$ rpki-client -vvf repo-rpki.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.mft File: FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.mft (raw, json) Hash identifier: OoglLVaLxL7GAnA8s+eINUgYo48BXfPH4ampN1zps/U= Subject key identifier: 1E:64:B8:EF:9D:DF:DC:E6:7B:44:A7:C2:AE:05:10:D5:47:15:7A:88 Authority key identifier: FA:62:D8:28:54:4F:70:BE:AD:8B:3C:04:A8:61:75:E4:FB:07:C4:B6 Certificate issuer: /CN=FA62D828544F70BEAD8B3C04A86175E4FB07C4B6 Certificate serial: 1953E53B5E551FAB70017E15CF717E2C4144E04D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.mft Manifest number: BD Signing time: Thu 21 Aug 2025 12:40:42 +0000 Manifest this update: Thu 21 Aug 2025 12:35:42 +0000 Manifest next update: Sun 24 Aug 2025 20:12:42 +0000 Files and hashes: 1: FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.crl (hash: Rw1s17W+Ww1HgNLyPBYdCUSs0O4KvvV+e8j6KQlMT6M=) 2: 3135372e36362e33372e302f32342d3234203d3e20313338383034.roa (hash: elAlykoINKnAZ1hNxzJ7Wy9Qz4JU3YMP6UNvlutp4wU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.crl rsync://repo-rpki.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 20:12:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:53:e5:3b:5e:55:1f:ab:70:01:7e:15:cf:71:7e:2c:41:44:e0:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA62D828544F70BEAD8B3C04A86175E4FB07C4B6 Validity Not Before: Aug 21 12:35:42 2025 GMT Not After : Aug 24 20:12:42 2025 GMT Subject: CN=1E64B8EF9DDFDCE67B44A7C2AE0510D547157A88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:bb:95:e5:22:6e:ca:79:ce:e3:6f:fe:98:5f: 86:a8:85:a6:af:53:fe:17:a8:18:f5:1e:af:34:24: eb:97:31:27:3b:c9:46:fd:fa:00:a7:df:e3:96:6b: 04:7a:52:ef:00:8e:9c:de:b7:60:8f:a3:5b:58:ad: 3f:3e:a5:ad:25:ee:67:89:ee:37:cd:00:f7:8d:6a: eb:7a:b0:6f:bf:db:0a:5f:65:3c:b9:e9:40:e0:43: 5a:8d:12:63:7b:42:26:18:3f:68:1d:5d:c2:53:24: 5f:46:08:41:58:23:36:41:6c:a0:22:c3:2d:1f:62: ef:cd:ed:01:bd:fb:f8:fa:04:88:72:5b:52:d9:6a: 4b:24:9f:be:e7:20:a7:46:aa:d9:d8:19:1a:00:89: cf:cd:77:41:f4:76:ae:d8:28:c6:72:1b:a1:e9:c4: 3b:0c:43:55:31:3f:6f:28:1c:fd:77:7f:3e:4f:fd: 2c:1f:4e:4a:87:df:aa:1e:4b:f5:2d:0a:50:3d:53: 6a:56:e3:d5:f8:67:31:cd:0f:bc:0f:76:64:51:88: 82:5f:1b:04:ca:a4:db:bb:ac:96:f1:ee:01:2c:71: 4f:de:4a:28:d6:42:f2:c4:63:87:97:8d:bb:57:4a: 94:79:99:94:98:e8:ed:d7:8e:27:58:f7:15:39:ba: 9b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:64:B8:EF:9D:DF:DC:E6:7B:44:A7:C2:AE:05:10:D5:47:15:7A:88 X509v3 Authority Key Identifier: keyid:FA:62:D8:28:54:4F:70:BE:AD:8B:3C:04:A8:61:75:E4:FB:07:C4:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:84:e2:11:d6:a3:ff:39:38:c6:87:46:c7:83:77:fe:e6:ac: 