$ rpki-client -vvf repo-rpki.idnic.net/repo/3248d27b-ccb0-4fc7-abca-9fc0a3e15754/0/FF45D0F44B7B63B976B41EEE18CC92393CF8184F.mft File: FF45D0F44B7B63B976B41EEE18CC92393CF8184F.mft (raw, json) Hash identifier: m5ZFH6cxNnZ21qkbsqSGAUVofdo3KYgAsoRHuQW3wUg= Subject key identifier: A1:F5:C7:3C:50:17:48:44:7B:0A:06:E4:F8:27:B5:37:51:51:0B:4D Authority key identifier: FF:45:D0:F4:4B:7B:63:B9:76:B4:1E:EE:18:CC:92:39:3C:F8:18:4F Certificate issuer: /CN=FF45D0F44B7B63B976B41EEE18CC92393CF8184F Certificate serial: 1566593124C4A620C9F70EDADB0520E614F1209C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF45D0F44B7B63B976B41EEE18CC92393CF8184F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3248d27b-ccb0-4fc7-abca-9fc0a3e15754/0/FF45D0F44B7B63B976B41EEE18CC92393CF8184F.mft Manifest number: 01C0 Signing time: Fri 27 Jun 2025 21:30:03 +0000 Manifest this update: Fri 27 Jun 2025 21:25:03 +0000 Manifest next update: Mon 30 Jun 2025 23:52:03 +0000 Files and hashes: 1: 3130332e3136392e33382e302f32332d3234203d3e20313432333331.roa (hash: qtyZ9raTN/ay3QbY1ITdDYTNx2mGOoDZFy/XPZmK4ng=) 2: FF45D0F44B7B63B976B41EEE18CC92393CF8184F.crl (hash: 40TGRvJrK27UFWZ975p3YgEZz2nbMSgzKgHQD0ClCnc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3248d27b-ccb0-4fc7-abca-9fc0a3e15754/0/FF45D0F44B7B63B976B41EEE18CC92393CF8184F.crl rsync://repo-rpki.idnic.net/repo/3248d27b-ccb0-4fc7-abca-9fc0a3e15754/0/FF45D0F44B7B63B976B41EEE18CC92393CF8184F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF45D0F44B7B63B976B41EEE18CC92393CF8184F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 30 Jun 2025 23:52:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:66:59:31:24:c4:a6:20:c9:f7:0e:da:db:05:20:e6:14:f1:20:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF45D0F44B7B63B976B41EEE18CC92393CF8184F Validity Not Before: Jun 27 21:25:03 2025 GMT Not After : Jun 30 23:52:03 2025 GMT Subject: CN=A1F5C73C501748447B0A06E4F827B53751510B4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:1d:dd:94:fa:ef:e4:69:ab:18:72:98:fb:58: e9:8e:d2:dd:4f:fd:16:be:ee:fa:25:7c:c8:b5:3c: ef:c6:60:fb:af:66:35:71:77:8e:41:93:17:1f:96: 89:8b:34:0a:e6:31:94:3a:18:72:8b:10:b4:4b:a9: 69:0f:f8:4b:d0:00:9e:ca:4e:5a:f7:02:95:d3:99: 70:68:b1:d3:2f:97:1c:17:1e:1e:e6:c2:d4:8e:5f: 0a:a9:1d:76:0c:8f:ce:9b:78:54:af:94:07:60:fe: 68:62:23:fa:23:b0:a7:c0:5d:d8:ab:2d:9e:d1:bd: 91:6b:ab:35:91:d6:f7:05:9c:1a:3c:50:d8:14:53: 61:8a:59:8c:b5:ed:1a:03:14:93:e4:bc:7e:27:e2: d0:9c:9f:80:33:d4:f3:46:b8:32:f3:0d:98:f2:39: 7c:28:d7:46:0f:9d:20:b4:8f:d0:ac:58:76:ac:8c: e9:f8:13:42:d1:29:5c:fc:fb:06:42:71:07:d9:fc: fb:be:16:79:fd:b8:c8:0d:3f:cf:b9:25:0a:41:cc: 1b:34:97:de:4d:aa:66:05:a0:a2:14:a8:85:55:30: 17:84:1d:5a:47:9f:3c:ec:ed:a3:74:d0:5a:cf:ba: a1:54:09:a8:f1:14:47:41:cb:d8:0d:31:d8:8f:be: bd:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:F5:C7:3C:50:17:48:44:7B:0A:06:E4:F8:27:B5:37:51:51:0B:4D X509v3 Authority Key Identifier: keyid:FF:45:D0:F4:4B:7B:63:B9:76:B4:1E:EE:18:CC:92:39:3C:F8:18:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3248d27b-ccb0-4fc7-abca-9fc0a3e15754/0/FF45D0F44B7B63B976B41EEE18CC92393CF8184F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF45D0F44B7B63B976B41EEE18CC92393CF8184F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3248d27b-ccb0-4fc7-abca-9fc0a3e15754/0/FF45D0F44B7B63B976B41EEE18CC92393CF8184F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:72:be:7d:4c:3f:ef:e6:61:13:dc:41:14:4f:c8:6d:44:f6: b7:87:ec:e4:46:d1:23:38:d7:dc:3f:0a:a7:89:23:9f:6b:2a: 2a:33:42:bf:46:56:12:cb:d5:07:e5:fa:f0:6a:d6:14:72:4e: 92:36:c6:7b:21:e6:31:66:0b:53:94:44:28:99:a6:92:45:50: 09:50:7e:7c:06:46:d4:ea:45:85:51:ce:42:b0:cf:60:d3:2b: ff:76:e2:f2:d2:2d:2e:6e:dd:bb:4b:e3:d0:9a:c7:b2:e0:a3: ad:39:7a:cd:08:4d:8b:70:7f:a1:da:48:89:a0:c4:3b:ae:84: 4f:e3:82:ef:c0:76:69:ce:96:4d:b5:72:03:4e:88:d7:7d:25: 42:bc:0c:45:b4:88:ce:39:6d:59:fe:a0:f0:67:df:45:b0:57: 0b:2a:bd:8c:f6:94:42:a1:e5:9c:3b:25:71:fb:7c:2e:90:26: 1a:e0:cf:59:6f:c2:55:21:ef:e0:db:a5:a5:0b:cd:a1:f7:7f: 99:f6:c0:ae:e3:64:47:c7:76:5b:75:f1:3f:9f:2e:25:84:91: 38:de:9d:9f:83:6e:ba:98:b4:9b:87:eb:08:b9:63:2a:0d:ff: b3:c1:48:c5:fc:61:46:4c:85:99:c9:2b:59:7b:4b:2e:76:d8: 20:2b:e5:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFWZZMSTEpiDJ9w7a2wUg5hTxIJwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY0NUQwRjQ0QjdCNjNCOTc2QjQxRUVFMThDQzkyMzkz Q0Y4MTg0RjAeFw0yNTA2MjcyMTI1MDNaFw0yNTA2MzAyMzUyMDNaMDMxMTAvBgNV BAMTKEExRjVDNzNDNTAxNzQ4NDQ3QjBBMDZFNEY4MjdCNTM3NTE1MTBCNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtHd2U+u/kaasYcpj7WOmO0t1P /Ra+7volfMi1PO/GYPuvZjVxd45BkxcflomLNArmMZQ6GHKLELRLqWkP+EvQAJ7K Tlr3ApXTmXBosdMvlxwXHh7mwtSOXwqpHXYMj86beFSvlAdg/mhiI/ojsKfAXdir LZ7RvZFrqzWR1vcFnBo8UNgUU2GKWYy17RoDFJPkvH4n4tCcn4Az1PNGuDLzDZjy OXwo10YPnSC0j9CsWHasjOn4E0LRKVz8+wZCcQfZ/Pu+Fnn9uMgNP8+5JQpBzBs0 l95NqmYFoKIUqIVVMBeEHVpHnzzs7aN00FrPuqFUCajxFEdBy9gNMdiPvr1/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUofXHPFAXSER7Cgbk+Ce1N1FRC00wHwYDVR0j BBgwFoAU/0XQ9Et7Y7l2tB7uGMySOTz4GE8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MjQ4ZDI3Yi1jY2IwLTRmYzctYWJjYS05ZmMwYTNlMTU3NTQvMC9GRjQ1RDBGNDRC N0I2M0I5NzZCNDFFRUUxOENDOTIzOTNDRjgxODRGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkY0NUQwRjQ0QjdCNjNCOTc2QjQxRUVFMThDQzkyMzkzQ0Y4 MTg0Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzI0OGQyN2ItY2NiMC00ZmM3LWFi Y2EtOWZjMGEzZTE1NzU0LzAvRkY0NUQwRjQ0QjdCNjNCOTc2QjQxRUVFMThDQzky MzkzQ0Y4MTg0Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADlyvn1MP+/mYRPcQRRPyG1E9reH7ORG0SM4 19w/CqeJI59rKiozQr9GVhLL1Qfl+vBq1hRyTpI2xnsh5jFmC1OURCiZppJFUAlQ fnwGRtTqRYVRzkKwz2DTK/924vLSLS5u3btL49Cax7Lgo605es0ITYtwf6HaSImg xDuuhE/jgu/AdmnOlk21cgNOiNd9JUK8DEW0iM45bVn+oPBn30WwVwsqvYz2lEKh 5Zw7JXH7fC6QJhrgz1lvwlUh7+DbpaULzaH3f5n2wK7jZEfHdlt18T+fLiWEkTje nZ+DbrqYtJuH6wi5YyoN/7PBSMX8YUZMhZnJK1l7Sy522CAr5ew= -----END CERTIFICATE-----Generated at Sun Jun 29 19:26:03 2025 by rpki-client