$ rpki-client -vvf repo-rpki.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/FF1246B1AF5B158EA26E75654D7B7A6DED645787.mft File: FF1246B1AF5B158EA26E75654D7B7A6DED645787.mft (raw, json) Hash identifier: Ky9OkB898L6k1si5Hve+RSk49WJLfc+BBYMe2WYbjz0= Subject key identifier: 23:EF:CF:78:19:0E:74:92:15:F9:E6:C4:81:05:B8:77:03:8C:DD:0E Authority key identifier: FF:12:46:B1:AF:5B:15:8E:A2:6E:75:65:4D:7B:7A:6D:ED:64:57:87 Certificate issuer: /CN=FF1246B1AF5B158EA26E75654D7B7A6DED645787 Certificate serial: 2055A5672D23A32D3271ED03BF8574D9D6101502 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF1246B1AF5B158EA26E75654D7B7A6DED645787.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/FF1246B1AF5B158EA26E75654D7B7A6DED645787.mft Manifest number: BA Signing time: Wed 02 Jul 2025 05:11:56 +0000 Manifest this update: Wed 02 Jul 2025 05:06:56 +0000 Manifest next update: Sat 05 Jul 2025 09:02:56 +0000 Files and hashes: 1: 3130332e3136312e3130382e302f32342d3234203d3e20313431393132.roa (hash: uvIhcJu4c3esMkst4+88cWSmjSO0QaYXOH2ffUAXAVQ=) 2: FF1246B1AF5B158EA26E75654D7B7A6DED645787.crl (hash: czaGJH2y0zEKPcYus1o81qrevnduS/fulc9zmaUZ7D0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/FF1246B1AF5B158EA26E75654D7B7A6DED645787.crl rsync://repo-rpki.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/FF1246B1AF5B158EA26E75654D7B7A6DED645787.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF1246B1AF5B158EA26E75654D7B7A6DED645787.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 09:02:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:55:a5:67:2d:23:a3:2d:32:71:ed:03:bf:85:74:d9:d6:10:15:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF1246B1AF5B158EA26E75654D7B7A6DED645787 Validity Not Before: Jul 2 05:06:56 2025 GMT Not After : Jul 5 09:02:56 2025 GMT Subject: CN=23EFCF78190E749215F9E6C48105B877038CDD0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:4f:09:66:e5:39:d3:f2:23:3c:47:51:5e:f5: 11:4a:28:ae:04:7d:3b:9f:b5:0f:d3:b9:d0:d8:03: b0:19:f1:43:40:e3:3d:d5:f9:ff:2f:ca:b8:db:69: 64:53:a3:ff:38:27:52:10:69:a6:86:e4:49:2e:19: c1:21:be:b5:90:4f:40:be:fd:2a:3e:6f:6a:84:8e: 83:3b:ce:f2:90:72:d8:09:0d:32:cf:de:a5:44:4e: 8c:04:b2:f4:ee:08:0a:5a:04:db:46:05:2d:91:6a: 2a:e0:11:0c:bd:f6:ec:00:d6:e3:bc:f3:2d:04:1a: 78:3b:99:ce:54:db:9b:af:5a:12:5c:f9:36:e3:ad: 80:bd:3e:06:4b:0f:7f:10:d6:82:cc:44:59:68:5d: 86:3f:ce:b9:f5:af:cd:cb:8e:81:40:1f:4f:79:13: a0:8e:3f:a7:ab:b0:4d:25:f9:b0:c1:db:bd:36:e5: 92:90:48:78:a5:44:ae:98:c8:07:89:f8:fd:2c:3d: 13:eb:30:ab:72:97:f9:51:53:97:6a:62:58:8e:06: d7:36:2d:33:46:a8:9d:f7:a4:82:f5:26:59:8f:f1: 15:a6:2b:f5:1d:81:73:6b:8a:fb:7d:b2:d0:03:cb: 7b:91:a4:e9:99:b4:53:7c:1c:a4:f4:ac:71:ed:26: a3:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:EF:CF:78:19:0E:74:92:15:F9:E6:C4:81:05:B8:77:03:8C:DD:0E X509v3 Authority Key Identifier: keyid:FF:12:46:B1:AF:5B:15:8E:A2:6E:75:65:4D:7B:7A:6D:ED:64:57:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/FF1246B1AF5B158EA26E75654D7B7A6DED645787.