$ rpki-client -vvf repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/FA479894B4849679EBB9029580F04B8BD74CE048.mft File: FA479894B4849679EBB9029580F04B8BD74CE048.mft (raw, json) Hash identifier: +lLTJ8HEXzq//lHr9b/ObnbCnv19a8khmfX/wI9wnA0= Subject key identifier: D4:64:E4:03:E1:44:DE:3B:F4:4A:68:D0:33:2D:DF:EC:E5:5C:6D:44 Authority key identifier: FA:47:98:94:B4:84:96:79:EB:B9:02:95:80:F0:4B:8B:D7:4C:E0:48 Certificate issuer: /CN=FA479894B4849679EBB9029580F04B8BD74CE048 Certificate serial: 62D20AAFAE50B7B66DDB7DEA352859E5EE7D1C44 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA479894B4849679EBB9029580F04B8BD74CE048.cer Subject info access: rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/FA479894B4849679EBB9029580F04B8BD74CE048.mft Manifest number: 8D Signing time: Tue 05 Aug 2025 09:41:31 +0000 Manifest this update: Tue 05 Aug 2025 09:36:31 +0000 Manifest next update: Fri 08 Aug 2025 17:57:31 +0000 Files and hashes: 1: 323030313a6466343a343463303a3a2f34382d3438203d3e20313533313137.roa (hash: 713xk7V5/TbDWlUXCIZDu0PtZguq6d4Z3/NB3BJnuQA=) 2: FA479894B4849679EBB9029580F04B8BD74CE048.crl (hash: rUVguz+xX/wuoJvzxhSKFNW7aKTTnfV971J4b6J0F8c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/FA479894B4849679EBB9029580F04B8BD74CE048.crl rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/FA479894B4849679EBB9029580F04B8BD74CE048.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA479894B4849679EBB9029580F04B8BD74CE048.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 17:57:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:d2:0a:af:ae:50:b7:b6:6d:db:7d:ea:35:28:59:e5:ee:7d:1c:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA479894B4849679EBB9029580F04B8BD74CE048 Validity Not Before: Aug 5 09:36:31 2025 GMT Not After : Aug 8 17:57:31 2025 GMT Subject: CN=D464E403E144DE3BF44A68D0332DDFECE55C6D44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:4f:0b:3b:f5:8c:d7:dc:bb:e5:75:55:44:56: ef:83:b8:78:a0:80:fa:a4:54:f7:c9:6b:20:d6:4c: 93:5a:3a:1d:92:0a:dc:a9:e4:e6:24:07:c4:ac:f4: 33:06:bf:24:53:e2:83:5c:e5:7a:ea:8e:cc:14:71: d0:c0:e8:3b:99:21:ab:36:80:35:b3:ff:e0:a5:80: 14:94:3d:c2:d6:76:39:7d:b8:1a:8e:ea:e4:42:54: 15:f6:0f:46:a6:eb:e5:1c:06:4f:22:1c:16:fb:22: ae:bb:67:35:6a:11:93:28:50:e4:2a:33:6a:56:b1: 6a:b3:16:e4:11:f7:88:ea:a3:54:79:ce:99:f2:af: 91:15:95:eb:d5:dc:b4:2b:85:e8:34:e9:d6:76:58: a4:9a:ae:3a:bb:5b:b7:46:eb:b0:a2:b3:d3:83:40: 44:79:d6:5c:c8:b4:4c:ac:9a:9f:bf:8c:9e:1a:7c: 77:81:2f:39:0f:04:e0:96:d1:9a:3e:37:57:f5:66: e5:62:a7:ad:d7:32:0f:a0:9d:77:e7:84:d5:d2:2b: a0:d7:6d:7d:71:d5:1f:ae:9c:d0:b2:d7:39:b8:4c: b2:25:f8:b0:94:9a:10:3b:28:de:a5:9a:56:06:c3: e2:a2:1d:5f:d2:f4:07:67:2f:59:e6:97:80:b6:8e: d5:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:64:E4:03:E1:44:DE:3B:F4:4A:68:D0:33:2D:DF:EC:E5:5C:6D:44 X509v3 Authority Key Identifier: keyid:FA:47:98:94:B4:84:96:79:EB:B9:02:95:80:F0:4B:8B:D7:4C:E0:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/FA479894B4849679EBB9029580F04B8BD74CE048.