$ rpki-client -vvf repo-rpki.idnic.net/repo/7d68500c-49f8-4f01-8774-f7c3164a0a58/0/FD0F38979237143A0D44165912E79E2FACD5A3BA.mft File: FD0F38979237143A0D44165912E79E2FACD5A3BA.mft (raw, json) Hash identifier: UXq9Uv5A/oB/Eg1M8Djg2rUujBkmMBNLwVZOnwkMFU4= Subject key identifier: 2F:FE:81:CF:78:1F:77:B1:A5:08:38:3D:26:20:CE:9D:D1:C6:B8:4C Authority key identifier: FD:0F:38:97:92:37:14:3A:0D:44:16:59:12:E7:9E:2F:AC:D5:A3:BA Certificate issuer: /CN=FD0F38979237143A0D44165912E79E2FACD5A3BA Certificate serial: 28E29C7778BD414AF0A72091BF6F08B8F8C1CE93 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FD0F38979237143A0D44165912E79E2FACD5A3BA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d68500c-49f8-4f01-8774-f7c3164a0a58/0/FD0F38979237143A0D44165912E79E2FACD5A3BA.mft Manifest number: 04BD Signing time: Wed 06 Aug 2025 19:30:51 +0000 Manifest this update: Wed 06 Aug 2025 19:25:51 +0000 Manifest next update: Sun 10 Aug 2025 01:27:51 +0000 Files and hashes: 1: 3130332e3135382e39382e302f32332d3234203d3e203338373736.roa (hash: g4/2gGmpn32hkKxV0sqfqROaCQsBlE1YLxPaRAMg4a0=) 2: FD0F38979237143A0D44165912E79E2FACD5A3BA.crl (hash: 4i+21FpIC8y281Np7w29j4K7FJyma/p97EGEb5wDpCg=) 3: 3130332e3135382e39382e302f32332d3234203d3e20313431313235.roa (hash: we24I32s5ELSTaYXFb0D1dL9DqvAx3yOmh/lu/NzD+s=) 4: 323430363a623734303a3a2f33322d3332203d3e20313431313235.roa (hash: w+5ApYB+ZFE/moVpWBy1FYzv1VFtUnIoAwsXfI3kLUk=) 5: 323430363a623734303a3a2f33322d3332203d3e203338373736.roa (hash: l1d86+GollU+X7/7+S+akSvN9Ic4ZxndXEoSt1R4EA0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d68500c-49f8-4f01-8774-f7c3164a0a58/0/FD0F38979237143A0D44165912E79E2FACD5A3BA.crl rsync://repo-rpki.idnic.net/repo/7d68500c-49f8-4f01-8774-f7c3164a0a58/0/FD0F38979237143A0D44165912E79E2FACD5A3BA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FD0F38979237143A0D44165912E79E2FACD5A3BA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 01:27:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:e2:9c:77:78:bd:41:4a:f0:a7:20:91:bf:6f:08:b8:f8:c1:ce:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FD0F38979237143A0D44165912E79E2FACD5A3BA Validity Not Before: Aug 6 19:25:51 2025 GMT Not After : Aug 10 01:27:51 2025 GMT Subject: CN=2FFE81CF781F77B1A508383D2620CE9DD1C6B84C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:5d:5b:7d:3f:60:dd:06:14:51:4c:e4:c9:2f: 35:ac:b8:c7:d6:fd:d3:1d:e0:95:89:84:fc:60:3b: 7a:8c:c3:f8:d0:ef:09:f8:4f:75:db:ff:01:ca:92: f5:36:84:df:5a:76:2d:d4:fd:d2:83:32:73:74:56: a5:bd:90:36:56:39:d7:5c:c6:c6:5f:4a:d5:ee:d0: f7:dd:cd:62:2f:36:e7:9e:f8:c9:ca:40:2f:fe:6b: 88:3f:e1:fe:cf:7e:2d:38:16:d2:56:b0:bb:58:0a: ec:1e:79:dc:80:7c:23:98:70:ac:28:db:64:6b:41: f8:07:62:4c:f9:ce:27:f3:3a:3a:fe:e7:a1:8d:c2: dc:27:00:72:38:76:aa:b5:f4:e8:48:f1:66:b2:a5: 15:15:02:6a:f0:02:64:d8:47:a0:73:a5:86:e3:db: 7f:51:fe:a9:a3:2c:a1:f9:96:08:59:ec:86:49:c0: 15:d9:80:8c:80:76:48:bb:34:a9:2b:ee:19:bf:84: 73:10:0a:e8:7d:88:7a:64:15:7e:7b:51:17:46:76: 79:3c:08:e5:e3:a3:51:33:69:6f:b6:c3:c8:29:f8: f0:2d:1e:23:c8:d1:7d:34:85:c6:ef:a2:bb:d9:d9: bf:72:f9:a9:ea:62:c3:27:02:c7:e2:ae:74:f2:1a: ec:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:FE:81:CF:78:1F:77:B1:A5:08:38:3D:26:20:CE:9D:D1:C6:B8:4C X509v3 Authority Key Identifier: keyid:FD:0F:38:97:92:37:14:3A:0D:44:16:59:12:E7:9E:2F:AC:D5:A3:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d68500c-49f8-4f01-8774-f7c3164a0a58/0/FD0F38979237143A0D44165912E79E2FACD5A3BA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FD0F38979237143A0D44165912E79E2FACD5A3BA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d68500c-49f8-4f01-8774-f7c3164a0a58/0/FD0F38979237143A0D44165912E79E2FACD5A3BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:8a:f7:0a:61:6c:4d:76:5d:92:23:1e:a4:aa:aa:ad:40:e9: 6c:60:ba:d3:51:9d:01:fc:e5:ab:7b:ac:9b:69:94:8a:e0:4d: d1:ac:0c:4e:1f:a2:8d:fc:b1:58:7f:bb:03:0e:80:c8:32:a7: c9:31:46:db:7b:41:db:6c:f9:4e:7f:a9:d6:6b:bc:f8:9d:9d: 57:45:46:8b:25:73:22:25:e6:5c:ae:6f:31:b7:ef:55:b0:4c: c6:18:e6:e8:f5:b0:cc:98:0d:a4:9d:8b:3c:c8:1f:77:3a:c2: e3:d5:28:57:cc:03:a2:70:aa:ef:99:a0:f9:d7:ef:3d:06:7d: 9b:25:3d:20:8d:e7:8d:53:da:7d:fb:94:39:ab:ca:83:b4:8b: 2b:78:18:23:d8:d8:6c:5a:d1:e7:39:aa:38:cc:31:d2:fa:f6: d2:28:8e:50:6a:50:00:d3:7d:ce:5f:48:20:92:0f:fb:e3:b1: 42:0e:6b:b2:b4:6e:d2:de:cd:61:4d:84:ab:48:46:60:e9:87: 74:43:c8:2b:17:6e:7c:63:04:99:9a:dc:59:88:bc:b3:d2:ec: d4:82:1e:76:fc:82:9d:c1:41:86:d6:16:d9:bb:df:15:5d:db: 65:4a:7c:fb:03:33:25:f3:32:04:3b:64:a9:fa:de:6a:9e:b3: 81:15:bc:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKOKcd3i9QUrwpyCRv28IuPjBzpMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkQwRjM4OTc5MjM3MTQzQTBENDQxNjU5MTJFNzlFMkZB Q0Q1QTNCQTAeFw0yNTA4MDYxOTI1NTFaFw0yNTA4MTAwMTI3NTFaMDMxMTAvBgNV BAMTKDJGRkU4MUNGNzgxRjc3QjFBNTA4MzgzRDI2MjBDRTlERDFDNkI4NEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEXVt9P2DdBhRRTOTJLzWsuMfW /dMd4JWJhPxgO3qMw/jQ7wn4T3Xb/wHKkvU2hN9adi3U/dKDMnN0VqW9kDZWOddc xsZfStXu0PfdzWIvNuee+MnKQC/+a4g/4f7Pfi04FtJWsLtYCuweedyAfCOYcKwo 22RrQfgHYkz5zifzOjr+56GNwtwnAHI4dqq19OhI8WaypRUVAmrwAmTYR6BzpYbj 239R/qmjLKH5lghZ7IZJwBXZgIyAdki7NKkr7hm/hHMQCuh9iHpkFX57URdGdnk8 COXjo1EzaW+2w8gp+PAtHiPI0X00hcbvorvZ2b9y+anqYsMnAsfirnTyGuy1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUL/6Bz3gfd7GlCDg9JiDOndHGuEwwHwYDVR0j BBgwFoAU/Q84l5I3FDoNRBZZEueeL6zVo7owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDY4NTAwYy00OWY4LTRmMDEtODc3NC1mN2MzMTY0YTBhNTgvMC9GRDBGMzg5Nzky MzcxNDNBMEQ0NDE2NTkxMkU3OUUyRkFDRDVBM0JBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkQwRjM4OTc5MjM3MTQzQTBENDQxNjU5MTJFNzlFMkZBQ0Q1 QTNCQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Q2ODUwMGMtNDlmOC00ZjAxLTg3 NzQtZjdjMzE2NGEwYTU4LzAvRkQwRjM4OTc5MjM3MTQzQTBENDQxNjU5MTJFNzlF MkZBQ0Q1QTNCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI6K9wphbE12XZIjHqSqqq1A6WxgutNRnQH8 5at7rJtplIrgTdGsDE4foo38sVh/uwMOgMgyp8kxRtt7Qdts+U5/qdZrvPidnVdF RoslcyIl5lyubzG371WwTMYY5uj1sMyYDaSdizzIH3c6wuPVKFfMA6Jwqu+ZoPnX 7z0GfZslPSCN541T2n37lDmryoO0iyt4GCPY2Gxa0ec5qjjMMdL69tIojlBqUADT fc5fSCCSD/vjsUIOa7K0btLezWFNhKtIRmDph3RDyCsXbnxjBJma3FmIvLPS7NSC Hnb8gp3BQYbWFtm73xVd22VKfPsDMyXzMgQ7ZKn63mqes4EVvGo= -----END CERTIFICATE-----Generated at Thu Aug 7 05:02:55 2025 by rpki-client