$ rpki-client -vvf repo-rpki.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.mft File: FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.mft (raw, json) Hash identifier: k/PXdKf5poSS5A4Chpoi3kFEue+ufOuX8zPYeM8R6sg= Subject key identifier: AE:F6:49:98:57:63:86:5F:09:53:23:BB:E7:A0:F0:38:C2:E8:24:78 Authority key identifier: FD:18:E3:EC:B5:F2:28:5C:07:51:C4:8E:AF:23:EF:21:0B:A8:FD:CC Certificate issuer: /CN=FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC Certificate serial: 44051834AD0BF676002393C43F85B414AAD680B1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.mft Manifest number: CD Signing time: Sat 14 Jun 2025 04:51:10 +0000 Manifest this update: Sat 14 Jun 2025 04:46:10 +0000 Manifest next update: Tue 17 Jun 2025 16:33:10 +0000 Files and hashes: 1: 3135372e32302e39352e302f32342d3234203d3e20313431363032.roa (hash: 88y84elDiek3O/IhTaNMS2vLlPQVqlAnqgDoLBdJafc=) 2: FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.crl (hash: +J3guEJGMU9VWeLtww/6YlyDSs61xIIleabTK1NoDu4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.crl rsync://repo-rpki.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 16:33:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:05:18:34:ad:0b:f6:76:00:23:93:c4:3f:85:b4:14:aa:d6:80:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC Validity Not Before: Jun 14 04:46:10 2025 GMT Not After : Jun 17 16:33:10 2025 GMT Subject: CN=AEF649985763865F095323BBE7A0F038C2E82478 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e7:69:2c:9b:d4:5e:b1:ae:63:1e:79:bd:cc: 95:e9:b2:37:d2:70:e7:db:30:01:25:29:a4:6a:d8: d9:59:73:60:8a:bd:4d:63:f3:18:68:da:3c:34:eb: 21:16:30:13:46:dc:e4:76:4e:71:a2:e5:13:b0:5d: b2:82:78:8c:e9:4f:62:7b:ce:bc:8d:99:1f:58:23: bc:cc:e9:ec:85:ef:c4:59:f3:25:e5:f8:fa:48:d8: 05:40:d0:3c:ca:a5:ff:97:b2:c9:11:f9:c7:99:83: 6c:4d:2d:9a:9f:a1:f3:98:3c:95:57:65:2a:85:eb: de:2c:41:54:9a:f4:bf:ab:db:32:a0:8f:ea:fb:2e: fb:21:26:0e:9a:35:11:85:94:83:01:5d:d1:02:18: 46:76:35:c1:0a:ab:18:2d:90:4e:4c:b7:4c:a0:cb: 6e:61:20:c9:f6:22:f5:b3:51:f6:64:fa:e1:37:f0: 7b:b5:66:9f:09:b7:8f:d7:94:53:fe:4f:8e:c6:5e: ce:f6:ae:4f:3e:17:24:d1:65:a4:36:53:96:53:c7: aa:53:64:ff:54:c4:36:09:01:f5:9c:25:be:6b:85: 75:32:8d:ec:91:fd:12:86:2c:29:ab:03:c8:3a:1d: 27:bf:9c:f0:94:90:0a:90:cf:2f:0f:cb:ae:3f:1e: 1b:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:F6:49:98:57:63:86:5F:09:53:23:BB:E7:A0:F0:38:C2:E8:24:78 X509v3 Authority Key Identifier: keyid:FD:18:E3:EC:B5:F2:28:5C:07:51:C4:8E:AF:23:EF:21:0B:A8:FD:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:5d:38:91:2f:01:78:8e:4f:2e:01:e7:e1:d4:78:8a:03:2e: 