$ rpki-client -vvf repo-rpki.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.mft File: FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.mft (raw, json) Hash identifier: u9pQ1qVp7ixJCjLG1kHkpaxmDaoFodZZDgyL/4tDAPQ= Subject key identifier: 2C:6E:1C:B6:3C:B4:44:A0:6F:0A:26:C4:07:9A:2B:AC:CA:CB:0F:6F Authority key identifier: FD:7C:5A:44:A3:CA:AF:7C:D1:40:CF:D1:C6:16:22:BA:5E:A2:E6:23 Certificate issuer: /CN=FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623 Certificate serial: 1FA4D0EAE92C2E725468B7AC0A25DB915123DC40 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.mft Manifest number: DF Signing time: Tue 05 Aug 2025 16:42:21 +0000 Manifest this update: Tue 05 Aug 2025 16:37:21 +0000 Manifest next update: Sat 09 Aug 2025 02:42:21 +0000 Files and hashes: 1: 3135372e32302e3132362e302f32332d3234203d3e20313532343130.roa (hash: mIAtzNrfjeKiFzHKpCt4+yI3FhKtEfckYghfutbPb44=) 2: FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.crl (hash: BSYyf6ijAOPIsbpztwkX8NTofNTMLeSu+Z/chcMTnUU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.crl rsync://repo-rpki.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 09:26:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:a4:d0:ea:e9:2c:2e:72:54:68:b7:ac:0a:25:db:91:51:23:dc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623 Validity Not Before: Aug 5 16:37:21 2025 GMT Not After : Aug 9 02:42:21 2025 GMT Subject: CN=2C6E1CB63CB444A06F0A26C4079A2BACCACB0F6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:22:fd:0a:64:1e:8b:2c:52:ce:7a:55:91:19: 2e:eb:2c:5b:d7:cd:9c:7b:4d:aa:b7:6e:9a:54:55: ba:b5:a3:f4:26:05:c5:c1:f4:57:9c:6a:84:26:59: be:61:83:21:93:ba:56:28:2c:ee:87:e2:09:ce:99: 70:fb:01:a1:ed:d8:79:53:90:5a:8e:6f:73:f0:af: 6e:36:c2:6f:cb:77:84:27:5d:60:1f:2d:d6:95:a7: a3:79:9a:5e:df:f4:e5:3a:d4:9c:87:99:bb:41:8e: 19:67:aa:cf:54:80:0a:cb:f4:d6:52:0d:8e:2a:0e: 75:9d:fd:75:2b:a5:5f:86:de:ff:b7:ee:e6:fd:7b: f0:bf:c8:f6:c1:75:fd:3f:26:ce:1c:a0:da:7f:f7: 44:93:21:3e:56:02:e5:0b:5f:b3:07:f0:44:2f:2f: d2:72:b7:b8:7e:60:5e:30:db:d6:b2:b1:40:b6:55: 30:1a:42:b8:d5:8d:5a:b3:38:e3:d1:8f:0c:86:a3: 21:12:aa:00:80:d5:e0:62:fe:18:10:59:25:9c:e1: 84:68:67:93:9a:8c:8f:62:2a:b2:f3:cb:e1:1c:8d: 4d:8c:10:cc:cf:6c:d8:86:d6:42:d3:87:c2:cb:dc: cc:f3:38:18:cc:51:c3:5a:1a:16:97:29:6e:3e:52: 1f:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:6E:1C:B6:3C:B4:44:A0:6F:0A:26:C4:07:9A:2B:AC:CA:CB:0F:6F X509v3 Authority Key Identifier: keyid:FD:7C:5A:44:A3:CA:AF:7C:D1:40:CF:D1:C6:16:22:BA:5E:A2:E6:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:38:12:12:2a:36:f0:81:28:75:05:26:ab:58:32:6d:db:01: