$ rpki-client -vvf repo-rpki.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/FF96D30557BDACE26C511E1F48A3514643130EA8.mft File: FF96D30557BDACE26C511E1F48A3514643130EA8.mft (raw, json) Hash identifier: eQZr8DSmuBC/HfUWbf20JQIee7m5KGR6aX9iWc3KUYg= Subject key identifier: 1C:B2:5D:6F:FD:3C:CD:C9:D6:8D:59:55:E9:3F:8A:91:40:0A:A2:5F Authority key identifier: FF:96:D3:05:57:BD:AC:E2:6C:51:1E:1F:48:A3:51:46:43:13:0E:A8 Certificate issuer: /CN=FF96D30557BDACE26C511E1F48A3514643130EA8 Certificate serial: 5759A7EBCA1619AAC37AA47C5AF17A25E90BBB35 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF96D30557BDACE26C511E1F48A3514643130EA8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/FF96D30557BDACE26C511E1F48A3514643130EA8.mft Manifest number: AD Signing time: Thu 21 Aug 2025 10:31:28 +0000 Manifest this update: Thu 21 Aug 2025 10:26:28 +0000 Manifest next update: Sun 24 Aug 2025 22:22:28 +0000 Files and hashes: 1: 3130332e3232392e3133312e302f32342d3234203d3e20313530393632.roa (hash: ATfPtcSN9IeC66O3vEUygO5SRQOxL5VmkMshCygiymo=) 2: FF96D30557BDACE26C511E1F48A3514643130EA8.crl (hash: JfzSBv/Yi5fySkccD8muhl4I4WICMNAFaMFLd8xgcMc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/FF96D30557BDACE26C511E1F48A3514643130EA8.crl rsync://repo-rpki.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/FF96D30557BDACE26C511E1F48A3514643130EA8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF96D30557BDACE26C511E1F48A3514643130EA8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 22:22:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:59:a7:eb:ca:16:19:aa:c3:7a:a4:7c:5a:f1:7a:25:e9:0b:bb:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF96D30557BDACE26C511E1F48A3514643130EA8 Validity Not Before: Aug 21 10:26:28 2025 GMT Not After : Aug 24 22:22:28 2025 GMT Subject: CN=1CB25D6FFD3CCDC9D68D5955E93F8A91400AA25F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:7b:d6:9c:40:11:7e:b9:cf:b2:77:a5:5a:52: 88:33:59:7d:4b:86:a9:c5:ef:7e:af:a5:52:77:38: e5:72:03:fd:f6:43:45:df:1b:3a:74:b8:28:81:e3: a3:3d:38:3e:29:d4:aa:dd:65:d0:92:46:9f:e5:7e: e9:3f:0f:a5:89:29:9d:66:bb:fe:cb:23:d0:b0:60: aa:2d:f4:54:6c:67:fb:61:e8:56:00:f5:c3:4e:73: 5b:86:47:d7:ea:bd:fa:c0:4d:63:bb:13:a9:5d:45: c5:94:69:92:57:d0:bc:a1:9e:14:0b:64:93:99:ee: 90:7d:e9:92:1e:0e:8a:91:d3:fa:32:f5:67:d8:8f: 74:51:83:19:72:66:5f:8e:45:5a:7c:66:2c:97:fb: 5b:27:c6:66:d4:b8:57:93:d6:5b:6b:89:36:ac:e4: 86:39:37:d9:32:8f:a8:3e:a7:33:c2:30:6c:c8:2e: 0b:79:69:34:3a:82:90:cb:38:d4:59:62:0a:6f:6e: d6:6b:d2:06:2f:07:70:a8:c3:b2:fb:ec:26:70:cd: 38:6b:97:d0:72:78:13:6e:0e:d2:bf:f1:f5:1d:08: 46:b8:45:2a:66:09:9c:5c:3d:e6:3f:8a:f9:13:41: e8:f0:d5:da:86:30:c5:3f:cc:bc:57:3b:c6:12:cf: 77:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:B2:5D:6F:FD:3C:CD:C9:D6:8D:59:55:E9:3F:8A:91:40:0A:A2:5F X509v3 Authority Key Identifier: keyid:FF:96:D3:05:57:BD:AC:E2:6C:51:1E:1F:48:A3:51:46:43:13:0E:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/FF96D30557BDACE26C511E1F48A3514643130EA8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF96D30557BDACE26C511E1F48A3514643130EA8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/FF96D30557BDACE26C511E1F48A3514643130EA8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:07:c4:8c:19:df:2a:7a:84:76:c3:ec:d6:73:39:be:0a:09: ad:0b:d0:2a:d7:db:11:b2:e0:81:4d:76:a0:cf:46:8a:e9:79: a6:80:0a:a6:e0:28:08:4d:dc:9c:1b:3c:2f:52:df:b4:dd:88: 0a:ea:8f:92:37:4f:c6:81:66:51:db:58:77:b5:80:b5:6a:ef: 3b:e8:cf:40:da:e1:e5:d7:1d:47:1c:26:85:a5:ac:63:4d:32: 32:a4:d0:f1:29:fe:ce:32:98:ca:1c:2d:34:b3:3b:f3:6d:4d: 4b:6c:5b:12:c7:5d:21:48:02:7f:33:2f:0b:8f:4d:51:fa:73: 1f:b6:bf:a1:b1:05:e5:6c:05:61:81:da:ae:5f:f7:e6:59:d8: 83:10:9c:d9:ef:44:93:18:d1:67:7d:cb:ea:4e:ac:3e:f1:1e: 93:1b:01:75:5e:20:b9:49:14:10:e5:d3:91:ae:14:02:b6:82: 9a:fb:69:49:47:91:9d:83:04:30:c5:c8:23:9a:ab:47:47:56: b6:9c:c2:bc:16:f0:7a:c1:5e:ae:59:28:89:e0:93:82:d9:47: b4:99:53:84:23:8a:f8:ea:8d:2e:d8:43:2d:a3:b4:5c:22:db: f0:18:41:38:6b:d5:71:c5:2d:2d:82:67:ff:28:80:e9:28:7a: 10:42:37:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV1mn68oWGarDeqR8WvF6JekLuzUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY5NkQzMDU1N0JEQUNFMjZDNTExRTFGNDhBMzUxNDY0 MzEzMEVBODAeFw0yNTA4MjExMDI2MjhaFw0yNTA4MjQyMjIyMjhaMDMxMTAvBgNV BAMTKDFDQjI1RDZGRkQzQ0NEQzlENjhENTk1NUU5M0Y4QTkxNDAwQUEyNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqe9acQBF+uc+yd6VaUogzWX1L hqnF736vpVJ3OOVyA/32Q0XfGzp0uCiB46M9OD4p1KrdZdCSRp/lfuk/D6WJKZ1m u/7LI9CwYKot9FRsZ/th6FYA9cNOc1uGR9fqvfrATWO7E6ldRcWUaZJX0LyhnhQL ZJOZ7pB96ZIeDoqR0/oy9WfYj3RRgxlyZl+ORVp8ZiyX+1snxmbUuFeT1ltriTas 5IY5N9kyj6g+pzPCMGzILgt5aTQ6gpDLONRZYgpvbtZr0gYvB3Cow7L77CZwzThr l9ByeBNuDtK/8fUdCEa4RSpmCZxcPeY/ivkTQejw1dqGMMU/zLxXO8YSz3d5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHLJdb/08zcnWjVlV6T+KkUAKol8wHwYDVR0j BBgwFoAU/5bTBVe9rOJsUR4fSKNRRkMTDqgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NDJjMWYzMi04MWFjLTQxMTgtYmUyZi01NzRjYTViNTQxZWEvMC9GRjk2RDMwNTU3 QkRBQ0UyNkM1MTFFMUY0OEEzNTE0NjQzMTMwRUE4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkY5NkQzMDU1N0JEQUNFMjZDNTExRTFGNDhBMzUxNDY0MzEz MEVBOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzQyYzFmMzItODFhYy00MTE4LWJl MmYtNTc0Y2E1YjU0MWVhLzAvRkY5NkQzMDU1N0JEQUNFMjZDNTExRTFGNDhBMzUx NDY0MzEzMEVBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEQHxIwZ3yp6hHbD7NZzOb4KCa0L0CrX2xGy 4IFNdqDPRorpeaaACqbgKAhN3JwbPC9S37TdiArqj5I3T8aBZlHbWHe1gLVq7zvo z0Da4eXXHUccJoWlrGNNMjKk0PEp/s4ymMocLTSzO/NtTUtsWxLHXSFIAn8zLwuP TVH6cx+2v6GxBeVsBWGB2q5f9+ZZ2IMQnNnvRJMY0Wd9y+pOrD7xHpMbAXVeILlJ FBDl05GuFAK2gpr7aUlHkZ2DBDDFyCOaq0dHVracwrwW8HrBXq5ZKIngk4LZR7SZ U4QjivjqjS7YQy2jtFwi2/AYQThr1XHFLS2CZ/8ogOkoehBCN6U= -----END CERTIFICATE-----Generated at Sat Aug 23 10:36:19 2025 by rpki-client