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF1246B1AF5B158EA26E75654D7B7A6DED645787.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/FF1246B1AF5B158EA26E75654D7B7A6DED645787.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:49:a1:3f:05:ba:18:9f:5f:b4:ef:d0:67:6f:17:1a:ee:4c: 78:b7:fa:8a:a9:62:d0:35:02:2b:d1:42:c5:7a:1a:f0:cf:be: 1e:51:a3:6c:1e:50:36:9c:b0:1e:d7:2d:c7:2f:b4:c8:a8:99: 7c:13:92:4f:b7:92:53:b1:c2:36:41:91:41:22:1b:14:e2:4a: dc:a0:44:e2:4c:67:fb:d0:00:21:16:6c:f9:2d:1b:7a:da:53: bb:77:a8:b0:c7:d9:47:d6:e8:0f:36:9d:75:2e:8f:36:4b:b8: ec:9b:fe:34:30:0f:6d:85:93:37:8f:e0:2d:2f:ef:2f:b7:d3: 1f:0b:be:bc:df:63:aa:f5:04:03:be:d6:51:53:de:f9:47:64: d8:9d:00:67:d7:28:ee:ae:75:8f:99:e9:ba:d1:d6:3f:e0:4e: d6:e6:78:ad:e3:c7:84:e1:0b:71:28:83:06:cf:78:2a:4e:5e: ba:9e:15:ed:aa:df:30:d7:5f:db:86:00:33:3c:eb:f4:a9:65: 7b:40:42:cf:4f:92:04:f2:40:aa:32:e9:3c:f3:4f:b7:fc:a1: 92:a8:54:f0:d2:7f:6d:7d:ef:31:e0:c6:3a:c9:4c:f5:10:69: 0b:a6:0e:f1:5f:7d:80:2e:46:61:3c:c5:2a:7e:02:a3:6f:6b: 4c:b0:40:d5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIFWlZy0joy0yce0Dv4V02dYQFQIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkYxMjQ2QjFBRjVCMTU4RUEyNkU3NTY1NEQ3QjdBNkRF RDY0NTc4NzAeFw0yNTA3MDIwNTA2NTZaFw0yNTA3MDUwOTAyNTZaMDMxMTAvBgNV BAMTKDIzRUZDRjc4MTkwRTc0OTIxNUY5RTZDNDgxMDVCODc3MDM4Q0REMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDETwlm5TnT8iM8R1Fe9RFKKK4E fTuftQ/TudDYA7AZ8UNA4z3V+f8vyrjbaWRTo/84J1IQaaaG5EkuGcEhvrWQT0C+ /So+b2qEjoM7zvKQctgJDTLP3qVETowEsvTuCApaBNtGBS2RairgEQy99uwA1uO8 8y0EGng7mc5U25uvWhJc+TbjrYC9PgZLD38Q1oLMRFloXYY/zrn1r83LjoFAH095 E6COP6ersE0l+bDB27025ZKQSHilRK6YyAeJ+P0sPRPrMKtyl/lRU5dqYliOBtc2 LTNGqJ33pIL1JlmP8RWmK/UdgXNrivt9stADy3uRpOmZtFN8HKT0rHHtJqMTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUI+/PeBkOdJIV+ebEgQW4dwOM3Q4wHwYDVR0j BBgwFoAU/xJGsa9bFY6ibnVlTXt6be1kV4cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ODlhMDY2MS0zMWVlLTQ5YTItYWU5Zi1mNmQ1NzNhMTdkZjcvMC9GRjEyNDZCMUFG NUIxNThFQTI2RTc1NjU0RDdCN0E2REVENjQ1Nzg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkYxMjQ2QjFBRjVCMTU4RUEyNkU3NTY1NEQ3QjdBNkRFRDY0 NTc4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTg5YTA2NjEtMzFlZS00OWEyLWFl OWYtZjZkNTczYTE3ZGY3LzAvRkYxMjQ2QjFBRjVCMTU4RUEyNkU3NTY1NEQ3QjdB NkRFRDY0NTc4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ1JoT8FuhifX7Tv0GdvFxruTHi3+oqpYtA1 AivRQsV6GvDPvh5Ro2weUDacsB7XLccvtMiomXwTkk+3klOxwjZBkUEiGxTiStyg ROJMZ/vQACEWbPktG3raU7t3qLDH2UfW6A82nXUujzZLuOyb/jQwD22FkzeP4C0v 7y+30x8LvrzfY6r1BAO+1lFT3vlHZNidAGfXKO6udY+Z6brR1j/gTtbmeK3jx4Th C3EogwbPeCpOXrqeFe2q3zDXX9uGADM86/SpZXtAQs9PkgTyQKoy6TzzT7f8oZKo VPDSf2197zHgxjrJTPUQaQumDvFffYAuRmE8xSp+AqNva0ywQNU= -----END CERTIFICATE-----Generated at Thu Jul 3 00:41:44 2025 by rpki-client