$ rpki-client -vvf repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.mft File: FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.mft (raw, json) Hash identifier: D96pWZKOS/RJuxv6GmxzdpuJ5vN1HOU3kDSm7Y9aafs= Subject key identifier: F4:CA:9E:23:E4:21:43:36:55:71:98:25:45:58:06:75:56:11:67:2E Authority key identifier: FF:3F:06:6A:5E:9A:B8:F9:88:B8:E1:7C:7A:56:DD:2E:00:A6:6A:D8 Certificate issuer: /CN=FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8 Certificate serial: 7E2A7693BB9CA23BD88153F50077F97C2F596ED8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.mft Manifest number: 9E Signing time: Sat 10 May 2025 14:52:15 +0000 Manifest this update: Sat 10 May 2025 14:47:15 +0000 Manifest next update: Tue 13 May 2025 16:40:15 +0000 Files and hashes: 1: 3135372e31352e38332e302f32342d3234203d3e20313532333633.roa (hash: 1f4UXWKsOacyCVtxubj2AeJTPPvOpeqJnHyC0iziuxo=) 2: 3135372e31352e38322e302f32342d3234203d3e20313532333633.roa (hash: LrI1MXered6/Wn/sgVv2p3qHmbqQpnmve4fLzG+M9WE=) 3: FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.crl (hash: ie85ONq1ClVTfBaojggdodiYOo5fnezBBZqK6b/us8g=) 4: 3135372e31352e38322e302f32332d3233203d3e20313532333633.roa (hash: TxbDMhKSioNeR20MqOvnLPpYmLwOjXBp9YQNGW/Dswg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.crl rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 11:26:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:2a:76:93:bb:9c:a2:3b:d8:81:53:f5:00:77:f9:7c:2f:59:6e:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8 Validity Not Before: May 10 14:47:15 2025 GMT Not After : May 13 16:40:15 2025 GMT Subject: CN=F4CA9E23E421433655719825455806755611672E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:78:36:55:06:18:d4:a3:8d:ff:33:ba:2b:c4: e9:0b:11:e8:05:0d:1a:6c:b1:88:55:76:ec:42:86: d1:b6:ed:24:7a:ed:3e:bb:b4:70:8e:b4:83:e8:1c: a7:b6:53:5a:68:55:bd:3c:4d:4e:39:db:e0:1d:80: cc:38:f1:80:ea:b0:c0:25:f4:20:60:ad:39:0a:2b: 70:4f:66:8f:30:96:d2:37:04:4a:18:8b:96:6a:c1: 8a:b0:e6:ac:f5:4d:10:47:98:0f:bb:cc:32:e2:81: fb:c7:0a:a9:b4:02:c2:19:78:b6:38:a1:ae:87:a0: f4:1f:27:52:cb:58:1f:a1:d6:e8:a7:4f:38:37:88: 3b:5d:c2:b0:f9:64:9b:0d:13:b5:df:aa:3d:d3:7d: e0:6e:81:62:15:75:f8:1b:a6:66:62:5a:62:98:79: 84:f4:64:3c:b9:f9:c6:0c:f2:f5:e5:96:a0:f2:a4: 5c:1a:a6:14:ff:d8:31:d5:f7:cb:ae:d7:dc:1e:df: 1e:8e:b6:83:62:e7:6a:71:9d:34:b4:28:3e:99:e9: 43:ac:a7:04:16:eb:69:5e:11:e2:b5:68:a4:65:7b: 18:6b:5c:06:3d:af:a1:8a:48:a2:81:71:ed:50:fd: 3d:e5:6f:27:d3:75:e4:5a:5a:fd:ac:6a:2c:b6:2a: 26:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:CA:9E:23:E4:21:43:36:55:71:98:25:45:58:06:75:56:11:67:2E X509v3 Authority Key Identifier: