$ rpki-client -vvf repo-rpki.idnic.net/repo/7d68500c-49f8-4f01-8774-f7c3164a0a58/0/FD0F38979237143A0D44165912E79E2FACD5A3BA.mft File: FD0F38979237143A0D44165912E79E2FACD5A3BA.mft (raw, json) Hash identifier: 5ItprzITj0v3vkdoWH32TV+i6xVMBrEvK9T9L7qMW0w= Subject key identifier: 5E:AA:65:01:36:59:7E:33:00:52:47:8D:1E:23:78:5E:ED:5B:88:2E Authority key identifier: FD:0F:38:97:92:37:14:3A:0D:44:16:59:12:E7:9E:2F:AC:D5:A3:BA Certificate issuer: /CN=FD0F38979237143A0D44165912E79E2FACD5A3BA Certificate serial: 3C842BF86509C026E2082F50591E32C1963F7F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FD0F38979237143A0D44165912E79E2FACD5A3BA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d68500c-49f8-4f01-8774-f7c3164a0a58/0/FD0F38979237143A0D44165912E79E2FACD5A3BA.mft Manifest number: 04C4 Signing time: Fri 22 Aug 2025 09:52:44 +0000 Manifest this update: Fri 22 Aug 2025 09:47:44 +0000 Manifest next update: Mon 25 Aug 2025 11:21:44 +0000 Files and hashes: 1: 323430363a623734303a3a2f33322d3332203d3e203338373736.roa (hash: l1d86+GollU+X7/7+S+akSvN9Ic4ZxndXEoSt1R4EA0=) 2: 323430363a623734303a3a2f33322d3332203d3e20313431313235.roa (hash: QqT8D5lkBG4hSbXhFLTMPSoaBkT256vJUAYJ7NnLOL4=) 3: 3130332e3135382e39382e302f32332d3234203d3e203338373736.roa (hash: g4/2gGmpn32hkKxV0sqfqROaCQsBlE1YLxPaRAMg4a0=) 4: 3130332e3135382e39382e302f32332d3234203d3e20313431313235.roa (hash: we24I32s5ELSTaYXFb0D1dL9DqvAx3yOmh/lu/NzD+s=) 5: FD0F38979237143A0D44165912E79E2FACD5A3BA.crl (hash: JY5TlFz0SLjF9MIx1k3s69djF0JidESoyqdIi6+tUUI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d68500c-49f8-4f01-8774-f7c3164a0a58/0/FD0F38979237143A0D44165912E79E2FACD5A3BA.crl rsync://repo-rpki.idnic.net/repo/7d68500c-49f8-4f01-8774-f7c3164a0a58/0/FD0F38979237143A0D44165912E79E2FACD5A3BA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FD0F38979237143A0D44165912E79E2FACD5A3BA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 11:21:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:84:2b:f8:65:09:c0:26:e2:08:2f:50:59:1e:32:c1:96:3f:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FD0F38979237143A0D44165912E79E2FACD5A3BA Validity Not Before: Aug 22 09:47:44 2025 GMT Not After : Aug 25 11:21:44 2025 GMT Subject: CN=5EAA650136597E330052478D1E23785EED5B882E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:66:96:00:89:b9:39:6c:1d:ce:54:a9:39:bd: 22:f4:73:35:01:de:2d:a1:3b:15:aa:9b:81:1c:dc: e8:41:d3:bf:b3:fe:06:e9:cd:c0:ee:7e:a7:d6:29: c5:77:be:5f:07:51:58:af:fb:53:d1:d5:44:5c:27: ff:cd:89:11:29:0f:7f:5c:7b:b8:a8:5d:92:77:c5: 08:5b:7d:aa:ca:52:99:3c:80:37:33:b7:2f:28:3d: 1e:83:19:32:c8:99:49:60:ef:37:de:9e:cf:45:8e: 1e:f9:2a:1a:21:cc:70:3b:78:80:b2:bf:c7:9e:25: 92:60:52:30:5c:d9:8f:b7:57:b5:2e:85:4c:b8:8e: cb:f7:90:3e:65:64:eb:25:d6:ea:3e:4e:2d:25:91: 46:90:c6:be:63:62:8a:43:c5:b7:75:a5:e6:8f:23: ee:8c:5f:ea:ae:d3:b9:93:6b:4e:79:9d:d3:32:3d: 06:1c:56:b7:0a:13:69:68:34:ad:6e:2a:de:bb:fc: b6:3e:c7:b3:ac:2a:fd:57:76:c7:0d:d4:b9:91:38: b0:b1:a7:0c:6b:5e:ad:36:bf:a5:1a:91:a1:65:0b: e3:97:f0:81:78:5f:ef:12:b6:c8:a2:97:55:e2:58: 0d:bf:f4:08:05:2e:d1:4d:46:52:29:fc:fd:33:7c: 48:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:AA:65:01:36:59:7E:33:00:52:47:8D:1E:23:78:5E:ED:5B:88:2E