$ rpki-client -vvf repo-rpki.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.mft File: FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.mft (raw, json) Hash identifier: D/mhpJUAZ6gVMp0zJIAnAUtQOAqDtWM4gib/kipYFhM= Subject key identifier: 2E:01:A9:F4:53:AB:D8:97:36:B2:27:9F:17:B2:1F:CE:3A:D2:38:B1 Authority key identifier: FD:7C:5A:44:A3:CA:AF:7C:D1:40:CF:D1:C6:16:22:BA:5E:A2:E6:23 Certificate issuer: /CN=FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623 Certificate serial: 1578065E4577E71D7DFF85CBDB9963746044E383 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.mft Manifest number: CE Signing time: Sat 28 Jun 2025 05:42:12 +0000 Manifest this update: Sat 28 Jun 2025 05:37:12 +0000 Manifest next update: Tue 01 Jul 2025 14:25:12 +0000 Files and hashes: 1: 3135372e32302e3132362e302f32332d3234203d3e20313532343130.roa (hash: mIAtzNrfjeKiFzHKpCt4+yI3FhKtEfckYghfutbPb44=) 2: FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.crl (hash: M8C+lM24pHSmoLKi8VQ4GzqM3tYLrmpvOf4gY5awgNg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.crl rsync://repo-rpki.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 14:25:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:78:06:5e:45:77:e7:1d:7d:ff:85:cb:db:99:63:74:60:44:e3:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623 Validity Not Before: Jun 28 05:37:12 2025 GMT Not After : Jul 1 14:25:12 2025 GMT Subject: CN=2E01A9F453ABD89736B2279F17B21FCE3AD238B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:16:60:ca:39:31:32:c7:92:1f:67:1b:bd:b2: a5:90:24:e9:b4:5e:46:a7:b5:bf:45:c9:21:d8:30: 99:47:c4:22:a6:86:05:e5:52:53:1d:c0:f1:a0:7c: 27:6c:62:ac:de:11:9d:cb:f8:ae:04:f0:af:de:29: 38:90:00:b5:2c:c0:0a:16:86:37:6c:85:75:e6:09: 98:7f:62:61:f0:26:1a:85:46:cf:51:72:01:9a:82: bb:6e:0d:f2:e7:47:d7:ae:e2:2b:c5:7f:dd:90:db: 79:cb:fd:b0:c1:71:38:80:03:fa:b2:b7:c3:7f:fa: c6:82:2a:f3:82:27:94:1c:4c:a2:cd:43:b0:18:66: ee:8d:16:8a:f2:01:61:b3:5b:cf:46:c9:28:89:a1: ce:92:a6:0d:61:f0:29:ce:f3:c4:9d:3f:ba:32:0c: 47:79:51:60:d0:ed:ac:44:74:72:49:e2:7f:1f:9f: 34:4b:ba:cb:4b:8f:28:92:26:64:fc:4e:e5:52:77: 77:9e:02:e9:d8:dd:93:b0:88:50:75:1e:62:b6:ed: 77:6b:d3:97:e1:35:54:eb:a9:ab:55:40:22:9f:46: 4b:21:40:76:07:53:e5:af:5f:83:94:26:2b:32:7c: dc:b2:ac:d4:92:42:45:b3:85:9d:62:99:a8:7f:27: f2:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:01:A9:F4:53:AB:D8:97:36:B2:27:9F:17:B2:1F:CE:3A:D2:38:B1 X509v3 Authority Key Identifier: keyid:FD:7C:5A:44:A3:CA:AF:7C:D1:40:CF:D1:C6:16:22:BA:5E:A2:E6:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:f4:95:90:ae:52:a6:8e:09:4a:d8:3c:62:3e:d1:c6:2e:c8: 