$ rpki-client -vvf repo-rpki.idnic.net/repo/7d68500c-49f8-4f01-8774-f7c3164a0a58/0/FD0F38979237143A0D44165912E79E2FACD5A3BA.mft File: FD0F38979237143A0D44165912E79E2FACD5A3BA.mft (raw, json) Hash identifier: +zr+s2kdtWD8iOPfoTkE6MyN+6Un943EPbewiypJQMw= Subject key identifier: 11:1A:47:91:F5:5F:D0:52:AA:CD:FA:0D:24:BF:FE:5A:5E:9B:A4:0D Authority key identifier: FD:0F:38:97:92:37:14:3A:0D:44:16:59:12:E7:9E:2F:AC:D5:A3:BA Certificate issuer: /CN=FD0F38979237143A0D44165912E79E2FACD5A3BA Certificate serial: 12AB977B0D56F5909FC9D2688AD8C4FED847624C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FD0F38979237143A0D44165912E79E2FACD5A3BA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d68500c-49f8-4f01-8774-f7c3164a0a58/0/FD0F38979237143A0D44165912E79E2FACD5A3BA.mft Manifest number: 04B5 Signing time: Sat 19 Jul 2025 15:30:47 +0000 Manifest this update: Sat 19 Jul 2025 15:25:47 +0000 Manifest next update: Tue 22 Jul 2025 23:03:47 +0000 Files and hashes: 1: 323430363a623734303a3a2f33322d3332203d3e203338373736.roa (hash: l1d86+GollU+X7/7+S+akSvN9Ic4ZxndXEoSt1R4EA0=) 2: FD0F38979237143A0D44165912E79E2FACD5A3BA.crl (hash: 7c/CCdsMLfweMVR8bIsBJ8YDT7gU9GQ6NqsKafl/bV4=) 3: 3130332e3135382e39382e302f32332d3234203d3e203338373736.roa (hash: g4/2gGmpn32hkKxV0sqfqROaCQsBlE1YLxPaRAMg4a0=) 4: 3130332e3135382e39382e302f32332d3234203d3e20313431313235.roa (hash: i9P3BUfAWtkH95rW98va5S26/GuOy0kNU/0qkQxgQNw=) 5: 323430363a623734303a3a2f33322d3332203d3e20313431313235.roa (hash: w+5ApYB+ZFE/moVpWBy1FYzv1VFtUnIoAwsXfI3kLUk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d68500c-49f8-4f01-8774-f7c3164a0a58/0/FD0F38979237143A0D44165912E79E2FACD5A3BA.crl rsync://repo-rpki.idnic.net/repo/7d68500c-49f8-4f01-8774-f7c3164a0a58/0/FD0F38979237143A0D44165912E79E2FACD5A3BA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FD0F38979237143A0D44165912E79E2FACD5A3BA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 23:03:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:ab:97:7b:0d:56:f5:90:9f:c9:d2:68:8a:d8:c4:fe:d8:47:62:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FD0F38979237143A0D44165912E79E2FACD5A3BA Validity Not Before: Jul 19 15:25:47 2025 GMT Not After : Jul 22 23:03:47 2025 GMT Subject: CN=111A4791F55FD052AACDFA0D24BFFE5A5E9BA40D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d7:fb:52:91:dd:49:fe:9a:b9:df:2c:e6:91: 86:cd:0f:ba:59:d8:60:5c:8c:e0:29:a8:35:99:84: 44:f2:ce:26:9d:ff:eb:59:c8:e7:04:2f:42:38:71: 56:e0:df:03:7f:92:58:31:cc:ac:e8:fa:48:73:ea: 44:9a:28:d0:f4:ae:d3:76:4e:48:8b:da:be:ee:6d: 3a:c5:b4:f3:83:17:f6:6d:f6:25:2f:4d:72:b0:78: 5d:26:f9:b2:06:89:31:ea:70:94:5c:76:ec:7e:e1: 9f:f8:d7:30:3c:8c:4f:d6:96:5a:14:8f:c7:d9:78: 3a:e2:e9:e6:84:eb:59:d8:83:b2:5d:9b:51:60:b3: 71:43:94:b6:cd:95:99:16:e3:1d:55:bc:b3:66:0b: 87:84:b8:da:aa:26:fe:82:48:77:ca:da:7c:a5:26: 21:cc:2b:68:ac:df:e1:16:e0:a1:01:d1:52:78:2b: 57:f7:e8:9e:2c:fd:52:59:3c:56:b7:04:9a:a3:f8: 68:09:b0:6a:71:d8:f5:86:d0:f3:17:43:a0:82:89: 45:7a:88:51:e2:fd:0c:1f:c0:9f:fa:12:24:b9:55: e4:91:a9:39:58:9e:9c:63:77:c3:4c:d4:12:67:21: 01:97:1f:a7:fe:3c:fd:74:2d:ee:6d:e3:f9:34:ec: 85:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:1A:47:91:F5:5F:D0:52:AA:CD:FA:0D:24:BF:FE:5A:5E:9B:A4:0D X509v3 Authority Key Identifier: keyid:FD:0F:38:97:92:37:14:3A:0D:44:16:59:12:E7:9E:2F:AC:D5:A3:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d68500c-49f8-4f01-8774-f7c3164a0a58/0/FD0F38979237143A0D44165912E79E2FACD5A3BA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FD0F38979237143A0D44165912E79E2FACD5A3BA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d68500c-49f8-4f01-8774-f7c3164a0a58/0/FD0F38979237143A0D44165912E79E2FACD5A3BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:85:af:f5:94:c7:ca:03:0d:e7:6b:05:af:7a:26:02:37:3f: 47:cd:85:d1:39:13:7a:70:57:e3:98:ff:d1:b2:b9:99:9e:35: 98:4c:a0:3f:8d:c3:98:00:ff:bd:f4:43:59:65:ea:28:90:47: 6e:67:58:00:ec:a7:50:01:6e:8e:f5:f0:70:87:85:dd:14:b4: 01:73:ad:e6:ee:6c:4c:55:08:d7:19:e2:0e:dd:41:a1:f4:e0: 03:04:6c:10:c6:6c:c0:a8:4c:98:b0:52:5b:b4:94:62:ee:2c: 71:51:d3:77:55:ec:78:6c:ef:26:0c:97:fe:e8:6d:04:02:3b: 81:24:f8:15:54:b5:e8:23:32:95:26:97:39:31:c8:9b:a4:0b: cf:32:bf:0a:5f:18:0b:62:59:fe:4d:e2:45:5a:53:8e:67:71: 97:a6:af:53:cb:a1:0d:03:a9:35:85:1c:07:b2:cf:9b:06:4b: 45:22:21:71:92:d8:11:9f:14:95:62:8e:d8:5f:08:5f:32:fa: 86:4c:af:79:12:d4:ca:02:99:65:e3:69:1a:69:6d:f1:20:a5: 9c:ce:c1:d6:14:b8:82:90:fc:fe:61:a9:8d:a8:71:0c:16:77: 03:b6:26:ca:0a:43:dd:1b:3f:5c:bb:8a:8c:c4:de:84:b1:e3: 5c:62:be:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEquXew1W9ZCfydJoitjE/thHYkwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkQwRjM4OTc5MjM3MTQzQTBENDQxNjU5MTJFNzlFMkZB Q0Q1QTNCQTAeFw0yNTA3MTkxNTI1NDdaFw0yNTA3MjIyMzAzNDdaMDMxMTAvBgNV BAMTKDExMUE0NzkxRjU1RkQwNTJBQUNERkEwRDI0QkZGRTVBNUU5QkE0MEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC11/tSkd1J/pq53yzmkYbND7pZ 2GBcjOApqDWZhETyziad/+tZyOcEL0I4cVbg3wN/klgxzKzo+khz6kSaKND0rtN2 TkiL2r7ubTrFtPODF/Zt9iUvTXKweF0m+bIGiTHqcJRcdux+4Z/41zA8jE/WlloU j8fZeDri6eaE61nYg7Jdm1Fgs3FDlLbNlZkW4x1VvLNmC4eEuNqqJv6CSHfK2nyl JiHMK2is3+EW4KEB0VJ4K1f36J4s/VJZPFa3BJqj+GgJsGpx2PWG0PMXQ6CCiUV6 iFHi/QwfwJ/6EiS5VeSRqTlYnpxjd8NM1BJnIQGXH6f+PP10Le5t4/k07IV3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUERpHkfVf0FKqzfoNJL/+Wl6bpA0wHwYDVR0j BBgwFoAU/Q84l5I3FDoNRBZZEueeL6zVo7owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDY4NTAwYy00OWY4LTRmMDEtODc3NC1mN2MzMTY0YTBhNTgvMC9GRDBGMzg5Nzky MzcxNDNBMEQ0NDE2NTkxMkU3OUUyRkFDRDVBM0JBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkQwRjM4OTc5MjM3MTQzQTBENDQxNjU5MTJFNzlFMkZBQ0Q1 QTNCQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Q2ODUwMGMtNDlmOC00ZjAxLTg3 NzQtZjdjMzE2NGEwYTU4LzAvRkQwRjM4OTc5MjM3MTQzQTBENDQxNjU5MTJFNzlF MkZBQ0Q1QTNCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKaFr/WUx8oDDedrBa96JgI3P0fNhdE5E3pw V+OY/9GyuZmeNZhMoD+Nw5gA/730Q1ll6iiQR25nWADsp1ABbo718HCHhd0UtAFz rebubExVCNcZ4g7dQaH04AMEbBDGbMCoTJiwUlu0lGLuLHFR03dV7Hhs7yYMl/7o bQQCO4Ek+BVUtegjMpUmlzkxyJukC88yvwpfGAtiWf5N4kVaU45ncZemr1PLoQ0D qTWFHAeyz5sGS0UiIXGS2BGfFJVijthfCF8y+oZMr3kS1MoCmWXjaRppbfEgpZzO wdYUuIKQ/P5hqY2ocQwWdwO2JsoKQ90bP1y7iozE3oSx41xivm4= -----END CERTIFICATE-----Generated at Mon Jul 21 02:05:33 2025 by rpki-client