$ rpki-client -vvf repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.mft File: FF947BE188D359EA7EDF887D86DA2C7CC7460B70.mft (raw, json) Hash identifier: gsXjCpHPVKRSEGA+P++sb3fbFkFXnuVM//HPDxvFAQY= Subject key identifier: 86:FC:88:14:0F:78:A6:DF:CA:20:60:8C:A7:C1:65:9B:50:8A:22:79 Authority key identifier: FF:94:7B:E1:88:D3:59:EA:7E:DF:88:7D:86:DA:2C:7C:C7:46:0B:70 Certificate issuer: /CN=FF947BE188D359EA7EDF887D86DA2C7CC7460B70 Certificate serial: 04E192A6F5C0002D7CBCA619862DE76BAA9FB1F4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.mft Manifest number: 0218 Signing time: Sun 29 Jun 2025 06:11:59 +0000 Manifest this update: Sun 29 Jun 2025 06:06:59 +0000 Manifest next update: Wed 02 Jul 2025 16:18:59 +0000 Files and hashes: 1: 3130332e3136322e3134312e302f32342d3234203d3e20313431303833.roa (hash: 6+qzbxlDEMLlDFF8ZMTBVVGBQ81Jy42r6r5JLNvCfLQ=) 2: FF947BE188D359EA7EDF887D86DA2C7CC7460B70.crl (hash: rMRYLIziY4EgICKxKnIDN1tbby9kRe+YMVm7aVzLXfc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.crl rsync://repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:e1:92:a6:f5:c0:00:2d:7c:bc:a6:19:86:2d:e7:6b:aa:9f:b1:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF947BE188D359EA7EDF887D86DA2C7CC7460B70 Validity Not Before: Jun 29 06:06:59 2025 GMT Not After : Jul 2 16:18:59 2025 GMT Subject: CN=86FC88140F78A6DFCA20608CA7C1659B508A2279 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:fa:65:0e:96:ec:da:51:6a:a7:1d:d7:86:cc: eb:b4:52:c6:21:f6:01:fb:a1:76:02:5f:d7:01:5e: 21:7b:55:90:1c:44:74:a1:d8:67:77:14:83:5a:8a: 8f:51:60:69:3e:c7:a7:07:59:61:ce:17:d2:52:bd: c2:6d:b5:93:7f:62:46:29:22:4a:65:44:c0:76:52: 42:25:c7:93:99:70:4c:7b:ce:12:e7:0c:63:2d:20: 33:9e:99:5a:83:73:d6:36:ea:0a:75:71:bb:7e:a4: 60:c2:e7:09:8e:f8:8e:6e:a8:b3:68:53:2f:19:99: 80:19:d1:91:88:30:dd:b3:bf:9e:0a:2e:5a:7e:9a: b0:c6:68:18:97:d8:d1:cc:15:b2:b5:d5:0a:e3:b7: 92:ed:08:3e:d8:01:ae:21:e9:62:c9:73:87:2e:e7: 13:b6:f0:8e:a0:7c:6f:72:ca:b7:ca:24:db:52:eb: 14:26:f8:3b:2d:20:11:ac:0c:58:68:49:95:38:35: 12:96:f9:98:32:a9:39:ef:19:c3:f1:05:e6:03:57: 10:fb:2f:dd:a0:49:70:7b:30:85:02:76:73:a6:6e: 63:bc:c6:61:fd:85:76:c4:74:39:b4:d8:7b:29:43: 80:34:d9:70:86:74:19:14:15:51:d4:79:b2:53:65: 8c:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:FC:88:14:0F:78:A6:DF:CA:20:60:8C:A7:C1:65:9B:50:8A:22:79 X509v3 Authority Key Identifier: keyid:FF:94:7B:E1:88:D3:59:EA:7E:DF:88:7D:86:DA:2C:7C:C7:46:0B:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:54:2c:15:62:ae:46:0e:56:a1:53:4d:a5:29:4b:04:3c:c3: f2:95:84:03:6a:f6:75:be:f5:8f:a7:da:03:eb:26:48:fc:41: 54:68:81:f7:19:75:60:99:7c:52:fc:ab:cf:54:fc:ae:c4:ca: 4e:b9:65:cf:97:66:a3:9f:c9:57:c5:9b:91:99:19:28:91:c0: fb:ba:f2:82:3b:e1:4d:f1:da:2d:41:e2:1c:9d:84:04:11:98: 4c:27:36:0e:62:59:8e:b9:00:4e:e7:c3:c6:a0:34:cd:34:74: 09:99:19:c1:48:f5:9c:73:7f:eb:18:94:c3:cc:7b:3f:a4:07: 31:ae:44:11:b5:af:b6:5c:fc:f5:45:4e:82:1d:89:39:9b:b1: bc:5e:f6:df:55:1c:bf:81:7e:b4:ee:0e:9e:85:28:d7:da:e5: 2a:fb:44:0d:91:de:88:28:2f:d4:07:6b:7f:cb:cf:ac:77:6a: d2:5c:ec:89:d1:10:35:93:89:4a:31:82:95:e4:97:4d:3f:c7: fe:1d:d0:31:46:81:d9:b7:58:14:88:0e:2c:9b:07:92:ed:bc: dc:1e:1b:9a:b0:62:af:28:9e:b7:53:4f:66:f3:ac:e0:5b:a2: fd:64:d7:9e:ea:0c:43:c9:6b:ef:4e:b2:a4:f9:44:ca:05:b6: 24:2c:86:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBOGSpvXAAC18vKYZhi3na6qfsfQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY5NDdCRTE4OEQzNTlFQTdFREY4ODdEODZEQTJDN0ND NzQ2MEI3MDAeFw0yNTA2MjkwNjA2NTlaFw0yNTA3MDIxNjE4NTlaMDMxMTAvBgNV BAMTKDg2RkM4ODE0MEY3OEE2REZDQTIwNjA4Q0E3QzE2NTlCNTA4QTIyNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr+mUOluzaUWqnHdeGzOu0UsYh 9gH7oXYCX9cBXiF7VZAcRHSh2Gd3FINaio9RYGk+x6cHWWHOF9JSvcJttZN/YkYp IkplRMB2UkIlx5OZcEx7zhLnDGMtIDOemVqDc9Y26gp1cbt+pGDC5wmO+I5uqLNo Uy8ZmYAZ0ZGIMN2zv54KLlp+mrDGaBiX2NHMFbK11Qrjt5LtCD7YAa4h6WLJc4cu 5xO28I6gfG9yyrfKJNtS6xQm+DstIBGsDFhoSZU4NRKW+ZgyqTnvGcPxBeYDVxD7 L92gSXB7MIUCdnOmbmO8xmH9hXbEdDm02HspQ4A02XCGdBkUFVHUebJTZYzhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhvyIFA94pt/KIGCMp8Flm1CKInkwHwYDVR0j BBgwFoAU/5R74YjTWep+34h9htosfMdGC3AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OGE5MjM3YS03MjZjLTRjMTktOWI0ZS03Yjk0YjE0MjRjNGIvMC9GRjk0N0JFMTg4 RDM1OUVBN0VERjg4N0Q4NkRBMkM3Q0M3NDYwQjcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkY5NDdCRTE4OEQzNTlFQTdFREY4ODdEODZEQTJDN0NDNzQ2 MEI3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZThhOTIzN2EtNzI2Yy00YzE5LTli NGUtN2I5NGIxNDI0YzRiLzAvRkY5NDdCRTE4OEQzNTlFQTdFREY4ODdEODZEQTJD N0NDNzQ2MEI3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIVULBVirkYOVqFTTaUpSwQ8w/KVhANq9nW+ 9Y+n2gPrJkj8QVRogfcZdWCZfFL8q89U/K7Eyk65Zc+XZqOfyVfFm5GZGSiRwPu6 8oI74U3x2i1B4hydhAQRmEwnNg5iWY65AE7nw8agNM00dAmZGcFI9Zxzf+sYlMPM ez+kBzGuRBG1r7Zc/PVFToIdiTmbsbxe9t9VHL+BfrTuDp6FKNfa5Sr7RA2R3ogo L9QHa3/Lz6x3atJc7InREDWTiUoxgpXkl00/x/4d0DFGgdm3WBSIDiybB5LtvNwe G5qwYq8onrdTT2bzrOBbov1k157qDEPJa+9OsqT5RMoFtiQshts= -----END CERTIFICATE-----Generated at Mon Jun 30 03:55:54 2025 by rpki-client