$ rpki-client -vvf repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.mft File: FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.mft (raw, json) Hash identifier: tzVcTCmpbi93Gg3t/iCLEAQ8+/ccMT4hioiAXFkehEI= Subject key identifier: 5A:9F:7E:F4:A6:FE:24:10:C9:10:88:FB:C4:C2:27:F0:B4:E7:D5:05 Authority key identifier: FB:1D:4F:91:39:A6:1D:F4:B9:1E:31:27:0F:3D:2A:1C:07:B3:5C:E1 Certificate issuer: /CN=FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1 Certificate serial: 17CD070A2B2AC0B0ADDC3CD36A14D8148050C10F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.mft Manifest number: 0195 Signing time: Thu 07 Aug 2025 15:52:04 +0000 Manifest this update: Thu 07 Aug 2025 15:47:04 +0000 Manifest next update: Sun 10 Aug 2025 16:37:04 +0000 Files and hashes: 1: 3130332e3134392e3131382e302f32332d3234203d3e20313431303535.roa (hash: u22TiDBqhxRDgDXVHX7pAHC7nu8jAukDNtzJmORzlts=) 2: FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.crl (hash: lPPKFcWP8wOkgZegRci8hUTh1V9Sv6+C2BmJmce10LQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.crl rsync://repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 16:37:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:cd:07:0a:2b:2a:c0:b0:ad:dc:3c:d3:6a:14:d8:14:80:50:c1:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1 Validity Not Before: Aug 7 15:47:04 2025 GMT Not After : Aug 10 16:37:04 2025 GMT Subject: CN=5A9F7EF4A6FE2410C91088FBC4C227F0B4E7D505 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d1:03:34:5c:a6:73:4c:28:1e:a3:8a:65:6f: 53:13:06:0b:3f:3f:fa:0f:ba:18:85:9d:02:ff:11: cc:9d:4b:19:41:23:0c:2b:56:7c:74:12:17:72:7c: fa:5a:a9:83:d6:51:f0:3c:26:36:0a:da:4b:fc:f2: 4a:87:8b:50:cc:b7:a4:9a:e9:07:d1:64:ae:29:35: f4:73:94:a6:a7:14:e2:e9:4d:25:22:a7:fb:47:2a: 3a:e3:73:76:4a:e0:74:50:ff:78:3f:60:9c:7b:0d: 70:f7:50:35:9d:61:9f:9d:cb:e2:1a:6d:11:02:cf: 34:2b:b3:56:ae:70:a2:fc:b0:57:d2:a8:38:bd:6e: 53:e0:f3:3f:00:4f:24:0a:00:af:3b:b7:1e:d0:07: 4b:2b:e7:ed:e1:ea:93:7c:94:7e:e7:a7:e1:f1:55: 7f:27:ad:c2:af:51:c9:cb:80:fe:d0:80:e9:fe:33: c6:c9:38:c3:f4:91:ac:4d:c3:ef:5f:b1:fa:41:78: 6d:34:95:63:dc:28:cc:c6:0f:53:e4:c8:d3:e3:28: b3:c7:a3:3f:99:81:ae:61:e4:80:c7:32:99:f2:70: dc:06:cd:17:02:36:05:5a:62:31:82:f5:14:34:ab: a2:8e:31:5e:79:87:0d:e0:f1:3a:86:9c:44:a9:3f: 7a:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:9F:7E:F4:A6:FE:24:10:C9:10:88:FB:C4:C2:27:F0:B4:E7:D5:05 X509v3 Authority Key Identifier: keyid:FB:1D:4F:91:39:A6:1D:F4:B9:1E:31:27:0F:3D:2A:1C:07:B3:5C:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:63:4d:81:e5:f7:1c:f5:b1:ba:de:31:af:cc:db:f9:a0:bd: 