keyid:FF:3F:06:6A:5E:9A:B8:F9:88:B8:E1:7C:7A:56:DD:2E:00:A6:6A:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:4d:de:9d:5d:7c:57:5d:07:37:6e:f5:d4:d8:9a:2c:30:20: 10:8b:9f:bc:f0:26:8a:5e:fa:e8:33:07:0a:28:9a:43:41:93: 76:f5:03:22:22:6a:56:90:f8:e8:40:74:7a:78:a3:53:b7:97: 30:1e:33:31:1b:5b:c9:bc:ee:f8:4c:24:05:69:d5:0a:95:b5: d7:33:c1:aa:ce:c4:b1:12:fb:64:07:cc:1a:e2:13:24:48:46: 44:df:e6:da:01:eb:b8:56:b8:ea:6f:d0:82:bb:80:de:9e:f4: 87:e3:10:b6:b1:90:02:3e:96:fb:19:3c:87:ca:3f:28:2a:dd: 2c:cc:d0:fa:29:a5:0b:d8:a4:b3:e1:f4:00:1f:b9:f5:aa:13: 03:1c:5c:2c:e3:43:74:de:74:02:fe:c1:d8:e0:b3:fd:a8:48: 5f:cb:65:dc:2e:f0:24:92:23:93:4e:4b:16:58:26:c6:07:e1: 0f:48:68:ad:a5:90:4a:f5:76:71:a6:ee:b4:0d:5e:97:3f:72: 3c:f4:7e:7c:68:20:a8:2e:7f:e5:81:de:d3:05:c6:bd:19:d2: af:2d:83:bc:98:e3:a4:48:7d:30:53:8a:fa:9c:b8:7d:3b:d2: 9d:6a:24:50:d3:79:ec:58:be:04:8d:3c:cf:00:a1:6e:8c:af: 23:1f:8e:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfip2k7ucojvYgVP1AHf5fC9ZbtgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkYzRjA2NkE1RTlBQjhGOTg4QjhFMTdDN0E1NkREMkUw MEE2NkFEODAeFw0yNTA1MTAxNDQ3MTVaFw0yNTA1MTMxNjQwMTVaMDMxMTAvBgNV BAMTKEY0Q0E5RTIzRTQyMTQzMzY1NTcxOTgyNTQ1NTgwNjc1NTYxMTY3MkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1eDZVBhjUo43/M7orxOkLEegF DRpssYhVduxChtG27SR67T67tHCOtIPoHKe2U1poVb08TU452+AdgMw48YDqsMAl 9CBgrTkKK3BPZo8wltI3BEoYi5ZqwYqw5qz1TRBHmA+7zDLigfvHCqm0AsIZeLY4 oa6HoPQfJ1LLWB+h1uinTzg3iDtdwrD5ZJsNE7Xfqj3TfeBugWIVdfgbpmZiWmKY eYT0ZDy5+cYM8vXllqDypFwaphT/2DHV98uu19we3x6OtoNi52pxnTS0KD6Z6UOs pwQW62leEeK1aKRlexhrXAY9r6GKSKKBce1Q/T3lbyfTdeRaWv2saiy2KiYrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9MqeI+QhQzZVcZglRVgGdVYRZy4wHwYDVR0j BBgwFoAU/z8Gal6auPmIuOF8elbdLgCmatgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZDAxMWExYy1hMGFkLTRkOTMtODZhZi0zZjBhYWRkOTY4NGYvMC9GRjNGMDY2QTVF OUFCOEY5ODhCOEUxN0M3QTU2REQyRTAwQTY2QUQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkYzRjA2NkE1RTlBQjhGOTg4QjhFMTdDN0E1NkREMkUwMEE2 NkFEOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWQwMTFhMWMtYTBhZC00ZDkzLTg2 YWYtM2YwYWFkZDk2ODRmLzAvRkYzRjA2NkE1RTlBQjhGOTg4QjhFMTdDN0E1NkRE MkUwMEE2NkFEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE1N3p1dfFddBzdu9dTYmiwwIBCLn7zwJope +ugzBwoomkNBk3b1AyIialaQ+OhAdHp4o1O3lzAeMzEbW8m87vhMJAVp1QqVtdcz warOxLES+2QHzBriEyRIRkTf5toB67hWuOpv0IK7gN6e9IfjELaxkAI+lvsZPIfK Pygq3SzM0PoppQvYpLPh9AAfufWqEwMcXCzjQ3TedAL+wdjgs/2oSF/LZdwu8CSS I5NOSxZYJsYH4Q9IaK2lkEr1dnGm7rQNXpc/cjz0fnxoIKguf+WB3tMFxr0Z0q8t g7yY46RIfTBTivqcuH070p1qJFDTeexYvgSNPM8AoW6MryMfjmk= -----END CERTIFICATE-----Generated at Sun May 11 05:30:29 2025 by rpki-client