05:ab:05:1c:4c:91:dc:76:f7:c7:1f:b9:d6:bd:31:65:ad:50: 31:ee:11:21:52:90:de:91:22:68:06:ca:44:d5:f4:28:cb:35: ec:88:5c:db:e5:96:6d:f9:8a:fb:88:5a:8d:6b:fe:a4:c9:c5: 7c:7a:00:23:85:aa:c0:61:fd:87:53:80:d5:5d:48:f5:cc:ad: c0:e4:d5:23:4d:00:dc:93:95:e1:ce:a7:65:3f:c2:64:bc:cf: 0d:3f:dd:21:e0:81:4e:13:4a:3d:c9:e3:2e:9f:fa:88:cc:37: 43:00:fb:5e:66:05:26:b5:8e:8d:fc:53:18:c6:94:64:26:35: 27:2d:fc:68:fa:7d:77:7d:21:4e:6f:e4:e4:37:34:f8:79:87: 4f:3a:29:16:05:74:66:d7:ad:2f:ca:77:57:91:ed:af:e9:fc: 8e:63:ad:cb:5a:16:94:e3:12:f2:62:b8:fb:75:85:e5:dd:76: 3e:35:c6:3f:ca:0f:2e:01:2d:b5:e0:c1:5a:1c:f9:62:01:c7: af:a4:97:e7:f6:01:14:75:21:61:b6:e8:70:aa:ff:9d:54:a9: e0:97:08:a2:d3:e3:14:a0:1d:20:63:62:c3:63:8e:f8:1d:69: 6d:16:a0:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURAUYNK0L9nYAI5PEP4W0FKrWgLEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkQxOEUzRUNCNUYyMjg1QzA3NTFDNDhFQUYyM0VGMjEw QkE4RkRDQzAeFw0yNTA2MTQwNDQ2MTBaFw0yNTA2MTcxNjMzMTBaMDMxMTAvBgNV BAMTKEFFRjY0OTk4NTc2Mzg2NUYwOTUzMjNCQkU3QTBGMDM4QzJFODI0NzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC652ksm9Resa5jHnm9zJXpsjfS cOfbMAElKaRq2NlZc2CKvU1j8xho2jw06yEWMBNG3OR2TnGi5ROwXbKCeIzpT2J7 zryNmR9YI7zM6eyF78RZ8yXl+PpI2AVA0DzKpf+XsskR+ceZg2xNLZqfofOYPJVX ZSqF694sQVSa9L+r2zKgj+r7LvshJg6aNRGFlIMBXdECGEZ2NcEKqxgtkE5Mt0yg y25hIMn2IvWzUfZk+uE38Hu1Zp8Jt4/XlFP+T47GXs72rk8+FyTRZaQ2U5ZTx6pT ZP9UxDYJAfWcJb5rhXUyjeyR/RKGLCmrA8g6HSe/nPCUkAqQzy8Py64/HhsTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrvZJmFdjhl8JUyO756DwOMLoJHgwHwYDVR0j BBgwFoAU/Rjj7LXyKFwHUcSOryPvIQuo/cwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YWUxM2JhYy05MWMxLTQ2M2ItODMzMy02NGVlYzZkMjc5N2UvMC9GRDE4RTNFQ0I1 RjIyODVDMDc1MUM0OEVBRjIzRUYyMTBCQThGRENDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkQxOEUzRUNCNUYyMjg1QzA3NTFDNDhFQUYyM0VGMjEwQkE4 RkRDQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGFlMTNiYWMtOTFjMS00NjNiLTgz MzMtNjRlZWM2ZDI3OTdlLzAvRkQxOEUzRUNCNUYyMjg1QzA3NTFDNDhFQUYyM0VG MjEwQkE4RkRDQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABddOJEvAXiOTy4B5+HUeIoDLgWrBRxMkdx2 98cfuda9MWWtUDHuESFSkN6RImgGykTV9CjLNeyIXNvllm35ivuIWo1r/qTJxXx6 ACOFqsBh/YdTgNVdSPXMrcDk1SNNANyTleHOp2U/wmS8zw0/3SHggU4TSj3J4y6f +ojMN0MA+15mBSa1jo38UxjGlGQmNSct/Gj6fXd9IU5v5OQ3NPh5h086KRYFdGbX rS/Kd1eR7a/p/I5jrctaFpTjEvJiuPt1heXddj41xj/KDy4BLbXgwVoc+WIBx6+k l+f2ARR1IWG26HCq/51UqeCXCKLT4xSgHSBjYsNjjvgdaW0WoLA= -----END CERTIFICATE-----Generated at Mon Jun 16 03:42:42 2025 by rpki-client