$ rpki-client -vvf repo-rpki.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/FF102371565831DDB9C06DF47DF79B1120C9861E.mft File: FF102371565831DDB9C06DF47DF79B1120C9861E.mft (raw, json) Hash identifier: Zsa8O9WAA9E8f/bi3sGL4XpYjA1H9EUzZviHOnE2g9E= Subject key identifier: 28:07:F0:9D:14:CD:62:11:16:FA:E4:31:6F:09:EE:F2:8F:21:82:42 Authority key identifier: FF:10:23:71:56:58:31:DD:B9:C0:6D:F4:7D:F7:9B:11:20:C9:86:1E Certificate issuer: /CN=FF102371565831DDB9C06DF47DF79B1120C9861E Certificate serial: 156F5ABD82F82A0541158D4F233955CFE84617DC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF102371565831DDB9C06DF47DF79B1120C9861E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/FF102371565831DDB9C06DF47DF79B1120C9861E.mft Manifest number: B0 Signing time: Sat 23 Aug 2025 10:21:18 +0000 Manifest this update: Sat 23 Aug 2025 10:16:18 +0000 Manifest next update: Tue 26 Aug 2025 20:58:18 +0000 Files and hashes: 1: 3130332e332e3233332e302f32342d3234203d3e203538343837.roa (hash: J+VrJkjfilmZKoAgsIWnKv1mOwdSs14Mc87IKiPWNdQ=) 2: FF102371565831DDB9C06DF47DF79B1120C9861E.crl (hash: SGfWVBJdEu58s58EScAT7/a3MgsEfB6CrY8uCi5D7zc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/FF102371565831DDB9C06DF47DF79B1120C9861E.crl rsync://repo-rpki.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/FF102371565831DDB9C06DF47DF79B1120C9861E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF102371565831DDB9C06DF47DF79B1120C9861E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:19:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:6f:5a:bd:82:f8:2a:05:41:15:8d:4f:23:39:55:cf:e8:46:17:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF102371565831DDB9C06DF47DF79B1120C9861E Validity Not Before: Aug 23 10:16:18 2025 GMT Not After : Aug 26 20:58:18 2025 GMT Subject: CN=2807F09D14CD621116FAE4316F09EEF28F218242 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:fa:1e:8f:4b:e8:bb:93:02:57:7f:d2:88:2f: 75:d5:58:4e:66:0f:14:1c:c0:c5:8b:45:ac:a8:d4: 37:72:88:75:1b:d8:b5:d2:80:75:01:d6:ad:e2:a3: ff:ff:42:3a:8b:53:88:12:71:a5:76:32:00:7d:4a: d5:56:a6:ad:1a:76:90:33:36:ab:b9:8a:70:19:be: c9:d2:d9:d4:c9:f6:df:3f:15:e0:18:44:a9:be:10: e7:af:63:d9:a1:3c:ff:39:4d:c5:d9:88:07:ad:f8: f3:cf:f9:f5:af:44:e0:c1:82:8a:f2:8f:f1:56:76: 77:eb:ae:10:3c:6f:0c:da:e6:6f:74:15:28:12:ef: 70:e7:e4:2c:1a:65:52:40:bc:0b:d6:fb:11:b3:f9: c6:6e:69:36:84:32:a2:99:3f:9b:3e:69:20:a4:9e: 69:a6:3a:2c:ab:7a:9d:dd:4d:ab:d6:6f:2c:37:c7: 15:6a:87:d1:41:f1:66:9e:81:0a:5a:d3:40:25:31: 35:13:77:42:ab:d2:ec:78:15:c5:6b:b3:5c:f9:04: 3c:af:55:49:f2:ae:5f:90:13:2b:8f:e0:d5:d6:4d: 24:8e:3c:3d:44:4b:fe:1d:78:a7:e5:e4:0c:cd:64: ab:cb:ac:d4:a3:33:d6:ed:ce:02:61:3f:87:a4:2e: cf:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:07:F0:9D:14:CD:62:11:16:FA:E4:31:6F:09:EE:F2:8F:21:82:42 X509v3 Authority Key Identifier: keyid:FF:10:23:71:56:58:31:DD:B9:C0:6D:F4:7D:F7:9B:11:20:C9:86:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/FF102371565831DDB9C06DF47DF79B1120C9861E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF102371565831DDB9C06DF47DF79B1120C9861E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/FF102371565831DDB9C06DF47DF79B1120C9861E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:86:d7:5f:8d:bb:a2:1f:ef:38:28:6a:fb:31:4e:76:be:1f: d0:a0:cd:4b:85:59:a4:44:fa:0c:3a:06:c4:6b:c4:24:96:cd: 50:b4:d1:f7:bf:ff:45:ff:d3:5f:f5:b9:8d:79:61:a2:bd:a2: 8f:1a:17:ff:f1:83:3e:01:8a:33:9e:7f:7b:73:70:a1:e0:70: 28:a3:74:10:e7:ee:ed:71:44:45:b0:95:7c:52:cd:f2:02:6a: 12:5b:c6:df:89:c4:a6:03:d6:ea:8c:8e:da:28:cb:3c:59:e9: 17:4b:45:14:92:d5:91:25:14:21:7c:2c:5a:37:d6:60:be:e6: 45:cf:ee:09:1a:5b:9b:82:06:18:70:ae:aa:87:df:03:52:b5: e4:9a:a3:b1:b1:e2:f7:6f:e0:5d:4e:fc:f1:93:2c:57:2f:e4: 09:0f:16:8c:f6:07:6f:6f:db:91:0f:fa:81:6b:e3:63:af:7c: 53:d6:7b:70:4b:41:95:bc:85:96:cf:96:f7:2a:73:98:15:a4: ed:af:9c:61:56:81:80:00:52:98:af:93:ed:8a:dc:b8:c7:86: dd:d7:90:c6:ed:a5:31:79:e0:1e:e4:dd:b8:e6:d6:b3:40:58: b6:3d:7d:9d:91:1a:49:4a:d4:6a:1b:93:31:e0:78:ab:08:ed: 53:e9:79:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFW9avYL4KgVBFY1PIzlVz+hGF9wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkYxMDIzNzE1NjU4MzFEREI5QzA2REY0N0RGNzlCMTEy MEM5ODYxRTAeFw0yNTA4MjMxMDE2MThaFw0yNTA4MjYyMDU4MThaMDMxMTAvBgNV BAMTKDI4MDdGMDlEMTRDRDYyMTExNkZBRTQzMTZGMDlFRUYyOEYyMTgyNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS+h6PS+i7kwJXf9KIL3XVWE5m DxQcwMWLRayo1DdyiHUb2LXSgHUB1q3io///QjqLU4gScaV2MgB9StVWpq0adpAz Nqu5inAZvsnS2dTJ9t8/FeAYRKm+EOevY9mhPP85TcXZiAet+PPP+fWvRODBgory j/FWdnfrrhA8bwza5m90FSgS73Dn5CwaZVJAvAvW+xGz+cZuaTaEMqKZP5s+aSCk nmmmOiyrep3dTavWbyw3xxVqh9FB8WaegQpa00AlMTUTd0Kr0ux4FcVrs1z5BDyv VUnyrl+QEyuP4NXWTSSOPD1ES/4deKfl5AzNZKvLrNSjM9btzgJhP4ekLs8DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKAfwnRTNYhEW+uQxbwnu8o8hgkIwHwYDVR0j BBgwFoAU/xAjcVZYMd25wG30ffebESDJhh4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NDNmMjllYS04NzRhLTRkMWEtYWJjYy03NTI5M2NiNTFhNmQvMC9GRjEwMjM3MTU2 NTgzMUREQjlDMDZERjQ3REY3OUIxMTIwQzk4NjFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkYxMDIzNzE1NjU4MzFEREI5QzA2REY0N0RGNzlCMTEyMEM5 ODYxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzQzZjI5ZWEtODc0YS00ZDFhLWFi Y2MtNzUyOTNjYjUxYTZkLzAvRkYxMDIzNzE1NjU4MzFEREI5QzA2REY0N0RGNzlC MTEyMEM5ODYxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJCG11+Nu6If7zgoavsxTna+H9CgzUuFWaRE +gw6BsRrxCSWzVC00fe//0X/01/1uY15YaK9oo8aF//xgz4BijOef3tzcKHgcCij dBDn7u1xREWwlXxSzfICahJbxt+JxKYD1uqMjtooyzxZ6RdLRRSS1ZElFCF8LFo3 1mC+5kXP7gkaW5uCBhhwrqqH3wNSteSao7Gx4vdv4F1O/PGTLFcv5AkPFoz2B29v 25EP+oFr42OvfFPWe3BLQZW8hZbPlvcqc5gVpO2vnGFWgYAAUpivk+2K3LjHht3X kMbtpTF54B7k3bjm1rNAWLY9fZ2RGklK1GobkzHgeKsI7VPpeVc= -----END CERTIFICATE-----Generated at Sat Aug 23 12:09:25 2025 by rpki-client