$ rpki-client -vvf repo-rpki.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.mft File: FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.mft (raw, json) Hash identifier: fYa9vSrdH/PAUP4nevcotG/+FFVTY5/8MVJYdOh0R9I= Subject key identifier: A6:C4:F6:F8:22:CD:57:93:94:A4:65:10:5C:B8:2D:D9:D2:4F:D2:A8 Authority key identifier: FA:62:D8:28:54:4F:70:BE:AD:8B:3C:04:A8:61:75:E4:FB:07:C4:B6 Certificate issuer: /CN=FA62D828544F70BEAD8B3C04A86175E4FB07C4B6 Certificate serial: 3AB33C9912294959D0AC80D7CA4FB7D97FD35390 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.mft Manifest number: C1 Signing time: Sat 30 Aug 2025 17:50:44 +0000 Manifest this update: Sat 30 Aug 2025 17:45:44 +0000 Manifest next update: Wed 03 Sep 2025 00:59:44 +0000 Files and hashes: 1: FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.crl (hash: TaUsHXb/vqvw/Yj41Vm5fxvpsC/scGefeXn45MusC/s=) 2: 3135372e36362e33372e302f32342d3234203d3e20313338383034.roa (hash: elAlykoINKnAZ1hNxzJ7Wy9Qz4JU3YMP6UNvlutp4wU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.crl rsync://repo-rpki.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 02 Sep 2025 02:27:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:b3:3c:99:12:29:49:59:d0:ac:80:d7:ca:4f:b7:d9:7f:d3:53:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA62D828544F70BEAD8B3C04A86175E4FB07C4B6 Validity Not Before: Aug 30 17:45:44 2025 GMT Not After : Sep 3 00:59:44 2025 GMT Subject: CN=A6C4F6F822CD579394A465105CB82DD9D24FD2A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:1b:2b:79:e8:f1:91:4f:a0:38:8f:80:91:ff: dd:b4:9f:7c:e6:12:22:06:bc:49:e1:88:f9:90:cb: 66:ca:8e:a6:5d:38:f7:19:b8:20:dc:6f:39:66:cd: a5:a6:ea:c8:06:71:f6:ef:c7:d3:0d:10:da:35:04: 25:8c:75:cb:18:d3:4f:c0:a0:7f:c9:d0:fe:2d:85: f0:4f:2f:d1:ab:2f:bc:df:1f:f4:6d:3e:4c:bc:a1: 87:23:01:52:da:9b:26:28:9a:a1:ef:17:f6:a5:7a: 7f:81:86:a3:47:6d:05:d6:cf:25:3e:a2:74:51:70: 67:2a:13:3b:89:f7:52:17:90:ba:5c:75:93:aa:6d: c5:c2:10:bc:31:f8:aa:fc:df:97:3c:b9:c2:ba:f7: 99:4c:77:76:dc:6f:e5:a8:96:ef:12:5c:61:14:77: f6:62:e1:cc:86:0d:0e:8e:a7:54:2c:fc:09:30:97: 7f:dc:59:7d:f5:8a:cd:fd:e5:1a:ce:1d:8d:d4:f4: 23:ed:8a:22:7c:a1:79:05:a4:37:7a:cc:7d:a8:10: a5:81:1b:9c:0e:6d:a2:08:3a:68:f4:84:4a:37:3d: 78:4e:95:ef:e0:89:c4:e1:97:18:be:f4:2c:50:7e: 72:5e:b0:56:38:b5:ed:97:80:ca:9d:95:2a:4f:11: 56:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:C4:F6:F8:22:CD:57:93:94:A4:65:10:5C:B8:2D:D9:D2:4F:D2:A8 X509v3 Authority Key Identifier: