$ rpki-client -vvf repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.mft File: 1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.mft (raw, json) Hash identifier: 5pVy9lvXz2zJW1OxHYcLrLsuZQKnG/PEbq405z9w+FE= Subject key identifier: 57:42:0C:4D:1F:B4:B3:84:91:9F:D6:81:4A:C7:B7:80:47:01:6D:9F Authority key identifier: 1F:CD:47:FB:4B:D7:29:E2:2E:4F:EE:FC:E5:B6:1B:4E:1C:7F:E9:46 Certificate issuer: /CN=1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946 Certificate serial: 37C14BB32E680B427E52E485B1D4A68E9591B6F1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.mft Manifest number: 04C8 Signing time: Thu 21 Aug 2025 13:50:40 +0000 Manifest this update: Thu 21 Aug 2025 13:45:40 +0000 Manifest next update: Sun 24 Aug 2025 18:00:40 +0000 Files and hashes: 1: 3131382e39312e3132382e302f32312d3234203d3e203234313935.roa (hash: yiPIGsDISayK97qWqm2UWsTxEHdxKETOsL8gSiwFMjA=) 2: 1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.crl (hash: pZlirLP2vybHU0vvaUYkG9dXLH0eEwSxZnZvUy2Zod8=) 3: 323430313a343230303a3a2f33322d3438203d3e203234313935.roa (hash: xPjBnSpHmpcu0qAxiY2wE80xegcTsRNtPEAJ6PwASdw=) 4: 3230322e36372e382e302f32312d3234203d3e203234313935.roa (hash: B+C/2EohdvfSLSdEWCv4uFVDG8om8Pw0dnsHmi+NJ9Y=) 5: 3131382e39312e3134302e302f32322d3234203d3e203633353032.roa (hash: XlrHKxvILobzAM8qX1Td9F4llGO1s7dDnxuDShAIB6Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.crl rsync://repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 18:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:c1:4b:b3:2e:68:0b:42:7e:52:e4:85:b1:d4:a6:8e:95:91:b6:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946 Validity Not Before: Aug 21 13:45:40 2025 GMT Not After : Aug 24 18:00:40 2025 GMT Subject: CN=57420C4D1FB4B384919FD6814AC7B78047016D9F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:b5:7d:f5:fc:df:d4:95:c0:19:fa:f5:47:3f: 18:3e:c0:1c:19:9b:a8:e8:a5:f1:5b:10:16:c9:07: 62:14:61:ae:6b:62:17:4d:ed:b2:af:55:6f:ac:ce: 5a:8e:3b:24:c3:7b:f8:2b:ea:f2:b1:62:7e:70:6c: e5:f8:9a:83:78:29:fc:85:77:66:7b:c3:eb:08:3d: ab:c6:fb:a9:7f:23:89:e1:4c:6c:d9:75:99:a2:32: ee:09:3b:76:02:e8:43:41:f9:43:17:2d:13:88:0f: 5a:0f:74:88:44:2c:72:ce:64:df:0e:3f:3a:36:fc: bb:b4:77:bd:74:96:ec:a3:d2:3c:af:4a:0c:d1:e4: 0e:98:5d:f3:3d:37:42:36:3e:24:e0:47:7b:25:66: 43:f1:f5:aa:fe:4b:6e:4d:d1:8a:d5:15:71:e7:82: 21:65:ca:34:c8:5a:43:ca:70:e4:5c:0d:d5:70:f9: 93:7e:e3:d1:c5:db:0e:0f:1f:8f:52:8d:e9:8b:fd: 9e:03:cf:39:c8:03:73:69:29:b8:14:f8:93:41:0c: a1:62:74:c3:81:fd:0a:a4:49:37:8b:58:ef:14:2d: 68:8f:51:b2:3c:8c:65:cd:d0:52:2c:76:54:f5:9f: ec:3c:9f:7d:b8:09:ed:9e:c4:7a:76:51:d2:b5:cc: 10:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:42:0C:4D:1F:B4:B3:84:91:9F:D6:81:4A:C7:B7:80:47:01:6D:9F