$ rpki-client -vvf repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.mft File: FF947BE188D359EA7EDF887D86DA2C7CC7460B70.mft (raw, json) Hash identifier: oHPMQo9FmImxTVjmcpCv2u9vmGquMQQ/12nM2+Itzuo= Subject key identifier: 9F:B9:08:89:67:7C:77:6E:BF:55:93:E0:D1:9F:42:DB:F9:2E:58:36 Authority key identifier: FF:94:7B:E1:88:D3:59:EA:7E:DF:88:7D:86:DA:2C:7C:C7:46:0B:70 Certificate issuer: /CN=FF947BE188D359EA7EDF887D86DA2C7CC7460B70 Certificate serial: 2FBF6985C492D5700AA18B153730ED91185E08AA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.mft Manifest number: 024A Signing time: Sun 19 Oct 2025 06:52:04 +0000 Manifest this update: Sun 19 Oct 2025 06:47:04 +0000 Manifest next update: Wed 22 Oct 2025 16:27:04 +0000 Files and hashes: 1: FF947BE188D359EA7EDF887D86DA2C7CC7460B70.crl (hash: SWRRVsoYgzLTFX8Sh7X0phaQy24bxsH7bm83UCaGm5I=) 2: 3130332e3136322e3134312e302f32342d3234203d3e20313431303833.roa (hash: 6+qzbxlDEMLlDFF8ZMTBVVGBQ81Jy42r6r5JLNvCfLQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.crl rsync://repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 16:27:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:bf:69:85:c4:92:d5:70:0a:a1:8b:15:37:30:ed:91:18:5e:08:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF947BE188D359EA7EDF887D86DA2C7CC7460B70 Validity Not Before: Oct 19 06:47:04 2025 GMT Not After : Oct 22 16:27:04 2025 GMT Subject: CN=9FB90889677C776EBF5593E0D19F42DBF92E5836 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:0d:94:c8:57:f2:0a:fc:1f:e4:3d:ef:64:bc: e9:b4:14:7f:68:86:a5:fe:45:f1:7b:d2:ea:f8:ec: 62:43:44:82:70:7e:c8:18:39:d2:e2:13:25:9b:20: 4e:6c:a7:b0:39:04:ac:c0:28:72:8d:88:a1:e0:be: 47:dd:75:69:a7:fe:21:d1:32:b4:9a:b6:76:da:09: c0:68:01:29:d1:96:1e:17:76:59:fe:0b:89:96:72: 42:55:48:80:37:b8:be:24:47:f5:47:70:dd:d0:82: c8:4a:be:6b:40:57:90:25:7d:ba:12:65:23:a2:9f: be:01:2f:67:01:d9:0a:1a:f5:7a:13:b4:ea:e1:f2: f4:2c:20:07:ec:b9:1c:23:49:36:a1:ac:bb:89:19: b7:20:0b:ae:0f:ee:ad:7c:12:d2:35:62:6d:6a:ce: 3c:b5:10:1d:47:f4:b6:fb:52:09:31:b1:3d:bc:d4: 4e:ab:03:ea:6b:81:cf:fa:ed:33:27:4c:ee:c7:3d: 4d:79:8c:c4:fa:8a:87:65:a4:cd:8b:16:04:10:ff: e9:39:17:94:75:7f:1f:f3:78:0d:90:a8:d6:21:28: 8d:bd:66:fb:f7:0e:71:f6:3e:86:f9:d2:50:9b:aa: fa:ec:07:e4:f6:52:18:24:4a:df:1f:ac:83:09:85: 7e:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:B9:08:89:67:7C:77:6E:BF:55:93:E0:D1:9F:42:DB:F9:2E:58:36 X509v3 Authority Key Identifier: keyid:FF:94:7B:E1:88:D3:59:EA:7E:DF:88:7D:86:DA:2C:7C:C7:46:0B:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:b2:c8:a6:d1:b4:84:83:a9:a5:27:ce:24:7b:7e:c7:a8:fb: 