$ rpki-client -vvf repo-rpki.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.mft File: FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.mft (raw, json) Hash identifier: zthFNJ7xkQbbNUbA3dPwzhVJfe/w9vJaA95+Y5VFA6U= Subject key identifier: 20:D2:CB:D7:AE:1B:51:81:CD:59:CB:E8:EC:D0:85:F7:4A:19:BE:95 Authority key identifier: FE:79:E5:6C:BE:99:C7:73:CD:72:1D:F7:AB:0E:5C:A2:80:9D:07:39 Certificate issuer: /CN=FE79E56CBE99C773CD721DF7AB0E5CA2809D0739 Certificate serial: 4FB2A8E66C59107918B0EEE1C4F231D7AF432299 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.mft Manifest number: E3 Signing time: Sat 23 Aug 2025 10:11:16 +0000 Manifest this update: Sat 23 Aug 2025 10:06:16 +0000 Manifest next update: Tue 26 Aug 2025 15:51:16 +0000 Files and hashes: 1: FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.crl (hash: 3FDcA2fxjxj499Pr9BpSGTjpqoo8OSvMvkPZgJ6z69Q=) 2: 3135372e32302e3232322e302f32342d3234203d3e20313532343337.roa (hash: xA0yIhK/pel57ulFN3HOQ4z99q0P1jOo4pSKaz4ovzA=) 3: 3135372e32302e3232332e302f32342d3234203d3e20313532343337.roa (hash: wm/OwjMJ3Mw2kK4LX3m4F0/jsfG1NixZfT/MRVx2gUc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.crl rsync://repo-rpki.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:24:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:b2:a8:e6:6c:59:10:79:18:b0:ee:e1:c4:f2:31:d7:af:43:22:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FE79E56CBE99C773CD721DF7AB0E5CA2809D0739 Validity Not Before: Aug 23 10:06:16 2025 GMT Not After : Aug 26 15:51:16 2025 GMT Subject: CN=20D2CBD7AE1B5181CD59CBE8ECD085F74A19BE95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:95:0f:ae:c6:f3:26:11:8a:66:9d:b7:62:58: 8f:f5:fc:0c:99:d0:69:c2:15:22:0e:25:31:c4:88: 3a:39:e4:45:35:18:8e:3a:97:18:9d:0d:67:72:b5: 4b:7c:8c:65:a0:d7:5b:e4:c4:42:49:6e:c3:6d:6d: ad:36:ff:5d:79:11:e4:03:75:e4:a2:cb:91:8f:3e: 44:6e:80:63:75:c7:5b:66:79:a1:66:64:1a:27:07: fb:cd:d2:3f:9b:b7:1e:1b:ce:fd:27:f4:a6:e9:d6: 7e:51:c4:81:cb:2d:c9:b7:91:dc:37:1d:f4:9e:79: f9:75:f0:58:95:16:ff:c2:27:10:0a:06:95:47:b6: 37:3c:cf:22:36:96:fa:2a:5f:6b:63:1c:a5:5a:80: 58:3d:67:bc:50:93:98:39:58:86:31:55:fb:57:af: 28:92:e0:4e:e3:bc:56:d6:93:30:eb:f7:f0:0c:6a: 72:10:2b:79:af:25:c0:9c:5e:a3:86:56:53:ed:84: d9:63:08:5e:64:7c:08:9c:00:e7:bd:ab:f6:6a:8f: b0:5b:4f:4b:ec:2b:4b:2d:11:6e:cd:18:a6:3d:f7: e9:b9:eb:9c:56:d8:6d:9b:25:a2:54:90:d1:08:ba: d7:71:84:14:cb:fc:b5:7c:3c:66:c4:df:eb:8a:3a: b4:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:D2:CB:D7:AE:1B:51:81:CD:59:CB:E8:EC:D0:85:F7:4A:19:BE:95 X509v3 Authority Key Identifier: