$ rpki-client -vvf repo-rpki.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.mft File: FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.mft (raw, json) Hash identifier: 77LEt2EPnvIiKX39UVzschKUnqS789V38tPiWRecyjM= Subject key identifier: 13:AA:FD:18:B3:EE:C9:00:DC:73:CF:92:D8:9D:BB:A1:3A:7D:7F:B8 Authority key identifier: FF:75:AE:DD:C6:05:9E:8A:2B:83:0E:48:7D:72:BE:77:E3:30:BE:EF Certificate issuer: /CN=FF75AEDDC6059E8A2B830E487D72BE77E330BEEF Certificate serial: 0B2F7A85A9A6208040FC3D32F2EA964FC6A68962 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.mft Manifest number: 01A4 Signing time: Thu 21 Aug 2025 22:31:25 +0000 Manifest this update: Thu 21 Aug 2025 22:26:25 +0000 Manifest next update: Mon 25 Aug 2025 02:12:25 +0000 Files and hashes: 1: 3130332e3132312e3133322e302f32332d3234203d3e20313335343738.roa (hash: GNOF8brVgXz3bvHl24vTCw4VN2iGlFmFeZUMDJKeFZw=) 2: FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.crl (hash: U5tbE3fINUnf3zilFIBqMRwhBItBXAm3pxU25FiuD0Y=) 3: 3130332e3132312e3133342e302f32332d3234203d3e20313335343738.roa (hash: OByvPBeXjXgICf8nfRM4X/bYHAakXPJvdP6ikk90YbQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.crl rsync://repo-rpki.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 02:12:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:2f:7a:85:a9:a6:20:80:40:fc:3d:32:f2:ea:96:4f:c6:a6:89:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF75AEDDC6059E8A2B830E487D72BE77E330BEEF Validity Not Before: Aug 21 22:26:25 2025 GMT Not After : Aug 25 02:12:25 2025 GMT Subject: CN=13AAFD18B3EEC900DC73CF92D89DBBA13A7D7FB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b3:55:50:3f:83:0a:09:28:bb:b9:c7:5a:03: a1:26:c8:8b:7b:b9:0f:50:82:14:a9:ef:10:e5:65: 1f:49:ea:d8:26:de:e9:da:52:f6:54:c3:5d:d8:f1: 04:1d:89:cd:08:6c:47:89:57:11:ce:40:6c:c1:6b: 0b:cb:e4:2e:53:30:7d:97:9b:51:cf:0f:d7:ff:af: 38:02:30:27:3b:84:a8:59:c3:5f:dd:d5:74:89:27: b9:c7:68:31:9c:49:30:43:34:4d:8e:39:fd:a7:af: a1:70:a8:54:2c:8d:3d:3d:b5:70:d3:9b:64:8a:e0: 3c:06:37:13:53:23:ca:ae:07:2a:b6:8c:7f:08:60: 43:8b:a2:c2:f5:ee:ad:ee:61:e5:f5:64:d6:b3:ef: 49:49:37:e4:ff:f0:eb:bd:5b:02:16:f5:99:b3:9f: 0e:70:97:29:10:93:f6:d6:fb:0e:7e:a9:99:42:b4: 4b:a3:98:1e:10:40:20:3b:37:7b:9e:81:70:4c:11: b0:1d:70:39:34:85:85:a3:56:df:c2:12:d3:f7:f3: ca:94:90:09:ff:25:a4:f8:85:bd:d1:0d:bc:8d:39: 07:66:02:af:b3:5d:45:ce:51:4e:d4:27:87:6c:91: 07:84:ad:a0:fd:2f:30:62:e7:6a:a7:7a:1c:49:26: 77:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:AA:FD:18:B3:EE:C9:00:DC:73:CF:92:D8:9D:BB:A1:3A:7D:7F:B8 X509v3 Authority Key Identifier: keyid:FF:75:AE:DD:C6:05:9E:8A:2B:83:0E:48:7D:72:BE:77:E3:30:BE:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:96:c9:3b:b8:bf:58:b1:bc:c5:09:ec:09:61:24:17:d6:32: af:3a:5a:63:a8:3b:d5:fa:0e:a7:77:56:aa:bc:49:18:2f:7b: 39:e2:e0:eb:85:03:46:20:52:ef:7c:e5:af:85:37:1a:48:03: 20:37:71:db:e2:36:7b:a3:aa:eb:71:60:e4:37:b8:7c:5c:1a: a7:bc:87:98:05:30:12:60:68:6e:55:e4:b2:b3:37:33:6e:91: 46:1e:1a:b5:6e:b1:b0:cc:0b:6f:dc:bf:fb:c0:cf:7c:50:98: 11:a9:ec:36:f7:d1:4b:e7:c6:5e:61:4f:7b:ca:40:78:e7:b0: 1f:d1:07:ea:a5:67:c5:25:c1:9f:2b:e2:d8:17:e5:50:61:d5: 61:ce:bc:03:c7:cb:28:db:7e:31:0c:0e:8d:b5:d8:46:82:c3: 58:3d:ed:7b:36:49:8b:cd:8e:96:5b:93:e1:54:c4:c6:e1:bc: 79:22:8c:c9:ca:84:14:b9:81:79:e9:66:8a:e8:84:f4:f7:24: ba:04:0d:1b:b5:f6:9d:26:cb:0c:86:0e:21:fc:ac:c2:fc:87: 15:07:07:eb:20:c7:98:a8:2e:29:50:81:63:19:f4:e0:78:3c: 40:14:03:5a:e6:e1:07:39:c6:2a:95:0a:54:9c:5b:36:6e:eb: 6f:4c:68:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCy96hammIIBA/D0y8uqWT8amiWIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY3NUFFRERDNjA1OUU4QTJCODMwRTQ4N0Q3MkJFNzdF MzMwQkVFRjAeFw0yNTA4MjEyMjI2MjVaFw0yNTA4MjUwMjEyMjVaMDMxMTAvBgNV BAMTKDEzQUFGRDE4QjNFRUM5MDBEQzczQ0Y5MkQ4OURCQkExM0E3RDdGQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCks1VQP4MKCSi7ucdaA6EmyIt7 uQ9QghSp7xDlZR9J6tgm3unaUvZUw13Y8QQdic0IbEeJVxHOQGzBawvL5C5TMH2X m1HPD9f/rzgCMCc7hKhZw1/d1XSJJ7nHaDGcSTBDNE2OOf2nr6FwqFQsjT09tXDT m2SK4DwGNxNTI8quByq2jH8IYEOLosL17q3uYeX1ZNaz70lJN+T/8Ou9WwIW9Zmz nw5wlykQk/bW+w5+qZlCtEujmB4QQCA7N3uegXBMEbAdcDk0hYWjVt/CEtP388qU kAn/JaT4hb3RDbyNOQdmAq+zXUXOUU7UJ4dskQeEraD9LzBi52qnehxJJnffAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUE6r9GLPuyQDcc8+S2J27oTp9f7gwHwYDVR0j BBgwFoAU/3Wu3cYFnoorgw5IfXK+d+Mwvu8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YjM3ODRmZS1mOWZlLTRjYmUtODc2OC0yNjNhNzY5ODZhM2EvMC9GRjc1QUVEREM2 MDU5RThBMkI4MzBFNDg3RDcyQkU3N0UzMzBCRUVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkY3NUFFRERDNjA1OUU4QTJCODMwRTQ4N0Q3MkJFNzdFMzMw QkVFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWIzNzg0ZmUtZjlmZS00Y2JlLTg3 NjgtMjYzYTc2OTg2YTNhLzAvRkY3NUFFRERDNjA1OUU4QTJCODMwRTQ4N0Q3MkJF NzdFMzMwQkVFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK2WyTu4v1ixvMUJ7AlhJBfWMq86WmOoO9X6 Dqd3Vqq8SRgvezni4OuFA0YgUu985a+FNxpIAyA3cdviNnujqutxYOQ3uHxcGqe8 h5gFMBJgaG5V5LKzNzNukUYeGrVusbDMC2/cv/vAz3xQmBGp7Db30Uvnxl5hT3vK QHjnsB/RB+qlZ8UlwZ8r4tgX5VBh1WHOvAPHyyjbfjEMDo212EaCw1g97Xs2SYvN jpZbk+FUxMbhvHkijMnKhBS5gXnpZorohPT3JLoEDRu19p0mywyGDiH8rML8hxUH B+sgx5ioLilQgWMZ9OB4PEAUA1rm4Qc5xiqVClScWzZu629MaCs= -----END CERTIFICATE-----Generated at Sat Aug 23 19:48:06 2025 by rpki-client