27:9d:49:c7:5f:cb:40:82:cc:22:f5:b5:ec:d0:f0:ee:94:b2: cf:bd:64:c4:41:cb:f1:7c:7b:ab:44:f2:ac:06:b4:2a:72:69: 8c:bc:21:ea:11:a6:90:db:ff:07:be:1b:cb:7b:66:5f:ee:7a: 24:52:12:4c:f8:d4:c1:5d:c2:ad:c5:3c:8c:30:8c:5d:0a:de: 60:c7:4b:7c:29:94:28:c2:1f:9a:c3:74:8b:60:8d:fd:d8:d0: 9a:30:2a:4a:4b:b4:ce:43:94:13:74:31:4c:2f:12:f8:ed:46: b5:d8:fc:19:d4:6c:a5:ef:8f:55:24:00:0f:5b:f3:2e:9f:f9: c6:fd:ba:20:0b:cf:0d:5b:b9:e1:15:a0:6b:bc:5e:2c:6a:d8: 4e:b1:aa:c9:14:3f:42:bf:d4:df:b3:73:52:b4:1d:31:4b:64: 27:e3:be:56:ab:81:bb:40:22:28:00:5c:73:b0:72:9a:bc:95: ed:ce:f8:c5:2d:46:d5:c1:fe:24:df:bb:c0:0f:9d:46:ac:da: 51:47:22:e7:f8:1d:8e:07:ce:35:99:5b:ec:ee:e7:4e:91:f2: 16:a1:bb:49:bb:27:bf:f8:af:d9:ca:be:c0:3e:36:15:d6:32: ee:8d:6c:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL79phcSS1XAKoYsVNzDtkRheCKowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY5NDdCRTE4OEQzNTlFQTdFREY4ODdEODZEQTJDN0ND NzQ2MEI3MDAeFw0yNTEwMTkwNjQ3MDRaFw0yNTEwMjIxNjI3MDRaMDMxMTAvBgNV BAMTKDlGQjkwODg5Njc3Qzc3NkVCRjU1OTNFMEQxOUY0MkRCRjkyRTU4MzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+DZTIV/IK/B/kPe9kvOm0FH9o hqX+RfF70ur47GJDRIJwfsgYOdLiEyWbIE5sp7A5BKzAKHKNiKHgvkfddWmn/iHR MrSatnbaCcBoASnRlh4Xdln+C4mWckJVSIA3uL4kR/VHcN3QgshKvmtAV5AlfboS ZSOin74BL2cB2Qoa9XoTtOrh8vQsIAfsuRwjSTahrLuJGbcgC64P7q18EtI1Ym1q zjy1EB1H9Lb7UgkxsT281E6rA+prgc/67TMnTO7HPU15jMT6iodlpM2LFgQQ/+k5 F5R1fx/zeA2QqNYhKI29Zvv3DnH2Pob50lCbqvrsB+T2UhgkSt8frIMJhX6bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUn7kIiWd8d26/VZPg0Z9C2/kuWDYwHwYDVR0j BBgwFoAU/5R74YjTWep+34h9htosfMdGC3AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OGE5MjM3YS03MjZjLTRjMTktOWI0ZS03Yjk0YjE0MjRjNGIvMC9GRjk0N0JFMTg4 RDM1OUVBN0VERjg4N0Q4NkRBMkM3Q0M3NDYwQjcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkY5NDdCRTE4OEQzNTlFQTdFREY4ODdEODZEQTJDN0NDNzQ2 MEI3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZThhOTIzN2EtNzI2Yy00YzE5LTli NGUtN2I5NGIxNDI0YzRiLzAvRkY5NDdCRTE4OEQzNTlFQTdFREY4ODdEODZEQTJD N0NDNzQ2MEI3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIqyyKbRtISDqaUnziR7fseo+yedScdfy0CC zCL1tezQ8O6Uss+9ZMRBy/F8e6tE8qwGtCpyaYy8IeoRppDb/we+G8t7Zl/ueiRS Ekz41MFdwq3FPIwwjF0K3mDHS3wplCjCH5rDdItgjf3Y0JowKkpLtM5DlBN0MUwv EvjtRrXY/BnUbKXvj1UkAA9b8y6f+cb9uiALzw1bueEVoGu8Xixq2E6xqskUP0K/ 1N+zc1K0HTFLZCfjvlargbtAIigAXHOwcpq8le3O+MUtRtXB/iTfu8APnUas2lFH Iuf4HY4HzjWZW+zu506R8hahu0m7J7/4r9nKvsA+NhXWMu6NbEA= -----END CERTIFICATE-----Generated at Mon Oct 20 09:27:34 2025 by rpki-client