$ rpki-client -vvf repo-rpki.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.mft File: FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.mft (raw, json) Hash identifier: /KYk1rsvQ4NBDiYYUSH8kkRJ5iQNTZqVslsABFKamI0= Subject key identifier: 77:FA:B9:BD:16:7E:DF:56:DC:EF:75:A8:43:53:32:AB:A6:01:94:41 Authority key identifier: FD:18:E3:EC:B5:F2:28:5C:07:51:C4:8E:AF:23:EF:21:0B:A8:FD:CC Certificate issuer: /CN=FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC Certificate serial: 2DAEE3D048A2060362D7A28DFF1120B7F0D92D0F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.mft Manifest number: 0104 Signing time: Sat 18 Oct 2025 13:51:13 +0000 Manifest this update: Sat 18 Oct 2025 13:46:13 +0000 Manifest next update: Tue 21 Oct 2025 17:03:13 +0000 Files and hashes: 1: 3135372e32302e39352e302f32342d3234203d3e20313431363032.roa (hash: 88y84elDiek3O/IhTaNMS2vLlPQVqlAnqgDoLBdJafc=) 2: FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.crl (hash: AIg+nNt6mrq07OsYsxmLH3zSJDCqat7ca69lFsR+rW8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.crl rsync://repo-rpki.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 17:03:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:ae:e3:d0:48:a2:06:03:62:d7:a2:8d:ff:11:20:b7:f0:d9:2d:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC Validity Not Before: Oct 18 13:46:13 2025 GMT Not After : Oct 21 17:03:13 2025 GMT Subject: CN=77FAB9BD167EDF56DCEF75A8435332ABA6019441 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:0e:cb:31:a1:23:0f:34:b5:dc:71:99:86:ed: fb:b0:d4:61:7d:91:8f:ec:ba:f9:d2:5e:19:2b:92: ae:a3:8b:d0:3a:e1:9a:66:00:31:2b:56:a9:c3:70: cd:90:c8:4b:42:8f:6d:d9:70:5c:dc:9c:90:f3:a3: a3:ba:e7:60:c3:9d:f3:3c:70:9f:45:a3:24:66:72: de:a5:6d:d9:ad:5f:e6:b2:88:61:23:be:52:52:18: b1:2c:42:1f:ee:88:c7:9e:69:1e:57:58:ed:05:4c: 80:c6:4d:a0:2f:99:ec:3d:08:ae:dd:ec:89:a2:87: 5b:2a:c6:c2:7b:c0:9f:ee:b9:92:4d:c2:d2:da:9a: ab:e9:7c:b3:26:2c:e3:44:a7:59:24:c7:9a:f1:2e: 69:06:cc:b2:40:fe:85:bc:e4:61:b5:21:0a:b0:72: 33:8d:0a:44:1c:0b:c2:35:e8:54:3d:7b:2d:c0:07: cf:53:5f:14:da:00:21:7f:8a:d4:a9:47:0b:59:6f: 44:27:fc:03:6e:e4:9a:07:6a:ee:68:bc:fa:69:35: 42:2a:16:49:b7:8c:58:ad:85:a9:37:c6:fb:34:f7: 34:73:bb:ed:14:cb:bc:b4:ef:c7:bd:68:1f:30:33: f0:bf:6d:76:f0:26:2b:92:c5:20:8d:8e:7c:4d:66: 47:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:FA:B9:BD:16:7E:DF:56:DC:EF:75:A8:43:53:32:AB:A6:01:94:41 X509v3 Authority Key Identifier: keyid:FD:18:E3:EC:B5:F2:28:5C:07:51:C4:8E:AF:23:EF:21:0B:A8:FD:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:91:80:ed:f4:43:c7:20:42:a7:06:10:1d:23:47:9f:f1:79: c5:6f:09:8b:b3:c1:de:42:2c:5d:76:74:a1:12:19:45:29:83: 0a:72:16:b2:ac:7d:6d:63:8b:44:04:e2:0b:01:23:57:0d:02: 7d:95:e3:5f:0b:e6:fe:b2:77:7c:8e:89:b3:95:19:ea:df:71: 0e:39:04:c3:b0:45:f3:3d:d8:9c:67:16:05:a2:76:c4:c5:32: fd:63:3f:7f:a1:00:5e:e3:34:f0:0b:8a:87:8a:49:0d:16:e0: 3f:8c:87:6b:29:bb:e2:a6:0f:6d:a6:16:a0:0e:4c:d1:43:23: bc:07:05:73:2d:56:3e:dc:ee:b7:8c:0b:d1:2f:49:d9:e9:30: 2b:d0:52:be:44:fb:25:0c:e4:81:e2:70:e5:77:0b:1f:02:15: 1c:5a:ab:12:96:0d:30:9b:cb:d1:90:fb:a8:bf:e2:ca:33:4d: 49:f7:de:ec:88:e0:10:84:68:ed:72:2b:6d:12:6e:cc:a0:c8: 63:35:fa:3c:7e:42:d5:51:c4:11:90:e0:cb:ed:fa:5e:e5:9d: e9:07:68:80:7f:28:0a:f3:c7:73:d8:8a:2c:95:12:b8:bf:b4: 8a:36:3a:fa:d5:4d:45:04:89:07:1f:01:3f:ce:85:e6:85:d4: be:bb:db:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULa7j0EiiBgNi16KN/xEgt/DZLQ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkQxOEUzRUNCNUYyMjg1QzA3NTFDNDhFQUYyM0VGMjEw QkE4RkRDQzAeFw0yNTEwMTgxMzQ2MTNaFw0yNTEwMjExNzAzMTNaMDMxMTAvBgNV BAMTKDc3RkFCOUJEMTY3RURGNTZEQ0VGNzVBODQzNTMzMkFCQTYwMTk0NDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpDssxoSMPNLXccZmG7fuw1GF9 kY/suvnSXhkrkq6ji9A64ZpmADErVqnDcM2QyEtCj23ZcFzcnJDzo6O652DDnfM8 cJ9FoyRmct6lbdmtX+ayiGEjvlJSGLEsQh/uiMeeaR5XWO0FTIDGTaAvmew9CK7d 7Imih1sqxsJ7wJ/uuZJNwtLamqvpfLMmLONEp1kkx5rxLmkGzLJA/oW85GG1IQqw cjONCkQcC8I16FQ9ey3AB89TXxTaACF/itSpRwtZb0Qn/ANu5JoHau5ovPppNUIq Fkm3jFithak3xvs09zRzu+0Uy7y078e9aB8wM/C/bXbwJiuSxSCNjnxNZkdbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUd/q5vRZ+31bc73WoQ1Myq6YBlEEwHwYDVR0j BBgwFoAU/Rjj7LXyKFwHUcSOryPvIQuo/cwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YWUxM2JhYy05MWMxLTQ2M2ItODMzMy02NGVlYzZkMjc5N2UvMC9GRDE4RTNFQ0I1 RjIyODVDMDc1MUM0OEVBRjIzRUYyMTBCQThGRENDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkQxOEUzRUNCNUYyMjg1QzA3NTFDNDhFQUYyM0VGMjEwQkE4 RkRDQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGFlMTNiYWMtOTFjMS00NjNiLTgz MzMtNjRlZWM2ZDI3OTdlLzAvRkQxOEUzRUNCNUYyMjg1QzA3NTFDNDhFQUYyM0VG MjEwQkE4RkRDQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG+RgO30Q8cgQqcGEB0jR5/xecVvCYuzwd5C LF12dKESGUUpgwpyFrKsfW1ji0QE4gsBI1cNAn2V418L5v6yd3yOibOVGerfcQ45 BMOwRfM92JxnFgWidsTFMv1jP3+hAF7jNPALioeKSQ0W4D+Mh2spu+KmD22mFqAO TNFDI7wHBXMtVj7c7reMC9EvSdnpMCvQUr5E+yUM5IHicOV3Cx8CFRxaqxKWDTCb y9GQ+6i/4sozTUn33uyI4BCEaO1yK20SbsygyGM1+jx+QtVRxBGQ4Mvt+l7lnekH aIB/KArzx3PYiiyVEri/tIo2OvrVTUUEiQcfAT/OheaF1L6724M= -----END CERTIFICATE-----Generated at Mon Oct 20 13:21:14 2025 by rpki-client