$ rpki-client -vvf repo-rpki.idnic.net/repo/f2744dde-7c1f-4cba-93c0-9f0669eeed92/0/FDE6ABEE1B952F4DF85D632A8923FE58A818792A.mft File: FDE6ABEE1B952F4DF85D632A8923FE58A818792A.mft (raw, json) Hash identifier: SBHEBY5zZ9XRfOO6SM26yBT/+LU/hS3SZttbyFNICvs= Subject key identifier: 71:4C:51:83:8D:C0:E4:BA:77:1D:7A:21:64:84:C0:34:52:C6:0D:45 Authority key identifier: FD:E6:AB:EE:1B:95:2F:4D:F8:5D:63:2A:89:23:FE:58:A8:18:79:2A Certificate issuer: /CN=FDE6ABEE1B952F4DF85D632A8923FE58A818792A Certificate serial: 05D90C5B1E9D3650CDC7F6589F59601038064535 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FDE6ABEE1B952F4DF85D632A8923FE58A818792A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f2744dde-7c1f-4cba-93c0-9f0669eeed92/0/FDE6ABEE1B952F4DF85D632A8923FE58A818792A.mft Manifest number: 01C4 Signing time: Mon 20 Oct 2025 04:31:04 +0000 Manifest this update: Mon 20 Oct 2025 04:26:04 +0000 Manifest next update: Thu 23 Oct 2025 12:43:04 +0000 Files and hashes: 1: 3130332e3136302e3138322e302f32332d3234203d3e20313530323038.roa (hash: mJt5h2NejSfGkXob7zn1cD1yVfgovr1Egj0ZRpFgzw8=) 2: FDE6ABEE1B952F4DF85D632A8923FE58A818792A.crl (hash: Y4/cdagfoG8c72A1mKCU6PrdFjiMaADgqkSdi3pw//M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f2744dde-7c1f-4cba-93c0-9f0669eeed92/0/FDE6ABEE1B952F4DF85D632A8923FE58A818792A.crl rsync://repo-rpki.idnic.net/repo/f2744dde-7c1f-4cba-93c0-9f0669eeed92/0/FDE6ABEE1B952F4DF85D632A8923FE58A818792A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FDE6ABEE1B952F4DF85D632A8923FE58A818792A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 12:43:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:d9:0c:5b:1e:9d:36:50:cd:c7:f6:58:9f:59:60:10:38:06:45:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FDE6ABEE1B952F4DF85D632A8923FE58A818792A Validity Not Before: Oct 20 04:26:04 2025 GMT Not After : Oct 23 12:43:04 2025 GMT Subject: CN=714C51838DC0E4BA771D7A216484C03452C60D45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:31:c9:24:45:df:87:bc:1f:27:43:e6:4d:9b: dd:c6:57:05:e0:5f:77:b4:66:d9:c3:fc:b2:90:cc: 84:45:91:e5:29:a0:f8:80:fe:46:a5:a6:20:ea:1f: 58:8a:a2:7a:b7:7f:96:e2:aa:ea:26:18:06:a8:90: 01:f3:0a:4c:ae:f6:0b:22:3e:ce:9b:96:e3:80:72: ac:3c:2c:e7:99:16:13:9f:0a:55:75:02:a5:53:c8: a2:e4:85:b0:64:dc:93:13:28:64:8f:e5:11:7d:e4: 22:5f:58:4a:9e:0a:0c:dd:60:66:57:71:3f:73:b9: 5b:cc:b7:ee:a8:af:9e:26:1b:df:cb:e1:33:b3:5a: bc:6d:1b:82:25:b1:d8:ed:43:e1:0b:b5:fc:c3:4d: 79:78:dc:c8:a9:c8:2e:e5:58:e0:0a:63:5a:d5:2e: 4e:49:a7:07:53:3f:39:6d:fe:10:fd:ef:de:d2:8c: 4d:25:cb:2d:9b:e2:75:8a:37:38:69:90:36:67:76: b8:c5:53:91:3b:9f:ba:48:37:5b:9c:c0:1f:0e:b7: 3a:c1:f7:07:c1:02:df:e7:43:99:5f:aa:80:73:b8: 63:8b:00:71:3e:8c:58:01:ef:b1:0c:46:8a:bc:25: 2a:67:15:e4:9f:1e:66:dc:01:e7:83:fb:88:11:d4: 33:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:4C:51:83:8D:C0:E4:BA:77:1D:7A:21:64:84:C0:34:52:C6:0D:45 X509v3 Authority Key Identifier: