$ rpki-client -vvf repo-rpki.idnic.net/repo/1653247a-a56e-424a-a07b-36a2511d7caa/0/FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.mft File: FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.mft (raw, json) Hash identifier: s/C6Y5kNdNq7wjktGlbCM939kg7NsfYUls5ysFYMwNs= Subject key identifier: C5:82:D0:29:4E:27:09:82:B7:88:64:20:E6:B3:A3:E7:6A:A5:E9:EF Authority key identifier: FE:88:0C:C9:3B:62:84:E6:83:31:06:A5:BE:B7:1A:0C:DD:E5:7C:0B Certificate issuer: /CN=FE880CC93B6284E6833106A5BEB71A0CDDE57C0B Certificate serial: 0885B37B785B65B4D364B37D4F5DF26EACA5BA4F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1653247a-a56e-424a-a07b-36a2511d7caa/0/FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.mft Manifest number: 01E4 Signing time: Mon 11 Aug 2025 01:02:01 +0000 Manifest this update: Mon 11 Aug 2025 00:57:01 +0000 Manifest next update: Thu 14 Aug 2025 04:02:01 +0000 Files and hashes: 1: FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.crl (hash: hn3lh7VEeO7VFlID/RUF6Baqtc/M7DD54e9HK1QRfGo=) 2: 3130332e31332e3133392e302f32342d3234203d3e20313530323135.roa (hash: cU1g8IvJ9xTyNpUSLD7UlYtWkf7YESigdS5w5xzxaBQ=) 3: 3130332e31332e3133382e302f32342d3234203d3e20313530323135.roa (hash: 6ADoYkeIrhNdhv/k4Oyj/4jDcP6VkQMjB86DXlVYGIc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1653247a-a56e-424a-a07b-36a2511d7caa/0/FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.crl rsync://repo-rpki.idnic.net/repo/1653247a-a56e-424a-a07b-36a2511d7caa/0/FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 04:02:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:85:b3:7b:78:5b:65:b4:d3:64:b3:7d:4f:5d:f2:6e:ac:a5:ba:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FE880CC93B6284E6833106A5BEB71A0CDDE57C0B Validity Not Before: Aug 11 00:57:01 2025 GMT Not After : Aug 14 04:02:01 2025 GMT Subject: CN=C582D0294E270982B7886420E6B3A3E76AA5E9EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:70:e1:37:24:8f:bc:3a:3d:12:72:9a:23:11: 35:79:8c:74:63:c9:00:a8:ea:bb:78:4a:54:68:f5: 64:bd:45:84:c7:39:7b:1e:2f:c6:d5:00:23:02:12: 5b:1a:12:81:9b:71:42:26:1d:e0:ea:e8:9e:57:3c: 0b:ae:0e:69:8e:32:ad:52:76:96:ae:10:ad:4d:e3: d7:c1:35:76:e6:06:85:1a:ca:ae:ad:f1:e0:5a:bd: 43:b0:3a:72:91:fc:f2:12:d4:fc:26:17:3f:56:43: 3d:67:d0:6f:81:04:d4:17:31:ef:ea:11:c9:56:5f: 30:ed:1a:fc:d4:c7:e4:8d:2a:af:81:9f:28:fe:ea: 17:98:00:ec:29:4b:fb:03:ef:9a:e2:96:f3:b3:d7: 86:86:9b:e4:17:e6:2c:9d:8d:47:72:c8:84:e3:b9: 0d:b4:31:e1:8c:76:2c:53:1c:fb:60:d4:dc:0f:35: db:a0:d9:c1:3f:b0:80:9d:0b:b7:3e:c8:8c:d2:7c: 3a:68:89:e3:a7:30:e3:ea:c5:83:26:5b:73:28:bb: 1f:25:c9:f7:91:99:0b:1e:5c:72:ca:e5:0f:cd:80: 5b:f0:9e:f0:ad:ba:80:cd:29:77:f4:a5:82:5b:7f: a9:d2:09:5a:ac:98:7f:99:29:1d:70:b4:8d:26:b1: 75:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:82:D0:29:4E:27:09:82:B7:88:64:20:E6:B3:A3:E7:6A:A5:E9:EF X509v3 