$ rpki-client -vvf repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.mft File: FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.mft (raw, json) Hash identifier: W/kHKzjSjUcQQGtFVAUGjL8p0IAYrNOYdmhtDNi1plU= Subject key identifier: 80:9D:7C:8D:2C:8D:01:2B:07:1D:2F:AC:85:DB:1B:87:DF:E6:92:FD Authority key identifier: FF:77:50:7E:6D:1F:0E:0B:6E:B0:11:2E:9C:FB:D1:AF:1C:1F:6D:D4 Certificate issuer: /CN=FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4 Certificate serial: 35240549176B61DFB3CD02096645D35CD8127B2E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.mft Manifest number: 01EC Signing time: Thu 03 Jul 2025 21:12:14 +0000 Manifest this update: Thu 03 Jul 2025 21:07:14 +0000 Manifest next update: Mon 07 Jul 2025 01:23:14 +0000 Files and hashes: 1: 3130332e3137372e31352e302f32342d3234203d3e20313437313338.roa (hash: eF9NB+BjEkYpNET986L8/mFTnt6eJT0/RWpF2VpYMW8=) 2: 3130332e3137372e31342e302f32342d3234203d3e20313437313338.roa (hash: 2HLKDZ4NotrKv5eD+avvVTu9dBP+/6Ewaq5ipG+lyWE=) 3: 3130332e3137372e31342e302f32332d3233203d3e20313437313338.roa (hash: 5z8wRtouH3UZuHrJrJfhmhXWcm8bh9b9rb8I23FOiCg=) 4: FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.crl (hash: PoavZbBqAOM0Stkvm51rDVmrN/Us6XdmhT9CIIRRc2k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.crl rsync://repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 01:23:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:24:05:49:17:6b:61:df:b3:cd:02:09:66:45:d3:5c:d8:12:7b:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4 Validity Not Before: Jul 3 21:07:14 2025 GMT Not After : Jul 7 01:23:14 2025 GMT Subject: CN=809D7C8D2C8D012B071D2FAC85DB1B87DFE692FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:bf:c5:ed:c5:2f:9b:f3:bd:e5:8a:79:21:a2: b5:2c:0e:27:70:17:cf:0e:08:c9:e5:4a:06:80:1a: 13:b8:36:0b:37:f1:04:fe:3a:3d:e3:ba:b2:9b:aa: 41:ab:34:05:16:f4:ec:b7:be:31:78:07:91:8d:4c: fe:1f:96:8b:cc:61:1e:db:3a:8f:a9:b1:27:46:44: b4:ca:9c:37:b2:f2:b6:df:be:ce:ad:e3:be:d9:36: 1d:cc:a4:8a:a4:3f:da:60:32:6b:19:15:a4:e7:a0: 73:99:b5:b5:71:da:b8:fc:38:97:69:36:91:ff:65: 1f:4e:4c:ed:55:fc:21:c9:ac:e8:6d:ae:48:7f:3f: 41:cc:18:61:82:8b:e8:ed:e8:dd:33:3a:ab:42:09: d7:29:00:e4:fe:48:fd:df:29:0e:45:03:a5:fd:73: 21:e1:5a:2f:10:fe:34:74:7b:8a:e8:a8:5e:34:d6: e3:c1:e0:34:5f:29:eb:fd:4f:6a:ec:39:ba:08:ad: b6:58:ee:45:1c:12:ad:3b:fe:36:90:12:93:b6:38: 43:7f:c1:bb:08:f9:dd:b0:56:eb:b8:87:da:3e:3f: f8:ba:92:86:ca:03:cc:5a:d9:32:35:1b:3f:fb:e7: ba:b8:44:4a:6e:d4:d7:3e:db:87:09:a6:0c:0e:cc: 26:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:9D:7C:8D:2C:8D:01:2B:07:1D:2F:AC:85:DB:1B:87:DF:E6:92:FD X509v3 Authority Key