$ rpki-client -vvf repo-rpki.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.mft File: FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.mft (raw, json) Hash identifier: PLLnn3ULQqmVFz4CHLOkfpsMR28mRTtObUfXwGb5M0o= Subject key identifier: 82:2D:E9:F2:A7:0A:02:3F:F3:B7:8A:69:48:99:59:85:2E:D3:3A:37 Authority key identifier: FD:7C:5A:44:A3:CA:AF:7C:D1:40:CF:D1:C6:16:22:BA:5E:A2:E6:23 Certificate issuer: /CN=FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623 Certificate serial: 7B0F02713D76A17FE4306487CEAE458A4B34ADDB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.mft Manifest number: E7 Signing time: Sat 23 Aug 2025 13:12:17 +0000 Manifest this update: Sat 23 Aug 2025 13:07:17 +0000 Manifest next update: Tue 26 Aug 2025 16:58:17 +0000 Files and hashes: 1: FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.crl (hash: k0l2EQeQ5Vhg/AGYnGkVJXiRDVmBySyiFy11fUIZtZs=) 2: 3135372e32302e3132362e302f32332d3234203d3e20313532343130.roa (hash: mIAtzNrfjeKiFzHKpCt4+yI3FhKtEfckYghfutbPb44=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.crl rsync://repo-rpki.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:24:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:0f:02:71:3d:76:a1:7f:e4:30:64:87:ce:ae:45:8a:4b:34:ad:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623 Validity Not Before: Aug 23 13:07:17 2025 GMT Not After : Aug 26 16:58:17 2025 GMT Subject: CN=822DE9F2A70A023FF3B78A69489959852ED33A37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:09:27:c5:f2:9f:b1:52:cd:73:cd:c4:b9:a0: 98:b9:97:c4:8c:f0:52:aa:07:43:d2:0c:7c:35:85: f0:1d:6c:01:ec:80:2f:ec:3b:03:10:3b:9d:fd:20: 8e:35:4b:59:f7:10:11:fd:ae:3e:d0:9c:89:a5:32: d1:90:22:02:9b:dd:f7:d2:1c:0e:20:58:2d:de:a9: 4a:67:e2:a5:9f:e4:e2:be:17:c1:1a:ef:1d:c0:2a: 2b:70:a8:32:89:3e:36:74:ea:50:ee:2a:4c:95:84: d8:3f:25:8a:ef:32:e2:ee:f1:90:ba:09:21:cb:48: 0d:1f:8a:3e:18:bd:80:af:65:c2:a6:85:d8:f1:27: e0:d8:5b:a0:9f:4e:2e:a5:9f:93:06:ae:5e:44:51: 46:63:70:83:bb:ef:81:d7:be:00:d7:bd:80:9c:54: 3b:67:4d:0b:0b:53:cb:b3:4a:ac:81:7e:5b:04:af: 81:9e:40:b1:44:dd:d2:3b:3e:54:89:2b:9e:28:c6: 85:15:46:46:56:71:4e:81:49:a1:6f:c3:f1:dc:36: 83:42:bc:07:e7:84:47:75:dd:59:90:de:e7:24:31: 80:f2:6c:3f:06:00:73:b8:64:60:da:b0:4a:57:06: 73:31:0e:7e:65:e4:72:c6:1f:5f:f8:cf:18:2e:15: a6:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:2D:E9:F2:A7:0A:02:3F:F3:B7:8A:69:48:99:59:85:2E:D3:3A:37 X509v3 Authority Key Identifier: keyid:FD:7C:5A:44:A3:CA:AF:7C:D1:40:CF:D1:C6:16:22:BA:5E:A2:E6:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:c7:bb:d2:87:6e:13:97:be:7f:b1:84:9b:ea:9e:05:62:3e: 