$ rpki-client -vvf repo-rpki.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.mft File: FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.mft (raw, json) Hash identifier: zBnQ5w645f2waqXp+Leej82PLtaDcu33HgP1lTWquWM= Subject key identifier: AA:11:66:AA:22:5F:06:3A:D4:3F:CF:81:53:8D:F2:D4:4F:D7:66:26 Authority key identifier: FD:18:E3:EC:B5:F2:28:5C:07:51:C4:8E:AF:23:EF:21:0B:A8:FD:CC Certificate issuer: /CN=FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC Certificate serial: 367494580AB680383589C1AD73412BC6AA4D97EA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.mft Manifest number: D4 Signing time: Mon 30 Jun 2025 00:01:12 +0000 Manifest this update: Sun 29 Jun 2025 23:56:12 +0000 Manifest next update: Thu 03 Jul 2025 11:57:12 +0000 Files and hashes: 1: FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.crl (hash: IWBtzjOHPgvO/28y5cd/mlCfdwxA0ugt8EiV9sREjFk=) 2: 3135372e32302e39352e302f32342d3234203d3e20313431363032.roa (hash: 88y84elDiek3O/IhTaNMS2vLlPQVqlAnqgDoLBdJafc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.crl rsync://repo-rpki.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 09:58:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:74:94:58:0a:b6:80:38:35:89:c1:ad:73:41:2b:c6:aa:4d:97:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC Validity Not Before: Jun 29 23:56:12 2025 GMT Not After : Jul 3 11:57:12 2025 GMT Subject: CN=AA1166AA225F063AD43FCF81538DF2D44FD76626 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c4:df:a1:ff:39:db:46:b4:f2:f8:55:c2:87: af:c6:ff:b8:8a:17:89:ff:7c:c5:07:1b:80:23:22: 5d:15:52:af:b4:2f:85:d7:57:6c:94:0d:1d:32:27: aa:52:90:38:64:cc:53:87:7a:28:8a:e9:ef:5d:5a: 31:69:c1:35:db:79:03:c2:ec:ed:44:45:ce:97:ec: da:ce:1d:8c:54:2b:f3:a4:bd:03:67:bf:86:24:a8: bf:48:07:3b:cf:45:8d:f6:3f:62:a4:94:fa:4f:ec: 73:8c:03:84:24:ed:1a:cd:c2:c9:97:6d:dc:c1:a5: f4:83:4d:38:4e:42:f6:a8:13:a3:44:31:b2:8e:86: af:fa:3f:5e:d7:a5:c7:3f:1b:de:3f:09:8c:04:60: 7a:12:ef:19:b8:60:87:bb:be:92:e3:5f:e4:47:da: 9f:2a:1d:f2:a5:83:85:02:b0:d3:31:73:82:f3:09: 1f:95:e5:30:6c:42:33:e8:77:d7:2a:5c:2b:5e:7b: 71:da:3b:42:98:66:eb:1c:95:7a:14:e7:72:8c:ca: 2d:5d:6e:3b:6b:f0:64:ec:6f:dd:61:6e:54:bd:ca: 75:50:c0:98:83:ef:a2:e0:ba:b8:fc:29:09:04:a6: c8:7b:c0:a0:66:1b:70:fc:af:16:a6:f1:51:f8:fa: 12:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:11:66:AA:22:5F:06:3A:D4:3F:CF:81:53:8D:F2:D4:4F:D7:66:26 X509v3 Authority Key Identifier: keyid:FD:18:E3:EC:B5:F2:28:5C:07:51:C4:8E:AF:23:EF:21:0B:A8:FD:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:44:96:1e:85:02:30:02:9b:37:c3:2d:c3:f8:eb:b2:28:cf: 