$ rpki-client -vvf repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.mft File: 1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.mft (raw, json) Hash identifier: DQLmlvlMIskkOPoXil05N4Rf88Gkd3rmA7JzFeEE0L8= Subject key identifier: CE:9A:38:7C:F0:50:A4:3F:CE:56:3A:1B:3B:31:AE:01:68:6E:57:22 Authority key identifier: 1F:CD:47:FB:4B:D7:29:E2:2E:4F:EE:FC:E5:B6:1B:4E:1C:7F:E9:46 Certificate issuer: /CN=1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946 Certificate serial: 18B29D589B7CCBCE45FA6C557F306D3EF14A9C12 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.mft Manifest number: 04CF Signing time: Fri 05 Sep 2025 08:50:40 +0000 Manifest this update: Fri 05 Sep 2025 08:45:40 +0000 Manifest next update: Mon 08 Sep 2025 11:35:40 +0000 Files and hashes: 1: 323430313a343230303a3a2f33322d3438203d3e203234313935.roa (hash: xPjBnSpHmpcu0qAxiY2wE80xegcTsRNtPEAJ6PwASdw=) 2: 1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.crl (hash: 0PVC5ACzQbMYUhc2HR9WzxQzWDwlnJIzk4cpt3PDkgw=) 3: 3131382e39312e3134302e302f32322d3234203d3e203633353032.roa (hash: XlrHKxvILobzAM8qX1Td9F4llGO1s7dDnxuDShAIB6Q=) 4: 3230322e36372e382e302f32312d3234203d3e203234313935.roa (hash: B+C/2EohdvfSLSdEWCv4uFVDG8om8Pw0dnsHmi+NJ9Y=) 5: 3131382e39312e3132382e302f32312d3234203d3e203234313935.roa (hash: yiPIGsDISayK97qWqm2UWsTxEHdxKETOsL8gSiwFMjA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.crl rsync://repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 11:35:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:b2:9d:58:9b:7c:cb:ce:45:fa:6c:55:7f:30:6d:3e:f1:4a:9c:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946 Validity Not Before: Sep 5 08:45:40 2025 GMT Not After : Sep 8 11:35:40 2025 GMT Subject: CN=CE9A387CF050A43FCE563A1B3B31AE01686E5722 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:62:41:3f:c5:1d:fa:37:ca:38:ff:f9:61:a8: 7b:c6:db:de:11:94:a4:6d:41:b0:f3:bf:0c:d8:6e: e4:b4:4a:25:3a:82:b3:4e:d5:31:fd:25:17:90:87: e5:33:1f:3e:f4:42:99:d0:71:4f:b7:50:a5:58:1d: b1:4c:7e:e6:2d:88:79:8e:5c:37:7c:5b:ba:8f:d6: 3d:82:e8:07:c6:67:3f:bb:0a:c1:8e:d4:1b:92:c9: 29:1f:dc:95:4e:ee:35:0e:64:9d:0d:48:18:d2:96: 7d:c3:90:83:33:f0:f5:67:82:1a:b6:a5:1f:db:00: ce:7f:d6:1b:04:56:cf:65:d8:e4:df:c9:2b:69:e9: ad:ee:3e:63:59:44:bf:b9:1d:fd:28:6b:7a:eb:d8: 2c:c4:7b:ad:68:c0:26:d7:71:7e:b4:0f:c4:56:fd: 77:65:ff:8e:d6:e4:7e:53:d2:9d:64:be:25:7e:c6: e4:31:d2:33:c6:c8:e5:3c:df:12:c8:96:1d:3f:43: a6:db:d9:4e:50:fd:8e:1e:7b:92:94:cc:7b:a7:7d: 59:e8:e0:ad:04:2a:bf:c9:ca:2d:fd:7f:ce:fd:e2: 42:96:d1:05:cd:4c:03:63:e1:78:1e:d1:34:38:74: 59:a3:24:5c:f6:14:bc:31:3e:5e:a8:4e:b4:9e:e0: ff:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:9A:38:7C:F0:50:A4:3F:CE:56:3A:1B:3B:31:AE:01:68:6E:57:22 