$ rpki-client -vvf repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.mft File: FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.mft (raw, json) Hash identifier: M4OIE6kAyfoo/Eq0QzLJlr6Yc6MIvYogexC6j9f52vg= Subject key identifier: 65:50:87:47:A3:9D:BB:66:C5:10:E8:A8:7C:97:EB:94:31:B4:B5:01 Authority key identifier: FF:77:50:7E:6D:1F:0E:0B:6E:B0:11:2E:9C:FB:D1:AF:1C:1F:6D:D4 Certificate issuer: /CN=FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4 Certificate serial: 54022858F5F1A48F1F00B1400B41F6947794C925 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.mft Manifest number: 0202 Signing time: Thu 21 Aug 2025 14:42:18 +0000 Manifest this update: Thu 21 Aug 2025 14:37:18 +0000 Manifest next update: Mon 25 Aug 2025 02:02:18 +0000 Files and hashes: 1: 3130332e3137372e31342e302f32332d3233203d3e20313437313338.roa (hash: 5z8wRtouH3UZuHrJrJfhmhXWcm8bh9b9rb8I23FOiCg=) 2: 3130332e3137372e31342e302f32342d3234203d3e20313437313338.roa (hash: 2HLKDZ4NotrKv5eD+avvVTu9dBP+/6Ewaq5ipG+lyWE=) 3: FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.crl (hash: 0MMxFC9nAgLkY9tUw750kwoyEBsGucfiJny1hRfmglk=) 4: 3130332e3137372e31352e302f32342d3234203d3e20313437313338.roa (hash: eF9NB+BjEkYpNET986L8/mFTnt6eJT0/RWpF2VpYMW8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.crl rsync://repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 02:02:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:02:28:58:f5:f1:a4:8f:1f:00:b1:40:0b:41:f6:94:77:94:c9:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4 Validity Not Before: Aug 21 14:37:18 2025 GMT Not After : Aug 25 02:02:18 2025 GMT Subject: CN=65508747A39DBB66C510E8A87C97EB9431B4B501 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:3d:82:de:d1:7d:4f:82:15:b2:79:9b:63:ce: 85:22:d3:29:de:83:32:47:89:5a:14:c0:9c:64:72: 6d:1c:11:a0:da:02:5d:3d:da:8a:9f:04:16:f1:9e: d8:8f:cc:8c:ce:fa:7a:f4:64:79:69:a3:c3:c9:f4: 14:97:71:5b:4a:b5:8b:e0:56:c7:36:5c:05:d3:c1: 38:f4:66:41:c9:f9:9f:b6:fa:e9:72:c7:8c:14:fb: ae:1f:af:18:0a:f4:f2:1e:9b:1b:e6:04:4c:d0:66: 67:13:08:80:1c:51:45:5a:b8:d3:59:25:e5:a7:73: 2c:6b:a3:00:3d:14:92:ac:86:12:27:3d:da:bb:88: db:cd:55:a0:62:3c:20:0f:95:66:da:7e:a7:9e:b2: fc:a6:47:65:10:3c:15:69:1b:a4:13:58:3a:e2:43: f4:53:dc:95:b6:e8:84:41:0a:a9:07:21:b2:11:e6: 64:54:88:2d:8c:74:ed:bc:23:3d:e2:64:c4:95:a7: 7f:46:8d:29:58:d2:da:92:3d:b3:f9:19:ae:e4:af: 42:09:52:28:99:83:7e:10:e6:79:2c:31:6f:24:0d: 49:d9:ef:1e:c1:1e:cc:97:ae:8d:4c:02:b4:75:9e: 4b:e5:0d:26:14:e4:59:1a:5f:fc:25:39:be:01:72: 08:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:50:87:47:A3:9D:BB:66:C5:10:E8:A8:7C:97:EB:94:31:B4:B5:01 X509v3 Authority