$ rpki-client -vvf repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.mft File: FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.mft (raw, json) Hash identifier: 6v7QDvWbnyVWxi2gpeVD8A+uY5v/seJJx0okDviAaeo= Subject key identifier: 6C:CA:F7:CA:E9:DE:94:A4:BD:89:F0:F1:9B:B8:54:DC:41:1D:EA:3A Authority key identifier: FB:1D:4F:91:39:A6:1D:F4:B9:1E:31:27:0F:3D:2A:1C:07:B3:5C:E1 Certificate issuer: /CN=FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1 Certificate serial: A6CE1458AEF8FDEC973F87BC92B8C44CAAB4B2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.mft Manifest number: 01A2 Signing time: Thu 04 Sep 2025 23:02:04 +0000 Manifest this update: Thu 04 Sep 2025 22:57:04 +0000 Manifest next update: Mon 08 Sep 2025 05:15:04 +0000 Files and hashes: 1: FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.crl (hash: 8OIbKVG2rZOyfv4Xfhhz8o81L2b67Gat2JgCvWikwrE=) 2: 3130332e3134392e3131382e302f32332d3234203d3e20313431303535.roa (hash: u22TiDBqhxRDgDXVHX7pAHC7nu8jAukDNtzJmORzlts=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.crl rsync://repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: a6:ce:14:58:ae:f8:fd:ec:97:3f:87:bc:92:b8:c4:4c:aa:b4:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1 Validity Not Before: Sep 4 22:57:04 2025 GMT Not After : Sep 8 05:15:04 2025 GMT Subject: CN=6CCAF7CAE9DE94A4BD89F0F19BB854DC411DEA3A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:4f:ae:78:ff:2d:c9:05:da:54:9f:b0:96:3f: cb:cf:36:e4:e2:4b:1f:fc:b9:21:f4:d0:ec:a3:7d: a4:17:a5:5c:9b:75:ea:59:ce:63:50:b2:99:c3:7b: 4d:0d:2a:06:73:22:c0:d7:c8:7f:4d:99:fa:35:b8: a9:0e:c3:b8:8e:ad:38:d0:35:94:c3:7c:64:80:36: 17:e5:3b:85:0d:b9:9f:8e:71:4b:22:8f:aa:c8:3a: fc:c1:f4:84:bf:7c:8c:54:28:59:86:dd:9a:3f:4a: 61:7b:e3:0c:dc:7f:1b:3e:91:89:fd:fe:d8:87:b5: 75:16:ad:cb:64:ec:4c:0b:7e:49:d2:f8:6b:0c:12: 6d:cb:b0:e6:07:89:ef:54:63:f7:67:53:58:73:32: a2:48:51:30:79:db:45:fe:96:72:64:72:ec:57:5b: fd:1e:24:22:d6:31:4e:05:ac:86:b3:89:40:45:b2: 92:44:0c:a6:01:30:ab:63:bc:49:ec:bb:50:6c:26: 59:5c:48:5b:3d:5e:8d:7b:fa:00:4b:95:a0:14:37: c2:7f:8f:59:8f:01:a7:50:a2:a0:ef:ed:5f:6e:68: 16:be:ac:14:f5:aa:2d:e4:c5:3e:17:d7:49:2d:01: 1a:93:34:b1:77:42:a5:8e:fe:a2:92:12:12:ed:1d: e0:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:CA:F7:CA:E9:DE:94:A4:BD:89:F0:F1:9B:B8:54:DC:41:1D:EA:3A X509v3 Authority Key Identifier: keyid:FB:1D:4F:91:39:A6:1D:F4:B9:1E:31:27:0F:3D:2A:1C:07:B3:5C:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:5b:35:f6:d9:61:43:e1:64:d5:35:06:83:2a:b2:9e:c4:ad: 