01:65:ae:96:2f:c4: 8c:1e:b1:ea:ed:d8:bb:c2:8e:25:b8:3a:39:a2:4d:9b:e8:ee: d3:28:e6:54:bd:0c:50:0c:eb:e3:bb:0b:49:4c:e7:8b:0e:a2: c3:89:d4:2d:49:ee:4d:95:b9:d2:32:6a:46:5a:16:b3:83:1a: c3:32:6f:1d:00:86:fe:b3:e4:af:29:c5:b5:3b:32:3b:aa:01: 84:ab:5e:33:5b:13:31:aa:d2:60:93:f6:b3:5b:cf:94:7f:27: aa:d5:e3:3d:41:1f:0e:fd:64:7a:2b:58:d1:02:63:e5:60:b3: ff:3d:f7:12:0f:57:3a:d8:81:42:98:42:96:53:90:11:0e:ed: 75:40:c2:d4:e2:ed:da:68:29:d3:51:f5:d3:f2:a2:17:de:a1: 76:43:a8:bc:3c:41:db:9b:7a:58:4c:89:1a:1a:54:55:72:a0: a3:0a:ba:c9:bf:b3:93:71:45:4c:74:fb:32:6b:51:25:8a:a1: 73:16:e1:ad:de:1f:f7:7a:97:47:02:13:38:03:f5:60:e6:15: c9:be:d0:af:43:f4:fd:d5:9c:5b:5d:d8:d0:fc:64:a2:bd:13: 41:40:3f:50:2e:80:df:2f:06:57:a4:2a:ff:2d:44:d9:ec:76: 46:50:2a:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPROTtfnYaoDZ6hLbULtHyg/bh8YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkYzRjA2NkE1RTlBQjhGOTg4QjhFMTdDN0E1NkREMkUw MEE2NkFEODAeFw0yNTA4MjIwMDM3MjBaFw0yNTA4MjUwMTE5MjBaMDMxMTAvBgNV BAMTKDIyQjc0QkU1MDlENUUyMTM0QUM4ODA0RTgxQjE1NkJDQzMzOEI4NzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpfToX8MkHZ6ax8kkHVRyRSdBP fOE7KUMs8nRNnTq6/b3Dao+5IY7pKXEPlCuzgRqHM+gEIiISae54sWu3DLflqjq5 34hiUhG5KlYQvbYDHVC2eR7scCw/Mn68Hy8+5ZLrkPc1W642reMroFAwZDq9nB2M RwGHxj3+B9j2Yq5ekS0LRzlEo5u+ISh2AclTzixyIq0/KNYfrFOVRTlwX7NnblGS VNTJejW1fr6dRh+miC+xRqiv6d2RNmR1gTsnP9AsCBp+BWfWC+ediBPDVZob7M7d YykkpdIcU5nAv9WvIlISOVNa3BsvpQ67JMM4sJ85QQ2HQzwXCESNC1cN6fZzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIrdL5QnV4hNKyIBOgbFWvMM4uHQwHwYDVR0j BBgwFoAU/z8Gal6auPmIuOF8elbdLgCmatgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZDAxMWExYy1hMGFkLTRkOTMtODZhZi0zZjBhYWRkOTY4NGYvMC9GRjNGMDY2QTVF OUFCOEY5ODhCOEUxN0M3QTU2REQyRTAwQTY2QUQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkYzRjA2NkE1RTlBQjhGOTg4QjhFMTdDN0E1NkREMkUwMEE2 NkFEOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWQwMTFhMWMtYTBhZC00ZDkzLTg2 YWYtM2YwYWFkZDk2ODRmLzAvRkYzRjA2NkE1RTlBQjhGOTg4QjhFMTdDN0E1NkRE MkUwMEE2NkFEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADqIgpQJ7JUIRoYMrQFlrpYvxIwesert2LvC jiW4OjmiTZvo7tMo5lS9DFAM6+O7C0lM54sOosOJ1C1J7k2VudIyakZaFrODGsMy bx0Ahv6z5K8pxbU7MjuqAYSrXjNbEzGq0mCT9rNbz5R/J6rV4z1BHw79ZHorWNEC Y+Vgs/899xIPVzrYgUKYQpZTkBEO7XVAwtTi7dpoKdNR9dPyohfeoXZDqLw8Qdub elhMiRoaVFVyoKMKusm/s5NxRUx0+zJrUSWKoXMW4a3eH/d6l0cCEzgD9WDmFcm+ 0K9D9P3VnFtd2ND8ZKK9E0FAP1AugN8vBlekKv8tRNnsdkZQKnY= -----END CERTIFICATE-----Generated at Sat Aug 23 23:46:21 2025 by rpki-client