$ rpki-client -vvf repo-rpki.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.mft File: FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.mft (raw, json) Hash identifier: STC9foL7SdeL/7Z/MnsijWDp/jQf/n24x6IU6hPNTn0= Subject key identifier: 65:81:7F:D6:B8:5E:4E:9F:C1:09:8F:B0:B5:4D:99:61:52:05:CA:37 Authority key identifier: FD:18:E3:EC:B5:F2:28:5C:07:51:C4:8E:AF:23:EF:21:0B:A8:FD:CC Certificate issuer: /CN=FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC Certificate serial: 6C56C527A773080BBB7588144F9B5DBAE2A2AF57 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.mft Manifest number: 010B Signing time: Mon 03 Nov 2025 20:31:14 +0000 Manifest this update: Mon 03 Nov 2025 20:26:14 +0000 Manifest next update: Thu 06 Nov 2025 23:21:14 +0000 Files and hashes: 1: 3135372e32302e39352e302f32342d3234203d3e20313431363032.roa (hash: 88y84elDiek3O/IhTaNMS2vLlPQVqlAnqgDoLBdJafc=) 2: FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.crl (hash: cwoGeNQ5I2fMl3xwC8uNJjTND7Ud6PcfNNEB4oJNjj0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.crl rsync://repo-rpki.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 23:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:56:c5:27:a7:73:08:0b:bb:75:88:14:4f:9b:5d:ba:e2:a2:af:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC Validity Not Before: Nov 3 20:26:14 2025 GMT Not After : Nov 6 23:21:14 2025 GMT Subject: CN=65817FD6B85E4E9FC1098FB0B54D99615205CA37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:89:5c:72:ba:bf:87:94:61:fc:bb:51:da:f4: 9b:dc:4a:43:1b:24:38:b1:90:3b:7f:9a:94:ae:1d: e7:d5:cc:e1:28:ec:80:21:a9:b4:a1:0b:fd:1e:11: e7:45:47:80:a2:be:ab:cd:24:be:6a:07:c6:2f:f3: 5b:b6:ff:ff:2d:32:59:92:0c:db:d6:ef:f7:f1:a9: 84:3b:a1:81:f3:db:fd:be:5b:a0:7d:4e:32:dd:e1: 0b:86:f9:fb:e8:8e:e6:c9:a3:a3:62:a1:67:3d:b6: 38:06:f2:a8:7b:80:0e:e4:c6:bc:c3:b0:c4:08:cb: 12:23:ea:af:b7:62:20:55:a7:dc:b7:af:aa:23:51: 30:c7:ac:c0:4e:1e:0f:6a:00:04:26:83:2b:52:21: 6d:27:64:cf:6f:a2:85:a9:de:17:2f:60:bf:c4:76: 9d:bd:e4:b0:ad:5d:01:2d:bd:58:83:7b:d8:d7:3b: 7b:b2:b8:cc:58:71:82:4d:65:9d:5f:fd:9f:b2:37: 7a:c9:16:f0:55:a5:4a:4e:66:7b:6c:04:fd:cf:3f: 6b:80:57:8e:a0:12:ef:b8:89:9f:ab:1d:c1:06:90: ce:ea:18:50:27:a5:81:7c:a6:fd:eb:28:fc:e7:95: c5:fc:87:88:de:ff:17:e2:7f:ad:0b:d4:07:ab:57: de:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:81:7F:D6:B8:5E:4E:9F:C1:09:8F:B0:B5:4D:99:61:52:05:CA:37 X509v3 Authority Key Identifier: keyid:FD:18:E3:EC:B5:F2:28:5C:07:51:C4:8E:AF:23:EF:21:0B:A8:FD:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:64:bd:b3:17:f9:96:41:84:fa:fe:18:12:48:db:64:2f:55: 