$ rpki-client -vvf repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.mft File: 1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.mft (raw, json) Hash identifier: +srlSPqm/bOZ6BAQjouW0UGaPzptkZlXjkEf5E52yvE= Subject key identifier: 30:A3:7E:89:05:C1:6B:6F:F9:4A:9E:DC:F5:98:C0:BB:2C:7D:26:D5 Authority key identifier: 1F:CD:47:FB:4B:D7:29:E2:2E:4F:EE:FC:E5:B6:1B:4E:1C:7F:E9:46 Certificate issuer: /CN=1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946 Certificate serial: 5E2B646B013B79A517398C45E79590CACE6FCE46 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.mft Manifest number: 04C1 Signing time: Wed 06 Aug 2025 08:00:41 +0000 Manifest this update: Wed 06 Aug 2025 07:55:41 +0000 Manifest next update: Sat 09 Aug 2025 13:57:41 +0000 Files and hashes: 1: 3230322e36372e382e302f32312d3234203d3e203234313935.roa (hash: B+C/2EohdvfSLSdEWCv4uFVDG8om8Pw0dnsHmi+NJ9Y=) 2: 3131382e39312e3132382e302f32312d3234203d3e203234313935.roa (hash: yiPIGsDISayK97qWqm2UWsTxEHdxKETOsL8gSiwFMjA=) 3: 3131382e39312e3134302e302f32322d3234203d3e203633353032.roa (hash: XlrHKxvILobzAM8qX1Td9F4llGO1s7dDnxuDShAIB6Q=) 4: 323430313a343230303a3a2f33322d3438203d3e203234313935.roa (hash: xPjBnSpHmpcu0qAxiY2wE80xegcTsRNtPEAJ6PwASdw=) 5: 1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.crl (hash: cfgpYuBfy+7u3iEdNQU3zYIwlx3pn8n7qEXB3bHtvMo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.crl rsync://repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 13:57:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:2b:64:6b:01:3b:79:a5:17:39:8c:45:e7:95:90:ca:ce:6f:ce:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946 Validity Not Before: Aug 6 07:55:41 2025 GMT Not After : Aug 9 13:57:41 2025 GMT Subject: CN=30A37E8905C16B6FF94A9EDCF598C0BB2C7D26D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:9b:ce:cf:50:92:9b:ad:83:60:8e:57:16:ad: 82:ae:20:1c:2b:48:b1:b2:74:1d:e8:c5:50:ef:c9: b7:39:af:33:75:8b:96:23:2f:67:cb:ff:32:55:67: dc:34:5a:eb:53:cd:ac:38:52:2f:e3:3c:33:27:fb: 5e:c1:00:8b:3b:26:19:1f:27:fe:f3:e4:67:dd:ad: 15:07:9d:e5:96:7c:0a:97:21:4b:66:fa:f3:0d:e6: 8e:8b:db:8e:e8:93:ea:65:98:ea:84:14:34:dc:42: 83:38:77:b5:93:6e:ea:50:38:f6:79:d1:0d:10:36: 1f:21:36:94:2d:9f:73:2a:8e:bf:cd:17:80:30:9d: 5e:b0:7e:99:a9:d2:3a:e1:21:f6:09:cd:15:29:a5: 19:88:9a:a0:a3:d1:c2:12:16:e4:c6:cf:96:c1:25: 86:f9:16:c1:41:e0:ae:c8:55:3d:b2:84:7b:0e:19: 00:0f:3b:4a:38:72:0f:72:1b:2e:2d:84:d7:8e:e2: a5:98:0b:3c:f7:4e:96:2c:51:e0:8b:97:91:65:db: c8:ac:48:3b:01:f8:4a:e9:69:7a:91:eb:bf:d6:11: 2f:32:e8:b9:d6:51:ed:34:57:81:7b:92:53:45:ad: 5f:e9:37:93:f9:1a:6e:b3:ad:32:cd:1d:da:c0:af: 17:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:A3:7E:89:05:C1:6B:6F:F9:4A:9E:DC:F5:98:C0:BB:2C:7D:26:D5 