$ rpki-client -vvf repo-rpki.idnic.net/repo/483a1db2-b11e-4cdc-a25c-0f124cae70ee/0/FF467F8613654288ED5F52ACB466941450FA5DF8.mft File: FF467F8613654288ED5F52ACB466941450FA5DF8.mft (raw, json) Hash identifier: Mc35m8NNoJCJuohVjPinwru7Fr+3dGI8rCS4EBG5gr0= Subject key identifier: 77:0A:BE:44:8C:05:1D:5A:49:04:2F:5B:F1:20:C9:DF:0C:54:BC:70 Authority key identifier: FF:46:7F:86:13:65:42:88:ED:5F:52:AC:B4:66:94:14:50:FA:5D:F8 Certificate issuer: /CN=FF467F8613654288ED5F52ACB466941450FA5DF8 Certificate serial: 05DC535C8AA00B656637AC38984F447853803B6B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF467F8613654288ED5F52ACB466941450FA5DF8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/483a1db2-b11e-4cdc-a25c-0f124cae70ee/0/FF467F8613654288ED5F52ACB466941450FA5DF8.mft Manifest number: 01E6 Signing time: Sun 29 Jun 2025 20:41:09 +0000 Manifest this update: Sun 29 Jun 2025 20:36:09 +0000 Manifest next update: Thu 03 Jul 2025 03:00:09 +0000 Files and hashes: 1: 3130332e3136342e3137342e302f32332d3234203d3e203538383231.roa (hash: jzcCuMzgA2hFvogRgeLk2i1RvRvQmpOi1ucxBzHIX1A=) 2: FF467F8613654288ED5F52ACB466941450FA5DF8.crl (hash: B4CZNOCbpQLjKQx4QvGCYhy5leVheqEDGObmD/NVsHs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/483a1db2-b11e-4cdc-a25c-0f124cae70ee/0/FF467F8613654288ED5F52ACB466941450FA5DF8.crl rsync://repo-rpki.idnic.net/repo/483a1db2-b11e-4cdc-a25c-0f124cae70ee/0/FF467F8613654288ED5F52ACB466941450FA5DF8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF467F8613654288ED5F52ACB466941450FA5DF8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 03:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:dc:53:5c:8a:a0:0b:65:66:37:ac:38:98:4f:44:78:53:80:3b:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF467F8613654288ED5F52ACB466941450FA5DF8 Validity Not Before: Jun 29 20:36:09 2025 GMT Not After : Jul 3 03:00:09 2025 GMT Subject: CN=770ABE448C051D5A49042F5BF120C9DF0C54BC70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5c:c0:6f:d7:62:c7:d1:28:e7:b6:f9:b0:e7: ec:5e:00:b0:5d:8e:be:61:1c:74:98:86:b6:35:30: b8:83:0e:c0:c6:d0:f2:aa:9f:fd:0c:a1:5b:77:1e: 89:b1:32:9b:16:5b:dc:b5:e4:4f:66:55:78:ca:45: f6:f2:7b:27:36:19:25:cc:70:8c:6e:19:9b:c2:b5: 6a:f7:5b:da:ad:f6:99:db:9c:82:e6:a7:35:2a:a7: 09:6c:10:c0:ee:03:f8:50:a4:71:c7:d6:da:70:e2: b2:af:c8:4f:c3:d2:86:65:77:7c:5a:ab:97:6d:8b: 6b:9f:dc:27:1e:18:4d:88:09:9b:92:8d:42:a3:30: aa:2a:a4:8c:d8:b1:20:25:b1:9e:7f:9a:ec:c2:9f: a3:4b:56:2a:82:7d:46:8b:ff:8c:43:a6:b1:c3:99: f9:07:63:40:6a:55:3c:18:28:62:4f:ab:82:83:17: 3f:27:a9:8b:fb:13:71:d1:1c:f2:4f:72:47:95:61: eb:98:e1:17:9c:69:5c:11:80:d9:4e:a7:60:6a:d5: 42:b1:63:15:b5:e0:50:21:c9:d4:e4:7c:2e:78:85: 1c:e2:4c:f1:e3:63:e9:94:c0:1a:9b:e7:b9:69:ec: fb:46:02:6e:71:35:69:43:6d:02:73:67:6c:0d:be: 0a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:0A:BE:44:8C:05:1D:5A:49:04:2F:5B:F1:20:C9:DF:0C:54:BC:70 X509v3 Authority Key Identifier: keyid:FF:46:7F:86:13:65:42:88:ED:5F:52:AC:B4:66:94:14:50:FA:5D:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/483a1db2-b11e-4cdc-a25c-0f124cae70ee/0/FF467F8613654288ED5F52ACB466941450FA5DF8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF467F8613654288ED5F52ACB466941450FA5DF8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/483a1db2-b11e-4cdc-a25c-0f124cae70ee/0/FF467F8613654288ED5F52ACB466941450FA5DF8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:94:f7:9f:57:e9:65:ca:6a:0b:99:7d:9f:cb:2e:3d:3e:e9: 9e:91:f4:73:b8:df:47:31:40:14:42:cc:dd:e2:d0:36:10:5a: dc:fa:54:27:0e:ec:5e:b8:31:69:c5:62:ce:2c:c5:ae:c0:43: 84:d7:18:f0:16:25:b7:61:99:b9:54:fb:19:4d:68:72:3c:a2: b6:ca:ef:11:9e:68:a6:6a:01:91:a3:1b:02:01:9c:83:4f:60: a1:61:a4:bb:a0:13:48:de:9e:4b:89:8d:f5:95:c7:93:81:f8: e7:4e:28:52:31:04:ba:63:71:95:bf:5f:d8:76:c4:8c:52:85: dc:56:e3:d8:bc:31:18:23:36:18:97:df:61:53:9b:c2:44:81: c0:6c:7e:ed:57:89:78:05:3f:55:58:80:36:88:aa:b8:75:d2: 4b:12:f3:51:55:e4:99:2e:a4:c7:80:1c:d0:07:53:1a:b6:b2: b3:ac:14:61:78:16:1c:0c:ce:47:d6:e6:e6:ea:90:76:c2:f5: 6a:ec:3c:4a:e0:c3:68:7d:ea:0e:1f:a6:10:e1:da:69:bb:56: a2:39:25:1e:6c:6f:1b:ac:d0:dc:21:55:d7:d3:64:3a:03:df: 60:9f:08:e5:6a:07:10:82:d8:1b:96:be:9e:08:b2:61:cb:b5: ee:76:cb:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBdxTXIqgC2VmN6w4mE9EeFOAO2swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY0NjdGODYxMzY1NDI4OEVENUY1MkFDQjQ2Njk0MTQ1 MEZBNURGODAeFw0yNTA2MjkyMDM2MDlaFw0yNTA3MDMwMzAwMDlaMDMxMTAvBgNV BAMTKDc3MEFCRTQ0OEMwNTFENUE0OTA0MkY1QkYxMjBDOURGMEM1NEJDNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuXMBv12LH0Sjntvmw5+xeALBd jr5hHHSYhrY1MLiDDsDG0PKqn/0MoVt3HomxMpsWW9y15E9mVXjKRfbyeyc2GSXM cIxuGZvCtWr3W9qt9pnbnILmpzUqpwlsEMDuA/hQpHHH1tpw4rKvyE/D0oZld3xa q5dti2uf3CceGE2ICZuSjUKjMKoqpIzYsSAlsZ5/muzCn6NLViqCfUaL/4xDprHD mfkHY0BqVTwYKGJPq4KDFz8nqYv7E3HRHPJPckeVYeuY4RecaVwRgNlOp2Bq1UKx YxW14FAhydTkfC54hRziTPHjY+mUwBqb57lp7PtGAm5xNWlDbQJzZ2wNvgrdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdwq+RIwFHVpJBC9b8SDJ3wxUvHAwHwYDVR0j BBgwFoAU/0Z/hhNlQojtX1KstGaUFFD6XfgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ODNhMWRiMi1iMTFlLTRjZGMtYTI1Yy0wZjEyNGNhZTcwZWUvMC9GRjQ2N0Y4NjEz NjU0Mjg4RUQ1RjUyQUNCNDY2OTQxNDUwRkE1REY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkY0NjdGODYxMzY1NDI4OEVENUY1MkFDQjQ2Njk0MTQ1MEZB NURGOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDgzYTFkYjItYjExZS00Y2RjLWEy NWMtMGYxMjRjYWU3MGVlLzAvRkY0NjdGODYxMzY1NDI4OEVENUY1MkFDQjQ2Njk0 MTQ1MEZBNURGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJSU959X6WXKaguZfZ/LLj0+6Z6R9HO430cx QBRCzN3i0DYQWtz6VCcO7F64MWnFYs4sxa7AQ4TXGPAWJbdhmblU+xlNaHI8orbK 7xGeaKZqAZGjGwIBnINPYKFhpLugE0jenkuJjfWVx5OB+OdOKFIxBLpjcZW/X9h2 xIxShdxW49i8MRgjNhiX32FTm8JEgcBsfu1XiXgFP1VYgDaIqrh10ksS81FV5Jku pMeAHNAHUxq2srOsFGF4FhwMzkfW5ubqkHbC9WrsPErgw2h96g4fphDh2mm7VqI5 JR5sbxus0NwhVdfTZDoD32CfCOVqBxCC2BuWvp4IsmHLte52y1s= -----END CERTIFICATE-----Generated at Mon Jun 30 07:06:52 2025 by rpki-client