$ rpki-client -vvf repo-rpki.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.mft File: FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.mft (raw, json) Hash identifier: SsT22XM/xG6bRLb3e0k0XkEZLtluaB4JbgpiOa95Pzc= Subject key identifier: E9:6F:95:D5:ED:0D:A3:B4:4B:00:A6:10:70:05:CE:AE:86:D4:DD:FD Authority key identifier: FD:18:E3:EC:B5:F2:28:5C:07:51:C4:8E:AF:23:EF:21:0B:A8:FD:CC Certificate issuer: /CN=FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC Certificate serial: 5A98546066F35DBDB46AA7A4F192D5419F7E982F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.mft Manifest number: EB Signing time: Fri 22 Aug 2025 05:21:12 +0000 Manifest this update: Fri 22 Aug 2025 05:16:12 +0000 Manifest next update: Mon 25 Aug 2025 11:10:12 +0000 Files and hashes: 1: FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.crl (hash: mGAUbyH72o5CMICaEywcQi4E3eeEA8zQTKYX4Ri2e7o=) 2: 3135372e32302e39352e302f32342d3234203d3e20313431363032.roa (hash: 88y84elDiek3O/IhTaNMS2vLlPQVqlAnqgDoLBdJafc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.crl rsync://repo-rpki.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 11:10:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:98:54:60:66:f3:5d:bd:b4:6a:a7:a4:f1:92:d5:41:9f:7e:98:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC Validity Not Before: Aug 22 05:16:12 2025 GMT Not After : Aug 25 11:10:12 2025 GMT Subject: CN=E96F95D5ED0DA3B44B00A6107005CEAE86D4DDFD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f3:e4:98:0b:6d:58:f5:83:bb:59:bd:20:17: c8:41:62:a3:eb:75:ed:1e:17:ac:3d:f6:e7:26:14: 11:1b:fa:e4:80:a9:aa:ba:ed:27:3d:93:57:45:4e: 81:26:e6:56:0d:c4:97:ab:42:66:1a:2a:22:8a:44: 02:18:dc:6f:72:9b:0a:35:7f:32:15:cf:89:e4:5e: 2e:7a:04:1b:08:bb:8d:0f:40:cb:d2:db:56:c5:57: b8:44:1d:03:f9:ee:aa:0b:33:ff:36:85:35:52:29: 00:20:c2:88:9b:1f:91:88:06:25:55:ec:b5:87:3d: eb:7e:f1:c7:c4:40:a2:6c:ca:db:6f:ee:4f:69:cc: 44:0a:55:b7:56:f2:fc:e8:3a:26:a7:9a:e2:51:9a: 21:3b:b9:19:d8:aa:2e:04:66:f7:84:c3:23:ae:e3: f9:e6:14:7c:5f:61:f8:4d:ec:75:09:90:37:fe:51: 27:9b:66:57:98:98:d3:f1:8f:23:d1:9f:ff:c3:e7: 8e:d2:44:c7:d7:c1:21:77:a3:37:72:c4:22:5b:96: 66:3f:49:4a:17:5f:eb:aa:aa:8d:7e:08:64:21:32: 21:2f:89:57:be:48:53:6e:7f:bd:95:a4:ae:a0:2e: a9:10:1b:a8:97:32:f4:85:03:87:33:e6:28:83:a5: a3:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:6F:95:D5:ED:0D:A3:B4:4B:00:A6:10:70:05:CE:AE:86:D4:DD:FD X509v3 Authority Key Identifier: keyid:FD:18:E3:EC:B5:F2:28:5C:07:51:C4:8E:AF:23:EF:21:0B:A8:FD:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:5c:c4:80:35:16:59:74:28:ff:e0:ed:c9:b0:57:46:2e:93: 