0f:c2:b2:52:de:e2:df:34:3e:65:aa:50:8f:d0:01:10:29:1c: 46:d5:67:f1:b8:36:45:3d:0e:9a:f5:4d:c4:c9:eb:9e:a9:8e: 71:7e:1d:b0:5b:31:d9:a6:86:35:48:f0:7b:44:48:b9:8f:93: 3e:18:7d:3b:b5:69:ee:75:d7:0d:b7:0d:88:09:be:59:36:15: 1c:e2:ba:07:5f:23:0c:b3:4a:4c:0e:d4:aa:fd:ab:56:05:b7: 24:28:b0:37:b8:33:ce:f9:c1:51:40:20:c3:16:e9:f2:01:3b: 71:01:7a:26:11:4c:ee:9a:87:05:67:05:86:4e:89:32:74:aa: ce:0e:12:6a:c7:7a:30:3f:81:2e:d6:b3:b3:91:12:4d:cc:d3: 57:9f:44:2a:f5:0f:51:a2:bb:cd:19:35:c7:24:f3:92:be:5f: d7:a0:c5:d4:b5:a1:c5:c0:aa:8c:eb:ef:6c:ab:94:5a:66:1c: f1:69:b9:15:76:e8:a9:28:96:df:f3:3e:43:16:d9:db:ea:e9: 7c:0d:fb:8f:bf:73:51:08:07:1f:4a:5f:28:19:c9:50:1e:bc: 52:c0:46:e4:c4:41:01:ec:a1:63:e2:9c:56:97:50:78:fc:03: fe:e1:39:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFXgGXkV35x19/4XL25ljdGBE44MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkQ3QzVBNDRBM0NBQUY3Q0QxNDBDRkQxQzYxNjIyQkE1 RUEyRTYyMzAeFw0yNTA2MjgwNTM3MTJaFw0yNTA3MDExNDI1MTJaMDMxMTAvBgNV BAMTKDJFMDFBOUY0NTNBQkQ4OTczNkIyMjc5RjE3QjIxRkNFM0FEMjM4QjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEFmDKOTEyx5IfZxu9sqWQJOm0 Xkantb9FySHYMJlHxCKmhgXlUlMdwPGgfCdsYqzeEZ3L+K4E8K/eKTiQALUswAoW hjdshXXmCZh/YmHwJhqFRs9RcgGagrtuDfLnR9eu4ivFf92Q23nL/bDBcTiAA/qy t8N/+saCKvOCJ5QcTKLNQ7AYZu6NForyAWGzW89GySiJoc6Spg1h8CnO88SdP7oy DEd5UWDQ7axEdHJJ4n8fnzRLustLjyiSJmT8TuVSd3eeAunY3ZOwiFB1HmK27Xdr 05fhNVTrqatVQCKfRkshQHYHU+WvX4OUJisyfNyyrNSSQkWzhZ1imah/J/JJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULgGp9FOr2Jc2siefF7IfzjrSOLEwHwYDVR0j BBgwFoAU/XxaRKPKr3zRQM/RxhYiul6i5iMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MGY3OGJkNC1jMTliLTRkNDAtYWE1NC1lZDhkN2JjNzcyY2EvMC9GRDdDNUE0NEEz Q0FBRjdDRDE0MENGRDFDNjE2MjJCQTVFQTJFNjIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkQ3QzVBNDRBM0NBQUY3Q0QxNDBDRkQxQzYxNjIyQkE1RUEy RTYyMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTBmNzhiZDQtYzE5Yi00ZDQwLWFh NTQtZWQ4ZDdiYzc3MmNhLzAvRkQ3QzVBNDRBM0NBQUY3Q0QxNDBDRkQxQzYxNjIy QkE1RUEyRTYyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFH0lZCuUqaOCUrYPGI+0cYuyA/CslLe4t80 PmWqUI/QARApHEbVZ/G4NkU9Dpr1TcTJ656pjnF+HbBbMdmmhjVI8HtESLmPkz4Y fTu1ae511w23DYgJvlk2FRziugdfIwyzSkwO1Kr9q1YFtyQosDe4M875wVFAIMMW 6fIBO3EBeiYRTO6ahwVnBYZOiTJ0qs4OEmrHejA/gS7Ws7OREk3M01efRCr1D1Gi u80ZNcck85K+X9egxdS1ocXAqozr72yrlFpmHPFpuRV26Kkolt/zPkMW2dvq6XwN +4+/c1EIBx9KXygZyVAevFLARuTEQQHsoWPinFaXUHj8A/7hOSs= -----END CERTIFICATE-----Generated at Mon Jun 30 10:25:42 2025 by rpki-client