$ rpki-client -vvf repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.mft File: FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.mft (raw, json) Hash identifier: BCksPeWfdNb/L/pGpCIcTixTRxeJsx226B/KRWbf00c= Subject key identifier: 72:0F:D5:2A:05:A3:49:75:19:A4:5E:4B:2A:DB:EF:8C:D8:D7:68:9F Authority key identifier: FF:89:F2:3B:CB:C4:26:35:E9:7A:E1:5A:7F:B6:9E:1E:09:A9:7D:AF Certificate issuer: /CN=FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF Certificate serial: 0545930FAE83C0308D945530B49A66CC751ABA6A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.mft Manifest number: 0290 Signing time: Sat 23 Aug 2025 17:52:09 +0000 Manifest this update: Sat 23 Aug 2025 17:47:09 +0000 Manifest next update: Wed 27 Aug 2025 00:46:09 +0000 Files and hashes: 1: 3130332e3136332e3138352e302f32342d3234203d3e20313432333636.roa (hash: rBHXQQE56sq6EsG7xu2y3Ai8w3KX+cJsV+YvOEbZG7g=) 2: 3130332e3136332e3138342e302f32342d3234203d3e20313432333636.roa (hash: T0kgQ8xq7nBxfVnwpyYEmmzA0fn9DjLFvoVcfJfTj5g=) 3: FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.crl (hash: K7ODz7GuBxLp4Vra9PLQeyhgP+ik9Y7wGeihzY6HqRs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.crl rsync://repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 23:42:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:45:93:0f:ae:83:c0:30:8d:94:55:30:b4:9a:66:cc:75:1a:ba:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF Validity Not Before: Aug 23 17:47:09 2025 GMT Not After : Aug 27 00:46:09 2025 GMT Subject: CN=720FD52A05A3497519A45E4B2ADBEF8CD8D7689F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:4a:6f:98:a4:e9:22:ca:6c:9e:98:80:76:6e: 87:4d:2b:9f:c2:74:d9:d3:4a:6a:b5:e0:f3:27:ea: 24:f2:9a:6a:db:c5:99:7d:6a:60:35:27:da:3d:a1: 60:e9:c7:5e:b9:8d:b6:8a:21:5d:51:e5:a4:90:b9: 20:e2:d0:5a:ed:3e:e6:95:82:19:fb:87:84:86:69: 8b:a9:29:18:26:73:32:d2:1f:42:e6:2c:1e:de:e0: d4:18:0a:49:25:cb:8c:43:40:42:21:79:d9:9d:9f: 26:77:10:50:d6:93:c4:81:27:0e:00:16:e1:93:d3: ed:ca:57:76:49:c7:c0:2a:94:12:5f:5f:7d:d5:69: b7:93:3a:4f:63:61:75:48:ec:d4:6c:fe:2a:14:ea: df:58:2a:9d:3b:1f:5e:a4:e9:e5:a0:11:5e:07:d2: fa:c5:a4:68:d6:10:1b:fb:7e:38:ad:23:5b:e4:a4: 73:63:b1:b1:50:37:72:36:c0:6d:3a:9d:d5:b9:a5: a8:f8:4c:0e:a7:53:33:07:9f:c5:f6:61:00:3d:69: 06:eb:80:46:62:a3:1c:ea:58:00:1a:a4:cb:2f:31: 71:93:ad:40:31:78:45:a0:17:44:5a:d4:76:d7:74: 23:ac:5e:df:c6:c3:3d:97:a0:05:c0:91:8c:b2:62: 41:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:0F:D5:2A:05:A3:49:75:19:A4:5E:4B:2A:DB:EF:8C:D8:D7:68:9F X509v3 Authority Key Identifier: keyid:FF:89:F2:3B:CB:C4:26:35:E9:7A:E1:5A:7F:B6:9E:1E:09:A9:7D:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:f3:c3:3c:22:04:29:b4:65:b6:a3:1a:49:d9:01:d8:5f:b9: 1d:3d:a3:c0:d4:7a:a7:0e:15:32:e6:2a:99:63:e1:1a:81:31: b2:e4:8c:fb:e3:5e:7e:a5:68:10:ad:b6:dd:51:a4:be:4c:ea: ea:12:cc:01:ad:21:d3:5a:ea:b2:df:e4:30:11:32:f7:9f:3d: ce:7a:34:c6:ca:4d:b5:40:3e:2b:7b:15:c3:6b:91:e1:ae:ea: 0c:7e:15:9f:86:7a:aa:05:85:29:cf:c5:2f:3c:d1:a4:ff:de: 3e:f7:2c:33:6b:76:ce:9f:33:fe:90:5d:f4:01:55:54:37:f6: 7c:64:54:d2:c7:86:ff:a8:8e:f3:e3:f4:0c:1e:1a:a2:47:71: 82:74:54:5f:60:b6:78:d9:06:b6:d7:04:db:c6:61:a3:30:63: a0:65:5d:fb:01:3d:89:ab:1c:12:de:af:3d:4b:70:b0:ff:08: a5:37:2b:07:74:8f:ac:52:ba:97:f6:9e:22:41:1b:b4:b8:02: 2f:32:3c:72:7a:6c:dd:4b:71:24:5a:0b:03:51:6f:63:b1:16: b4:bd:03:b2:f1:8e:3b:1b:a2:35:52:4e:bb:00:05:ae:29:dd: ce:aa:96:03:1e:dd:66:5c:9f:06:ee:61:04:db:cb:74:cd:43: 4f:55:d7:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBUWTD66DwDCNlFUwtJpmzHUaumowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY4OUYyM0JDQkM0MjYzNUU5N0FFMTVBN0ZCNjlFMUUw OUE5N0RBRjAeFw0yNTA4MjMxNzQ3MDlaFw0yNTA4MjcwMDQ2MDlaMDMxMTAvBgNV BAMTKDcyMEZENTJBMDVBMzQ5NzUxOUE0NUU0QjJBREJFRjhDRDhENzY4OUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpSm+YpOkiymyemIB2bodNK5/C dNnTSmq14PMn6iTymmrbxZl9amA1J9o9oWDpx165jbaKIV1R5aSQuSDi0FrtPuaV ghn7h4SGaYupKRgmczLSH0LmLB7e4NQYCkkly4xDQEIhedmdnyZ3EFDWk8SBJw4A FuGT0+3KV3ZJx8AqlBJfX33VabeTOk9jYXVI7NRs/ioU6t9YKp07H16k6eWgEV4H 0vrFpGjWEBv7fjitI1vkpHNjsbFQN3I2wG06ndW5paj4TA6nUzMHn8X2YQA9aQbr gEZioxzqWAAapMsvMXGTrUAxeEWgF0Ra1HbXdCOsXt/Gwz2XoAXAkYyyYkFHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcg/VKgWjSXUZpF5LKtvvjNjXaJ8wHwYDVR0j BBgwFoAU/4nyO8vEJjXpeuFaf7aeHgmpfa8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YjE2NjRhNy1jOWM5LTQ0NDItODcxOC05YWVjOWUyMTEwYTIvMC9GRjg5RjIzQkNC QzQyNjM1RTk3QUUxNUE3RkI2OUUxRTA5QTk3REFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkY4OUYyM0JDQkM0MjYzNUU5N0FFMTVBN0ZCNjlFMUUwOUE5 N0RBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGIxNjY0YTctYzljOS00NDQyLTg3 MTgtOWFlYzllMjExMGEyLzAvRkY4OUYyM0JDQkM0MjYzNUU5N0FFMTVBN0ZCNjlF MUUwOUE5N0RBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB/zwzwiBCm0ZbajGknZAdhfuR09o8DUeqcO FTLmKplj4RqBMbLkjPvjXn6laBCttt1RpL5M6uoSzAGtIdNa6rLf5DARMvefPc56 NMbKTbVAPit7FcNrkeGu6gx+FZ+GeqoFhSnPxS880aT/3j73LDNrds6fM/6QXfQB VVQ39nxkVNLHhv+ojvPj9AweGqJHcYJ0VF9gtnjZBrbXBNvGYaMwY6BlXfsBPYmr HBLerz1LcLD/CKU3Kwd0j6xSupf2niJBG7S4Ai8yPHJ6bN1LcSRaCwNRb2OxFrS9 A7LxjjsbojVSTrsABa4p3c6qlgMe3WZcnwbuYQTby3TNQ09V12w= -----END CERTIFICATE-----Generated at Sat Aug 23 23:27:07 2025 by rpki-client