$ rpki-client -vvf repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.mft File: FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.mft (raw, json) Hash identifier: MJcjjoIMGosVP7keCiVltlT/MMplkEXBaaR11iL3JkY= Subject key identifier: 5B:21:0C:A8:9A:2F:1F:41:C8:19:B2:DC:13:16:C0:B2:6B:87:FE:67 Authority key identifier: FF:89:F2:3B:CB:C4:26:35:E9:7A:E1:5A:7F:B6:9E:1E:09:A9:7D:AF Certificate issuer: /CN=FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF Certificate serial: 5A5F1461D7CF696FAAB2DE1BB1A787C243769DBC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.mft Manifest number: 0278 Signing time: Sun 29 Jun 2025 22:12:11 +0000 Manifest this update: Sun 29 Jun 2025 22:07:11 +0000 Manifest next update: Thu 03 Jul 2025 06:33:11 +0000 Files and hashes: 1: FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.crl (hash: VJSpIoOQRrwXmiyOOUYgTrkqU6tIDVjIWijIKNqHdkk=) 2: 3130332e3136332e3138352e302f32342d3234203d3e20313432333636.roa (hash: rBHXQQE56sq6EsG7xu2y3Ai8w3KX+cJsV+YvOEbZG7g=) 3: 3130332e3136332e3138342e302f32342d3234203d3e20313432333636.roa (hash: T0kgQ8xq7nBxfVnwpyYEmmzA0fn9DjLFvoVcfJfTj5g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.crl rsync://repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 06:33:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:5f:14:61:d7:cf:69:6f:aa:b2:de:1b:b1:a7:87:c2:43:76:9d:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF Validity Not Before: Jun 29 22:07:11 2025 GMT Not After : Jul 3 06:33:11 2025 GMT Subject: CN=5B210CA89A2F1F41C819B2DC1316C0B26B87FE67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f6:14:f2:b1:d6:b4:b7:b9:cd:64:1b:d3:4c: de:95:b5:0e:30:a4:06:7b:a4:13:11:d4:d4:50:bc: 65:25:cc:f5:51:55:89:88:e6:1b:d6:fc:aa:6e:4b: b3:3d:66:99:69:a1:70:e0:e2:13:19:88:52:dd:db: c8:e3:bb:52:b4:96:7e:a5:b7:0e:5c:c9:8a:b3:3b: 9f:82:17:00:49:be:e6:4d:2d:33:1b:a5:2a:1e:40: 94:9f:8d:57:4a:5e:d0:9f:e2:48:d2:ce:ad:67:45: ab:ca:6f:0a:ac:25:99:74:bd:0c:c6:7e:ef:4a:dd: cc:a3:51:30:87:87:ef:4a:74:34:fa:84:ad:3c:09: 32:b9:3b:39:98:7c:55:e1:93:05:6b:ef:e5:79:64: b3:80:97:f8:b4:3a:7b:50:6a:d1:dd:94:39:93:ce: 5a:a3:82:77:1b:ae:1b:d1:47:de:92:27:75:35:49: 17:db:c7:05:06:91:72:9b:76:c9:6b:3d:0f:d2:6e: e8:01:db:7f:4b:af:ea:74:59:8e:23:91:88:f1:2a: 0b:25:b8:4b:65:84:30:42:d7:bb:d4:b6:c3:fa:e7: 54:d9:64:ce:d8:96:23:11:43:cf:ca:ef:90:b1:84: 97:89:9a:0a:b1:86:05:96:f4:e6:97:22:d5:10:f8: c3:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:21:0C:A8:9A:2F:1F:41:C8:19:B2:DC:13:16:C0:B2:6B:87:FE:67 X509v3 Authority Key Identifier: keyid:FF:89:F2:3B:CB:C4:26:35:E9:7A:E1:5A:7F:B6:9E:1E:09:A9:7D:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:08:28:32:cc:0b:3c:1f:d8:59:ff:67:55:4d:49:2d:a7:02: 03:d0:05:e3:f7:a1:ba:69:4f:c4:8f:65:a3:da:d9:27:b6:b3: fe:4f:ba:08:99:1c:6e:a5:58:50:6c:f4:eb:55:7e:40:39:2b: dd:19:10:6e:b5:6b:86:0e:26:85:47:12:af:dc:f7:4f:2a:30: c4:69:1e:b8:6a:e4:46:80:4f:11:9b:9b:d0:ea:94:47:10:9a: d0:69:69:3e:a8:03:a6:14:a4:0f:63:d6:79:f4:e7:39:43:4e: b6:81:d2:41:0e:4a:41:d0:91:e1:12:8d:9e:8f:4a:a0:da:a9: 30:00:fa:ce:3b:b9:e7:4d:34:8d:63:82:38:bb:aa:a5:12:7f: 09:18:35:41:1e:66:d8:94:80:bd:72:bc:a3:92:04:51:df:e0: b7:b8:9c:57:74:f9:f2:32:80:34:a1:66:89:6b:05:ad:0e:1d: 47:4e:eb:c6:6d:e5:11:ed:0b:91:00:ee:9a:0c:0c:9c:10:67: 9b:06:f6:e4:d3:78:09:ae:f8:02:06:57:8a:0a:a8:57:ff:cb: 7a:1b:8b:d5:65:58:52:a2:ab:5f:b5:ee:f8:03:1c:bb:fb:f5: 3d:31:fc:99:c6:8d:6b:06:02:f6:cb:cf:1e:2a:55:b8:ca:43: 12:4d:8c:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWl8UYdfPaW+qst4bsaeHwkN2nbwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY4OUYyM0JDQkM0MjYzNUU5N0FFMTVBN0ZCNjlFMUUw OUE5N0RBRjAeFw0yNTA2MjkyMjA3MTFaFw0yNTA3MDMwNjMzMTFaMDMxMTAvBgNV BAMTKDVCMjEwQ0E4OUEyRjFGNDFDODE5QjJEQzEzMTZDMEIyNkI4N0ZFNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx9hTysda0t7nNZBvTTN6VtQ4w pAZ7pBMR1NRQvGUlzPVRVYmI5hvW/KpuS7M9ZplpoXDg4hMZiFLd28jju1K0ln6l tw5cyYqzO5+CFwBJvuZNLTMbpSoeQJSfjVdKXtCf4kjSzq1nRavKbwqsJZl0vQzG fu9K3cyjUTCHh+9KdDT6hK08CTK5OzmYfFXhkwVr7+V5ZLOAl/i0OntQatHdlDmT zlqjgncbrhvRR96SJ3U1SRfbxwUGkXKbdslrPQ/SbugB239Lr+p0WY4jkYjxKgsl uEtlhDBC17vUtsP651TZZM7YliMRQ8/K75CxhJeJmgqxhgWW9OaXItUQ+MOrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWyEMqJovH0HIGbLcExbAsmuH/mcwHwYDVR0j BBgwFoAU/4nyO8vEJjXpeuFaf7aeHgmpfa8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YjE2NjRhNy1jOWM5LTQ0NDItODcxOC05YWVjOWUyMTEwYTIvMC9GRjg5RjIzQkNC QzQyNjM1RTk3QUUxNUE3RkI2OUUxRTA5QTk3REFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkY4OUYyM0JDQkM0MjYzNUU5N0FFMTVBN0ZCNjlFMUUwOUE5 N0RBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGIxNjY0YTctYzljOS00NDQyLTg3 MTgtOWFlYzllMjExMGEyLzAvRkY4OUYyM0JDQkM0MjYzNUU5N0FFMTVBN0ZCNjlF MUUwOUE5N0RBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHMIKDLMCzwf2Fn/Z1VNSS2nAgPQBeP3obpp T8SPZaPa2Se2s/5PugiZHG6lWFBs9OtVfkA5K90ZEG61a4YOJoVHEq/c908qMMRp Hrhq5EaATxGbm9DqlEcQmtBpaT6oA6YUpA9j1nn05zlDTraB0kEOSkHQkeESjZ6P SqDaqTAA+s47uedNNI1jgji7qqUSfwkYNUEeZtiUgL1yvKOSBFHf4Le4nFd0+fIy gDShZolrBa0OHUdO68Zt5RHtC5EA7poMDJwQZ5sG9uTTeAmu+AIGV4oKqFf/y3ob i9VlWFKiq1+17vgDHLv79T0x/JnGjWsGAvbLzx4qVbjKQxJNjB0= -----END CERTIFICATE-----Generated at Tue Jul 1 03:09:54 2025 by rpki-client