40:b3:59:d6:01:88:b6:63:e8:04:af:10:64:44:05:dd:ff:5e: 27:34:35:aa:33:74:14:fd:3e:26:19:55:da:09:9c:b1:1b:69: 64:f2:0f:63:4f:63:64:57:1f:03:a9:c1:cd:b8:36:c5:71:f0: ca:9f:c5:b8:b2:02:d0:fb:1a:99:e9:58:42:7e:50:ca:3d:0b: 2e:2b:09:c3:f4:ee:25:02:63:66:b5:6e:14:6a:7b:e3:ae:83: 80:da:7c:c1:dc:09:91:ed:c4:d7:23:f5:44:e6:a3:aa:9d:c2: 98:92:fd:f5:b7:9a:a2:8e:ac:fa:42:ec:5d:3a:e3:86:03:13: f6:59:0e:d9:d4:4d:33:a3:24:34:1e:41:8f:47:94:73:bc:00: 8e:ba:35:3c:9e:5f:8d:a5:ff:86:3b:63:ad:22:cf:11:a1:57: 9c:58:00:66:dc:94:93:b5:e7:d4:cb:58:99:20:21:c9:49:91: 87:da:c9:e5:01:04:bb:f0:68:0f:93:6a:c2:26:ff:d6:86:97: fc:d1:ff:87:2d:f9:40:4e:37:0b:60:30:c4:4c:aa:3e:a8:51: 7b:11:c3:8a:64:aa:0e:bc:43:1a:74:f5:8e:35:0a:cd:ce:5e: 88:57:e2:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNnSUWAq2gDg1icGtc0ErxqpNl+owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkQxOEUzRUNCNUYyMjg1QzA3NTFDNDhFQUYyM0VGMjEw QkE4RkRDQzAeFw0yNTA2MjkyMzU2MTJaFw0yNTA3MDMxMTU3MTJaMDMxMTAvBgNV BAMTKEFBMTE2NkFBMjI1RjA2M0FENDNGQ0Y4MTUzOERGMkQ0NEZENzY2MjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKxN+h/znbRrTy+FXCh6/G/7iK F4n/fMUHG4AjIl0VUq+0L4XXV2yUDR0yJ6pSkDhkzFOHeiiK6e9dWjFpwTXbeQPC 7O1ERc6X7NrOHYxUK/OkvQNnv4YkqL9IBzvPRY32P2KklPpP7HOMA4Qk7RrNwsmX bdzBpfSDTThOQvaoE6NEMbKOhq/6P17Xpcc/G94/CYwEYHoS7xm4YIe7vpLjX+RH 2p8qHfKlg4UCsNMxc4LzCR+V5TBsQjPod9cqXCtee3HaO0KYZusclXoU53KMyi1d bjtr8GTsb91hblS9ynVQwJiD76Lgurj8KQkEpsh7wKBmG3D8rxam8VH4+hL7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqhFmqiJfBjrUP8+BU43y1E/XZiYwHwYDVR0j BBgwFoAU/Rjj7LXyKFwHUcSOryPvIQuo/cwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YWUxM2JhYy05MWMxLTQ2M2ItODMzMy02NGVlYzZkMjc5N2UvMC9GRDE4RTNFQ0I1 RjIyODVDMDc1MUM0OEVBRjIzRUYyMTBCQThGRENDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkQxOEUzRUNCNUYyMjg1QzA3NTFDNDhFQUYyM0VGMjEwQkE4 RkRDQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGFlMTNiYWMtOTFjMS00NjNiLTgz MzMtNjRlZWM2ZDI3OTdlLzAvRkQxOEUzRUNCNUYyMjg1QzA3NTFDNDhFQUYyM0VG MjEwQkE4RkRDQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAChElh6FAjACmzfDLcP467Ioz0CzWdYBiLZj 6ASvEGREBd3/Xic0NaozdBT9PiYZVdoJnLEbaWTyD2NPY2RXHwOpwc24NsVx8Mqf xbiyAtD7GpnpWEJ+UMo9Cy4rCcP07iUCY2a1bhRqe+Oug4DafMHcCZHtxNcj9UTm o6qdwpiS/fW3mqKOrPpC7F0644YDE/ZZDtnUTTOjJDQeQY9HlHO8AI66NTyeX42l /4Y7Y60izxGhV5xYAGbclJO159TLWJkgIclJkYfayeUBBLvwaA+TasIm/9aGl/zR /4ct+UBONwtgMMRMqj6oUXsRw4pkqg68Qxp09Y41Cs3OXohX4to= -----END CERTIFICATE-----Generated at Mon Jun 30 04:54:30 2025 by rpki-client