$ rpki-client -vvf repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/FED855DD505D24B6FE25BD8656297329F7EF4785.mft File: FED855DD505D24B6FE25BD8656297329F7EF4785.mft (raw, json) Hash identifier: kF8zgL555Bg/13n4i3X+/0v/dumtgT5tjNe+0UAyTKA= Subject key identifier: 26:C5:E4:B9:61:CE:AA:61:CC:1C:94:CD:12:DA:3B:B3:AF:58:04:9F Authority key identifier: FE:D8:55:DD:50:5D:24:B6:FE:25:BD:86:56:29:73:29:F7:EF:47:85 Certificate issuer: /CN=FED855DD505D24B6FE25BD8656297329F7EF4785 Certificate serial: 4DAB91861B3AFE10615081597FCECA4344F2C637 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FED855DD505D24B6FE25BD8656297329F7EF4785.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/FED855DD505D24B6FE25BD8656297329F7EF4785.mft Manifest number: 0477 Signing time: Fri 22 Aug 2025 13:41:24 +0000 Manifest this update: Fri 22 Aug 2025 13:36:24 +0000 Manifest next update: Mon 25 Aug 2025 14:34:24 +0000 Files and hashes: 1: 3130332e3130352e3132382e302f32322d3232203d3e203137373237.roa (hash: bF3yNWnrobMt6M6WVmO7fz+aU3HM2Cfravonu1UTCBk=) 2: FED855DD505D24B6FE25BD8656297329F7EF4785.crl (hash: xFald60U11vN3RWGNLXz0CDe4dk/Agc8IwhcfAq7jdQ=) 3: 3130332e3130352e3133312e302f32342d3234203d3e203137373237.roa (hash: 7zla6i/CdhAJ+rkrr0QnJT3TEbat42oScFtFbp306GQ=) 4: 3130332e3130352e3132392e302f32342d3234203d3e203137373237.roa (hash: lJMQNYucnJrPY3dSbvBo/L6VOBHJNLkr/8+rBT1rHAo=) 5: 3130332e3130352e3133302e302f32342d3234203d3e203137373237.roa (hash: XaJkhpMWFfQiHoigSzAOeB9OLJw8Q/0siNpjbvDEMi4=) 6: 3130332e3130352e3132382e302f32342d3234203d3e203137373237.roa (hash: M4514PXfJTPhQt4OlK6IndpXXY1NhEUELHDBA5WVyuc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/FED855DD505D24B6FE25BD8656297329F7EF4785.crl rsync://repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/FED855DD505D24B6FE25BD8656297329F7EF4785.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FED855DD505D24B6FE25BD8656297329F7EF4785.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 14:34:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:ab:91:86:1b:3a:fe:10:61:50:81:59:7f:ce:ca:43:44:f2:c6:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FED855DD505D24B6FE25BD8656297329F7EF4785 Validity Not Before: Aug 22 13:36:24 2025 GMT Not After : Aug 25 14:34:24 2025 GMT Subject: CN=26C5E4B961CEAA61CC1C94CD12DA3BB3AF58049F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:94:ce:12:b3:21:6e:cd:20:83:a5:f7:e6:79: 21:58:16:ed:71:bc:e2:74:78:d3:ce:3a:d9:4c:25: c3:f6:03:a7:06:f0:c6:10:44:09:a8:51:56:0a:00: 61:2d:28:89:31:85:8f:86:7f:d0:9f:34:d9:e9:43: 58:55:8b:db:7c:11:f5:30:24:16:bd:0d:b5:05:20: 5c:46:55:c9:40:7c:de:cb:4a:95:b4:58:ee:3b:29: 68:84:73:bd:0a:22:30:30:ba:be:3b:51:b0:ae:d8: b3:f2:8e:ea:85:2b:7d:b4:50:12:c2:da:fc:7c:a1: 0c:ac:3c:12:bf:25:35:1e:5b:5f:0e:d4:02:05:ac: fd:1e:cc:42:c3:0a:3b:c8:65:74:c5:13:46:ef:7a: 75:dc:2d:99:41:16:3e:c8:1d:cf:c2:6e:ea:80:b4: e5:4f:7a:ed:76:eb:95:14:23:ac:9a:72:fe:5d:41: 34:8e:a6:bd:14:b2:18:d9:f4:a5:6d:31:40:c9:b4: ab:4e:29:1a:ba:08:00:99:44:87:23:bd:8c:c7:3d: f2:03:1c:06:b1:95:bf:55:0e:e3:1a:32:c1:ca:77: 94:d4:42:0b:2d:28:ae:1d:25:d0:a1:08:75:98:2d: 02:e1:af:a1:7e:e2:94:d8:b6:41:8c:db:da:c5:2a: 5a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:C5:E4:B9:61:CE:AA:61:CC:1C:94:CD:12:DA:3B:B3:AF:58:04:9F X509v3 Authority Key Identifier: keyid:FE:D8:55:DD:50:5D:24:B6:FE:25:BD:86:56:29:73:29:F7:EF:47:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/FED855DD505D24B6FE25BD8656297329F7EF4785.