$ rpki-client -vvf repo-rpki.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.mft File: FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.mft (raw, json) Hash identifier: 4cVwqq+BuZWEN4RKyKMxzK37bqzrFFVvk7v43QTJFYs= Subject key identifier: 52:B4:B0:64:51:95:39:85:68:FC:9A:70:B2:C7:C3:58:CF:A0:1A:A9 Authority key identifier: FE:79:E5:6C:BE:99:C7:73:CD:72:1D:F7:AB:0E:5C:A2:80:9D:07:39 Certificate issuer: /CN=FE79E56CBE99C773CD721DF7AB0E5CA2809D0739 Certificate serial: 16ECB01557061A4B30A97E8A15DE4FF5C867D2B8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.mft Manifest number: 0103 Signing time: Mon 03 Nov 2025 15:01:17 +0000 Manifest this update: Mon 03 Nov 2025 14:56:17 +0000 Manifest next update: Thu 06 Nov 2025 21:42:17 +0000 Files and hashes: 1: FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.crl (hash: RSMjF5RIbOK3a+slePSm5+VxmTsLud2lQtgeFkMwrvo=) 2: 3135372e32302e3232322e302f32342d3234203d3e20313532343337.roa (hash: xA0yIhK/pel57ulFN3HOQ4z99q0P1jOo4pSKaz4ovzA=) 3: 3135372e32302e3232332e302f32342d3234203d3e20313532343337.roa (hash: wm/OwjMJ3Mw2kK4LX3m4F0/jsfG1NixZfT/MRVx2gUc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.crl rsync://repo-rpki.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 21:42:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:ec:b0:15:57:06:1a:4b:30:a9:7e:8a:15:de:4f:f5:c8:67:d2:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FE79E56CBE99C773CD721DF7AB0E5CA2809D0739 Validity Not Before: Nov 3 14:56:17 2025 GMT Not After : Nov 6 21:42:17 2025 GMT Subject: CN=52B4B0645195398568FC9A70B2C7C358CFA01AA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1d:0a:47:a6:a8:0f:61:4e:57:42:bc:b2:8c: ba:2a:42:ee:49:31:03:52:d7:73:20:07:f0:0e:4a: 4a:c9:05:0d:d9:a9:ed:de:27:36:12:e9:c9:46:81: 23:65:26:f3:d8:c3:11:58:be:a6:74:2e:9c:4c:77: de:75:dd:d5:8a:4a:5b:48:41:01:91:5f:14:a4:c3: 94:92:d8:90:12:f3:56:2f:dd:7a:2d:35:a2:14:bb: d6:3e:9f:54:60:27:46:72:9d:78:42:3e:0f:4d:b0: b1:70:91:56:fa:cf:59:88:db:cf:67:b1:d2:60:60: 5a:77:f8:41:c6:1f:94:5d:70:9c:b4:be:5f:b2:6d: 4c:37:e9:54:2a:0a:3b:6a:3d:1c:41:e3:a3:2c:1b: 49:64:ed:84:9b:8e:52:ad:d2:25:50:9c:05:ec:e1: d3:eb:74:dc:f3:46:6d:9b:0c:de:58:59:bf:06:dc: 30:8d:30:4e:24:d6:de:cc:f0:5d:ff:9d:f4:1f:4d: 3e:1b:c9:44:e8:36:26:57:0b:93:48:e2:bf:db:39: fc:ca:c9:33:6e:65:12:23:44:85:80:75:10:22:4a: c9:9c:6f:b0:45:81:9a:1e:c5:83:29:17:5e:d6:03: c4:ff:c3:c1:2a:4c:3b:97:37:d7:03:7b:cd:7c:c0: 17:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:B4:B0:64:51:95:39:85:68:FC:9A:70:B2:C7:C3:58:CF:A0:1A:A9 X509v3 Authority Key Identifier: keyid:FE:79:E5:6C:BE:99:C7:73:CD:72:1D:F7:AB:0E:5C:A2:80:9D:07:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:01:37:4f:18:8b:48:62:0a:af:73:f1:c1:57:70:71:95:51: 9e:40:00:ff:04:53:f3:5b:55:2b:ff:1f:29:cf:84:85:c6:d0: 83:37:0d:2e:56:0d:82:ab:3a:a2:9d:a6:2d:8c:4e:9c:8a:bc: 36:7a:99:65:af:47:3e:21:04:4e:f2:b7:b7:d6:08:7f:37:1b: f2:c7:80:c1:64:e7:7a:81:02:93:bf:9e:7a:74:65:ad:b2:4a: 79:96:cd:1e:a8:4a:09:37:d7:bb:79:37:20:e7:ce:2e:7e:a4: ae:55:0c:76:25:fb:d7:e1:1c:e8:77:67:c0:ee:40:ec:f4:c2: 8d:fa:16:91:c4:a2:d8:06:0b:0b:d1:67:76:14:ab:3a:5d:ff: 91:a7:b9:c6:7e:66:8c:0a:97:3e:e2:2d:6a:61:5e:5f:5e:1b: e3:95:b9:91:a7:1a:29:39:90:0b:15:9a:e6:d5:f4:1c:c7:ea: a8:ef:39:04:04:7d:e3:e2:f0:1f:70:5d:a3:d2:99:ca:7b:1f: a9:98:39:6a:65:cd:0b:c8:79:69:e0:c9:87:9f:77:e9:92:7a: b1:08:7e:3e:0d:89:74:8f:41:c6:19:69:c8:2b:0e:08:ac:44: 49:ad:54:92:a4:36:5d:26:9a:43:fa:00:78:42:eb:5e:69:7c: 56:ba:25:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFuywFVcGGkswqX6KFd5P9chn0rgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkU3OUU1NkNCRTk5Qzc3M0NENzIxREY3QUIwRTVDQTI4 MDlEMDczOTAeFw0yNTExMDMxNDU2MTdaFw0yNTExMDYyMTQyMTdaMDMxMTAvBgNV BAMTKDUyQjRCMDY0NTE5NTM5ODU2OEZDOUE3MEIyQzdDMzU4Q0ZBMDFBQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAHQpHpqgPYU5XQryyjLoqQu5J MQNS13MgB/AOSkrJBQ3Zqe3eJzYS6clGgSNlJvPYwxFYvqZ0LpxMd9513dWKSltI QQGRXxSkw5SS2JAS81Yv3XotNaIUu9Y+n1RgJ0ZynXhCPg9NsLFwkVb6z1mI289n sdJgYFp3+EHGH5RdcJy0vl+ybUw36VQqCjtqPRxB46MsG0lk7YSbjlKt0iVQnAXs 4dPrdNzzRm2bDN5YWb8G3DCNME4k1t7M8F3/nfQfTT4byUToNiZXC5NI4r/bOfzK yTNuZRIjRIWAdRAiSsmcb7BFgZoexYMpF17WA8T/w8EqTDuXN9cDe818wBcTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUrSwZFGVOYVo/JpwssfDWM+gGqkwHwYDVR0j BBgwFoAU/nnlbL6Zx3PNch33qw5cooCdBzkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MWYxNWExZC01ZGFjLTRjYzktODExYS1lNDljYjRlN2JjZTEvMC9GRTc5RTU2Q0JF OTlDNzczQ0Q3MjFERjdBQjBFNUNBMjgwOUQwNzM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkU3OUU1NkNCRTk5Qzc3M0NENzIxREY3QUIwRTVDQTI4MDlE MDczOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTFmMTVhMWQtNWRhYy00Y2M5LTgx MWEtZTQ5Y2I0ZTdiY2UxLzAvRkU3OUU1NkNCRTk5Qzc3M0NENzIxREY3QUIwRTVD QTI4MDlEMDczOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABMBN08Yi0hiCq9z8cFXcHGVUZ5AAP8EU/Nb VSv/HynPhIXG0IM3DS5WDYKrOqKdpi2MTpyKvDZ6mWWvRz4hBE7yt7fWCH83G/LH gMFk53qBApO/nnp0Za2ySnmWzR6oSgk317t5NyDnzi5+pK5VDHYl+9fhHOh3Z8Du QOz0wo36FpHEotgGCwvRZ3YUqzpd/5GnucZ+ZowKlz7iLWphXl9eG+OVuZGnGik5 kAsVmubV9BzH6qjvOQQEfePi8B9wXaPSmcp7H6mYOWplzQvIeWngyYefd+mSerEI fj4NiXSPQcYZacgrDgisREmtVJKkNl0mmkP6AHhC615pfFa6JQw= -----END CERTIFICATE-----Generated at Tue Nov 4 21:13:26 2025 by rpki-client