4e:a4:a9:6e:d1:78:7b:84:01:2e:07:e7:90:a1:a8:17:68:90: 3f:19:e7:4e:08:0c:c4:24:e5:09:cb:25:93:a2:cd:31:44:9e: 6d:3f:62:8c:99:63:36:63:f3:45:ba:ad:b1:6e:6d:0c:52:00: 9c:d6:16:9e:fc:6b:f1:16:fe:22:47:c7:d7:57:4e:cf:d6:a5: e2:f0:28:c0:de:8d:83:36:55:83:e6:db:96:03:25:27:ab:a4: 80:90:ba:07:73:5f:ab:95:55:ba:1b:1c:14:a7:43:2d:26:36: e7:05:4e:98:74:38:cf:e9:4e:6b:7f:4c:61:b8:9f:78:dc:8d: 1f:53:5b:74:27:97:b9:50:73:0a:5c:5f:27:ee:e0:3c:0c:40: df:7e:ac:b5:04:d7:8f:13:0a:d0:bc:21:ff:aa:76:5a:9f:14: a0:73:e4:c4:d6:51:d3:ae:b8:35:1c:0f:38:05:54:97:8a:c5: db:47:f6:8a:e4:c8:82:bc:98:13:5e:29:14:2a:c2:45:cb:14: 6f:50:12:d2:18:8a:17:44:94:32:4f:95:da:a3:10:52:bb:04: 88:f1:6c:a2:21:f4:5d:1a:b0:4a:09:ee:62:f0:2d:bb:da:5f: ba:d2:fd:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGVPlO15VH6twAX4Vz3F+LEFE4E0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE2MkQ4Mjg1NDRGNzBCRUFEOEIzQzA0QTg2MTc1RTRG QjA3QzRCNjAeFw0yNTA4MjExMjM1NDJaFw0yNTA4MjQyMDEyNDJaMDMxMTAvBgNV BAMTKDFFNjRCOEVGOURERkRDRTY3QjQ0QTdDMkFFMDUxMEQ1NDcxNTdBODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIu5XlIm7Kec7jb/6YX4aohaav U/4XqBj1Hq80JOuXMSc7yUb9+gCn3+OWawR6Uu8Ajpzet2CPo1tYrT8+pa0l7meJ 7jfNAPeNaut6sG+/2wpfZTy56UDgQ1qNEmN7QiYYP2gdXcJTJF9GCEFYIzZBbKAi wy0fYu/N7QG9+/j6BIhyW1LZakskn77nIKdGqtnYGRoAic/Nd0H0dq7YKMZyG6Hp xDsMQ1UxP28oHP13fz5P/SwfTkqH36oeS/UtClA9U2pW49X4ZzHND7wPdmRRiIJf GwTKpNu7rJbx7gEscU/eSijWQvLEY4eXjbtXSpR5mZSY6O3XjidY9xU5uptPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHmS4753f3OZ7RKfCrgUQ1UcVeogwHwYDVR0j BBgwFoAU+mLYKFRPcL6tizwEqGF15PsHxLYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YzA0ZGVkOC1iMGY1LTQ1OTQtOGUwZS05MTFlY2I3N2VlNzMvMC9GQTYyRDgyODU0 NEY3MEJFQUQ4QjNDMDRBODYxNzVFNEZCMDdDNEI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkE2MkQ4Mjg1NDRGNzBCRUFEOEIzQzA0QTg2MTc1RTRGQjA3 QzRCNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWMwNGRlZDgtYjBmNS00NTk0LThl MGUtOTExZWNiNzdlZTczLzAvRkE2MkQ4Mjg1NDRGNzBCRUFEOEIzQzA0QTg2MTc1 RTRGQjA3QzRCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALOE4hHWo/85OMaHRseDd/7mrE6kqW7ReHuE AS4H55ChqBdokD8Z504IDMQk5QnLJZOizTFEnm0/YoyZYzZj80W6rbFubQxSAJzW Fp78a/EW/iJHx9dXTs/WpeLwKMDejYM2VYPm25YDJSerpICQugdzX6uVVbobHBSn Qy0mNucFTph0OM/pTmt/TGG4n3jcjR9TW3Qnl7lQcwpcXyfu4DwMQN9+rLUE148T CtC8If+qdlqfFKBz5MTWUdOuuDUcDzgFVJeKxdtH9orkyIK8mBNeKRQqwkXLFG9Q EtIYihdElDJPldqjEFK7BIjxbKIh9F0asEoJ7mLwLbvaX7rS/YY= -----END CERTIFICATE-----Generated at Sat Aug 23 21:01:36 2025 by rpki-client