$ rpki-client -vvf repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/FA479894B4849679EBB9029580F04B8BD74CE048.mft File: FA479894B4849679EBB9029580F04B8BD74CE048.mft (raw, json) Hash identifier: 4vcXN5VUnY+2dl2sImAcTHs7fCmHyXUea12dV+ESY3M= Subject key identifier: AE:D4:BB:8D:37:C5:7F:04:14:4B:A4:88:7C:E1:18:11:9D:0A:0C:EC Authority key identifier: FA:47:98:94:B4:84:96:79:EB:B9:02:95:80:F0:4B:8B:D7:4C:E0:48 Certificate issuer: /CN=FA479894B4849679EBB9029580F04B8BD74CE048 Certificate serial: 2C11019C8841FE5E538D0824C9BD3C4F398F8E45 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA479894B4849679EBB9029580F04B8BD74CE048.cer Subject info access: rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/FA479894B4849679EBB9029580F04B8BD74CE048.mft Manifest number: 86 Signing time: Sun 20 Jul 2025 06:02:37 +0000 Manifest this update: Sun 20 Jul 2025 05:57:37 +0000 Manifest next update: Wed 23 Jul 2025 15:30:37 +0000 Files and hashes: 1: 323030313a6466343a343463303a3a2f34382d3438203d3e20313533313137.roa (hash: 713xk7V5/TbDWlUXCIZDu0PtZguq6d4Z3/NB3BJnuQA=) 2: FA479894B4849679EBB9029580F04B8BD74CE048.crl (hash: IKE0bSnflK4jhkuyWPwS3NzabUeZeBbh4EJaWOHApoo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/FA479894B4849679EBB9029580F04B8BD74CE048.crl rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/FA479894B4849679EBB9029580F04B8BD74CE048.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA479894B4849679EBB9029580F04B8BD74CE048.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 15:30:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:11:01:9c:88:41:fe:5e:53:8d:08:24:c9:bd:3c:4f:39:8f:8e:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA479894B4849679EBB9029580F04B8BD74CE048 Validity Not Before: Jul 20 05:57:37 2025 GMT Not After : Jul 23 15:30:37 2025 GMT Subject: CN=AED4BB8D37C57F04144BA4887CE118119D0A0CEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:db:e2:83:7c:00:65:8e:2e:40:dc:33:4a:31: 8b:45:70:c0:ab:78:b9:5b:05:37:ea:14:d3:e7:2c: b1:69:91:48:64:89:50:e4:83:2f:87:7b:28:9f:fc: 0b:c6:85:cf:3e:db:4d:41:0f:d4:80:f6:d9:57:21: 46:0a:84:c8:3c:1e:7e:28:34:87:1f:78:98:1d:8f: 5f:e5:72:e6:36:56:99:90:ab:61:96:ad:28:42:f7: 37:96:81:8b:f3:e6:f5:32:96:64:51:0f:97:ff:36: 4c:b6:f4:fe:90:92:a3:9b:28:0a:dd:eb:b9:3b:7c: 63:1d:9c:ff:cc:68:35:43:e8:4b:11:31:4f:4b:e1: 8d:33:bf:a2:e6:f4:be:68:e7:8f:0f:4d:a6:42:c9: e0:2b:24:bf:27:42:75:1e:95:22:66:fe:b9:82:b9: 02:0b:8f:43:79:06:da:9f:e4:44:01:ca:05:97:4b: dc:41:37:fc:ff:fd:d0:4e:13:ac:ce:60:d5:55:e6: a3:cd:56:08:69:7a:7f:b5:71:7b:1a:3a:08:79:cb: 15:25:18:b8:76:01:84:b0:17:1c:fa:c8:55:43:47: 7a:df:ce:55:95:72:b8:59:4c:d1:6e:08:63:1a:89: e8:34:8b:c4:06:85:5a:61:00:6d:d9:57:12:f8:2c: 7b:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:D4:BB:8D:37:C5:7F:04:14:4B:A4:88:7C:E1:18:11:9D:0A:0C:EC X509v3 Authority Key Identifier: keyid:FA:47:98:94:B4:84:96:79:EB:B9:02:95:80:F0:4B:8B:D7:4C:E0:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/FA479894B4849679EBB9029580F04B8BD74CE048.