$ rpki-client -vvf repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/FED855DD505D24B6FE25BD8656297329F7EF4785.mft File: FED855DD505D24B6FE25BD8656297329F7EF4785.mft (raw, json) Hash identifier: qBkJq18X7aPHj+BB3zfwJEnMLVUDi1QlsvI8VXQodBA= Subject key identifier: F8:1F:13:BC:E1:12:7A:68:8F:A1:5E:96:E3:CD:6E:2E:B0:23:DA:E4 Authority key identifier: FE:D8:55:DD:50:5D:24:B6:FE:25:BD:86:56:29:73:29:F7:EF:47:85 Certificate issuer: /CN=FED855DD505D24B6FE25BD8656297329F7EF4785 Certificate serial: 4FE4DFDDD1A6EAA92CFE1F0FE0166D3DCA7188 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FED855DD505D24B6FE25BD8656297329F7EF4785.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/FED855DD505D24B6FE25BD8656297329F7EF4785.mft Manifest number: 0470 Signing time: Thu 07 Aug 2025 01:11:24 +0000 Manifest this update: Thu 07 Aug 2025 01:06:24 +0000 Manifest next update: Sun 10 Aug 2025 03:22:24 +0000 Files and hashes: 1: 3130332e3130352e3132392e302f32342d3234203d3e203137373237.roa (hash: lJMQNYucnJrPY3dSbvBo/L6VOBHJNLkr/8+rBT1rHAo=) 2: 3130332e3130352e3132382e302f32322d3232203d3e203137373237.roa (hash: bF3yNWnrobMt6M6WVmO7fz+aU3HM2Cfravonu1UTCBk=) 3: 3130332e3130352e3133302e302f32342d3234203d3e203137373237.roa (hash: XaJkhpMWFfQiHoigSzAOeB9OLJw8Q/0siNpjbvDEMi4=) 4: FED855DD505D24B6FE25BD8656297329F7EF4785.crl (hash: hvH7l5ErexjD6AD7Ww5TtNF9JkWOm3TAviJ/4J90YVg=) 5: 3130332e3130352e3133312e302f32342d3234203d3e203137373237.roa (hash: 7zla6i/CdhAJ+rkrr0QnJT3TEbat42oScFtFbp306GQ=) 6: 3130332e3130352e3132382e302f32342d3234203d3e203137373237.roa (hash: M4514PXfJTPhQt4OlK6IndpXXY1NhEUELHDBA5WVyuc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/FED855DD505D24B6FE25BD8656297329F7EF4785.crl rsync://repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/FED855DD505D24B6FE25BD8656297329F7EF4785.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FED855DD505D24B6FE25BD8656297329F7EF4785.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 03:22:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:e4:df:dd:d1:a6:ea:a9:2c:fe:1f:0f:e0:16:6d:3d:ca:71:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FED855DD505D24B6FE25BD8656297329F7EF4785 Validity Not Before: Aug 7 01:06:24 2025 GMT Not After : Aug 10 03:22:24 2025 GMT Subject: CN=F81F13BCE1127A688FA15E96E3CD6E2EB023DAE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:50:b0:0f:18:86:74:3b:a2:59:34:3f:10:09: 7f:e9:4e:52:a2:90:5e:68:54:09:b1:77:99:26:04: 88:dc:0d:46:f1:eb:80:01:c9:ee:5a:7e:33:3d:cd: a9:ae:79:7d:68:79:44:32:d8:5a:42:b2:95:56:0f: ea:b8:b0:da:85:a4:98:cf:28:e2:36:71:ea:70:bf: a9:51:6e:2d:7f:f8:0b:d8:c9:41:9b:08:df:af:0f: f7:01:28:e2:26:62:26:a6:f0:7f:d4:12:f2:b1:4e: 0a:c4:e8:f2:a3:61:6a:b5:be:04:96:13:04:d2:e6: 1e:07:e5:fe:f8:ea:66:e3:a5:2b:96:50:5e:76:0a: 9d:c4:cc:ca:8c:ff:73:df:be:98:e3:a3:50:19:13: c4:db:64:77:35:51:31:1f:2f:fe:68:c0:24:80:8f: e6:75:26:4b:10:8d:8f:c5:44:64:13:07:23:8f:72: 4b:93:c0:b7:d4:fa:9e:4c:a2:aa:da:2c:78:29:72: 73:6c:58:f8:49:14:33:77:98:47:49:09:6a:7f:76: 20:39:01:41:1e:ea:ca:f4:87:b4:b2:f9:97:13:89: 5e:51:89:99:4b:3c:21:c8:76:c0:22:8d:71:ad:67: 17:f3:5c:47:eb:6c:9c:35:a2:33:47:ee:10:ce:f3: 93:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:1F:13:BC:E1:12:7A:68:8F:A1:5E:96:E3:CD:6E:2E:B0:23:DA:E4 X509v3 Authority Key Identifier: keyid:FE:D8:55:DD:50:5D:24:B6:FE:25:BD:86:56:29:73:29:F7:EF:47:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/FED855DD505D24B6FE25BD8656297329F7EF4785.