$ rpki-client -vvf repo-rpki.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.mft File: FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.mft (raw, json) Hash identifier: rFduF32j3iGXgHHTFX/ByRtBPQGSs0j1rR5S9l9XstE= Subject key identifier: DF:4F:55:C9:19:0A:53:41:A3:04:81:D0:6C:3F:87:09:D7:78:26:39 Authority key identifier: FD:7C:5A:44:A3:CA:AF:7C:D1:40:CF:D1:C6:16:22:BA:5E:A2:E6:23 Certificate issuer: /CN=FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623 Certificate serial: 60243A54AC319AF5CCE68A5871BD621411A31BC3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.mft Manifest number: 0100 Signing time: Sun 19 Oct 2025 14:32:16 +0000 Manifest this update: Sun 19 Oct 2025 14:27:16 +0000 Manifest next update: Wed 22 Oct 2025 23:10:16 +0000 Files and hashes: 1: 3135372e32302e3132362e302f32332d3234203d3e20313532343130.roa (hash: mIAtzNrfjeKiFzHKpCt4+yI3FhKtEfckYghfutbPb44=) 2: FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.crl (hash: DpN6MqMB+pFQSsZM/ytwQJGuY0aMAFJv4H5Dggb2cHM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.crl rsync://repo-rpki.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 23:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:24:3a:54:ac:31:9a:f5:cc:e6:8a:58:71:bd:62:14:11:a3:1b:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623 Validity Not Before: Oct 19 14:27:16 2025 GMT Not After : Oct 22 23:10:16 2025 GMT Subject: CN=DF4F55C9190A5341A30481D06C3F8709D7782639 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:45:8f:12:7c:59:17:d0:c8:ce:19:d1:a6:f8: 98:35:f6:e1:34:73:c5:ff:6b:14:ed:86:e5:53:dd: a0:07:8c:eb:50:19:c6:1f:cb:db:3a:da:2e:19:ac: 62:41:53:aa:dc:fc:d3:0e:9d:6c:fa:4a:9d:05:e2: 18:fb:93:a4:69:a0:96:7f:4c:40:63:e1:61:26:34: 4e:1a:8b:54:1d:5b:7a:20:a6:d8:cd:7b:35:31:ee: 5e:0c:0a:b8:97:b2:a0:d9:c5:54:ac:c0:56:67:d1: bf:74:f0:19:12:ff:a2:46:d7:b9:a3:5d:87:e7:b5: d0:fb:38:ab:41:27:e8:b6:74:0d:99:5d:de:92:d0: c0:41:a8:d2:89:22:b5:c5:48:66:b2:cd:bc:dd:23: 16:c9:b1:f5:da:e6:0a:73:9a:77:53:02:ad:58:24: ce:66:c9:5d:d1:79:6f:8f:b2:23:04:fd:27:b8:e5: 47:3f:f6:72:92:ba:b5:6c:c3:ef:b7:a4:f8:dc:9a: 24:c0:32:74:0a:54:e8:28:01:19:a7:01:4b:79:58: 0c:77:2e:2a:9b:5c:c4:42:fc:78:a4:8c:3e:fe:7c: 5d:34:53:e6:97:03:49:bd:91:7a:99:8c:fc:00:96: 51:69:22:09:4f:2f:bb:f2:4f:74:3f:41:7f:cf:50: 77:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:4F:55:C9:19:0A:53:41:A3:04:81:D0:6C:3F:87:09:D7:78:26:39 X509v3 Authority Key Identifier: keyid:FD:7C:5A:44:A3:CA:AF:7C:D1:40:CF:D1:C6:16:22:BA:5E:A2:E6:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:1b:74:43:e9:cd:2e:4e:3a:be:80:a5:5d:ec:40:b5:8c:b0: 