4b:90:b4:58:a5:a3:43:a8:41:33:8a:b4:cc:a8:89:2d:5f:cf: a1:88:85:64:2a:17:5f:cd:da:3d:a4:e1:3d:9a:c4:c0:9e:fd: b5:8c:5f:2d:0d:f7:6c:b6:96:ac:c4:76:13:4f:1c:f7:79:9b: 42:be:1e:a0:44:6a:44:87:ad:fa:7d:94:9b:f3:d9:ad:c8:0f: 3c:78:c0:64:6e:a4:d6:a2:b6:d6:ce:2c:a4:22:cd:33:4f:fb: e8:5e:58:f0:50:bc:55:fe:8a:29:6e:c4:23:ea:e6:be:d0:11: 72:42:44:d0:6f:1a:b7:c9:c5:37:f8:d7:04:35:33:c5:ea:ab: 20:67:d1:cc:f0:fe:0d:2d:38:9d:b1:72:90:4a:15:d5:2a:3a: 0b:85:82:48:41:1b:d5:82:dc:bd:7a:2e:18:65:24:e1:33:5e: 55:06:78:fa:b4:2d:46:38:04:10:06:12:62:fa:74:f4:5d:59: 14:c9:7b:b9:97:76:64:01:d0:c8:9f:ac:e9:c1:a4:2a:b6:39: 23:27:e4:07:6e:b5:77:93:82:7e:8b:b0:28:bb:86:f3:ed:40: 14:32:f9:b8:69:ae:f7:f1:cc:93:cb:ca:ad:a5:40:bf:55:b5: d2:6c:94:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF80HCisqwLCt3DzTahTYFIBQwQ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkIxRDRGOTEzOUE2MURGNEI5MUUzMTI3MEYzRDJBMUMw N0IzNUNFMTAeFw0yNTA4MDcxNTQ3MDRaFw0yNTA4MTAxNjM3MDRaMDMxMTAvBgNV BAMTKDVBOUY3RUY0QTZGRTI0MTBDOTEwODhGQkM0QzIyN0YwQjRFN0Q1MDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo0QM0XKZzTCgeo4plb1MTBgs/ P/oPuhiFnQL/EcydSxlBIwwrVnx0EhdyfPpaqYPWUfA8JjYK2kv88kqHi1DMt6Sa 6QfRZK4pNfRzlKanFOLpTSUip/tHKjrjc3ZK4HRQ/3g/YJx7DXD3UDWdYZ+dy+Ia bRECzzQrs1aucKL8sFfSqDi9blPg8z8ATyQKAK87tx7QB0sr5+3h6pN8lH7np+Hx VX8nrcKvUcnLgP7QgOn+M8bJOMP0kaxNw+9fsfpBeG00lWPcKMzGD1PkyNPjKLPH oz+Zga5h5IDHMpnycNwGzRcCNgVaYjGC9RQ0q6KOMV55hw3g8TqGnESpP3p1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWp9+9Kb+JBDJEIj7xMIn8LTn1QUwHwYDVR0j BBgwFoAU+x1PkTmmHfS5HjEnDz0qHAezXOEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Y2M3MGY3ZC0zM2ZlLTRkZjItODFlNS1kYzBkNTVhYzUxNzAvMC9GQjFENEY5MTM5 QTYxREY0QjkxRTMxMjcwRjNEMkExQzA3QjM1Q0UxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkIxRDRGOTEzOUE2MURGNEI5MUUzMTI3MEYzRDJBMUMwN0Iz NUNFMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWNjNzBmN2QtMzNmZS00ZGYyLTgx ZTUtZGMwZDU1YWM1MTcwLzAvRkIxRDRGOTEzOUE2MURGNEI5MUUzMTI3MEYzRDJB MUMwN0IzNUNFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB9jTYHl9xz1sbreMa/M2/mgvUuQtFilo0Oo QTOKtMyoiS1fz6GIhWQqF1/N2j2k4T2axMCe/bWMXy0N92y2lqzEdhNPHPd5m0K+ HqBEakSHrfp9lJvz2a3IDzx4wGRupNaittbOLKQizTNP++heWPBQvFX+iiluxCPq 5r7QEXJCRNBvGrfJxTf41wQ1M8XqqyBn0czw/g0tOJ2xcpBKFdUqOguFgkhBG9WC 3L16LhhlJOEzXlUGePq0LUY4BBAGEmL6dPRdWRTJe7mXdmQB0MifrOnBpCq2OSMn 5AdutXeTgn6LsCi7hvPtQBQy+bhprvfxzJPLyq2lQL9VtdJslDg= -----END CERTIFICATE-----Generated at Sat Aug 9 01:00:16 2025 by rpki-client