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA479894B4849679EBB9029580F04B8BD74CE048.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/FA479894B4849679EBB9029580F04B8BD74CE048.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:08:fa:aa:34:f1:8a:e0:21:bc:fd:68:ad:f3:a0:11:80:5c: e5:de:7a:c2:64:11:d9:41:5a:8f:eb:c3:bd:78:ef:97:64:25: 08:7f:7b:dc:1f:54:48:c6:60:10:c4:c8:bb:67:df:7d:5b:80: 40:2e:83:32:a2:40:29:53:b6:54:11:f7:c6:df:8a:19:e3:7c: bd:52:44:e8:7a:57:12:3f:e7:15:c4:e5:b4:60:ba:b6:1b:2a: 36:ac:e7:7d:ee:0a:47:fd:de:2f:f5:01:05:7a:f1:45:b8:91: c2:a5:36:e1:37:76:c8:19:4b:f8:96:e9:f3:ca:6a:0d:6b:68: 6d:a2:4b:e5:3d:03:ac:11:05:59:b0:35:c5:5b:92:9e:9d:f8: 1d:bd:b7:43:9c:04:48:26:8c:64:87:ff:91:0b:4c:3d:57:58: 5d:d1:f0:af:7d:17:54:90:74:6d:5e:d5:c1:ec:b5:bd:39:cf: fc:35:4e:47:39:6c:e5:f6:0e:6c:ba:1a:e4:de:e4:f5:e3:4f: d5:19:af:11:c3:7e:60:30:92:c2:19:17:ff:25:6b:20:52:72: 02:f3:2b:16:f9:bf:8f:8e:86:70:fb:ef:f3:0d:f0:97:dc:33: 78:a7:fa:11:fc:4f:01:3e:65:f7:d3:5c:80:b0:d1:14:d8:27: fa:08:33:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULBEBnIhB/l5TjQgkyb08TzmPjkUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE0Nzk4OTRCNDg0OTY3OUVCQjkwMjk1ODBGMDRCOEJE NzRDRTA0ODAeFw0yNTA3MjAwNTU3MzdaFw0yNTA3MjMxNTMwMzdaMDMxMTAvBgNV BAMTKEFFRDRCQjhEMzdDNTdGMDQxNDRCQTQ4ODdDRTExODExOUQwQTBDRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR2+KDfABlji5A3DNKMYtFcMCr eLlbBTfqFNPnLLFpkUhkiVDkgy+Heyif/AvGhc8+201BD9SA9tlXIUYKhMg8Hn4o NIcfeJgdj1/lcuY2VpmQq2GWrShC9zeWgYvz5vUylmRRD5f/Nky29P6QkqObKArd 67k7fGMdnP/MaDVD6EsRMU9L4Y0zv6Lm9L5o548PTaZCyeArJL8nQnUelSJm/rmC uQILj0N5Btqf5EQBygWXS9xBN/z//dBOE6zOYNVV5qPNVghpen+1cXsaOgh5yxUl GLh2AYSwFxz6yFVDR3rfzlWVcrhZTNFuCGMaieg0i8QGhVphAG3ZVxL4LHsrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrtS7jTfFfwQUS6SIfOEYEZ0KDOwwHwYDVR0j BBgwFoAU+keYlLSElnnruQKVgPBLi9dM4EgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OWIwN2E5ZS02MmRmLTQ4MDgtOWQyYS1hNmU2ODg0YmNiYmIvMS9GQTQ3OTg5NEI0 ODQ5Njc5RUJCOTAyOTU4MEYwNEI4QkQ3NENFMDQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkE0Nzk4OTRCNDg0OTY3OUVCQjkwMjk1ODBGMDRCOEJENzRD RTA0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTliMDdhOWUtNjJkZi00ODA4LTlk MmEtYTZlNjg4NGJjYmJiLzEvRkE0Nzk4OTRCNDg0OTY3OUVCQjkwMjk1ODBGMDRC OEJENzRDRTA0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAAI+qo08YrgIbz9aK3zoBGAXOXeesJkEdlB Wo/rw71475dkJQh/e9wfVEjGYBDEyLtn331bgEAugzKiQClTtlQR98bfihnjfL1S ROh6VxI/5xXE5bRgurYbKjas533uCkf93i/1AQV68UW4kcKlNuE3dsgZS/iW6fPK ag1raG2iS+U9A6wRBVmwNcVbkp6d+B29t0OcBEgmjGSH/5ELTD1XWF3R8K99F1SQ dG1e1cHstb05z/w1Tkc5bOX2Dmy6GuTe5PXjT9UZrxHDfmAwksIZF/8layBScgLz Kxb5v4+OhnD77/MN8JfcM3in+hH8TwE+ZffTXICw0RTYJ/oIM4s= -----END CERTIFICATE-----Generated at Tue Jul 22 04:18:05 2025 by rpki-client