Key Identifier: keyid:FF:77:50:7E:6D:1F:0E:0B:6E:B0:11:2E:9C:FB:D1:AF:1C:1F:6D:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:98:96:24:47:bf:68:44:77:70:4a:2b:6d:87:11:74:75:57: c1:1d:59:a8:56:26:1f:ac:86:78:6f:95:76:04:56:24:f0:52: c5:24:d7:c9:87:3b:e3:61:dc:05:b5:6f:c2:22:63:5e:f0:51: 1a:12:46:79:12:ec:3e:7f:dc:af:0a:25:8b:8c:81:12:32:f5: 11:d8:03:44:d7:a5:7d:73:c9:98:00:9b:b6:b6:e1:70:cb:9c: 61:c7:24:73:46:74:ed:bd:1a:bc:79:c8:6d:80:09:ec:b2:db: 7a:72:42:1d:16:0c:5f:dd:12:27:ec:92:6a:77:de:9b:d7:d9: 21:d6:fd:84:bd:1b:04:8a:16:d5:5d:3e:ed:4d:41:49:6f:fa: 9c:9a:ad:6c:e1:43:57:34:b2:55:0d:69:76:a9:fe:2b:aa:84: fc:c8:96:0b:07:96:e4:e7:31:34:cd:59:37:59:f9:cc:d9:73: 93:cd:96:f6:b9:7b:25:ac:e7:3f:f1:1a:88:32:1b:77:61:ab: 43:bc:b0:62:f2:9f:0f:2d:b4:c7:a3:35:a3:76:22:a8:ce:1e: 47:e8:94:e2:3d:d4:e4:05:ed:12:a9:57:0d:3d:6e:3f:f8:b6: 6d:df:d9:92:0f:ce:29:dd:10:59:bd:f7:ec:11:50:63:30:8e: 0c:e0:67:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVAIoWPXxpI8fALFAC0H2lHeUySUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY3NzUwN0U2RDFGMEUwQjZFQjAxMTJFOUNGQkQxQUYx QzFGNkRENDAeFw0yNTA4MjExNDM3MThaFw0yNTA4MjUwMjAyMThaMDMxMTAvBgNV BAMTKDY1NTA4NzQ3QTM5REJCNjZDNTEwRThBODdDOTdFQjk0MzFCNEI1MDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXPYLe0X1PghWyeZtjzoUi0yne gzJHiVoUwJxkcm0cEaDaAl092oqfBBbxntiPzIzO+nr0ZHlpo8PJ9BSXcVtKtYvg Vsc2XAXTwTj0ZkHJ+Z+2+ulyx4wU+64frxgK9PIemxvmBEzQZmcTCIAcUUVauNNZ JeWncyxrowA9FJKshhInPdq7iNvNVaBiPCAPlWbafqeesvymR2UQPBVpG6QTWDri Q/RT3JW26IRBCqkHIbIR5mRUiC2MdO28Iz3iZMSVp39GjSlY0tqSPbP5Ga7kr0IJ UiiZg34Q5nksMW8kDUnZ7x7BHsyXro1MArR1nkvlDSYU5FkaX/wlOb4Bcgi9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZVCHR6Odu2bFEOiofJfrlDG0tQEwHwYDVR0j BBgwFoAU/3dQfm0fDgtusBEunPvRrxwfbdQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YmUwNDAzOC1hMWI2LTQzMmMtODU0Yi1jYzZlOGNmMzJlMDYvMC9GRjc3NTA3RTZE MUYwRTBCNkVCMDExMkU5Q0ZCRDFBRjFDMUY2REQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkY3NzUwN0U2RDFGMEUwQjZFQjAxMTJFOUNGQkQxQUYxQzFG NkRENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmJlMDQwMzgtYTFiNi00MzJjLTg1 NGItY2M2ZThjZjMyZTA2LzAvRkY3NzUwN0U2RDFGMEUwQjZFQjAxMTJFOUNGQkQx QUYxQzFGNkRENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAImYliRHv2hEd3BKK22HEXR1V8EdWahWJh+s hnhvlXYEViTwUsUk18mHO+Nh3AW1b8IiY17wURoSRnkS7D5/3K8KJYuMgRIy9RHY A0TXpX1zyZgAm7a24XDLnGHHJHNGdO29Grx5yG2ACeyy23pyQh0WDF/dEifskmp3 3pvX2SHW/YS9GwSKFtVdPu1NQUlv+pyarWzhQ1c0slUNaXap/iuqhPzIlgsHluTn MTTNWTdZ+czZc5PNlva5eyWs5z/xGogyG3dhq0O8sGLynw8ttMejNaN2IqjOHkfo lOI91OQF7RKpVw09bj/4tm3f2ZIPzindEFm99+wRUGMwjgzgZx8= -----END CERTIFICATE-----Generated at Sat Aug 23 10:21:57 2025 by rpki-client