keyid:FA:62:D8:28:54:4F:70:BE:AD:8B:3C:04:A8:61:75:E4:FB:07:C4:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:fd:83:34:8e:b1:56:c6:3d:2a:f6:0a:c8:52:d9:32:7c:da: b2:17:e1:5d:ba:ac:08:87:f2:aa:a0:d8:22:a8:b7:ab:65:6d: 50:54:8a:87:7e:1b:f2:93:41:02:5a:28:bc:9c:41:ae:02:0b: 4b:38:bb:da:d0:66:71:c2:26:cb:ff:82:b0:ad:e9:16:93:79: e3:3a:e7:6a:d9:90:11:2f:54:04:b9:62:73:aa:68:bf:4d:72: ee:be:27:b0:2c:78:21:75:b0:05:09:6f:96:a9:19:8a:d1:06: 07:2f:97:47:0e:8b:f6:24:96:5a:00:c2:00:70:11:fc:1e:da: b6:8c:1e:8a:88:f3:ea:a4:e8:b2:a3:80:e0:38:29:f4:4f:12: 3a:82:cd:4f:61:f0:47:10:a2:55:35:0b:c2:7e:87:c1:d4:87: b2:2d:b1:74:dd:0e:90:fe:26:7c:17:33:29:ce:7e:06:fb:02: 35:64:7e:6a:b2:64:eb:61:be:e8:c4:86:0d:bc:37:c2:46:e4: e0:da:29:86:ba:0f:b6:31:d6:8d:86:10:90:d6:87:3d:8b:1d: 9d:58:5b:eb:ed:35:90:90:2b:4b:f4:ac:c7:93:c2:48:e3:b1: 57:c7:b1:0c:6c:fb:07:c7:11:91:54:db:70:25:f7:74:b7:fb: 79:13:89:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOrM8mRIpSVnQrIDXyk+32X/TU5AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE2MkQ4Mjg1NDRGNzBCRUFEOEIzQzA0QTg2MTc1RTRG QjA3QzRCNjAeFw0yNTA4MzAxNzQ1NDRaFw0yNTA5MDMwMDU5NDRaMDMxMTAvBgNV BAMTKEE2QzRGNkY4MjJDRDU3OTM5NEE0NjUxMDVDQjgyREQ5RDI0RkQyQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNGyt56PGRT6A4j4CR/920n3zm EiIGvEnhiPmQy2bKjqZdOPcZuCDcbzlmzaWm6sgGcfbvx9MNENo1BCWMdcsY00/A oH/J0P4thfBPL9GrL7zfH/RtPky8oYcjAVLamyYomqHvF/alen+BhqNHbQXWzyU+ onRRcGcqEzuJ91IXkLpcdZOqbcXCELwx+Kr835c8ucK695lMd3bcb+Wolu8SXGEU d/Zi4cyGDQ6Op1Qs/Akwl3/cWX31is395RrOHY3U9CPtiiJ8oXkFpDd6zH2oEKWB G5wObaIIOmj0hEo3PXhOle/gicThlxi+9CxQfnJesFY4te2XgMqdlSpPEVaPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpsT2+CLNV5OUpGUQXLgt2dJP0qgwHwYDVR0j BBgwFoAU+mLYKFRPcL6tizwEqGF15PsHxLYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YzA0ZGVkOC1iMGY1LTQ1OTQtOGUwZS05MTFlY2I3N2VlNzMvMC9GQTYyRDgyODU0 NEY3MEJFQUQ4QjNDMDRBODYxNzVFNEZCMDdDNEI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkE2MkQ4Mjg1NDRGNzBCRUFEOEIzQzA0QTg2MTc1RTRGQjA3 QzRCNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWMwNGRlZDgtYjBmNS00NTk0LThl MGUtOTExZWNiNzdlZTczLzAvRkE2MkQ4Mjg1NDRGNzBCRUFEOEIzQzA0QTg2MTc1 RTRGQjA3QzRCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADT9gzSOsVbGPSr2CshS2TJ82rIX4V26rAiH 8qqg2CKot6tlbVBUiod+G/KTQQJaKLycQa4CC0s4u9rQZnHCJsv/grCt6RaTeeM6 52rZkBEvVAS5YnOqaL9Ncu6+J7AseCF1sAUJb5apGYrRBgcvl0cOi/YklloAwgBw Efwe2raMHoqI8+qk6LKjgOA4KfRPEjqCzU9h8EcQolU1C8J+h8HUh7ItsXTdDpD+ JnwXMynOfgb7AjVkfmqyZOthvujEhg28N8JG5ODaKYa6D7Yx1o2GEJDWhz2LHZ1Y W+vtNZCQK0v0rMeTwkjjsVfHsQxs+wfHEZFU23Al93S3+3kTibU= -----END CERTIFICATE-----Generated at Sun Aug 31 00:14:18 2025 by rpki-client