$ rpki-client -vvf repo-rpki.idnic.net/repo/f2744dde-7c1f-4cba-93c0-9f0669eeed92/0/FDE6ABEE1B952F4DF85D632A8923FE58A818792A.mft File: FDE6ABEE1B952F4DF85D632A8923FE58A818792A.mft (raw, json) Hash identifier: AIvrZae8OSmELAs0IuvN3274tOJlT3UppZq9uwfxfbw= Subject key identifier: E5:E1:1E:E3:1F:C9:E7:5E:9A:59:C0:3B:0F:E9:92:0B:A1:9A:2C:A1 Authority key identifier: FD:E6:AB:EE:1B:95:2F:4D:F8:5D:63:2A:89:23:FE:58:A8:18:79:2A Certificate issuer: /CN=FDE6ABEE1B952F4DF85D632A8923FE58A818792A Certificate serial: 38E2A8DA48E180D60C4FA3A57765159EEC47F4BD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FDE6ABEE1B952F4DF85D632A8923FE58A818792A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f2744dde-7c1f-4cba-93c0-9f0669eeed92/0/FDE6ABEE1B952F4DF85D632A8923FE58A818792A.mft Manifest number: 01AA Signing time: Thu 21 Aug 2025 20:51:04 +0000 Manifest this update: Thu 21 Aug 2025 20:46:04 +0000 Manifest next update: Mon 25 Aug 2025 08:44:04 +0000 Files and hashes: 1: 3130332e3136302e3138322e302f32332d3234203d3e20313530323038.roa (hash: mJt5h2NejSfGkXob7zn1cD1yVfgovr1Egj0ZRpFgzw8=) 2: FDE6ABEE1B952F4DF85D632A8923FE58A818792A.crl (hash: s7dBWsDhVyTeagyOaiFH4tf9mj1/vx4oXbo7oIB+Bg0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f2744dde-7c1f-4cba-93c0-9f0669eeed92/0/FDE6ABEE1B952F4DF85D632A8923FE58A818792A.crl rsync://repo-rpki.idnic.net/repo/f2744dde-7c1f-4cba-93c0-9f0669eeed92/0/FDE6ABEE1B952F4DF85D632A8923FE58A818792A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FDE6ABEE1B952F4DF85D632A8923FE58A818792A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 08:44:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:e2:a8:da:48:e1:80:d6:0c:4f:a3:a5:77:65:15:9e:ec:47:f4:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FDE6ABEE1B952F4DF85D632A8923FE58A818792A Validity Not Before: Aug 21 20:46:04 2025 GMT Not After : Aug 25 08:44:04 2025 GMT Subject: CN=E5E11EE31FC9E75E9A59C03B0FE9920BA19A2CA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f3:be:50:ce:27:59:c4:74:f4:7a:48:a2:f5: 2b:96:27:c0:c2:e3:48:86:1f:17:36:4a:01:87:f8: 0d:0c:93:ec:cf:62:b0:3a:3a:fb:43:84:26:47:51: 00:a4:13:42:e6:c7:93:0c:bf:2d:27:58:ac:f1:ca: 74:79:4c:e0:31:37:ae:aa:27:82:66:9b:ea:2f:14: d2:a9:fe:fb:21:d1:f8:81:d6:94:41:d5:4f:1f:b1: 6d:f6:56:eb:dc:97:62:1e:27:ab:f4:2a:c0:ef:01: 8e:9e:fc:5a:23:8e:f4:ab:06:a3:e1:83:c3:23:2b: d7:5b:1f:20:5c:b8:d5:ea:1d:32:77:d3:d6:91:92: d5:00:fa:07:65:92:f2:29:f2:37:d1:b8:d0:7c:11: 14:14:0a:b9:e0:9f:da:c1:65:c4:7c:5a:aa:c2:d3: ab:a3:7a:5f:6c:f0:18:8e:8f:2e:82:2b:6d:c5:b2: 7e:55:ca:85:83:b2:94:3b:1d:0b:f0:6d:f5:59:c8: 5d:dd:0a:0b:1d:37:87:d4:2b:86:cc:84:8f:e9:9c: f4:5e:0e:02:03:1a:2d:3d:c6:be:1e:3a:25:43:41: 5a:29:b2:da:a2:38:96:8f:d0:59:24:32:8d:63:ba: 05:00:d3:56:f9:80:ef:bf:e5:21:10:ed:3e:b4:fb: 56:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:E1:1E:E3:1F:C9:E7:5E:9A:59:C0:3B:0F:E9:92:0B:A1:9A:2C:A1 X509v3 Authority Key Identifier: keyid:FD:E6:AB:EE:1B:95:2F:4D:F8:5D:63:2A:89:23:FE:58:A8:18:79:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f2744dde-7c1f-4cba-93c0-9f0669eeed92/0/FDE6ABEE1B952F4DF85D632A8923FE58A818792A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FDE6ABEE1B952F4DF85D632A8923FE58A818792A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2744dde-7c1f-4cba-93c0-9f0669eeed92/0/FDE6ABEE1B952F4DF85D632A8923FE58A818792A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:85:b6:61:52:12:1f:49:80:ed:c8:6a:8a:1f:e4:3f:f6:8b: 60:9b:e2:fb:25:f0:0f:e5:1b:a9:f8:24:ef:f4:7f:62:8a:8d: 20:29:8d:24:f9:b5:ae:bf:1f:12:09:73:21:35:ed:fc:0b:14: 19:cb:6a:73:72:b9:08:f3:3b:cf:5b:01:3b:c9:68:5f:77:5f: 04:9e:70:6b:3d:ef:fb:79:e1:69:3d:82:d3:fb:2a:01:5c:a0: bc:5f:85:7e:08:db:cd:68:44:fc:aa:b5:ba:d3:43:3e:77:9c: 84:7c:3a:6e:6b:5a:87:e4:37:4c:a5:03:ce:d3:e2:3c:4e:46: 18:4b:1e:ef:ce:36:ad:b6:15:61:ef:1e:82:9d:ae:de:b0:4a: e7:6e:bc:2f:b1:fb:f8:18:3c:b2:bc:7d:f8:2d:de:33:6b:fd: a1:bf:9c:9b:40:12:42:b9:c3:df:99:af:74:33:9c:4f:b9:27: 1f:17:8a:36:be:7c:38:81:c9:6b:85:3a:40:b6:10:ff:4a:29: ff:c5:54:d2:4d:fa:2d:27:4c:df:ba:03:b6:96:d1:bc:c9:04: 82:04:53:ea:46:7d:62:b1:e0:5d:da:f2:34:df:9a:28:95:e4: f2:70:56:82:40:d5:1e:e6:44:2d:77:e2:1a:06:8a:d0:4b:e9: fb:1a:d5:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOOKo2kjhgNYMT6Old2UVnuxH9L0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkRFNkFCRUUxQjk1MkY0REY4NUQ2MzJBODkyM0ZFNThB ODE4NzkyQTAeFw0yNTA4MjEyMDQ2MDRaFw0yNTA4MjUwODQ0MDRaMDMxMTAvBgNV BAMTKEU1RTExRUUzMUZDOUU3NUU5QTU5QzAzQjBGRTk5MjBCQTE5QTJDQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC875QzidZxHT0ekii9SuWJ8DC 40iGHxc2SgGH+A0Mk+zPYrA6OvtDhCZHUQCkE0Lmx5MMvy0nWKzxynR5TOAxN66q J4Jmm+ovFNKp/vsh0fiB1pRB1U8fsW32Vuvcl2IeJ6v0KsDvAY6e/FojjvSrBqPh g8MjK9dbHyBcuNXqHTJ309aRktUA+gdlkvIp8jfRuNB8ERQUCrngn9rBZcR8WqrC 06ujel9s8BiOjy6CK23Fsn5VyoWDspQ7HQvwbfVZyF3dCgsdN4fUK4bMhI/pnPRe DgIDGi09xr4eOiVDQVopstqiOJaP0FkkMo1jugUA01b5gO+/5SEQ7T60+1ZBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5eEe4x/J516aWcA7D+mSC6GaLKEwHwYDVR0j BBgwFoAU/ear7huVL034XWMqiSP+WKgYeSowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m Mjc0NGRkZS03YzFmLTRjYmEtOTNjMC05ZjA2NjllZWVkOTIvMC9GREU2QUJFRTFC OTUyRjRERjg1RDYzMkE4OTIzRkU1OEE4MTg3OTJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkRFNkFCRUUxQjk1MkY0REY4NUQ2MzJBODkyM0ZFNThBODE4 NzkyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjI3NDRkZGUtN2MxZi00Y2JhLTkz YzAtOWYwNjY5ZWVlZDkyLzAvRkRFNkFCRUUxQjk1MkY0REY4NUQ2MzJBODkyM0ZF NThBODE4NzkyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH2FtmFSEh9JgO3Iaoof5D/2i2Cb4vsl8A/l G6n4JO/0f2KKjSApjST5ta6/HxIJcyE17fwLFBnLanNyuQjzO89bATvJaF93XwSe cGs97/t54Wk9gtP7KgFcoLxfhX4I281oRPyqtbrTQz53nIR8Om5rWofkN0ylA87T 4jxORhhLHu/ONq22FWHvHoKdrt6wSuduvC+x+/gYPLK8ffgt3jNr/aG/nJtAEkK5 w9+Zr3QznE+5Jx8Xija+fDiByWuFOkC2EP9KKf/FVNJN+i0nTN+6A7aW0bzJBIIE U+pGfWKx4F3a8jTfmiiV5PJwVoJA1R7mRC134hoGitBL6fsa1Yo= -----END CERTIFICATE-----Generated at Sat Aug 23 12:10:40 2025 by rpki-client