$ rpki-client -vvf repo-rpki.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.mft File: FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.mft (raw, json) Hash identifier: G5o2CWftVSyGjUQ3QyZ3P4QfVmJi58MelbBdz00xpW8= Subject key identifier: 10:60:7F:D6:58:89:54:F2:74:13:25:BF:F3:15:9A:FF:6E:12:DC:CA Authority key identifier: FE:79:E5:6C:BE:99:C7:73:CD:72:1D:F7:AB:0E:5C:A2:80:9D:07:39 Certificate issuer: /CN=FE79E56CBE99C773CD721DF7AB0E5CA2809D0739 Certificate serial: 1554E9077D20F598FF502F38DC978E083197A77B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.mft Manifest number: FC Signing time: Sat 18 Oct 2025 23:51:16 +0000 Manifest this update: Sat 18 Oct 2025 23:46:16 +0000 Manifest next update: Wed 22 Oct 2025 09:59:16 +0000 Files and hashes: 1: 3135372e32302e3232322e302f32342d3234203d3e20313532343337.roa (hash: xA0yIhK/pel57ulFN3HOQ4z99q0P1jOo4pSKaz4ovzA=) 2: 3135372e32302e3232332e302f32342d3234203d3e20313532343337.roa (hash: wm/OwjMJ3Mw2kK4LX3m4F0/jsfG1NixZfT/MRVx2gUc=) 3: FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.crl (hash: Z5tgGFqfwmV1Yg/FU5X5nP0wm9dik5tDI/LHKpmoPX4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.crl rsync://repo-rpki.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 09:59:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:54:e9:07:7d:20:f5:98:ff:50:2f:38:dc:97:8e:08:31:97:a7:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FE79E56CBE99C773CD721DF7AB0E5CA2809D0739 Validity Not Before: Oct 18 23:46:16 2025 GMT Not After : Oct 22 09:59:16 2025 GMT Subject: CN=10607FD6588954F2741325BFF3159AFF6E12DCCA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f0:f4:29:92:a2:ec:c4:2d:cc:35:0f:19:49: 22:a9:bd:7a:cb:29:d0:aa:67:dc:2e:4d:2c:c9:a0: 54:fc:9f:41:1a:0b:1f:2c:ce:ad:33:c7:b8:e0:4b: 24:db:e1:52:32:47:be:55:08:c0:fe:7c:eb:46:44: 03:62:ef:8d:fb:51:b3:0b:e4:36:e4:b5:b7:1e:22: dc:3c:7f:49:78:d3:17:e2:6e:5a:ad:f3:da:65:45: d1:54:3c:e9:8d:bb:ae:7d:13:61:bc:cf:8b:0e:be: 73:17:c4:9e:e8:9d:7f:6a:e3:f6:ca:c0:30:84:53: 62:4f:70:88:4d:ff:55:cf:cb:4e:3d:95:96:50:79: 8a:d6:1b:a0:32:01:45:c0:e9:ea:44:31:0a:1f:5b: 6b:a5:79:e2:96:3c:0e:7b:5d:0b:6d:12:37:89:d2: 85:4f:12:aa:d3:ff:c5:f5:72:a4:89:71:b5:96:55: 9e:be:0c:f3:e5:9e:3c:ea:e5:11:fd:a0:8f:fb:0e: a8:45:e5:33:9c:6c:1c:e6:17:65:7e:bf:ed:f0:29: 9e:ff:b9:4d:f8:27:cc:52:1c:32:15:94:f2:7e:dd: b0:82:42:0b:d3:95:97:05:f8:fe:4b:1f:ec:33:99: 6e:7a:88:dd:8d:ce:f1:67:a5:3b:9c:9f:42:a7:a0: 76:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:60:7F:D6:58:89:54:F2:74:13:25:BF:F3:15:9A:FF:6E:12:DC:CA X509v3 Authority Key Identifier: keyid:FE:79:E5:6C:BE:99:C7:73:CD:72:1D:F7:AB:0E:5C:A2:80:9D:07:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:31:f2:53:54:f8:7d:78:b8:7e:8b:d3:98:b8:f6:c4:23:c4: a1:ae:81:4d:0e:21:f4:da:08:35:71:14:5d:d3:70:21:49:c9: 67:ac:c7:8d:75:37:6d:32:f9:16:f0:66:6b:51:55:cf:e7:b8: 09:7d:25:86:7f:07:4e:d8:fd:ba:f5:0f:4f:d9:88:f5:72:68: df:9b:fc:2f:86:31:e6:95:9b:b1:9b:6e:08:52:5c:9f:c6:67: b8:d0:eb:78:90:87:0b:54:03:2f:3b:0f:61:88:50:bc:66:f2: 4f:e0:18:ea:93:f0:c5:5f:c1:f8:61:e7:fb:f0:ac:c9:2f:04: 34:3b:d4:e7:74:8f:a0:3e:4f:6b:60:67:f4:69:51:67:8f:2f: 49:a7:6b:93:e8:8c:46:df:9c:84:db:fa:2f:b9:7e:e1:74:a1: a7:40:94:da:a6:9f:7f:e2:8a:7c:57:50:69:25:55:04:cc:0d: 3d:07:e3:fb:b4:a3:09:fa:0b:c0:d3:3d:a9:fc:0c:e5:5f:4f: 56:35:40:41:c2:d6:82:d5:af:97:68:b0:c9:e2:0d:0b:84:1c: 05:af:d2:92:24:bb:25:27:f8:58:8f:40:97:44:1a:67:be:da: 4a:f0:ea:8d:51:ef:58:d2:f0:be:dd:6c:81:c8:3f:ae:58:e3: 13:6e:31:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFVTpB30g9Zj/UC843JeOCDGXp3swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkU3OUU1NkNCRTk5Qzc3M0NENzIxREY3QUIwRTVDQTI4 MDlEMDczOTAeFw0yNTEwMTgyMzQ2MTZaFw0yNTEwMjIwOTU5MTZaMDMxMTAvBgNV BAMTKDEwNjA3RkQ2NTg4OTU0RjI3NDEzMjVCRkYzMTU5QUZGNkUxMkRDQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+8PQpkqLsxC3MNQ8ZSSKpvXrL KdCqZ9wuTSzJoFT8n0EaCx8szq0zx7jgSyTb4VIyR75VCMD+fOtGRANi7437UbML 5DbktbceItw8f0l40xfiblqt89plRdFUPOmNu659E2G8z4sOvnMXxJ7onX9q4/bK wDCEU2JPcIhN/1XPy049lZZQeYrWG6AyAUXA6epEMQofW2uleeKWPA57XQttEjeJ 0oVPEqrT/8X1cqSJcbWWVZ6+DPPlnjzq5RH9oI/7DqhF5TOcbBzmF2V+v+3wKZ7/ uU34J8xSHDIVlPJ+3bCCQgvTlZcF+P5LH+wzmW56iN2NzvFnpTucn0KnoHZ/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEGB/1liJVPJ0EyW/8xWa/24S3MowHwYDVR0j BBgwFoAU/nnlbL6Zx3PNch33qw5cooCdBzkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MWYxNWExZC01ZGFjLTRjYzktODExYS1lNDljYjRlN2JjZTEvMC9GRTc5RTU2Q0JF OTlDNzczQ0Q3MjFERjdBQjBFNUNBMjgwOUQwNzM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkU3OUU1NkNCRTk5Qzc3M0NENzIxREY3QUIwRTVDQTI4MDlE MDczOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTFmMTVhMWQtNWRhYy00Y2M5LTgx MWEtZTQ5Y2I0ZTdiY2UxLzAvRkU3OUU1NkNCRTk5Qzc3M0NENzIxREY3QUIwRTVD QTI4MDlEMDczOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG4x8lNU+H14uH6L05i49sQjxKGugU0OIfTa CDVxFF3TcCFJyWesx411N20y+RbwZmtRVc/nuAl9JYZ/B07Y/br1D0/ZiPVyaN+b /C+GMeaVm7GbbghSXJ/GZ7jQ63iQhwtUAy87D2GIULxm8k/gGOqT8MVfwfhh5/vw rMkvBDQ71Od0j6A+T2tgZ/RpUWePL0mna5PojEbfnITb+i+5fuF0oadAlNqmn3/i inxXUGklVQTMDT0H4/u0own6C8DTPan8DOVfT1Y1QEHC1oLVr5dosMniDQuEHAWv 0pIkuyUn+FiPQJdEGme+2krw6o1R71jS8L7dbIHIP65Y4xNuMdk= -----END CERTIFICATE-----Generated at Tue Oct 21 08:32:50 2025 by rpki-client