$ rpki-client -vvf repo-rpki.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/FF102371565831DDB9C06DF47DF79B1120C9861E.mft File: FF102371565831DDB9C06DF47DF79B1120C9861E.mft (raw, json) Hash identifier: hlhaM+V3ZTHLyzuNUkLdUVvWnlIWlsHMf0j6egLB7lE= Subject key identifier: 19:81:C0:24:6C:4F:EA:29:07:34:61:B2:25:86:C6:FB:11:2B:2F:85 Authority key identifier: FF:10:23:71:56:58:31:DD:B9:C0:6D:F4:7D:F7:9B:11:20:C9:86:1E Certificate issuer: /CN=FF102371565831DDB9C06DF47DF79B1120C9861E Certificate serial: 1EEDA848AE5ED865D185B9F40F3EF36CC8A01E50 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF102371565831DDB9C06DF47DF79B1120C9861E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/FF102371565831DDB9C06DF47DF79B1120C9861E.mft Manifest number: 96 Signing time: Sat 28 Jun 2025 12:01:08 +0000 Manifest this update: Sat 28 Jun 2025 11:56:08 +0000 Manifest next update: Tue 01 Jul 2025 22:31:08 +0000 Files and hashes: 1: FF102371565831DDB9C06DF47DF79B1120C9861E.crl (hash: 81qbsGzD8UkaO0C3t7a6NPql/JMv5T/yogl2oJhI7Dk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/FF102371565831DDB9C06DF47DF79B1120C9861E.crl rsync://repo-rpki.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/FF102371565831DDB9C06DF47DF79B1120C9861E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF102371565831DDB9C06DF47DF79B1120C9861E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 22:31:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:ed:a8:48:ae:5e:d8:65:d1:85:b9:f4:0f:3e:f3:6c:c8:a0:1e:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF102371565831DDB9C06DF47DF79B1120C9861E Validity Not Before: Jun 28 11:56:08 2025 GMT Not After : Jul 1 22:31:08 2025 GMT Subject: CN=1981C0246C4FEA29073461B22586C6FB112B2F85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:4f:30:ab:55:ba:86:60:76:5b:15:d8:d4:1f: 9d:5b:51:fd:47:8f:cf:62:88:5f:9f:b8:82:d8:64: 93:36:dd:3e:67:26:1e:f4:b3:03:5b:2d:bf:52:41: 83:29:4a:34:b2:43:1b:22:d5:04:fe:ee:90:17:8e: 23:2e:1e:8c:ac:bd:9e:ba:e4:ec:5e:4a:6d:d9:aa: 36:9d:27:c8:5e:f0:0d:f7:60:cc:8f:82:9c:36:bb: 62:20:39:f2:d7:b0:79:bc:e5:28:14:a2:fa:13:2d: 6b:4a:55:71:41:56:05:fd:f1:80:63:ac:b0:67:35: 97:01:91:fa:e4:87:c2:7e:b2:5a:0a:3d:63:01:f8: ef:69:b4:bb:24:d9:93:f2:34:b1:bf:0a:9b:82:83: 1c:4e:f9:c3:f4:10:88:9f:22:0a:c8:62:01:fd:2e: cc:f5:35:1f:2f:08:7d:09:a2:92:86:30:3b:38:af: c2:9f:b0:f0:6b:43:c1:6a:92:bc:1e:1f:60:9d:60: 64:94:74:2d:d2:c0:df:79:90:4f:b1:87:2f:64:a8: 8c:22:53:fa:99:6f:b0:92:af:a5:3a:f1:a6:aa:7b: a1:70:8c:b3:44:05:52:dc:8e:31:08:e2:25:73:8e: b7:c3:a3:99:21:c5:f6:78:96:67:01:9b:00:43:8e: 31:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:81:C0:24:6C:4F:EA:29:07:34:61:B2:25:86:C6:FB:11:2B:2F:85 X509v3 Authority Key Identifier: keyid:FF:10:23:71:56:58:31:DD:B9:C0:6D:F4:7D:F7:9B:11:20:C9:86:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/FF102371565831DDB9C06DF47DF79B1120C9861E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF102371565831DDB9C06DF47DF79B1120C9861E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/FF102371565831DDB9C06DF47DF79B1120C9861E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:33:7e:6b:ce:e3:96:24:0c:cb:f3:a0:f9:36:b7:a6:a5:fb: 73:10:13:1d:bb:60:9d:1a:55:14:6d:04:76:43:7a:26:30:74: 2a:5f:c4:bf:c6:1e:5b:7d:77:ea:f0:56:97:b9:1b:ae:1a:ed: ee:a2:b8:8b:54:36:d1:4b:9b:52:9d:ec:e8:b2:b3:1a:8e:0b: d9:be:48:5b:b1:4b:3a:ba:d6:1a:e9:86:e6:cd:0e:6e:56:5e: cf:bf:22:46:40:6c:d1:0a:1d:2a:82:09:98:9d:01:86:d9:94: 2d:91:b0:9d:66:8f:71:d5:9f:02:ba:0c:15:95:56:56:76:37: 27:e4:89:ee:1d:93:3a:73:c8:b7:e7:2d:46:e5:cf:06:8b:52: 44:60:a4:e2:05:79:5a:5e:8f:a8:df:56:b5:4f:ec:a1:14:bd: 7f:4e:5c:a1:fc:23:7a:6d:19:4c:eb:07:ab:ac:82:02:35:11: 5a:d4:31:8a:6a:d8:af:8d:15:f4:a2:60:83:42:e5:07:69:22: 55:dc:2b:13:32:eb:3f:4e:86:aa:32:30:59:4e:fd:71:4b:4d: 13:aa:c6:34:2c:16:eb:4b:7c:6c:a4:4f:63:b5:47:19:70:b8: a5:68:8a:fb:22:9f:c2:68:78:51:31:ee:8c:8b:d6:a4:06:06: 5f:3e:24:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHu2oSK5e2GXRhbn0Dz7zbMigHlAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkYxMDIzNzE1NjU4MzFEREI5QzA2REY0N0RGNzlCMTEy MEM5ODYxRTAeFw0yNTA2MjgxMTU2MDhaFw0yNTA3MDEyMjMxMDhaMDMxMTAvBgNV BAMTKDE5ODFDMDI0NkM0RkVBMjkwNzM0NjFCMjI1ODZDNkZCMTEyQjJGODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDITzCrVbqGYHZbFdjUH51bUf1H j89iiF+fuILYZJM23T5nJh70swNbLb9SQYMpSjSyQxsi1QT+7pAXjiMuHoysvZ66 5OxeSm3ZqjadJ8he8A33YMyPgpw2u2IgOfLXsHm85SgUovoTLWtKVXFBVgX98YBj rLBnNZcBkfrkh8J+sloKPWMB+O9ptLsk2ZPyNLG/CpuCgxxO+cP0EIifIgrIYgH9 Lsz1NR8vCH0JopKGMDs4r8KfsPBrQ8FqkrweH2CdYGSUdC3SwN95kE+xhy9kqIwi U/qZb7CSr6U68aaqe6FwjLNEBVLcjjEI4iVzjrfDo5khxfZ4lmcBmwBDjjGhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGYHAJGxP6ikHNGGyJYbG+xErL4UwHwYDVR0j BBgwFoAU/xAjcVZYMd25wG30ffebESDJhh4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NDNmMjllYS04NzRhLTRkMWEtYWJjYy03NTI5M2NiNTFhNmQvMC9GRjEwMjM3MTU2 NTgzMUREQjlDMDZERjQ3REY3OUIxMTIwQzk4NjFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkYxMDIzNzE1NjU4MzFEREI5QzA2REY0N0RGNzlCMTEyMEM5 ODYxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzQzZjI5ZWEtODc0YS00ZDFhLWFi Y2MtNzUyOTNjYjUxYTZkLzAvRkYxMDIzNzE1NjU4MzFEREI5QzA2REY0N0RGNzlC MTEyMEM5ODYxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABQzfmvO45YkDMvzoPk2t6al+3MQEx27YJ0a VRRtBHZDeiYwdCpfxL/GHlt9d+rwVpe5G64a7e6iuItUNtFLm1Kd7OiysxqOC9m+ SFuxSzq61hrphubNDm5WXs+/IkZAbNEKHSqCCZidAYbZlC2RsJ1mj3HVnwK6DBWV VlZ2Nyfkie4dkzpzyLfnLUblzwaLUkRgpOIFeVpej6jfVrVP7KEUvX9OXKH8I3pt GUzrB6usggI1EVrUMYpq2K+NFfSiYINC5QdpIlXcKxMy6z9OhqoyMFlO/XFLTROq xjQsFutLfGykT2O1RxlwuKVoivsin8JoeFEx7oyL1qQGBl8+JE0= -----END CERTIFICATE-----Generated at Sun Jun 29 18:55:47 2025 by rpki-client