keyid:FD:E6:AB:EE:1B:95:2F:4D:F8:5D:63:2A:89:23:FE:58:A8:18:79:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f2744dde-7c1f-4cba-93c0-9f0669eeed92/0/FDE6ABEE1B952F4DF85D632A8923FE58A818792A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FDE6ABEE1B952F4DF85D632A8923FE58A818792A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2744dde-7c1f-4cba-93c0-9f0669eeed92/0/FDE6ABEE1B952F4DF85D632A8923FE58A818792A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:34:0f:b7:62:2e:7d:3e:e0:c1:dc:ba:a1:28:d1:17:57:8e: df:f8:0a:e1:6b:60:46:6a:71:2f:ca:74:2a:31:54:2a:29:66: 96:cc:a3:ce:31:c4:a6:64:6e:8d:f5:87:b7:63:65:8c:a2:f0: d0:10:67:7a:5c:ee:43:c4:7d:db:96:bb:68:54:86:91:ed:0e: b5:54:dd:b8:8e:a8:4f:5c:3d:6e:79:90:f7:7b:a5:81:ab:be: af:f0:62:99:a8:1f:17:cd:f1:a9:6c:e0:a3:4b:2a:d3:80:98: bc:a4:a7:36:31:ad:61:1f:de:6a:f2:6e:29:5b:68:dd:e6:8f: b1:28:42:f3:5a:d3:36:58:8d:c3:9d:7d:2d:56:61:34:dc:94: 1f:0d:a5:00:3e:a7:4b:72:c0:6a:40:26:d0:59:49:09:4d:8a: 72:42:80:02:10:6d:d6:cb:30:99:2e:86:74:d4:42:ee:7e:61: e0:64:35:61:0f:2d:b5:5a:18:e9:c6:fd:2f:96:04:87:ff:0a: b7:2f:d2:a6:fe:c4:79:ec:26:b9:de:94:7f:76:d4:8d:55:ba: 41:ac:20:be:7c:09:98:49:02:5f:b8:79:3c:d5:68:15:87:f0: 2c:2b:9d:ec:ae:52:cc:f7:f6:2f:1a:c0:e4:5d:95:94:60:91: dc:98:6c:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBdkMWx6dNlDNx/ZYn1lgEDgGRTUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkRFNkFCRUUxQjk1MkY0REY4NUQ2MzJBODkyM0ZFNThB ODE4NzkyQTAeFw0yNTEwMjAwNDI2MDRaFw0yNTEwMjMxMjQzMDRaMDMxMTAvBgNV BAMTKDcxNEM1MTgzOERDMEU0QkE3NzFEN0EyMTY0ODRDMDM0NTJDNjBENDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuMckkRd+HvB8nQ+ZNm93GVwXg X3e0ZtnD/LKQzIRFkeUpoPiA/kalpiDqH1iKonq3f5biquomGAaokAHzCkyu9gsi Ps6bluOAcqw8LOeZFhOfClV1AqVTyKLkhbBk3JMTKGSP5RF95CJfWEqeCgzdYGZX cT9zuVvMt+6or54mG9/L4TOzWrxtG4IlsdjtQ+ELtfzDTXl43MipyC7lWOAKY1rV Lk5JpwdTPzlt/hD9797SjE0lyy2b4nWKNzhpkDZndrjFU5E7n7pIN1ucwB8OtzrB 9wfBAt/nQ5lfqoBzuGOLAHE+jFgB77EMRoq8JSpnFeSfHmbcAeeD+4gR1DOZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcUxRg43A5Lp3HXohZITANFLGDUUwHwYDVR0j BBgwFoAU/ear7huVL034XWMqiSP+WKgYeSowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m Mjc0NGRkZS03YzFmLTRjYmEtOTNjMC05ZjA2NjllZWVkOTIvMC9GREU2QUJFRTFC OTUyRjRERjg1RDYzMkE4OTIzRkU1OEE4MTg3OTJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkRFNkFCRUUxQjk1MkY0REY4NUQ2MzJBODkyM0ZFNThBODE4 NzkyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjI3NDRkZGUtN2MxZi00Y2JhLTkz YzAtOWYwNjY5ZWVlZDkyLzAvRkRFNkFCRUUxQjk1MkY0REY4NUQ2MzJBODkyM0ZF NThBODE4NzkyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFo0D7diLn0+4MHcuqEo0RdXjt/4CuFrYEZq cS/KdCoxVCopZpbMo84xxKZkbo31h7djZYyi8NAQZ3pc7kPEfduWu2hUhpHtDrVU 3biOqE9cPW55kPd7pYGrvq/wYpmoHxfN8als4KNLKtOAmLykpzYxrWEf3mrybilb aN3mj7EoQvNa0zZYjcOdfS1WYTTclB8NpQA+p0tywGpAJtBZSQlNinJCgAIQbdbL MJkuhnTUQu5+YeBkNWEPLbVaGOnG/S+WBIf/Crcv0qb+xHnsJrnelH921I1VukGs IL58CZhJAl+4eTzVaBWH8CwrneyuUsz39i8awORdlZRgkdyYbFI= -----END CERTIFICATE-----Generated at Mon Oct 20 09:44:13 2025 by rpki-client