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FED855DD505D24B6FE25BD8656297329F7EF4785.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/FED855DD505D24B6FE25BD8656297329F7EF4785.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:ec:76:d6:b8:d2:3e:bc:18:94:29:c9:33:c9:02:2d:4c:13: 20:30:5b:03:32:f1:83:33:5c:b0:1c:6c:8a:f1:2c:1c:50:ad: 28:f0:80:28:94:38:94:24:6d:3f:7d:c7:88:78:94:81:19:e9: 59:10:3c:2b:8a:75:a3:2a:4e:06:6f:16:1b:bd:74:1a:4c:02: 00:bd:c0:e6:9f:c8:bd:5e:78:18:7d:9f:ed:ad:69:b2:92:80: 3a:ad:d0:16:91:cc:27:bc:91:7a:22:6d:3e:98:91:b3:d2:2d: 7d:43:ef:7f:dd:03:a2:b5:18:79:6f:c7:3c:8c:31:e1:dd:ab: 17:b5:a4:16:1d:5e:f8:81:46:98:22:43:63:93:c2:9c:9c:44: 4a:05:f0:62:4c:a2:64:8f:64:6e:46:40:60:53:77:0f:26:82: ef:4e:01:b5:37:84:ff:16:24:29:4b:dd:3a:05:9f:c2:a0:9d: 1c:1c:d8:b0:91:0a:53:c5:05:fc:c6:31:7d:bb:34:20:c7:bf: 3f:c1:dd:3c:48:28:4b:b8:23:97:4d:cf:97:95:a0:65:7f:c7: 56:eb:84:fa:5e:eb:da:e8:fc:72:58:e8:3e:19:1d:b2:7a:b1: 09:51:d0:b7:70:55:0f:4a:6f:5f:84:28:08:fc:8c:ee:8e:e1: 32:36:51:3b -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgITT+Tf3dGm6qks/h8P4BZtPcpxiDANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyhGRUQ4NTVERDUwNUQyNEI2RkUyNUJEODY1NjI5NzMyOUY3 RUY0Nzg1MB4XDTI1MDgwNzAxMDYyNFoXDTI1MDgxMDAzMjIyNFowMzExMC8GA1UE AxMoRjgxRjEzQkNFMTEyN0E2ODhGQTE1RTk2RTNDRDZFMkVCMDIzREFFNDCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL5QsA8YhnQ7olk0PxAJf+lOUqKQ XmhUCbF3mSYEiNwNRvHrgAHJ7lp+Mz3Nqa55fWh5RDLYWkKylVYP6riw2oWkmM8o 4jZx6nC/qVFuLX/4C9jJQZsI368P9wEo4iZiJqbwf9QS8rFOCsTo8qNharW+BJYT BNLmHgfl/vjqZuOlK5ZQXnYKncTMyoz/c9++mOOjUBkTxNtkdzVRMR8v/mjAJICP 5nUmSxCNj8VEZBMHI49yS5PAt9T6nkyiqtoseClyc2xY+EkUM3eYR0kJan92IDkB QR7qyvSHtLL5lxOJXlGJmUs8Ich2wCKNca1nF/NcR+tsnDWiM0fuEM7zkz8CAwEA AaOCAjwwggI4MB0GA1UdDgQWBBT4HxO84RJ6aI+hXpbjzW4usCPa5DAfBgNVHSME GDAWgBT+2FXdUF0ktv4lvYZWKXMp9+9HhTAOBgNVHQ8BAf8EBAMCB4AwgYUGA1Ud HwR+MHwweqB4oHaGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA0 NjFkN2E3LWExMWUtNDAwYi05MTcwLWM3OTdlZDg4ZDcwMi8wL0ZFRDg1NURENTA1 RDI0QjZGRTI1QkQ4NjU2Mjk3MzI5RjdFRjQ3ODUuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8v SUROSUMtSUQvMi9GRUQ4NTVERDUwNUQyNEI2RkUyNUJEODY1NjI5NzMyOUY3RUY0 Nzg1LmNlcjCBkwYIKwYBBQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzov L3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8wNDYxZDdhNy1hMTFlLTQwMGItOTE3 MC1jNzk3ZWQ4OGQ3MDIvMC9GRUQ4NTVERDUwNUQyNEI2RkUyNUJEODY1NjI5NzMy OUY3RUY0Nzg1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAiex21rjSPrwYlCnJM8kCLUwTIDBbAzLxgzNc sBxsivEsHFCtKPCAKJQ4lCRtP33HiHiUgRnpWRA8K4p1oypOBm8WG710GkwCAL3A 5p/IvV54GH2f7a1pspKAOq3QFpHMJ7yReiJtPpiRs9ItfUPvf90DorUYeW/HPIwx 4d2rF7WkFh1e+IFGmCJDY5PCnJxESgXwYkyiZI9kbkZAYFN3DyaC704BtTeE/xYk KUvdOgWfwqCdHBzYsJEKU8UF/MYxfbs0IMe/P8HdPEgoS7gjl03Pl5WgZX/HVuuE +l7r2uj8cljoPhkdsnqxCVHQt3BVD0pvX4QoCPyM7o7hMjZROw== -----END CERTIFICATE-----Generated at Thu Aug 7 03:15:26 2025 by rpki-client