3d:b8:76:a3:e9:90:55:cf:2a:d6:14:19:7e:e9:f1:e9:8c:eb: ab:8f:73:12:7c:39:21:c6:3c:33:e7:02:a3:67:ca:c6:10:df: 82:7b:15:4f:81:e7:d0:03:87:d7:3c:dd:cf:c2:66:d8:c8:f7: bf:08:e9:d8:87:a1:42:54:e3:d4:61:46:5f:39:bb:55:0b:19: 4b:07:23:d8:ae:97:04:5c:51:da:ab:62:61:31:f6:6e:59:11: d7:c2:dc:85:43:cd:4e:a9:10:b4:4f:31:27:1f:9f:e4:53:23: ed:56:9e:43:97:82:8b:fd:70:cb:db:fb:60:2e:fb:00:b5:34: c2:f2:7b:d7:a6:d5:56:c6:a8:fb:83:79:03:74:b7:7b:c8:50: 29:ba:40:ca:44:1a:de:15:6c:3a:46:1d:9e:a9:ee:e0:d5:b7: 3f:de:23:94:38:f1:16:83:d1:4c:0d:cb:20:96:f4:31:4e:5c: 4c:b3:ed:54:f5:a8:97:94:7f:e5:3b:7c:1f:8b:8a:4b:1a:da: f4:73:e3:2f:71:b2:a9:9a:73:35:c7:85:68:d2:0c:d7:bf:d0: 2d:02:38:0a:6e:ab:ac:f2:8c:e0:c0:28:35:93:cc:06:65:fe: e5:a9:e0:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbFbFJ6dzCAu7dYgUT5tduuKir1cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkQxOEUzRUNCNUYyMjg1QzA3NTFDNDhFQUYyM0VGMjEw QkE4RkRDQzAeFw0yNTExMDMyMDI2MTRaFw0yNTExMDYyMzIxMTRaMDMxMTAvBgNV BAMTKDY1ODE3RkQ2Qjg1RTRFOUZDMTA5OEZCMEI1NEQ5OTYxNTIwNUNBMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCViVxyur+HlGH8u1Ha9JvcSkMb JDixkDt/mpSuHefVzOEo7IAhqbShC/0eEedFR4CivqvNJL5qB8Yv81u2//8tMlmS DNvW7/fxqYQ7oYHz2/2+W6B9TjLd4QuG+fvojubJo6NioWc9tjgG8qh7gA7kxrzD sMQIyxIj6q+3YiBVp9y3r6ojUTDHrMBOHg9qAAQmgytSIW0nZM9vooWp3hcvYL/E dp295LCtXQEtvViDe9jXO3uyuMxYcYJNZZ1f/Z+yN3rJFvBVpUpOZntsBP3PP2uA V46gEu+4iZ+rHcEGkM7qGFAnpYF8pv3rKPznlcX8h4je/xfif60L1AerV96VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZYF/1rheTp/BCY+wtU2ZYVIFyjcwHwYDVR0j BBgwFoAU/Rjj7LXyKFwHUcSOryPvIQuo/cwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YWUxM2JhYy05MWMxLTQ2M2ItODMzMy02NGVlYzZkMjc5N2UvMC9GRDE4RTNFQ0I1 RjIyODVDMDc1MUM0OEVBRjIzRUYyMTBCQThGRENDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkQxOEUzRUNCNUYyMjg1QzA3NTFDNDhFQUYyM0VGMjEwQkE4 RkRDQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGFlMTNiYWMtOTFjMS00NjNiLTgz MzMtNjRlZWM2ZDI3OTdlLzAvRkQxOEUzRUNCNUYyMjg1QzA3NTFDNDhFQUYyM0VG MjEwQkE4RkRDQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGNkvbMX+ZZBhPr+GBJI22QvVT24dqPpkFXP KtYUGX7p8emM66uPcxJ8OSHGPDPnAqNnysYQ34J7FU+B59ADh9c83c/CZtjI978I 6diHoUJU49RhRl85u1ULGUsHI9iulwRcUdqrYmEx9m5ZEdfC3IVDzU6pELRPMScf n+RTI+1WnkOXgov9cMvb+2Au+wC1NMLye9em1VbGqPuDeQN0t3vIUCm6QMpEGt4V bDpGHZ6p7uDVtz/eI5Q48RaD0UwNyyCW9DFOXEyz7VT1qJeUf+U7fB+Liksa2vRz 4y9xsqmaczXHhWjSDNe/0C0COApuq6zyjODAKDWTzAZl/uWp4Ps= -----END CERTIFICATE-----Generated at Tue Nov 4 23:07:00 2025 by rpki-client