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FED855DD505D24B6FE25BD8656297329F7EF4785.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/FED855DD505D24B6FE25BD8656297329F7EF4785.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ea:ef:d0:cd:d4:8a:fc:86:7d:4a:ff:cd:b7:e0:ca:b1:1f:48: e4:5e:73:ee:2a:35:bc:52:bc:d0:e2:9d:e3:83:bc:97:b0:f0: 73:8b:41:c8:af:88:c4:ee:a3:0f:1d:77:4e:89:2a:40:bb:da: b6:6d:95:38:53:51:6a:83:e3:4e:53:29:8f:94:ff:f7:48:d4: 56:d7:4b:1d:9c:b0:a8:c3:17:c7:1b:d8:d7:57:bd:34:83:ec: 69:73:8a:59:cd:73:a1:7f:c1:41:31:42:cc:18:e0:a8:ad:45: 5a:4b:c7:bc:88:8d:2d:be:de:61:ce:69:09:eb:92:5b:55:a4: 26:61:45:07:d9:7b:95:03:41:2a:05:b0:81:c3:0c:97:e7:29: 49:48:e3:3c:a9:f2:ed:5b:2c:0e:30:78:f4:f3:67:18:e1:48: 8e:42:8a:4e:e5:8e:ca:2c:5a:fa:0d:92:cd:75:1d:2a:13:b5: 78:c1:7a:ae:97:79:84:62:c8:a4:7d:bc:2d:d0:b1:19:2f:ae: ce:12:4a:2e:75:90:19:67:f4:e5:13:bb:38:de:fd:91:07:fd: 93:a5:1b:32:b4:48:be:55:be:de:fb:63:80:be:01:d2:8f:75: 5e:20:57:10:5e:c2:ae:55:cb:47:35:e5:36:da:ab:e2:57:af: fa:8d:2e:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTauRhhs6/hBhUIFZf87KQ0TyxjcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkVEODU1REQ1MDVEMjRCNkZFMjVCRDg2NTYyOTczMjlG N0VGNDc4NTAeFw0yNTA4MjIxMzM2MjRaFw0yNTA4MjUxNDM0MjRaMDMxMTAvBgNV BAMTKDI2QzVFNEI5NjFDRUFBNjFDQzFDOTRDRDEyREEzQkIzQUY1ODA0OUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5lM4SsyFuzSCDpffmeSFYFu1x vOJ0eNPOOtlMJcP2A6cG8MYQRAmoUVYKAGEtKIkxhY+Gf9CfNNnpQ1hVi9t8EfUw JBa9DbUFIFxGVclAfN7LSpW0WO47KWiEc70KIjAwur47UbCu2LPyjuqFK320UBLC 2vx8oQysPBK/JTUeW18O1AIFrP0ezELDCjvIZXTFE0bvenXcLZlBFj7IHc/CbuqA tOVPeu1265UUI6yacv5dQTSOpr0UshjZ9KVtMUDJtKtOKRq6CACZRIcjvYzHPfID HAaxlb9VDuMaMsHKd5TUQgstKK4dJdChCHWYLQLhr6F+4pTYtkGM29rFKlpvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJsXkuWHOqmHMHJTNEto7s69YBJ8wHwYDVR0j BBgwFoAU/thV3VBdJLb+Jb2GVilzKffvR4UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDYxZDdhNy1hMTFlLTQwMGItOTE3MC1jNzk3ZWQ4OGQ3MDIvMC9GRUQ4NTVERDUw NUQyNEI2RkUyNUJEODY1NjI5NzMyOUY3RUY0Nzg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkVEODU1REQ1MDVEMjRCNkZFMjVCRDg2NTYyOTczMjlGN0VG NDc4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQ2MWQ3YTctYTExZS00MDBiLTkx NzAtYzc5N2VkODhkNzAyLzAvRkVEODU1REQ1MDVEMjRCNkZFMjVCRDg2NTYyOTcz MjlGN0VGNDc4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOrv0M3UivyGfUr/zbfgyrEfSORec+4qNbxS vNDineODvJew8HOLQciviMTuow8dd06JKkC72rZtlThTUWqD405TKY+U//dI1FbX Sx2csKjDF8cb2NdXvTSD7GlzilnNc6F/wUExQswY4KitRVpLx7yIjS2+3mHOaQnr kltVpCZhRQfZe5UDQSoFsIHDDJfnKUlI4zyp8u1bLA4wePTzZxjhSI5Cik7ljsos WvoNks11HSoTtXjBeq6XeYRiyKR9vC3QsRkvrs4SSi51kBln9OUTuzje/ZEH/ZOl GzK0SL5Vvt77Y4C+AdKPdV4gVxBewq5Vy0c15Tbaq+JXr/qNLu0= -----END CERTIFICATE-----Generated at Sat Aug 23 18:47:03 2025 by rpki-client