X509v3 Authority Key Identifier: keyid:FD:0F:38:97:92:37:14:3A:0D:44:16:59:12:E7:9E:2F:AC:D5:A3:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d68500c-49f8-4f01-8774-f7c3164a0a58/0/FD0F38979237143A0D44165912E79E2FACD5A3BA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FD0F38979237143A0D44165912E79E2FACD5A3BA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d68500c-49f8-4f01-8774-f7c3164a0a58/0/FD0F38979237143A0D44165912E79E2FACD5A3BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:f2:70:b5:67:c6:18:c1:10:df:d1:b1:af:f6:70:af:37:04: b2:00:4d:59:dc:48:6c:9b:53:11:8f:92:61:ea:02:06:0c:16: 67:05:03:46:af:a0:38:1d:3b:64:77:43:b8:29:6c:06:18:a5: c0:ff:a9:22:25:ef:89:fd:b0:94:dc:b4:1c:26:be:02:ae:2f: 86:9e:2d:58:d9:f0:2b:ce:ff:5c:3a:36:22:43:06:7d:4d:2f: b8:cf:dc:15:56:83:70:bb:b9:af:be:7c:7a:61:97:63:3b:50: 7d:d6:3e:f7:a9:20:c1:66:52:56:13:fc:02:a9:a1:20:fd:5c: 4c:a3:1f:ba:6e:5a:ad:65:d2:86:0d:31:e3:d3:60:b2:bb:4b: df:7e:98:b3:bf:cb:ae:1d:e6:da:08:f5:11:2d:03:0f:2d:50: 29:a8:2c:20:12:0e:4c:de:be:ea:24:2f:a2:c1:39:da:01:93: 7a:05:0d:6f:7c:35:05:bc:d3:29:6c:0f:64:f9:51:5e:f1:e4: bd:ea:36:a7:f7:ab:cc:a0:39:5b:5c:4d:67:2b:11:cb:1b:7f: c9:e8:f7:f2:11:a4:8d:2d:ad:8b:d4:4c:d0:73:7a:83:9e:ce: b7:8f:27:9a:bc:a9:b5:e9:01:66:7e:3b:76:62:82:6a:b7:4c: 33:c3:8d:23 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgITPIQr+GUJwCbiCC9QWR4ywZY/fzANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyhGRDBGMzg5NzkyMzcxNDNBMEQ0NDE2NTkxMkU3OUUyRkFD RDVBM0JBMB4XDTI1MDgyMjA5NDc0NFoXDTI1MDgyNTExMjE0NFowMzExMC8GA1UE AxMoNUVBQTY1MDEzNjU5N0UzMzAwNTI0NzhEMUUyMzc4NUVFRDVCODgyRTCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALVmlgCJuTlsHc5UqTm9IvRzNQHe LaE7FaqbgRzc6EHTv7P+BunNwO5+p9YpxXe+XwdRWK/7U9HVRFwn/82JESkPf1x7 uKhdknfFCFt9qspSmTyANzO3Lyg9HoMZMsiZSWDvN96ez0WOHvkqGiHMcDt4gLK/ x54lkmBSMFzZj7dXtS6FTLiOy/eQPmVk6yXW6j5OLSWRRpDGvmNiikPFt3Wl5o8j 7oxf6q7TuZNrTnmd0zI9BhxWtwoTaWg0rW4q3rv8tj7Hs6wq/Vd2xw3UuZE4sLGn DGterTa/pRqRoWUL45fwgXhf7xK2yKKXVeJYDb/0CAUu0U1GUin8/TN8SCsCAwEA AaOCAjwwggI4MB0GA1UdDgQWBBReqmUBNll+MwBSR40eI3he7VuILjAfBgNVHSME GDAWgBT9DziXkjcUOg1EFlkS554vrNWjujAOBgNVHQ8BAf8EBAMCB4AwgYUGA1Ud HwR+MHwweqB4oHaGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdk Njg1MDBjLTQ5ZjgtNGYwMS04Nzc0LWY3YzMxNjRhMGE1OC8wL0ZEMEYzODk3OTIz NzE0M0EwRDQ0MTY1OTEyRTc5RTJGQUNENUEzQkEuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8v SUROSUMtSUQvMi9GRDBGMzg5NzkyMzcxNDNBMEQ0NDE2NTkxMkU3OUUyRkFDRDVB M0JBLmNlcjCBkwYIKwYBBQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzov L3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83ZDY4NTAwYy00OWY4LTRmMDEtODc3 NC1mN2MzMTY0YTBhNTgvMC9GRDBGMzg5NzkyMzcxNDNBMEQ0NDE2NTkxMkU3OUUy RkFDRDVBM0JBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEALfJwtWfGGMEQ39Gxr/ZwrzcEsgBNWdxIbJtT EY+SYeoCBgwWZwUDRq+gOB07ZHdDuClsBhilwP+pIiXvif2wlNy0HCa+Aq4vhp4t WNnwK87/XDo2IkMGfU0vuM/cFVaDcLu5r758emGXYztQfdY+96kgwWZSVhP8Aqmh IP1cTKMfum5arWXShg0x49NgsrtL336Ys7/Lrh3m2gj1ES0DDy1QKagsIBIOTN6+ 6iQvosE52gGTegUNb3w1BbzTKWwPZPlRXvHkveo2p/erzKA5W1xNZysRyxt/yej3 8hGkjS2ti9RM0HN6g57Ot48nmryptekBZn47dmKCardMM8ONIw== -----END CERTIFICATE-----Generated at Sat Aug 23 20:01:54 2025 by rpki-client