X509v3 Authority Key Identifier: keyid:1F:CD:47:FB:4B:D7:29:E2:2E:4F:EE:FC:E5:B6:1B:4E:1C:7F:E9:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:c7:29:3f:df:a2:79:c2:6c:39:7c:d2:af:58:5a:11:96:8f: 5a:e4:c3:9d:1d:12:7c:66:90:76:5c:6c:f2:e5:8f:b1:aa:56: 3e:fe:9e:3f:eb:b9:66:89:81:4f:a8:d2:a1:c8:3e:ac:82:b8: 89:5c:b7:f4:79:b8:45:c3:95:7b:93:59:df:a3:7a:e8:19:1b: ce:7e:97:0a:fa:2b:d4:1d:b9:b2:19:96:5f:cf:bf:94:b1:24: 73:14:3c:b8:3a:3a:66:00:fd:c6:5a:6d:95:59:2f:01:0f:c1: 75:66:df:4f:30:c2:e5:d9:69:df:14:32:53:9c:58:c0:1a:5e: 2f:99:6c:a8:0b:10:be:d3:bb:cc:ee:c0:0e:b4:b0:c6:6d:44: 98:fa:bb:88:5a:a1:fa:08:6d:10:1a:29:43:f5:8c:a8:71:80: de:af:5f:72:8c:55:1b:3c:55:20:62:74:ad:5e:87:5f:7e:4a: e3:6c:85:b7:3e:80:70:48:5f:90:0b:4b:52:bb:a9:22:21:b4: 49:e3:03:31:86:fb:a0:e9:ff:6a:51:4a:d4:1f:cc:c0:8e:1d: e0:5a:8a:52:75:94:bc:fe:54:6b:3b:25:68:16:85:29:1a:37: 8b:e2:2e:64:c2:43:78:4b:db:de:d9:2a:f6:39:0d:af:a4:3a: c3:22:bf:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXitkawE7eaUXOYxF55WQys5vzkYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZDRDQ3RkI0QkQ3MjlFMjJFNEZFRUZDRTVCNjFCNEUx QzdGRTk0NjAeFw0yNTA4MDYwNzU1NDFaFw0yNTA4MDkxMzU3NDFaMDMxMTAvBgNV BAMTKDMwQTM3RTg5MDVDMTZCNkZGOTRBOUVEQ0Y1OThDMEJCMkM3RDI2RDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBm87PUJKbrYNgjlcWrYKuIBwr SLGydB3oxVDvybc5rzN1i5YjL2fL/zJVZ9w0WutTzaw4Ui/jPDMn+17BAIs7Jhkf J/7z5GfdrRUHneWWfAqXIUtm+vMN5o6L247ok+plmOqEFDTcQoM4d7WTbupQOPZ5 0Q0QNh8hNpQtn3Mqjr/NF4AwnV6wfpmp0jrhIfYJzRUppRmImqCj0cISFuTGz5bB JYb5FsFB4K7IVT2yhHsOGQAPO0o4cg9yGy4thNeO4qWYCzz3TpYsUeCLl5Fl28is SDsB+ErpaXqR67/WES8y6LnWUe00V4F7klNFrV/pN5P5Gm6zrTLNHdrArxeTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMKN+iQXBa2/5Sp7c9ZjAuyx9JtUwHwYDVR0j BBgwFoAUH81H+0vXKeIuT+785bYbThx/6UYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NzkyYTRjZC1kYmFjLTQzYWMtODA2MC0yZThkNDJlYWU2NTUvMC8xRkNENDdGQjRC RDcyOUUyMkU0RkVFRkNFNUI2MUI0RTFDN0ZFOTQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUZDRDQ3RkI0QkQ3MjlFMjJFNEZFRUZDRTVCNjFCNEUxQzdG RTk0Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODc5MmE0Y2QtZGJhYy00M2FjLTgw NjAtMmU4ZDQyZWFlNjU1LzAvMUZDRDQ3RkI0QkQ3MjlFMjJFNEZFRUZDRTVCNjFC NEUxQzdGRTk0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGzHKT/fonnCbDl80q9YWhGWj1rkw50dEnxm kHZcbPLlj7GqVj7+nj/ruWaJgU+o0qHIPqyCuIlct/R5uEXDlXuTWd+jeugZG85+ lwr6K9QdubIZll/Pv5SxJHMUPLg6OmYA/cZabZVZLwEPwXVm308wwuXZad8UMlOc WMAaXi+ZbKgLEL7Tu8zuwA60sMZtRJj6u4haofoIbRAaKUP1jKhxgN6vX3KMVRs8 VSBidK1eh19+SuNshbc+gHBIX5ALS1K7qSIhtEnjAzGG+6Dp/2pRStQfzMCOHeBa ilJ1lLz+VGs7JWgWhSkaN4viLmTCQ3hL297ZKvY5Da+kOsMiv1A= -----END CERTIFICATE-----Generated at Thu Aug 7 07:34:48 2025 by rpki-client