Authority Key Identifier: keyid:FE:88:0C:C9:3B:62:84:E6:83:31:06:A5:BE:B7:1A:0C:DD:E5:7C:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1653247a-a56e-424a-a07b-36a2511d7caa/0/FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1653247a-a56e-424a-a07b-36a2511d7caa/0/FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:83:a9:02:2f:19:ec:d5:81:20:0b:cf:47:a9:37:a6:35:f5: ba:8f:ed:f7:dc:3e:ab:c0:71:76:e7:07:5c:b6:de:fb:99:2b: 3a:4b:d0:f6:16:12:98:6b:a8:aa:62:5f:9d:61:ea:d3:c5:46: 99:3e:c3:f5:17:d5:7d:64:8c:74:55:12:13:8e:a4:ab:19:a1: e9:e7:83:ea:20:96:6b:78:0f:32:7c:b4:33:94:63:60:66:74: c5:96:8d:10:f7:9b:f2:f8:c8:24:94:b1:58:d7:00:ab:d0:d9: 14:7d:2f:8c:90:58:96:af:d6:ce:79:92:fb:3d:e0:19:1c:51: f6:78:cf:a0:c5:e9:e8:74:36:6c:9d:ea:15:68:ab:60:98:35: 82:23:76:f0:a4:4e:46:fd:b4:75:f3:f6:b9:5d:b8:ae:9a:62: 4c:23:f4:f3:37:7c:87:ab:6a:74:29:f5:66:7d:e9:f8:0b:56: 18:75:5c:a6:df:c3:49:3c:a9:e5:13:d0:db:e0:5a:cd:f5:24: ba:e4:0a:02:69:62:03:7a:06:31:c5:fb:a2:3b:8f:55:29:c4: bb:78:3d:2d:26:a1:79:ac:15:e2:03:11:b0:da:d2:f5:8c:3b: 4e:3f:28:22:3c:ff:42:09:4d:69:e2:7a:1f:e6:5f:f3:39:86: 4e:a2:44:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCIWze3hbZbTTZLN9T13ybqyluk8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkU4ODBDQzkzQjYyODRFNjgzMzEwNkE1QkVCNzFBMENE REU1N0MwQjAeFw0yNTA4MTEwMDU3MDFaFw0yNTA4MTQwNDAyMDFaMDMxMTAvBgNV BAMTKEM1ODJEMDI5NEUyNzA5ODJCNzg4NjQyMEU2QjNBM0U3NkFBNUU5RUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7cOE3JI+8Oj0ScpojETV5jHRj yQCo6rt4SlRo9WS9RYTHOXseL8bVACMCElsaEoGbcUImHeDq6J5XPAuuDmmOMq1S dpauEK1N49fBNXbmBoUayq6t8eBavUOwOnKR/PIS1PwmFz9WQz1n0G+BBNQXMe/q EclWXzDtGvzUx+SNKq+Bnyj+6heYAOwpS/sD75rilvOz14aGm+QX5iydjUdyyITj uQ20MeGMdixTHPtg1NwPNdug2cE/sICdC7c+yIzSfDpoieOnMOPqxYMmW3Moux8l yfeRmQseXHLK5Q/NgFvwnvCtuoDNKXf0pYJbf6nSCVqsmH+ZKR1wtI0msXUfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxYLQKU4nCYK3iGQg5rOj52ql6e8wHwYDVR0j BBgwFoAU/ogMyTtihOaDMQalvrcaDN3lfAswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NjUzMjQ3YS1hNTZlLTQyNGEtYTA3Yi0zNmEyNTExZDdjYWEvMC9GRTg4MENDOTNC NjI4NEU2ODMzMTA2QTVCRUI3MUEwQ0RERTU3QzBCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkU4ODBDQzkzQjYyODRFNjgzMzEwNkE1QkVCNzFBMENEREU1 N0MwQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTY1MzI0N2EtYTU2ZS00MjRhLWEw N2ItMzZhMjUxMWQ3Y2FhLzAvRkU4ODBDQzkzQjYyODRFNjgzMzEwNkE1QkVCNzFB MENEREU1N0MwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG2DqQIvGezVgSALz0epN6Y19bqP7ffcPqvA cXbnB1y23vuZKzpL0PYWEphrqKpiX51h6tPFRpk+w/UX1X1kjHRVEhOOpKsZoenn g+oglmt4DzJ8tDOUY2BmdMWWjRD3m/L4yCSUsVjXAKvQ2RR9L4yQWJav1s55kvs9 4BkcUfZ4z6DF6eh0Nmyd6hVoq2CYNYIjdvCkTkb9tHXz9rlduK6aYkwj9PM3fIer anQp9WZ96fgLVhh1XKbfw0k8qeUT0NvgWs31JLrkCgJpYgN6BjHF+6I7j1UpxLt4 PS0moXmsFeIDEbDa0vWMO04/KCI8/0IJTWnieh/mX/M5hk6iRFw= -----END CERTIFICATE-----Generated at Tue Aug 12 22:40:50 2025 by rpki-client