$ rpki-client -vvf repo-rpki.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.mft File: FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.mft (raw, json) Hash identifier: LMfH5lkVL5KIW3DWsx0Ok+05jbiHKk51Y6MJ2KtlJsg= Subject key identifier: D1:73:DA:5A:02:0E:ED:48:FD:D8:A9:27:F6:8E:04:9B:04:C6:60:9B Authority key identifier: FE:79:E5:6C:BE:99:C7:73:CD:72:1D:F7:AB:0E:5C:A2:80:9D:07:39 Certificate issuer: /CN=FE79E56CBE99C773CD721DF7AB0E5CA2809D0739 Certificate serial: 74FA4ED529904D1ADC02D3AFD4493E7CA5A648F4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.mft Manifest number: CB Signing time: Tue 01 Jul 2025 04:51:14 +0000 Manifest this update: Tue 01 Jul 2025 04:46:14 +0000 Manifest next update: Fri 04 Jul 2025 06:42:14 +0000 Files and hashes: 1: 3135372e32302e3232332e302f32342d3234203d3e20313532343337.roa (hash: wm/OwjMJ3Mw2kK4LX3m4F0/jsfG1NixZfT/MRVx2gUc=) 2: 3135372e32302e3232322e302f32342d3234203d3e20313532343337.roa (hash: xA0yIhK/pel57ulFN3HOQ4z99q0P1jOo4pSKaz4ovzA=) 3: FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.crl (hash: uuVOQ1tTc8fo6T8OHip+bmS7oJk7Kojsu45g0Y8xZPk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.crl rsync://repo-rpki.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 06:42:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:fa:4e:d5:29:90:4d:1a:dc:02:d3:af:d4:49:3e:7c:a5:a6:48:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FE79E56CBE99C773CD721DF7AB0E5CA2809D0739 Validity Not Before: Jul 1 04:46:14 2025 GMT Not After : Jul 4 06:42:14 2025 GMT Subject: CN=D173DA5A020EED48FDD8A927F68E049B04C6609B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:05:e0:a2:bf:66:8e:60:db:e4:88:0d:40:19: 01:35:87:e3:45:09:e3:71:99:b1:3a:cf:62:56:41: 12:93:23:df:98:11:46:cf:96:a3:c4:5b:cf:36:3f: 77:b1:51:fc:d7:d5:1f:8b:75:bd:4b:3e:6c:a6:e9: 6d:af:35:dc:ca:6d:b0:99:d5:e2:5e:f4:c5:da:5a: 18:2e:a8:60:a1:6f:7f:8d:9f:3c:6e:7d:61:be:b9: ad:ef:0f:55:18:16:26:6a:e4:00:fc:8f:32:65:63: 26:c1:29:54:fa:da:c0:e8:66:91:ef:c8:9e:51:fb: 08:16:68:cb:c6:38:88:d0:a5:5c:b0:e0:9f:f7:26: 42:3d:59:1d:23:ce:2a:76:e9:59:f1:61:6e:57:38: ac:61:5a:15:81:b0:ad:ac:fb:39:3c:3e:e6:7b:a0: bf:03:9d:ea:b4:7f:42:2e:15:a5:58:14:c8:78:1e: c3:79:d6:bb:7a:a2:1f:4a:4c:c0:c4:a4:11:b7:4f: 6f:9a:d7:be:43:1a:35:3f:18:88:10:b1:cb:51:08: f3:7b:bf:62:e2:88:be:48:50:7e:6b:12:c0:db:05: a9:81:35:72:6b:e3:f1:80:03:9d:03:80:77:d5:e1: cd:ef:1f:f3:69:39:8e:46:27:79:f7:d8:c8:43:df: 41:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:73:DA:5A:02:0E:ED:48:FD:D8:A9:27:F6:8E:04:9B:04:C6:60:9B X509v3 Authority Key Identifier: keyid:FE:79:E5:6C:BE:99:C7:73:CD:72:1D:F7:AB:0E:5C:A2:80:9D:07:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:01:cc:87:bc:b4:75:c3:f9:68:1f:ad:30:2a:b4:0d:55:f1: 80:f2:92:80:5b:59:8d:3d:69:ef:1c:56:97:57:d5:a3:91:a8: 61:81:4c:60:a7:a2:a2:f5:36:e9:d8:4d:a6:1e:11:50:a0:4e: 6e:2b:2e:39:56:cb:91:73:be:4a:05:33:aa:bc:e7:8a:8b:50: d3:b2:3e:69:3f:1d:a8:c4:4f:91:c7:d5:f1:68:95:b0:04:7d: 20:ff:e0:e8:b7:47:6e:95:a7:a2:6e:eb:1e:2f:cf:89:37:f5: 32:44:4b:c6:83:c9:87:70:75:03:c3:1c:4c:47:0f:6b:78:19: 83:4f:a6:2b:7c:bf:57:b9:63:ca:ea:f1:0a:9b:cd:06:63:5e: 17:6f:4d:4b:60:b4:36:02:8d:f5:8b:67:a8:14:37:64:4b:0c: 16:fe:72:4a:0e:da:12:34:a7:b6:4e:1a:46:78:a5:b2:67:2c: 5f:67:69:12:5f:cb:4c:cf:ea:7f:15:97:a7:87:b4:0f:0e:8a: 48:2c:2a:36:20:5b:3c:74:c3:10:08:60:ed:c8:24:ef:cc:f1: 95:e8:58:a5:aa:ad:c5:25:7a:0d:6f:54:ee:8c:e0:35:bf:d0: 7b:b8:7c:42:8c:b4:43:6b:1b:ce:f9:50:93:77:77:32:40:80: 4b:1a:36:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdPpO1SmQTRrcAtOv1Ek+fKWmSPQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkU3OUU1NkNCRTk5Qzc3M0NENzIxREY3QUIwRTVDQTI4 MDlEMDczOTAeFw0yNTA3MDEwNDQ2MTRaFw0yNTA3MDQwNjQyMTRaMDMxMTAvBgNV BAMTKEQxNzNEQTVBMDIwRUVENDhGREQ4QTkyN0Y2OEUwNDlCMDRDNjYwOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7BeCiv2aOYNvkiA1AGQE1h+NF CeNxmbE6z2JWQRKTI9+YEUbPlqPEW882P3exUfzX1R+Ldb1LPmym6W2vNdzKbbCZ 1eJe9MXaWhguqGChb3+NnzxufWG+ua3vD1UYFiZq5AD8jzJlYybBKVT62sDoZpHv yJ5R+wgWaMvGOIjQpVyw4J/3JkI9WR0jzip26VnxYW5XOKxhWhWBsK2s+zk8PuZ7 oL8Dneq0f0IuFaVYFMh4HsN51rt6oh9KTMDEpBG3T2+a175DGjU/GIgQsctRCPN7 v2LiiL5IUH5rEsDbBamBNXJr4/GAA50DgHfV4c3vH/NpOY5GJ3n32MhD30F7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0XPaWgIO7Uj92Kkn9o4EmwTGYJswHwYDVR0j BBgwFoAU/nnlbL6Zx3PNch33qw5cooCdBzkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MWYxNWExZC01ZGFjLTRjYzktODExYS1lNDljYjRlN2JjZTEvMC9GRTc5RTU2Q0JF OTlDNzczQ0Q3MjFERjdBQjBFNUNBMjgwOUQwNzM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkU3OUU1NkNCRTk5Qzc3M0NENzIxREY3QUIwRTVDQTI4MDlE MDczOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTFmMTVhMWQtNWRhYy00Y2M5LTgx MWEtZTQ5Y2I0ZTdiY2UxLzAvRkU3OUU1NkNCRTk5Qzc3M0NENzIxREY3QUIwRTVD QTI4MDlEMDczOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACUBzIe8tHXD+WgfrTAqtA1V8YDykoBbWY09 ae8cVpdX1aORqGGBTGCnoqL1NunYTaYeEVCgTm4rLjlWy5FzvkoFM6q854qLUNOy Pmk/HajET5HH1fFolbAEfSD/4Oi3R26Vp6Ju6x4vz4k39TJES8aDyYdwdQPDHExH D2t4GYNPpit8v1e5Y8rq8QqbzQZjXhdvTUtgtDYCjfWLZ6gUN2RLDBb+ckoO2hI0 p7ZOGkZ4pbJnLF9naRJfy0zP6n8Vl6eHtA8OikgsKjYgWzx0wxAIYO3IJO/M8ZXo WKWqrcUleg1vVO6M4DW/0Hu4fEKMtENrG875UJN3dzJAgEsaNlg= -----END CERTIFICATE-----Generated at Wed Jul 2 14:19:46 2025 by rpki-client