39:60:e4:0c:9b:33:0f:76:91:49:21:7d:bc:32:a5:72:97:4b: ac:f3:e2:bf:f7:d2:af:f3:85:f9:b1:63:a6:fe:ce:85:52:62: b7:2d:6d:9e:72:9e:26:f3:a0:4d:48:b6:7e:e8:06:5f:11:6d: b8:0c:17:ff:d1:85:9f:8c:f1:23:95:eb:4c:04:dc:80:fc:67: 4e:f2:b4:b3:7d:f6:48:c3:6f:d9:f5:80:b0:b8:82:72:36:a3: 34:a2:b9:39:b2:95:c7:9e:c1:12:cd:af:3f:02:e3:80:8a:d7: 6e:07:6e:06:99:f0:36:48:a9:f3:c4:9a:52:80:d2:bf:34:8e: c9:3c:16:31:ea:60:62:f7:d6:7d:18:fb:8c:ad:12:54:8d:6e: 27:7e:f6:f2:2d:ab:31:03:7e:bd:1b:cb:4c:d9:68:05:2a:c8: 14:6f:11:9d:bf:d5:d2:a9:63:7f:cf:3c:6b:fb:16:da:fa:0a: f4:ff:42:22:60:f5:bd:ac:2c:7f:bc:7d:5b:f1:fa:13:88:01: 1e:3c:5f:64:17:f4:81:1f:d3:1a:c6:ff:2b:73:c3:b9:66:20: ba:a9:e5:b4:5c:f0:9a:29:a6:ae:f1:03:66:88:9e:41:d5:08: dd:6e:10:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYCQ6VKwxmvXM5opYcb1iFBGjG8MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkQ3QzVBNDRBM0NBQUY3Q0QxNDBDRkQxQzYxNjIyQkE1 RUEyRTYyMzAeFw0yNTEwMTkxNDI3MTZaFw0yNTEwMjIyMzEwMTZaMDMxMTAvBgNV BAMTKERGNEY1NUM5MTkwQTUzNDFBMzA0ODFEMDZDM0Y4NzA5RDc3ODI2MzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnRY8SfFkX0MjOGdGm+Jg19uE0 c8X/axTthuVT3aAHjOtQGcYfy9s62i4ZrGJBU6rc/NMOnWz6Sp0F4hj7k6RpoJZ/ TEBj4WEmNE4ai1QdW3ogptjNezUx7l4MCriXsqDZxVSswFZn0b908BkS/6JG17mj XYfntdD7OKtBJ+i2dA2ZXd6S0MBBqNKJIrXFSGayzbzdIxbJsfXa5gpzmndTAq1Y JM5myV3ReW+PsiME/Se45Uc/9nKSurVsw++3pPjcmiTAMnQKVOgoARmnAUt5WAx3 LiqbXMRC/HikjD7+fF00U+aXA0m9kXqZjPwAllFpIglPL7vyT3Q/QX/PUHdtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU309VyRkKU0GjBIHQbD+HCdd4JjkwHwYDVR0j BBgwFoAU/XxaRKPKr3zRQM/RxhYiul6i5iMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MGY3OGJkNC1jMTliLTRkNDAtYWE1NC1lZDhkN2JjNzcyY2EvMC9GRDdDNUE0NEEz Q0FBRjdDRDE0MENGRDFDNjE2MjJCQTVFQTJFNjIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkQ3QzVBNDRBM0NBQUY3Q0QxNDBDRkQxQzYxNjIyQkE1RUEy RTYyMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTBmNzhiZDQtYzE5Yi00ZDQwLWFh NTQtZWQ4ZDdiYzc3MmNhLzAvRkQ3QzVBNDRBM0NBQUY3Q0QxNDBDRkQxQzYxNjIy QkE1RUEyRTYyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADwbdEPpzS5OOr6ApV3sQLWMsDlg5AybMw92 kUkhfbwypXKXS6zz4r/30q/zhfmxY6b+zoVSYrctbZ5ynibzoE1Itn7oBl8RbbgM F//RhZ+M8SOV60wE3ID8Z07ytLN99kjDb9n1gLC4gnI2ozSiuTmylceewRLNrz8C 44CK124HbgaZ8DZIqfPEmlKA0r80jsk8FjHqYGL31n0Y+4ytElSNbid+9vItqzED fr0by0zZaAUqyBRvEZ2/1dKpY3/PPGv7Ftr6CvT/QiJg9b2sLH+8fVvx+hOIAR48 X2QX9IEf0xrG/ytzw7lmILqp5bRc8Joppq7xA2aInkHVCN1uEC8= -----END CERTIFICATE-----Generated at Mon Oct 20 13:45:19 2025 by rpki-client