d1:86:f2:9f:02:db:b2:af:93:65:49:5b:6d:28:cb:ee:30:e0: 8f:cb:08:b7:2d:71:80:83:9b:33:0a:cc:4e:0a:99:5e:8f:2f: 92:fa:8f:d6:30:f3:b0:6b:3c:09:6a:e8:3e:a6:76:b6:1f:da: cc:07:24:5e:04:44:6a:60:36:c3:66:da:76:7d:62:e3:5b:dc: f3:ae:1e:f0:c3:ff:4e:20:1c:c9:a8:a4:86:8c:36:75:4f:04: 57:aa:1b:72:82:91:e7:3d:7c:4a:92:df:62:fe:1c:0a:0a:9d: 3b:04:93:a9:5d:71:08:01:bb:33:af:85:20:ba:3a:81:7a:6a: 30:63:e6:de:f3:33:b7:f9:3f:72:eb:1d:77:53:8a:c4:31:5d: da:1b:f9:ec:46:7e:d5:d0:a7:f8:11:20:d8:55:ba:76:f1:cc: 32:19:92:38:51:78:a8:87:ef:20:df:75:2b:09:91:7a:7e:45: 99:49:57:0a:36:ba:a2:1a:79:fe:bf:b3:3d:75:b2:53:76:2e: 7f:4b:83:85:67:e4:64:45:7b:b6:20:00:71:f2:15:f2:de:28: 17:bf:47:9e:7d:72:f0:98:fb:08:96:1f:9c:00:fe:b3:86:a6: 1c:28:0a:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH6TQ6uksLnJUaLesCiXbkVEj3EAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkQ3QzVBNDRBM0NBQUY3Q0QxNDBDRkQxQzYxNjIyQkE1 RUEyRTYyMzAeFw0yNTA4MDUxNjM3MjFaFw0yNTA4MDkwMjQyMjFaMDMxMTAvBgNV BAMTKDJDNkUxQ0I2M0NCNDQ0QTA2RjBBMjZDNDA3OUEyQkFDQ0FDQjBGNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7Iv0KZB6LLFLOelWRGS7rLFvX zZx7Taq3bppUVbq1o/QmBcXB9FecaoQmWb5hgyGTulYoLO6H4gnOmXD7AaHt2HlT kFqOb3Pwr242wm/Ld4QnXWAfLdaVp6N5ml7f9OU61JyHmbtBjhlnqs9UgArL9NZS DY4qDnWd/XUrpV+G3v+37ub9e/C/yPbBdf0/Js4coNp/90STIT5WAuULX7MH8EQv L9Jyt7h+YF4w29aysUC2VTAaQrjVjVqzOOPRjwyGoyESqgCA1eBi/hgQWSWc4YRo Z5OajI9iKrLzy+EcjU2MEMzPbNiG1kLTh8LL3MzzOBjMUcNaGhaXKW4+Uh+vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULG4ctjy0RKBvCibEB5orrMrLD28wHwYDVR0j BBgwFoAU/XxaRKPKr3zRQM/RxhYiul6i5iMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MGY3OGJkNC1jMTliLTRkNDAtYWE1NC1lZDhkN2JjNzcyY2EvMC9GRDdDNUE0NEEz Q0FBRjdDRDE0MENGRDFDNjE2MjJCQTVFQTJFNjIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkQ3QzVBNDRBM0NBQUY3Q0QxNDBDRkQxQzYxNjIyQkE1RUEy RTYyMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTBmNzhiZDQtYzE5Yi00ZDQwLWFh NTQtZWQ4ZDdiYzc3MmNhLzAvRkQ3QzVBNDRBM0NBQUY3Q0QxNDBDRkQxQzYxNjIy QkE1RUEyRTYyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAQ4EhIqNvCBKHUFJqtYMm3bAdGG8p8C27Kv k2VJW20oy+4w4I/LCLctcYCDmzMKzE4KmV6PL5L6j9Yw87BrPAlq6D6mdrYf2swH JF4ERGpgNsNm2nZ9YuNb3POuHvDD/04gHMmopIaMNnVPBFeqG3KCkec9fEqS32L+ HAoKnTsEk6ldcQgBuzOvhSC6OoF6ajBj5t7zM7f5P3LrHXdTisQxXdob+exGftXQ p/gRINhVunbxzDIZkjhReKiH7yDfdSsJkXp+RZlJVwo2uqIaef6/sz11slN2Ln9L g4Vn5GRFe7YgAHHyFfLeKBe/R559cvCY+wiWH5wA/rOGphwoCqA= -----END CERTIFICATE-----Generated at Wed Aug 6 07:45:34 2025 by rpki-client