$ rpki-client -vvf repo-rpki.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/FF96D30557BDACE26C511E1F48A3514643130EA8.mft File: FF96D30557BDACE26C511E1F48A3514643130EA8.mft (raw, json) Hash identifier: dB8j9/Vjkw2O4jACTZUVKP/zHofWRxv+cXUo3OyVIvg= Subject key identifier: C6:5A:00:1F:A8:9F:9E:74:D7:E3:46:DD:D5:06:1B:2E:06:E9:69:52 Authority key identifier: FF:96:D3:05:57:BD:AC:E2:6C:51:1E:1F:48:A3:51:46:43:13:0E:A8 Certificate issuer: /CN=FF96D30557BDACE26C511E1F48A3514643130EA8 Certificate serial: 5E08C1DC81CEA990AE5B771C4D90C20CFC1B9C5E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF96D30557BDACE26C511E1F48A3514643130EA8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/FF96D30557BDACE26C511E1F48A3514643130EA8.mft Manifest number: 95 Signing time: Sun 29 Jun 2025 22:01:27 +0000 Manifest this update: Sun 29 Jun 2025 21:56:27 +0000 Manifest next update: Thu 03 Jul 2025 05:50:27 +0000 Files and hashes: 1: FF96D30557BDACE26C511E1F48A3514643130EA8.crl (hash: 1WDQORwlh1nOTC02Na/nPsBauX8ksnYkxZ4mQ6SAaVU=) 2: 3130332e3232392e3133312e302f32342d3234203d3e20313530393632.roa (hash: 0vqEjbzJ2oTN8YUg5plSL7bME0j1cq9HckeFz0ga7Y8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/FF96D30557BDACE26C511E1F48A3514643130EA8.crl rsync://repo-rpki.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/FF96D30557BDACE26C511E1F48A3514643130EA8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF96D30557BDACE26C511E1F48A3514643130EA8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 05:50:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:08:c1:dc:81:ce:a9:90:ae:5b:77:1c:4d:90:c2:0c:fc:1b:9c:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF96D30557BDACE26C511E1F48A3514643130EA8 Validity Not Before: Jun 29 21:56:27 2025 GMT Not After : Jul 3 05:50:27 2025 GMT Subject: CN=C65A001FA89F9E74D7E346DDD5061B2E06E96952 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:88:0f:c5:a1:4b:e9:b4:4e:93:a8:58:c4:f2: 0c:a5:c3:b7:7a:09:75:02:65:e2:b1:f0:59:3e:c0: 6f:93:39:0a:f0:13:c8:e9:99:1d:08:f7:ea:19:47: df:dd:27:ea:e1:91:93:50:4e:41:32:9c:7b:23:02: 6f:7a:b7:0f:d6:82:5a:f5:87:27:a0:64:a3:1d:d9: 33:57:a7:da:0e:e1:a7:d9:67:6d:b1:58:34:c8:56: db:a1:41:18:1c:de:7c:9a:26:e8:79:37:f5:6d:f4: ae:91:70:7d:40:a1:1e:57:98:69:9e:31:d7:7f:31: 81:dc:52:4e:11:73:c4:b5:57:dc:bc:81:fe:9f:b2: c9:4a:9b:cc:8d:1c:f7:d4:9d:fa:f8:2a:52:db:39: 4b:ec:78:38:a3:34:0c:3a:0a:32:af:7d:86:d1:f2: c7:c2:60:79:38:76:89:87:b6:05:11:ce:f9:5f:6a: ed:fa:73:f4:ab:c2:b3:21:7d:73:7c:5c:d1:20:d2: 2d:5e:29:b2:fb:d8:48:7b:c5:01:39:92:ee:9b:90: b5:31:d6:89:21:ad:13:9c:cc:99:39:bb:04:2e:d5: 2f:e8:ae:e7:38:ec:a3:c4:5c:9a:b5:ce:be:af:f5: c7:be:22:20:00:74:34:63:f8:52:b9:b6:7a:41:0d: 38:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:5A:00:1F:A8:9F:9E:74:D7:E3:46:DD:D5:06:1B:2E:06:E9:69:52 X509v3 Authority Key Identifier: keyid:FF:96:D3:05:57:BD:AC:E2:6C:51:1E:1F:48:A3:51:46:43:13:0E:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/FF96D30557BDACE26C511E1F48A3514643130EA8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF96D30557BDACE26C511E1F48A3514643130EA8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/FF96D30557BDACE26C511E1F48A3514643130EA8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:f7:85:4e:b9:ee:b1:42:7d:8d:0b:e0:76:1a:4d:55:d5:d0: 4d:fa:dd:1c:b3:ee:5e:56:05:20:8c:f3:26:fa:fd:2e:c2:3e: 83:7a:8a:aa:d3:d8:fe:32:f7:4c:c0:76:06:f2:4c:57:a2:6b: eb:90:a0:fa:75:a1:b9:d9:9d:89:ea:cd:b3:4c:d5:e7:92:08: d1:df:2e:b5:78:3c:ee:32:e7:73:f2:db:04:0d:47:a2:6d:c5: 7e:23:91:d3:b3:1a:f0:32:ae:2b:ef:d4:73:dc:c0:ed:ef:b4: 74:71:ae:e9:a6:ef:b4:20:7b:01:cd:11:14:8d:60:c1:0f:5e: 86:de:f0:1f:10:77:4b:9c:10:41:91:67:63:74:fd:26:e7:a4: 66:b3:5c:3d:65:03:70:78:45:ec:f9:71:37:f2:87:39:5d:34: da:af:d6:d3:d5:11:c6:b1:17:fb:1b:ff:46:10:8f:f9:cb:9c: ab:94:87:2d:0b:95:8c:5c:02:24:d5:1f:e3:e4:24:f8:68:97: 82:bb:8a:3e:14:be:c8:76:7d:6d:97:e3:65:4b:8d:2b:c2:2d: f2:5c:19:d8:3a:43:4a:ec:d5:b5:83:49:e8:92:99:98:6d:5b: d7:1f:50:a2:33:3d:1a:7d:a0:67:90:10:7a:8e:10:f5:1a:1f: b7:8f:87:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXgjB3IHOqZCuW3ccTZDCDPwbnF4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY5NkQzMDU1N0JEQUNFMjZDNTExRTFGNDhBMzUxNDY0 MzEzMEVBODAeFw0yNTA2MjkyMTU2MjdaFw0yNTA3MDMwNTUwMjdaMDMxMTAvBgNV BAMTKEM2NUEwMDFGQTg5RjlFNzREN0UzNDZEREQ1MDYxQjJFMDZFOTY5NTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFiA/FoUvptE6TqFjE8gylw7d6 CXUCZeKx8Fk+wG+TOQrwE8jpmR0I9+oZR9/dJ+rhkZNQTkEynHsjAm96tw/Wglr1 hyegZKMd2TNXp9oO4afZZ22xWDTIVtuhQRgc3nyaJuh5N/Vt9K6RcH1AoR5XmGme Mdd/MYHcUk4Rc8S1V9y8gf6fsslKm8yNHPfUnfr4KlLbOUvseDijNAw6CjKvfYbR 8sfCYHk4domHtgURzvlfau36c/SrwrMhfXN8XNEg0i1eKbL72Eh7xQE5ku6bkLUx 1okhrROczJk5uwQu1S/oruc47KPEXJq1zr6v9ce+IiAAdDRj+FK5tnpBDTh5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxloAH6ifnnTX40bd1QYbLgbpaVIwHwYDVR0j BBgwFoAU/5bTBVe9rOJsUR4fSKNRRkMTDqgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NDJjMWYzMi04MWFjLTQxMTgtYmUyZi01NzRjYTViNTQxZWEvMC9GRjk2RDMwNTU3 QkRBQ0UyNkM1MTFFMUY0OEEzNTE0NjQzMTMwRUE4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkY5NkQzMDU1N0JEQUNFMjZDNTExRTFGNDhBMzUxNDY0MzEz MEVBOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzQyYzFmMzItODFhYy00MTE4LWJl MmYtNTc0Y2E1YjU0MWVhLzAvRkY5NkQzMDU1N0JEQUNFMjZDNTExRTFGNDhBMzUx NDY0MzEzMEVBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGL3hU657rFCfY0L4HYaTVXV0E363Ryz7l5W BSCM8yb6/S7CPoN6iqrT2P4y90zAdgbyTFeia+uQoPp1obnZnYnqzbNM1eeSCNHf LrV4PO4y53Py2wQNR6JtxX4jkdOzGvAyrivv1HPcwO3vtHRxrumm77QgewHNERSN YMEPXobe8B8Qd0ucEEGRZ2N0/SbnpGazXD1lA3B4Rez5cTfyhzldNNqv1tPVEcax F/sb/0YQj/nLnKuUhy0LlYxcAiTVH+PkJPhol4K7ij4Uvsh2fW2X42VLjSvCLfJc Gdg6Q0rs1bWDSeiSmZhtW9cfUKIzPRp9oGeQEHqOEPUaH7ePh0Q= -----END CERTIFICATE-----Generated at Tue Jul 1 23:27:58 2025 by rpki-client