$ rpki-client -vvf repo-rpki.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.mft File: FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.mft (raw, json) Hash identifier: LPjCFFNTmGljrVIWbzmzbxO2Q7XTiQy86EIyDR4n/Sw= Subject key identifier: 67:27:C2:11:05:A7:87:8B:7D:F0:5E:8C:8A:32:30:95:20:0D:A1:5F Authority key identifier: FF:75:AE:DD:C6:05:9E:8A:2B:83:0E:48:7D:72:BE:77:E3:30:BE:EF Certificate issuer: /CN=FF75AEDDC6059E8A2B830E487D72BE77E330BEEF Certificate serial: 32A8A0C1D5C829B9812237C59834E2BFF6D7E6BB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.mft Manifest number: 018D Signing time: Mon 30 Jun 2025 21:31:25 +0000 Manifest this update: Mon 30 Jun 2025 21:26:25 +0000 Manifest next update: Fri 04 Jul 2025 04:10:25 +0000 Files and hashes: 1: 3130332e3132312e3133342e302f32332d3234203d3e20313335343738.roa (hash: OByvPBeXjXgICf8nfRM4X/bYHAakXPJvdP6ikk90YbQ=) 2: FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.crl (hash: NdHX4/uVBGTGOzGOX7trN4b9mm64QAAfxz9H/OGZOXo=) 3: 3130332e3132312e3133322e302f32332d3234203d3e20313335343738.roa (hash: GNOF8brVgXz3bvHl24vTCw4VN2iGlFmFeZUMDJKeFZw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.crl rsync://repo-rpki.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 04:10:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:a8:a0:c1:d5:c8:29:b9:81:22:37:c5:98:34:e2:bf:f6:d7:e6:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF75AEDDC6059E8A2B830E487D72BE77E330BEEF Validity Not Before: Jun 30 21:26:25 2025 GMT Not After : Jul 4 04:10:25 2025 GMT Subject: CN=6727C21105A7878B7DF05E8C8A323095200DA15F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:8e:2d:32:58:12:3d:f0:ce:9d:be:b4:33:d3: 3f:34:68:1a:71:88:be:86:db:a2:fe:e1:81:44:ea: 89:d4:bb:6c:be:f0:91:10:8d:e3:42:73:56:55:81: 78:a8:64:d1:dc:30:1f:98:04:8f:be:b1:52:02:36: b1:cd:78:af:0d:7d:dd:3c:cc:35:4f:87:a8:a2:b6: 86:50:14:39:f4:eb:e6:b8:d6:f9:0b:78:82:3b:2d: e5:ca:e7:08:10:3e:49:fd:29:0f:85:d2:f1:5b:ee: 93:42:8c:a5:be:61:75:f3:9e:6d:65:c2:8b:1e:4e: 35:28:c0:ec:e7:5f:97:b4:b6:4c:bd:99:51:74:77: 03:74:4c:c4:6a:c9:b9:9b:12:7a:6a:26:ee:75:1e: df:80:ae:a9:80:f9:0f:13:41:88:c0:02:06:ea:00: 71:c6:08:ac:ab:70:b2:35:ff:30:32:99:2c:02:29: 8c:42:e7:27:96:95:5d:1a:da:49:4c:90:d0:d8:c3: e5:2b:5e:42:7c:a1:d1:33:1f:21:e2:37:0e:05:c1: 14:42:6f:5a:26:04:15:a7:3d:e0:6b:97:53:0d:89: 46:ff:8f:c1:6d:6a:31:fe:27:eb:bd:d0:5d:a9:bb: cd:4d:ed:0c:95:5f:dd:41:8c:68:f4:72:e5:10:5b: a5:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:27:C2:11:05:A7:87:8B:7D:F0:5E:8C:8A:32:30:95:20:0D:A1:5F X509v3 Authority Key Identifier: keyid:FF:75:AE:DD:C6:05:9E:8A:2B:83:0E:48:7D:72:BE:77:E3:30:BE:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:1d:fa:03:2a:03:95:55:fb:38:0b:fd:b4:3d:11:da:47:37: 5a:df:ac:a7:fa:8d:43:d8:84:1a:e9:19:d7:3b:09:2e:10:cf: 7d:75:96:d5:c1:58:55:1a:e6:54:9a:35:74:78:14:9d:6c:b5: e2:ba:a3:81:0b:15:77:d3:ee:9c:c2:a0:14:83:15:61:7d:67: 58:a0:8e:af:64:9f:e9:de:f5:f0:bd:9a:06:aa:13:bf:de:d4: ef:49:43:c1:22:24:2a:c8:e5:b0:80:67:d5:66:83:8a:74:a1: 61:fe:55:ea:e6:b8:9b:b0:19:f8:0c:01:2f:c3:92:40:cb:6a: 41:78:d8:c2:20:32:52:e6:b0:3a:7a:b0:a5:d9:a4:14:86:01: f7:95:40:eb:58:64:51:73:d8:f0:3d:9e:6f:98:ec:c2:4f:20: 46:ee:df:c4:71:cf:80:53:ac:45:9a:5e:82:78:23:59:4a:3d: eb:e2:60:65:46:5c:cc:3b:05:1d:66:63:5b:96:3a:20:7a:30: 27:0a:75:35:99:89:3b:ba:ab:07:47:69:94:ff:3e:1b:06:1a: 14:5c:2c:82:3d:1c:f2:96:77:0d:3e:26:e4:da:22:5b:92:74: d7:f9:fe:ce:5a:71:20:89:db:81:77:24:3d:5b:7d:0f:05:5e: d0:14:a5:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMqigwdXIKbmBIjfFmDTiv/bX5rswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY3NUFFRERDNjA1OUU4QTJCODMwRTQ4N0Q3MkJFNzdF MzMwQkVFRjAeFw0yNTA2MzAyMTI2MjVaFw0yNTA3MDQwNDEwMjVaMDMxMTAvBgNV BAMTKDY3MjdDMjExMDVBNzg3OEI3REYwNUU4QzhBMzIzMDk1MjAwREExNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGji0yWBI98M6dvrQz0z80aBpx iL6G26L+4YFE6onUu2y+8JEQjeNCc1ZVgXioZNHcMB+YBI++sVICNrHNeK8Nfd08 zDVPh6iitoZQFDn06+a41vkLeII7LeXK5wgQPkn9KQ+F0vFb7pNCjKW+YXXznm1l woseTjUowOznX5e0tky9mVF0dwN0TMRqybmbEnpqJu51Ht+ArqmA+Q8TQYjAAgbq AHHGCKyrcLI1/zAymSwCKYxC5yeWlV0a2klMkNDYw+UrXkJ8odEzHyHiNw4FwRRC b1omBBWnPeBrl1MNiUb/j8FtajH+J+u90F2pu81N7QyVX91BjGj0cuUQW6WJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZyfCEQWnh4t98F6MijIwlSANoV8wHwYDVR0j BBgwFoAU/3Wu3cYFnoorgw5IfXK+d+Mwvu8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YjM3ODRmZS1mOWZlLTRjYmUtODc2OC0yNjNhNzY5ODZhM2EvMC9GRjc1QUVEREM2 MDU5RThBMkI4MzBFNDg3RDcyQkU3N0UzMzBCRUVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkY3NUFFRERDNjA1OUU4QTJCODMwRTQ4N0Q3MkJFNzdFMzMw QkVFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWIzNzg0ZmUtZjlmZS00Y2JlLTg3 NjgtMjYzYTc2OTg2YTNhLzAvRkY3NUFFRERDNjA1OUU4QTJCODMwRTQ4N0Q3MkJF NzdFMzMwQkVFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJAd+gMqA5VV+zgL/bQ9EdpHN1rfrKf6jUPY hBrpGdc7CS4Qz311ltXBWFUa5lSaNXR4FJ1steK6o4ELFXfT7pzCoBSDFWF9Z1ig jq9kn+ne9fC9mgaqE7/e1O9JQ8EiJCrI5bCAZ9Vmg4p0oWH+VermuJuwGfgMAS/D kkDLakF42MIgMlLmsDp6sKXZpBSGAfeVQOtYZFFz2PA9nm+Y7MJPIEbu38Rxz4BT rEWaXoJ4I1lKPeviYGVGXMw7BR1mY1uWOiB6MCcKdTWZiTu6qwdHaZT/PhsGGhRc LII9HPKWdw0+JuTaIluSdNf5/s5acSCJ24F3JD1bfQ8FXtAUpXQ= -----END CERTIFICATE-----Generated at Tue Jul 1 05:04:04 2025 by rpki-client