$ rpki-client -vvf repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.mft File: FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.mft (raw, json) Hash identifier: QNkFXMu/LOnUAHBUMi9apSJev9Ag4ND0cvcNaDSEM/o= Subject key identifier: 90:BD:CE:74:60:9E:7A:4E:8F:05:59:26:21:DC:DE:7E:58:9F:A8:BE Authority key identifier: FB:1D:4F:91:39:A6:1D:F4:B9:1E:31:27:0F:3D:2A:1C:07:B3:5C:E1 Certificate issuer: /CN=FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1 Certificate serial: 1E043FE6472BBA649197D515C513319E0F7204AF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.mft Manifest number: 019C Signing time: Sat 23 Aug 2025 04:32:05 +0000 Manifest this update: Sat 23 Aug 2025 04:27:05 +0000 Manifest next update: Tue 26 Aug 2025 05:11:05 +0000 Files and hashes: 1: FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.crl (hash: 393S1KPi+hCHt3JyAlDg/zmYeMClqIbKn7TfMyC7csY=) 2: 3130332e3134392e3131382e302f32332d3234203d3e20313431303535.roa (hash: u22TiDBqhxRDgDXVHX7pAHC7nu8jAukDNtzJmORzlts=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.crl rsync://repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 05:11:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:04:3f:e6:47:2b:ba:64:91:97:d5:15:c5:13:31:9e:0f:72:04:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1 Validity Not Before: Aug 23 04:27:05 2025 GMT Not After : Aug 26 05:11:05 2025 GMT Subject: CN=90BDCE74609E7A4E8F05592621DCDE7E589FA8BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:03:ca:35:69:cd:a2:07:03:66:20:b7:ba:4c: 74:f7:dc:21:ca:c2:83:49:2c:32:e0:dd:0f:34:f8: 3c:a0:66:47:d0:54:cb:c5:76:c2:92:53:b2:ee:64: 1e:d3:42:b5:9a:e2:f0:74:b7:d6:ff:02:61:e1:5b: 90:c9:63:96:89:1c:d1:05:0b:a5:a1:f6:66:b4:ea: 85:85:8c:53:0c:7a:fd:8e:ae:14:ab:ac:bd:11:2d: 3f:3a:41:5a:db:1e:e3:aa:37:04:cd:6b:63:da:f0: b0:e3:96:e1:f4:1a:9e:d7:58:49:17:73:36:00:6d: f1:59:e7:6b:2a:42:9b:8d:fb:d4:42:8c:84:12:5e: 17:27:90:7d:33:f3:2b:70:e2:78:a6:06:1e:57:4e: 34:2d:88:2c:f2:f2:b5:b3:1e:4e:f0:6a:b0:9c:e2: bc:ae:bb:19:f0:53:29:d9:65:a7:13:5e:7e:5d:b7: 43:81:77:f8:13:ba:bd:2f:a5:fb:f0:3e:be:5e:3c: 13:92:39:b3:2d:2b:15:8a:a7:cd:a8:78:52:18:b2: 26:2c:70:88:78:79:e3:38:3e:a7:aa:d6:46:0d:5a: 9f:92:4b:99:7b:79:d4:d4:68:f6:42:71:83:db:07: 8d:c5:cd:75:16:76:00:e3:11:eb:9b:10:08:3a:cf: 78:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:BD:CE:74:60:9E:7A:4E:8F:05:59:26:21:DC:DE:7E:58:9F:A8:BE X509v3 Authority Key Identifier: keyid:FB:1D:4F:91:39:A6:1D:F4:B9:1E:31:27:0F:3D:2A:1C:07:B3:5C:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:28:ee:89:69:b0:f9:65:26:22:6e:72:aa:c6:bc:34:35:71: dc:17:45:7b:82:de:b2:a1:6b:b5:fe:cb:a7:9c:b3:e9:dc:1a: 08:0c:14:9d:19:98:f6:53:80:cc:0a:00:cd:d5:f0:7b:48:7f: 85:d5:ba:b9:9b:46:07:28:52:f4:7e:b6:e2:18:82:56:fe:d9: 78:8c:f6:9e:50:dd:f0:fc:b6:b5:5f:1a:d9:4c:3c:b3:2b:34: 28:43:c7:8e:0b:8d:63:62:08:99:44:4a:65:84:a4:50:c6:71: c3:87:1f:fc:56:ff:1f:b7:78:3a:01:a4:c0:af:e2:35:52:69: 75:c8:bf:54:3e:0c:cb:f4:d1:2e:90:7d:9a:0b:a3:36:18:af: 30:eb:c9:f7:3d:29:37:9f:12:00:d0:bb:71:6d:24:2f:d2:10: 4c:a5:d2:4b:8b:2f:1a:05:b6:a1:5b:4b:96:cf:c4:24:4e:ba: 0c:69:32:54:6a:b2:cf:bc:34:6e:a6:e0:3a:ed:e1:45:e2:74: d6:2f:21:a0:bd:98:26:c8:d2:f2:e8:45:3e:62:4a:e8:5a:ad: 2c:b4:d9:a0:12:e6:4f:8b:22:e9:0a:6d:97:c2:6c:a8:ee:12: 17:5a:2c:84:05:e7:bb:ef:34:48:27:bc:99:84:ad:47:ba:c1: 90:a0:b3:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHgQ/5kcrumSRl9UVxRMxng9yBK8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkIxRDRGOTEzOUE2MURGNEI5MUUzMTI3MEYzRDJBMUMw N0IzNUNFMTAeFw0yNTA4MjMwNDI3MDVaFw0yNTA4MjYwNTExMDVaMDMxMTAvBgNV BAMTKDkwQkRDRTc0NjA5RTdBNEU4RjA1NTkyNjIxRENERTdFNTg5RkE4QkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6A8o1ac2iBwNmILe6THT33CHK woNJLDLg3Q80+DygZkfQVMvFdsKSU7LuZB7TQrWa4vB0t9b/AmHhW5DJY5aJHNEF C6Wh9ma06oWFjFMMev2OrhSrrL0RLT86QVrbHuOqNwTNa2Pa8LDjluH0Gp7XWEkX czYAbfFZ52sqQpuN+9RCjIQSXhcnkH0z8ytw4nimBh5XTjQtiCzy8rWzHk7warCc 4ryuuxnwUynZZacTXn5dt0OBd/gTur0vpfvwPr5ePBOSObMtKxWKp82oeFIYsiYs cIh4eeM4Pqeq1kYNWp+SS5l7edTUaPZCcYPbB43FzXUWdgDjEeubEAg6z3inAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkL3OdGCeek6PBVkmIdzeflifqL4wHwYDVR0j BBgwFoAU+x1PkTmmHfS5HjEnDz0qHAezXOEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Y2M3MGY3ZC0zM2ZlLTRkZjItODFlNS1kYzBkNTVhYzUxNzAvMC9GQjFENEY5MTM5 QTYxREY0QjkxRTMxMjcwRjNEMkExQzA3QjM1Q0UxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkIxRDRGOTEzOUE2MURGNEI5MUUzMTI3MEYzRDJBMUMwN0Iz NUNFMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWNjNzBmN2QtMzNmZS00ZGYyLTgx ZTUtZGMwZDU1YWM1MTcwLzAvRkIxRDRGOTEzOUE2MURGNEI5MUUzMTI3MEYzRDJB MUMwN0IzNUNFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHUo7olpsPllJiJucqrGvDQ1cdwXRXuC3rKh a7X+y6ecs+ncGggMFJ0ZmPZTgMwKAM3V8HtIf4XVurmbRgcoUvR+tuIYglb+2XiM 9p5Q3fD8trVfGtlMPLMrNChDx44LjWNiCJlESmWEpFDGccOHH/xW/x+3eDoBpMCv 4jVSaXXIv1Q+DMv00S6QfZoLozYYrzDryfc9KTefEgDQu3FtJC/SEEyl0kuLLxoF tqFbS5bPxCROugxpMlRqss+8NG6m4Drt4UXidNYvIaC9mCbI0vLoRT5iSuharSy0 2aAS5k+LIukKbZfCbKjuEhdaLIQF57vvNEgnvJmErUe6wZCgs0c= -----END CERTIFICATE-----Generated at Sat Aug 23 14:03:58 2025 by rpki-client