46:6a:11:d7:30:82:2a:40:78:6c:09:3c:c5:68:5d:2c:b9:c9: b1:54:72:c1:8c:f3:34:2d:e2:83:42:f6:e3:0d:e6:f0:f2:a4: 08:b0:a8:94:ca:29:0f:03:eb:62:36:56:65:40:84:62:ad:62: a4:a1:21:7d:1c:e8:86:af:c0:8d:55:e6:94:b9:22:c1:e4:d1: 68:74:0a:51:f1:a1:fc:f9:45:ee:97:c3:fc:90:18:9c:8d:98: fa:f9:f7:5a:b0:2e:13:69:7e:56:c3:20:76:35:4c:a8:38:a0: 97:71:6b:d7:8f:c6:ca:72:a1:55:ac:57:ad:69:c4:9f:82:62: 7c:68:c8:f9:c4:21:66:29:6e:aa:54:f3:2f:ea:5b:18:0f:a6: 8a:ff:c8:53:24:3b:38:8d:4d:f6:1a:38:bc:0b:67:76:0e:93: 53:1f:a5:c2:f6:00:70:65:3f:c2:03:95:9e:54:e4:be:21:d9: 9f:f5:63:3f:48:5c:a6:34:79:9b:54:1d:67:f0:e2:52:5c:30: 26:60:1c:ad:1b:e2:f4:e5:40:da:4f:92:9d:bb:79:a5:bc:2f: a9:92:18:da:cf:cb:b1:58:60:74:29:a2:f1:a3:2f:ef:24:3b: 6c:aa:f1:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAKbOFFiu+P3slz+HvJK4xEyqtLIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkIxRDRGOTEzOUE2MURGNEI5MUUzMTI3MEYzRDJBMUMw N0IzNUNFMTAeFw0yNTA5MDQyMjU3MDRaFw0yNTA5MDgwNTE1MDRaMDMxMTAvBgNV BAMTKDZDQ0FGN0NBRTlERTk0QTRCRDg5RjBGMTlCQjg1NERDNDExREVBM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnT654/y3JBdpUn7CWP8vPNuTi Sx/8uSH00OyjfaQXpVybdepZzmNQspnDe00NKgZzIsDXyH9Nmfo1uKkOw7iOrTjQ NZTDfGSANhflO4UNuZ+OcUsij6rIOvzB9IS/fIxUKFmG3Zo/SmF74wzcfxs+kYn9 /tiHtXUWrctk7EwLfknS+GsMEm3LsOYHie9UY/dnU1hzMqJIUTB520X+lnJkcuxX W/0eJCLWMU4FrIaziUBFspJEDKYBMKtjvEnsu1BsJllcSFs9Xo17+gBLlaAUN8J/ j1mPAadQoqDv7V9uaBa+rBT1qi3kxT4X10ktARqTNLF3QqWO/qKSEhLtHeBZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbMr3yunelKS9ifDxm7hU3EEd6jowHwYDVR0j BBgwFoAU+x1PkTmmHfS5HjEnDz0qHAezXOEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Y2M3MGY3ZC0zM2ZlLTRkZjItODFlNS1kYzBkNTVhYzUxNzAvMC9GQjFENEY5MTM5 QTYxREY0QjkxRTMxMjcwRjNEMkExQzA3QjM1Q0UxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkIxRDRGOTEzOUE2MURGNEI5MUUzMTI3MEYzRDJBMUMwN0Iz NUNFMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWNjNzBmN2QtMzNmZS00ZGYyLTgx ZTUtZGMwZDU1YWM1MTcwLzAvRkIxRDRGOTEzOUE2MURGNEI5MUUzMTI3MEYzRDJB MUMwN0IzNUNFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAhbNfbZYUPhZNU1BoMqsp7ErUZqEdcwgipA eGwJPMVoXSy5ybFUcsGM8zQt4oNC9uMN5vDypAiwqJTKKQ8D62I2VmVAhGKtYqSh IX0c6IavwI1V5pS5IsHk0Wh0ClHxofz5Re6Xw/yQGJyNmPr591qwLhNpflbDIHY1 TKg4oJdxa9ePxspyoVWsV61pxJ+CYnxoyPnEIWYpbqpU8y/qWxgPpor/yFMkOziN TfYaOLwLZ3YOk1MfpcL2AHBlP8IDlZ5U5L4h2Z/1Yz9IXKY0eZtUHWfw4lJcMCZg HK0b4vTlQNpPkp27eaW8L6mSGNrPy7FYYHQpovGjL+8kO2yq8bM= -----END CERTIFICATE-----Generated at Fri Sep 5 10:31:51 2025 by rpki-client