keyid:FE:79:E5:6C:BE:99:C7:73:CD:72:1D:F7:AB:0E:5C:A2:80:9D:07:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:a4:a0:88:e0:2e:ac:2c:c3:d7:2d:fe:61:03:92:c4:54:8e: 29:1b:25:87:eb:8e:99:04:0e:1b:06:46:a0:d8:4a:98:f6:b8: f5:b6:8d:a6:e3:5d:4e:e6:ad:55:66:f2:ed:68:f4:98:25:46: 96:41:76:07:0b:0f:4a:2e:a8:3c:e7:cf:8d:c4:36:0e:06:44: 7d:19:a1:48:fa:21:6e:b1:6d:43:09:a2:fe:e4:a1:d3:37:35: 28:58:d5:3c:3a:02:a8:c6:bb:c8:d5:19:25:81:82:ff:d3:c2: fa:3b:71:73:0c:21:b3:9d:50:d0:04:7e:b9:48:0e:13:f8:62: 03:68:36:cd:4b:23:09:45:81:9b:19:aa:93:5b:df:c9:61:fe: 03:d5:71:18:eb:2d:ca:9e:b0:cb:80:72:b8:4f:d3:23:33:67: 04:c5:8f:6c:9b:a1:e1:e7:9b:05:ae:45:56:01:f5:95:48:d3: 22:82:6a:b8:4c:76:dc:35:7c:b8:c5:8e:28:df:4d:39:89:77: f0:9e:a6:c7:b8:1c:03:72:3d:10:ca:be:53:d0:fb:57:95:18: 49:93:c7:de:2e:45:b4:30:c3:de:05:27:af:94:07:3b:7b:9d: e5:2e:a4:0d:83:a0:da:76:e3:a2:3a:b6:c9:64:f3:ac:d3:b1: 47:24:61:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT7Ko5mxZEHkYsO7hxPIx169DIpkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkU3OUU1NkNCRTk5Qzc3M0NENzIxREY3QUIwRTVDQTI4 MDlEMDczOTAeFw0yNTA4MjMxMDA2MTZaFw0yNTA4MjYxNTUxMTZaMDMxMTAvBgNV BAMTKDIwRDJDQkQ3QUUxQjUxODFDRDU5Q0JFOEVDRDA4NUY3NEExOUJFOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKlQ+uxvMmEYpmnbdiWI/1/AyZ 0GnCFSIOJTHEiDo55EU1GI46lxidDWdytUt8jGWg11vkxEJJbsNtba02/115EeQD deSiy5GPPkRugGN1x1tmeaFmZBonB/vN0j+btx4bzv0n9Kbp1n5RxIHLLcm3kdw3 HfSeefl18FiVFv/CJxAKBpVHtjc8zyI2lvoqX2tjHKVagFg9Z7xQk5g5WIYxVftX ryiS4E7jvFbWkzDr9/AManIQK3mvJcCcXqOGVlPthNljCF5kfAicAOe9q/Zqj7Bb T0vsK0stEW7NGKY99+m565xW2G2bJaJUkNEIutdxhBTL/LV8PGbE3+uKOrQVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUINLL164bUYHNWcvo7NCF90oZvpUwHwYDVR0j BBgwFoAU/nnlbL6Zx3PNch33qw5cooCdBzkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MWYxNWExZC01ZGFjLTRjYzktODExYS1lNDljYjRlN2JjZTEvMC9GRTc5RTU2Q0JF OTlDNzczQ0Q3MjFERjdBQjBFNUNBMjgwOUQwNzM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkU3OUU1NkNCRTk5Qzc3M0NENzIxREY3QUIwRTVDQTI4MDlE MDczOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTFmMTVhMWQtNWRhYy00Y2M5LTgx MWEtZTQ5Y2I0ZTdiY2UxLzAvRkU3OUU1NkNCRTk5Qzc3M0NENzIxREY3QUIwRTVD QTI4MDlEMDczOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB+koIjgLqwsw9ct/mEDksRUjikbJYfrjpkE DhsGRqDYSpj2uPW2jabjXU7mrVVm8u1o9JglRpZBdgcLD0ouqDznz43ENg4GRH0Z oUj6IW6xbUMJov7kodM3NShY1Tw6AqjGu8jVGSWBgv/Twvo7cXMMIbOdUNAEfrlI DhP4YgNoNs1LIwlFgZsZqpNb38lh/gPVcRjrLcqesMuAcrhP0yMzZwTFj2yboeHn mwWuRVYB9ZVI0yKCarhMdtw1fLjFjijfTTmJd/Cepse4HANyPRDKvlPQ+1eVGEmT x94uRbQww94FJ6+UBzt7neUupA2DoNp246I6tslk86zTsUckYZg= -----END CERTIFICATE-----Generated at Sun Aug 24 04:42:16 2025 by rpki-client