X509v3 Authority Key Identifier: keyid:1F:CD:47:FB:4B:D7:29:E2:2E:4F:EE:FC:E5:B6:1B:4E:1C:7F:E9:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:2e:25:3c:12:8e:c7:11:33:92:15:4b:a1:f3:9a:b0:cf:b5: da:07:fa:f8:88:4f:1e:83:c9:cf:1a:28:9b:0c:b2:04:65:f7: ae:bd:75:50:f9:34:a5:af:0c:7a:75:0b:e1:f6:cc:24:44:e3: 44:10:28:b6:eb:01:c2:d5:0c:39:0d:7f:73:04:a7:12:af:e7: 0d:55:8c:6e:0d:b2:03:56:5d:c9:71:a7:28:1e:f8:0f:9b:b3: f0:38:5b:eb:50:28:44:74:4f:56:ec:aa:e7:19:b9:b4:7b:e3: 10:b5:33:35:6e:53:ca:b4:57:c5:4f:b3:89:94:4f:63:83:13: dd:c3:90:bd:06:39:bb:8d:1b:7e:f6:73:a4:7c:b8:62:57:78: c7:01:da:0a:1c:5a:c5:95:da:f0:4d:07:9b:f9:d6:7b:d0:34: e2:82:ed:91:b0:dc:5e:49:3d:df:d2:62:46:1f:04:60:f1:72: 61:49:53:19:eb:7f:d8:20:54:5f:2b:1f:c7:fb:d6:f7:69:9d: 70:98:e5:4f:81:5a:3c:c9:57:5c:36:de:74:b6:42:ea:ae:73: 42:d0:d1:39:d4:82:e7:4f:fc:9c:d1:9b:7b:f0:ae:16:19:7a: 2a:b3:b5:61:3a:e5:24:a7:ae:f4:a0:f6:67:a0:6a:11:3a:3c: 7f:13:1b:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGLKdWJt8y85F+mxVfzBtPvFKnBIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZDRDQ3RkI0QkQ3MjlFMjJFNEZFRUZDRTVCNjFCNEUx QzdGRTk0NjAeFw0yNTA5MDUwODQ1NDBaFw0yNTA5MDgxMTM1NDBaMDMxMTAvBgNV BAMTKENFOUEzODdDRjA1MEE0M0ZDRTU2M0ExQjNCMzFBRTAxNjg2RTU3MjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0YkE/xR36N8o4//lhqHvG294R lKRtQbDzvwzYbuS0SiU6grNO1TH9JReQh+UzHz70QpnQcU+3UKVYHbFMfuYtiHmO XDd8W7qP1j2C6AfGZz+7CsGO1BuSySkf3JVO7jUOZJ0NSBjSln3DkIMz8PVnghq2 pR/bAM5/1hsEVs9l2OTfyStp6a3uPmNZRL+5Hf0oa3rr2CzEe61owCbXcX60D8RW /Xdl/47W5H5T0p1kviV+xuQx0jPGyOU83xLIlh0/Q6bb2U5Q/Y4ee5KUzHunfVno 4K0EKr/Jyi39f8794kKW0QXNTANj4Xge0TQ4dFmjJFz2FLwxPl6oTrSe4P+pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzpo4fPBQpD/OVjobOzGuAWhuVyIwHwYDVR0j BBgwFoAUH81H+0vXKeIuT+785bYbThx/6UYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NzkyYTRjZC1kYmFjLTQzYWMtODA2MC0yZThkNDJlYWU2NTUvMC8xRkNENDdGQjRC RDcyOUUyMkU0RkVFRkNFNUI2MUI0RTFDN0ZFOTQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUZDRDQ3RkI0QkQ3MjlFMjJFNEZFRUZDRTVCNjFCNEUxQzdG RTk0Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODc5MmE0Y2QtZGJhYy00M2FjLTgw NjAtMmU4ZDQyZWFlNjU1LzAvMUZDRDQ3RkI0QkQ3MjlFMjJFNEZFRUZDRTVCNjFC NEUxQzdGRTk0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABEuJTwSjscRM5IVS6HzmrDPtdoH+viITx6D yc8aKJsMsgRl9669dVD5NKWvDHp1C+H2zCRE40QQKLbrAcLVDDkNf3MEpxKv5w1V jG4NsgNWXclxpyge+A+bs/A4W+tQKER0T1bsqucZubR74xC1MzVuU8q0V8VPs4mU T2ODE93DkL0GObuNG372c6R8uGJXeMcB2gocWsWV2vBNB5v51nvQNOKC7ZGw3F5J Pd/SYkYfBGDxcmFJUxnrf9ggVF8rH8f71vdpnXCY5U+BWjzJV1w23nS2Ququc0LQ 0TnUgudP/JzRm3vwrhYZeiqztWE65SSnrvSg9megahE6PH8TG74= -----END CERTIFICATE-----Generated at Fri Sep 5 10:13:42 2025 by rpki-client