X509v3 Authority Key Identifier: keyid:1F:CD:47:FB:4B:D7:29:E2:2E:4F:EE:FC:E5:B6:1B:4E:1C:7F:E9:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:43:59:3d:a4:a1:11:1e:14:c5:03:d7:81:a3:47:08:5f:c2: 35:0c:6d:4b:dc:49:c3:b0:6c:94:03:68:14:03:30:1a:20:da: d1:cd:79:80:da:31:7c:05:2d:ba:35:e4:3c:a0:0e:da:64:8a: 2b:3e:da:19:09:de:ed:e9:42:9e:79:63:a1:77:41:40:8d:6c: 53:fa:a2:e0:07:11:bb:85:5d:09:80:15:39:02:66:3d:ff:76: 2b:d0:d9:d3:df:ee:87:d9:e4:ea:cf:d4:4b:41:92:b0:e3:38: ac:59:f3:31:b8:cd:b3:9c:83:c9:00:f8:c4:9c:82:7a:02:65: a6:d7:3d:3d:9d:5c:42:b9:b6:5e:69:4f:65:73:ed:d8:a8:0f: d5:05:8c:2c:7a:fe:70:0e:94:1a:55:f9:6b:ee:86:f3:3b:d8: c6:56:05:a0:8a:9b:d5:70:2a:e4:f4:b6:d9:aa:06:6e:3b:60: fe:c7:2c:19:ff:39:4d:50:f6:ba:1f:4c:fe:0e:94:37:d2:eb: 58:82:b9:2f:8f:d0:cb:08:32:c3:ea:a1:cd:cc:10:a8:33:cc: 1b:12:1a:b2:68:c8:1d:f4:2b:6a:4c:ec:02:94:8f:c3:34:48: 59:08:79:b4:38:58:d5:22:61:64:09:5a:1d:ee:ff:fd:42:7a: d4:50:d4:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN8FLsy5oC0J+UuSFsdSmjpWRtvEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZDRDQ3RkI0QkQ3MjlFMjJFNEZFRUZDRTVCNjFCNEUx QzdGRTk0NjAeFw0yNTA4MjExMzQ1NDBaFw0yNTA4MjQxODAwNDBaMDMxMTAvBgNV BAMTKDU3NDIwQzREMUZCNEIzODQ5MTlGRDY4MTRBQzdCNzgwNDcwMTZEOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDutX31/N/UlcAZ+vVHPxg+wBwZ m6jopfFbEBbJB2IUYa5rYhdN7bKvVW+szlqOOyTDe/gr6vKxYn5wbOX4moN4KfyF d2Z7w+sIPavG+6l/I4nhTGzZdZmiMu4JO3YC6ENB+UMXLROID1oPdIhELHLOZN8O Pzo2/Lu0d710luyj0jyvSgzR5A6YXfM9N0I2PiTgR3slZkPx9ar+S25N0YrVFXHn giFlyjTIWkPKcORcDdVw+ZN+49HF2w4PH49SjemL/Z4DzznIA3NpKbgU+JNBDKFi dMOB/QqkSTeLWO8ULWiPUbI8jGXN0FIsdlT1n+w8n324Ce2exHp2UdK1zBDZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUV0IMTR+0s4SRn9aBSse3gEcBbZ8wHwYDVR0j BBgwFoAUH81H+0vXKeIuT+785bYbThx/6UYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NzkyYTRjZC1kYmFjLTQzYWMtODA2MC0yZThkNDJlYWU2NTUvMC8xRkNENDdGQjRC RDcyOUUyMkU0RkVFRkNFNUI2MUI0RTFDN0ZFOTQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUZDRDQ3RkI0QkQ3MjlFMjJFNEZFRUZDRTVCNjFCNEUxQzdG RTk0Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODc5MmE0Y2QtZGJhYy00M2FjLTgw NjAtMmU4ZDQyZWFlNjU1LzAvMUZDRDQ3RkI0QkQ3MjlFMjJFNEZFRUZDRTVCNjFC NEUxQzdGRTk0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHRDWT2koREeFMUD14GjRwhfwjUMbUvcScOw bJQDaBQDMBog2tHNeYDaMXwFLbo15DygDtpkiis+2hkJ3u3pQp55Y6F3QUCNbFP6 ouAHEbuFXQmAFTkCZj3/divQ2dPf7ofZ5OrP1EtBkrDjOKxZ8zG4zbOcg8kA+MSc gnoCZabXPT2dXEK5tl5pT2Vz7dioD9UFjCx6/nAOlBpV+WvuhvM72MZWBaCKm9Vw KuT0ttmqBm47YP7HLBn/OU1Q9rofTP4OlDfS61iCuS+P0MsIMsPqoc3MEKgzzBsS GrJoyB30K2pM7AKUj8M0SFkIebQ4WNUiYWQJWh3u//1CetRQ1IM= -----END CERTIFICATE-----Generated at Sat Aug 23 14:02:04 2025 by rpki-client