Identifier: keyid:FF:77:50:7E:6D:1F:0E:0B:6E:B0:11:2E:9C:FB:D1:AF:1C:1F:6D:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:84:e4:e2:91:1d:91:f8:fe:34:b1:7e:7a:56:21:4c:02:2d: 20:91:23:a5:9a:f3:f4:2f:5b:98:53:a5:22:4c:b9:45:d4:8b: d3:c6:83:ec:6b:91:2f:c5:31:18:9c:33:0c:43:f4:54:a5:3f: 4c:03:7b:83:e8:14:e0:b4:d6:31:5f:ed:60:00:b5:94:7f:10: bc:5b:4a:9a:d3:16:9c:13:1e:b6:79:7b:5a:07:2c:cd:ea:be: a0:98:d6:0e:a8:2c:f3:3f:78:03:44:fc:3d:50:61:03:42:84: 67:5b:f1:a8:bc:3c:3f:8f:7c:6b:6e:7d:13:b0:72:73:3f:56: 02:fa:75:c7:a0:f5:d2:7c:5b:1c:b1:1d:4f:44:52:66:90:02: 18:21:8c:7c:94:29:9a:37:ec:82:0c:20:f3:f8:5c:63:ba:03: dc:5b:0d:ed:25:33:98:cc:f5:47:24:57:0e:5e:8c:a3:f2:99: 58:cf:77:3e:99:6c:b5:56:e5:b4:cb:af:39:0c:ac:d6:9d:4e: cd:82:53:41:0f:52:1c:48:3e:b8:17:04:dc:69:6c:ca:ff:c2: 53:a3:b2:81:3e:df:91:1c:f3:cb:58:cf:70:fb:11:4e:24:6d: 34:03:c4:0a:7d:9f:1c:fd:3a:da:af:9d:7f:33:13:ab:9a:c6: 69:8e:ff:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNSQFSRdrYd+zzQIJZkXTXNgSey4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY3NzUwN0U2RDFGMEUwQjZFQjAxMTJFOUNGQkQxQUYx QzFGNkRENDAeFw0yNTA3MDMyMTA3MTRaFw0yNTA3MDcwMTIzMTRaMDMxMTAvBgNV BAMTKDgwOUQ3QzhEMkM4RDAxMkIwNzFEMkZBQzg1REIxQjg3REZFNjkyRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiv8XtxS+b873linkhorUsDidw F88OCMnlSgaAGhO4Ngs38QT+Oj3jurKbqkGrNAUW9Oy3vjF4B5GNTP4flovMYR7b Oo+psSdGRLTKnDey8rbfvs6t477ZNh3MpIqkP9pgMmsZFaTnoHOZtbVx2rj8OJdp NpH/ZR9OTO1V/CHJrOhtrkh/P0HMGGGCi+jt6N0zOqtCCdcpAOT+SP3fKQ5FA6X9 cyHhWi8Q/jR0e4roqF401uPB4DRfKev9T2rsOboIrbZY7kUcEq07/jaQEpO2OEN/ wbsI+d2wVuu4h9o+P/i6kobKA8xa2TI1Gz/757q4REpu1Nc+24cJpgwOzCZBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgJ18jSyNASsHHS+shdsbh9/mkv0wHwYDVR0j BBgwFoAU/3dQfm0fDgtusBEunPvRrxwfbdQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YmUwNDAzOC1hMWI2LTQzMmMtODU0Yi1jYzZlOGNmMzJlMDYvMC9GRjc3NTA3RTZE MUYwRTBCNkVCMDExMkU5Q0ZCRDFBRjFDMUY2REQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkY3NzUwN0U2RDFGMEUwQjZFQjAxMTJFOUNGQkQxQUYxQzFG NkRENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmJlMDQwMzgtYTFiNi00MzJjLTg1 NGItY2M2ZThjZjMyZTA2LzAvRkY3NzUwN0U2RDFGMEUwQjZFQjAxMTJFOUNGQkQx QUYxQzFGNkRENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABWE5OKRHZH4/jSxfnpWIUwCLSCRI6Wa8/Qv W5hTpSJMuUXUi9PGg+xrkS/FMRicMwxD9FSlP0wDe4PoFOC01jFf7WAAtZR/ELxb SprTFpwTHrZ5e1oHLM3qvqCY1g6oLPM/eANE/D1QYQNChGdb8ai8PD+PfGtufROw cnM/VgL6dceg9dJ8WxyxHU9EUmaQAhghjHyUKZo37IIMIPP4XGO6A9xbDe0lM5jM 9UckVw5ejKPymVjPdz6ZbLVW5bTLrzkMrNadTs2CU0EPUhxIPrgXBNxpbMr/wlOj soE+35Ec88tYz3D7EU4kbTQDxAp9nxz9OtqvnX8zE6uaxmmO/7g= -----END CERTIFICATE-----Generated at Fri Jul 4 13:27:26 2025 by rpki-client