$ rpki-client -vvf repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.mft File: FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.mft (raw, json) Hash identifier: Ko1m43eoXCVZnXgcwdFDpjZWzb4PbJ0y2e+6oOY1568= Subject key identifier: FB:E1:EB:01:77:CC:C9:8A:A4:9B:DB:7E:00:9B:89:46:61:40:86:B6 Authority key identifier: FF:89:F2:3B:CB:C4:26:35:E9:7A:E1:5A:7F:B6:9E:1E:09:A9:7D:AF Certificate issuer: /CN=FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF Certificate serial: 66E8CDCD6DF46EC82380013AA1B7FE754F0C9B14 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.mft Manifest number: 0261 Signing time: Fri 09 May 2025 15:52:08 +0000 Manifest this update: Fri 09 May 2025 15:47:08 +0000 Manifest next update: Mon 12 May 2025 20:59:08 +0000 Files and hashes: 1: 3130332e3136332e3138352e302f32342d3234203d3e20313432333636.roa (hash: rBHXQQE56sq6EsG7xu2y3Ai8w3KX+cJsV+YvOEbZG7g=) 2: 3130332e3136332e3138342e302f32342d3234203d3e20313432333636.roa (hash: T0kgQ8xq7nBxfVnwpyYEmmzA0fn9DjLFvoVcfJfTj5g=) 3: FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.crl (hash: hDFZ/qfmgqdLa6vCa4mi7ilAoS0Hfj1+Rsswxi2KYWE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.crl rsync://repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 20:59:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:e8:cd:cd:6d:f4:6e:c8:23:80:01:3a:a1:b7:fe:75:4f:0c:9b:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF Validity Not Before: May 9 15:47:08 2025 GMT Not After : May 12 20:59:08 2025 GMT Subject: CN=FBE1EB0177CCC98AA49BDB7E009B8946614086B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:36:0b:e9:84:b2:03:8f:41:c5:16:3a:e6:0f: 51:dc:f6:d9:7f:68:5f:0a:da:5f:37:5f:1f:b5:bb: cd:dd:26:4d:21:27:3f:a9:e2:6f:89:34:b7:90:28: e4:56:3f:d2:b9:29:49:b2:40:57:a9:38:24:b7:ac: fa:59:f5:a2:a8:c0:e0:a7:a5:b5:ef:94:75:e2:fa: 04:1e:8e:83:07:8d:ce:90:f4:fd:99:2a:85:94:ba: 25:5b:0f:67:38:08:8e:7f:35:39:89:3c:bf:93:d6: 86:76:c7:49:6e:e3:c0:90:9f:6e:a0:76:82:53:01: fd:36:88:99:ad:bb:b6:1c:fa:ae:e1:a9:a3:4e:0f: be:d5:9e:37:0f:da:6d:ec:f3:60:dd:d6:d4:46:ca: 08:52:28:b1:37:dc:34:70:a2:12:e7:f8:19:4b:c2: bb:48:7b:0e:9c:f5:f9:eb:79:60:ee:da:d1:44:80: 4e:b5:71:ea:30:78:5b:6c:dc:39:bb:64:bb:43:b7: f8:46:e8:14:8a:a0:cd:5b:44:f1:44:cd:c6:99:94: 66:4a:b3:48:a2:4e:f0:c5:e0:bd:10:c7:be:a6:d2: 6a:fe:f4:b4:4f:95:45:db:68:97:6a:2e:e6:ce:91: 14:f0:e1:95:05:04:a6:27:12:85:f9:57:c8:86:48: 2b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:E1:EB:01:77:CC:C9:8A:A4:9B:DB:7E:00:9B:89:46:61:40:86:B6 X509v3 Authority Key Identifier: keyid:FF:89:F2:3B:CB:C4:26:35:E9:7A:E1:5A:7F:B6:9E:1E:09:A9:7D:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:f9:d4:6e:2b:8e:56:78:9c:9f:9b:99:4b:6d:9f:62:9b:ce: 17:36:8f:7f:59:af:4c:d5:a8:b9:88:c2:e1:8e:25:ca:eb:d6: a5:9a:c9:26:f7:bd:18:03:65:5f:14:65:02:b8:a6:21:24:cd: 00:77:e3:8f:22:b9:54:c9:e5:6d:ef:66:ff:a9:b6:bf:b8:70: 93:7b:20:78:4c:54:5b:53:ea:55:e5:4b:70:b7:10:b4:3a:c3: c9:7e:16:81:58:98:6a:85:e5:01:cb:01:73:47:46:4c:b8:f0: 22:ac:e6:b3:29:cf:a1:e5:54:d0:36:92:25:c1:a1:6e:9d:ef: 6c:c0:4d:ce:01:5b:5d:6e:27:3e:fb:85:f2:44:bf:48:63:ee: cd:46:9d:9a:f3:83:04:97:60:86:71:7d:a6:1f:4d:94:20:6e: 77:56:30:b7:7c:19:59:8e:67:ae:84:b7:b7:28:56:98:a8:64: 7d:2c:82:f9:2c:6f:85:eb:9e:b7:c0:cc:3f:97:9f:20:0e:7f: 82:70:5f:68:d2:14:45:73:a3:56:b5:99:8c:c8:7e:ee:04:fb: eb:0e:97:35:6d:d3:66:69:92:a1:a4:86:12:20:00:8a:8e:66: 49:c8:5f:c3:2b:59:80:b3:4e:6c:4e:f9:bc:bd:db:64:73:04: 68:3b:d6:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZujNzW30bsgjgAE6obf+dU8MmxQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY4OUYyM0JDQkM0MjYzNUU5N0FFMTVBN0ZCNjlFMUUw OUE5N0RBRjAeFw0yNTA1MDkxNTQ3MDhaFw0yNTA1MTIyMDU5MDhaMDMxMTAvBgNV BAMTKEZCRTFFQjAxNzdDQ0M5OEFBNDlCREI3RTAwOUI4OTQ2NjE0MDg2QjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbNgvphLIDj0HFFjrmD1Hc9tl/ aF8K2l83Xx+1u83dJk0hJz+p4m+JNLeQKORWP9K5KUmyQFepOCS3rPpZ9aKowOCn pbXvlHXi+gQejoMHjc6Q9P2ZKoWUuiVbD2c4CI5/NTmJPL+T1oZ2x0lu48CQn26g doJTAf02iJmtu7Yc+q7hqaNOD77VnjcP2m3s82Dd1tRGyghSKLE33DRwohLn+BlL wrtIew6c9fnreWDu2tFEgE61ceoweFts3Dm7ZLtDt/hG6BSKoM1bRPFEzcaZlGZK s0iiTvDF4L0Qx76m0mr+9LRPlUXbaJdqLubOkRTw4ZUFBKYnEoX5V8iGSCs1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU++HrAXfMyYqkm9t+AJuJRmFAhrYwHwYDVR0j BBgwFoAU/4nyO8vEJjXpeuFaf7aeHgmpfa8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YjE2NjRhNy1jOWM5LTQ0NDItODcxOC05YWVjOWUyMTEwYTIvMC9GRjg5RjIzQkNC QzQyNjM1RTk3QUUxNUE3RkI2OUUxRTA5QTk3REFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkY4OUYyM0JDQkM0MjYzNUU5N0FFMTVBN0ZCNjlFMUUwOUE5 N0RBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGIxNjY0YTctYzljOS00NDQyLTg3 MTgtOWFlYzllMjExMGEyLzAvRkY4OUYyM0JDQkM0MjYzNUU5N0FFMTVBN0ZCNjlF MUUwOUE5N0RBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEv51G4rjlZ4nJ+bmUttn2Kbzhc2j39Zr0zV qLmIwuGOJcrr1qWaySb3vRgDZV8UZQK4piEkzQB3448iuVTJ5W3vZv+ptr+4cJN7 IHhMVFtT6lXlS3C3ELQ6w8l+FoFYmGqF5QHLAXNHRky48CKs5rMpz6HlVNA2kiXB oW6d72zATc4BW11uJz77hfJEv0hj7s1GnZrzgwSXYIZxfaYfTZQgbndWMLd8GVmO Z66Et7coVpioZH0sgvksb4XrnrfAzD+XnyAOf4JwX2jSFEVzo1a1mYzIfu4E++sO lzVt02ZpkqGkhhIgAIqOZknIX8MrWYCzTmxO+by922RzBGg71i0= -----END CERTIFICATE-----Generated at Sat May 10 21:00:43 2025 by rpki-client