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA479894B4849679EBB9029580F04B8BD74CE048.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/FA479894B4849679EBB9029580F04B8BD74CE048.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:6c:57:81:ec:1d:f0:76:5a:94:e8:26:f1:b3:3e:af:45:21: c9:24:78:31:00:b6:0e:5b:1e:70:0d:26:c3:4b:33:28:ff:b6: 2f:07:a0:92:f0:a4:3c:1a:29:4b:08:fb:a1:64:ef:d5:71:8a: 39:4b:c3:b3:84:7e:2d:9a:65:e3:aa:ea:19:0c:56:92:62:e1: b5:66:88:78:0d:5d:cb:ce:ff:25:cf:1f:da:7a:1e:fc:2d:bd: 20:ea:75:44:56:79:c2:72:d0:4c:ed:c3:b4:5a:f8:c1:58:f2: f6:14:e6:d2:3b:d4:4b:13:f3:a5:6d:83:76:dc:5e:04:0e:72: aa:14:59:16:9d:f1:a3:8a:8a:bb:75:46:23:fc:5c:e4:ae:ae: c5:48:32:a4:7d:6d:97:c7:8f:0f:8b:e5:d8:5f:4d:5d:f5:0d: c6:dc:b8:ae:e1:3c:b1:79:67:e2:36:f8:ec:cf:cd:a7:b6:bb: 39:07:e2:4d:ef:d4:62:58:68:17:79:e9:6e:51:a1:8f:53:ca: ee:11:87:b5:43:97:a4:02:57:dd:19:56:31:41:f9:08:a5:8a: f4:53:70:46:5b:9d:12:ba:88:fb:e8:49:9e:58:64:4e:f0:11: 15:a1:8b:b1:94:bf:c8:df:51:f2:9a:bb:7d:14:ee:c0:c7:b0: b8:cc:44:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYtIKr65Qt7Zt233qNShZ5e59HEQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE0Nzk4OTRCNDg0OTY3OUVCQjkwMjk1ODBGMDRCOEJE NzRDRTA0ODAeFw0yNTA4MDUwOTM2MzFaFw0yNTA4MDgxNzU3MzFaMDMxMTAvBgNV BAMTKEQ0NjRFNDAzRTE0NERFM0JGNDRBNjhEMDMzMkRERkVDRTU1QzZENDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3Tws79YzX3LvldVVEVu+DuHig gPqkVPfJayDWTJNaOh2SCtyp5OYkB8Ss9DMGvyRT4oNc5XrqjswUcdDA6DuZIas2 gDWz/+ClgBSUPcLWdjl9uBqO6uRCVBX2D0am6+UcBk8iHBb7Iq67ZzVqEZMoUOQq M2pWsWqzFuQR94jqo1R5zpnyr5EVlevV3LQrheg06dZ2WKSarjq7W7dG67Cis9OD QER51lzItEysmp+/jJ4afHeBLzkPBOCW0Zo+N1f1ZuVip63XMg+gnXfnhNXSK6DX bX1x1R+unNCy1zm4TLIl+LCUmhA7KN6lmlYGw+KiHV/S9AdnL1nml4C2jtX5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1GTkA+FE3jv0SmjQMy3f7OVcbUQwHwYDVR0j BBgwFoAU+keYlLSElnnruQKVgPBLi9dM4EgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OWIwN2E5ZS02MmRmLTQ4MDgtOWQyYS1hNmU2ODg0YmNiYmIvMS9GQTQ3OTg5NEI0 ODQ5Njc5RUJCOTAyOTU4MEYwNEI4QkQ3NENFMDQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkE0Nzk4OTRCNDg0OTY3OUVCQjkwMjk1ODBGMDRCOEJENzRD RTA0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTliMDdhOWUtNjJkZi00ODA4LTlk MmEtYTZlNjg4NGJjYmJiLzEvRkE0Nzk4OTRCNDg0OTY3OUVCQjkwMjk1ODBGMDRC OEJENzRDRTA0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI5sV4HsHfB2WpToJvGzPq9FIckkeDEAtg5b HnANJsNLMyj/ti8HoJLwpDwaKUsI+6Fk79VxijlLw7OEfi2aZeOq6hkMVpJi4bVm iHgNXcvO/yXPH9p6HvwtvSDqdURWecJy0Eztw7Ra+MFY8vYU5tI71EsT86Vtg3bc XgQOcqoUWRad8aOKirt1RiP8XOSursVIMqR9bZfHjw+L5dhfTV31DcbcuK7hPLF5 Z+I2+OzPzae2uzkH4k3v1GJYaBd56W5RoY9Tyu4Rh7VDl6QCV90ZVjFB+QilivRT cEZbnRK6iPvoSZ5YZE7wERWhi7GUv8jfUfKau30U7sDHsLjMRFA= -----END CERTIFICATE-----Generated at Wed Aug 6 14:06:38 2025 by rpki-client