92:ec:ee:f6:4b:e6:d4:7e:11:f8:48:f2:1c:3e:be:07:1a:39: de:81:3e:b7:ed:d8:82:45:72:d8:ec:df:c0:f6:c4:e6:8c:da: a3:51:a9:62:55:45:0c:5e:b2:f4:19:25:27:d9:bd:4f:f8:4b: 84:c9:0b:be:76:04:65:2d:ee:c9:d5:cb:94:38:a3:97:6a:d9: 6d:01:bf:55:8b:c0:7b:75:6c:0c:24:a1:37:d0:0c:42:36:29: 37:f4:8e:e1:29:ce:36:cb:1b:64:4b:b9:a2:79:b1:7b:8a:18: 48:2a:90:72:a5:e4:e5:96:06:83:dc:eb:12:b5:30:a6:f0:d7: 60:c7:63:56:bc:90:d8:47:e5:51:d8:0e:be:63:d2:16:1b:31: 5f:63:1a:91:ee:f6:0e:21:24:78:70:41:22:8d:1e:07:c4:15: 77:4d:6f:ae:85:50:dc:28:18:d6:29:d7:bb:d2:5a:03:e4:e6: fd:3c:10:41:f2:a6:17:da:de:27:50:dd:bb:44:af:b6:de:0f: 29:30:d5:5b:2d:01:8a:4c:74:ab:c1:59:2a:63:a2:01:8b:4d: b7:ea:dd:6c:2e:01:2b:16:3b:20:55:17:8c:bc:2a:a2:f1:00: 30:b8:63:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWphUYGbzXb20aqek8ZLVQZ9+mC8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkQxOEUzRUNCNUYyMjg1QzA3NTFDNDhFQUYyM0VGMjEw QkE4RkRDQzAeFw0yNTA4MjIwNTE2MTJaFw0yNTA4MjUxMTEwMTJaMDMxMTAvBgNV BAMTKEU5NkY5NUQ1RUQwREEzQjQ0QjAwQTYxMDcwMDVDRUFFODZENERERkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA8+SYC21Y9YO7Wb0gF8hBYqPr de0eF6w99ucmFBEb+uSAqaq67Sc9k1dFToEm5lYNxJerQmYaKiKKRAIY3G9ymwo1 fzIVz4nkXi56BBsIu40PQMvS21bFV7hEHQP57qoLM/82hTVSKQAgwoibH5GIBiVV 7LWHPet+8cfEQKJsyttv7k9pzEQKVbdW8vzoOianmuJRmiE7uRnYqi4EZveEwyOu 4/nmFHxfYfhN7HUJkDf+USebZleYmNPxjyPRn//D547SRMfXwSF3ozdyxCJblmY/ SUoXX+uqqo1+CGQhMiEviVe+SFNuf72VpK6gLqkQG6iXMvSFA4cz5iiDpaMZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6W+V1e0No7RLAKYQcAXOrobU3f0wHwYDVR0j BBgwFoAU/Rjj7LXyKFwHUcSOryPvIQuo/cwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YWUxM2JhYy05MWMxLTQ2M2ItODMzMy02NGVlYzZkMjc5N2UvMC9GRDE4RTNFQ0I1 RjIyODVDMDc1MUM0OEVBRjIzRUYyMTBCQThGRENDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkQxOEUzRUNCNUYyMjg1QzA3NTFDNDhFQUYyM0VGMjEwQkE4 RkRDQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGFlMTNiYWMtOTFjMS00NjNiLTgz MzMtNjRlZWM2ZDI3OTdlLzAvRkQxOEUzRUNCNUYyMjg1QzA3NTFDNDhFQUYyM0VG MjEwQkE4RkRDQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAExcxIA1Fll0KP/g7cmwV0Yuk5Ls7vZL5tR+ EfhI8hw+vgcaOd6BPrft2IJFctjs38D2xOaM2qNRqWJVRQxesvQZJSfZvU/4S4TJ C752BGUt7snVy5Q4o5dq2W0Bv1WLwHt1bAwkoTfQDEI2KTf0juEpzjbLG2RLuaJ5 sXuKGEgqkHKl5OWWBoPc6xK1MKbw12DHY1a8kNhH5VHYDr5j0hYbMV9jGpHu9g4h JHhwQSKNHgfEFXdNb66FUNwoGNYp17vSWgPk5v08EEHyphfa3idQ3btEr7beDykw 1VstAYpMdKvBWSpjogGLTbfq3WwuASsWOyBVF4y8KqLxADC4Y6I= -----END CERTIFICATE-----Generated at Sun Aug 24 01:15:11 2025 by rpki-client