4b:4a:7d:bc:91:a4:93:83:f4:5a:74:3a:22:13:a5:04:fb:02: 9f:b2:b0:ca:8f:5d:f7:12:04:80:6b:03:25:ff:d7:02:01:29: 2e:37:65:31:a5:b6:9e:d8:5c:ea:3a:bd:83:70:3c:7a:fd:ef: 95:70:03:ac:5d:da:4b:31:16:a2:6e:97:8d:c2:f9:d0:f0:29: 86:da:d0:92:da:9d:f1:26:e7:b5:cc:dc:34:48:cd:7c:0d:92: f7:16:74:a0:04:b8:53:2b:43:85:1b:39:88:37:92:b6:67:a6: 22:b6:b3:b6:cf:e4:4a:4d:8e:07:71:0d:cd:e1:bd:cc:eb:74: b1:0c:84:95:5e:7b:07:5b:7f:13:91:79:71:18:a9:0f:71:63: 6f:84:4f:fe:89:5e:4c:bc:88:2f:89:01:9e:6e:d6:4d:b2:7e: f8:70:5d:79:0d:d4:af:c1:f4:9d:25:4f:a9:bd:aa:ba:42:41: c0:cb:1a:01:22:61:21:9d:de:7d:be:68:f0:5a:c8:65:ee:e4: 5c:36:b6:c9:e9:06:89:1d:70:e5:cb:e6:86:e3:49:5d:9e:d7: 12:65:55:ca:ac:66:66:28:6e:18:c4:53:84:ef:e5:7a:56:7b: 3e:7c:3f:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUew8CcT12oX/kMGSHzq5Fiks0rdswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkQ3QzVBNDRBM0NBQUY3Q0QxNDBDRkQxQzYxNjIyQkE1 RUEyRTYyMzAeFw0yNTA4MjMxMzA3MTdaFw0yNTA4MjYxNjU4MTdaMDMxMTAvBgNV BAMTKDgyMkRFOUYyQTcwQTAyM0ZGM0I3OEE2OTQ4OTk1OTg1MkVEMzNBMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpCSfF8p+xUs1zzcS5oJi5l8SM 8FKqB0PSDHw1hfAdbAHsgC/sOwMQO539II41S1n3EBH9rj7QnImlMtGQIgKb3ffS HA4gWC3eqUpn4qWf5OK+F8Ea7x3AKitwqDKJPjZ06lDuKkyVhNg/JYrvMuLu8ZC6 CSHLSA0fij4YvYCvZcKmhdjxJ+DYW6CfTi6ln5MGrl5EUUZjcIO774HXvgDXvYCc VDtnTQsLU8uzSqyBflsEr4GeQLFE3dI7PlSJK54oxoUVRkZWcU6BSaFvw/HcNoNC vAfnhEd13VmQ3uckMYDybD8GAHO4ZGDasEpXBnMxDn5l5HLGH1/4zxguFaaRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgi3p8qcKAj/zt4ppSJlZhS7TOjcwHwYDVR0j BBgwFoAU/XxaRKPKr3zRQM/RxhYiul6i5iMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MGY3OGJkNC1jMTliLTRkNDAtYWE1NC1lZDhkN2JjNzcyY2EvMC9GRDdDNUE0NEEz Q0FBRjdDRDE0MENGRDFDNjE2MjJCQTVFQTJFNjIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkQ3QzVBNDRBM0NBQUY3Q0QxNDBDRkQxQzYxNjIyQkE1RUEy RTYyMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTBmNzhiZDQtYzE5Yi00ZDQwLWFh NTQtZWQ4ZDdiYzc3MmNhLzAvRkQ3QzVBNDRBM0NBQUY3Q0QxNDBDRkQxQzYxNjIy QkE1RUEyRTYyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGnHu9KHbhOXvn+xhJvqngViPktKfbyRpJOD 9Fp0OiITpQT7Ap+ysMqPXfcSBIBrAyX/1wIBKS43ZTGltp7YXOo6vYNwPHr975Vw A6xd2ksxFqJul43C+dDwKYba0JLanfEm57XM3DRIzXwNkvcWdKAEuFMrQ4UbOYg3 krZnpiK2s7bP5EpNjgdxDc3hvczrdLEMhJVeewdbfxOReXEYqQ9xY2+ET/6JXky8 iC+JAZ5u1k2yfvhwXXkN1K/B9J0lT6m9qrpCQcDLGgEiYSGd3n2+aPBayGXu5Fw2 tsnpBokdcOXL5objSV2e1xJlVcqsZmYobhjEU4Tv5XpWez58P3M= -----END CERTIFICATE-----Generated at Sat Aug 23 19:45:53 2025 by rpki-client