$ rpki-client -vvf repo-rpki.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.mft File: FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.mft (raw, json) Hash identifier: dNZ1k2GODKA3Eq8lt6YjMov7SFzaiUTWNturUf1E524= Subject key identifier: 4C:E7:4E:0C:C3:75:87:08:0E:77:1F:A6:4D:D1:85:A5:8C:E7:4C:23 Authority key identifier: FE:79:E5:6C:BE:99:C7:73:CD:72:1D:F7:AB:0E:5C:A2:80:9D:07:39 Certificate issuer: /CN=FE79E56CBE99C773CD721DF7AB0E5CA2809D0739 Certificate serial: 25CA555309234811BDECDFBE4630AE566D2CAF7D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.mft Manifest number: D4 Signing time: Mon 21 Jul 2025 02:03:27 +0000 Manifest this update: Mon 21 Jul 2025 01:58:27 +0000 Manifest next update: Thu 24 Jul 2025 08:33:27 +0000 Files and hashes: 1: 3135372e32302e3232332e302f32342d3234203d3e20313532343337.roa (hash: wm/OwjMJ3Mw2kK4LX3m4F0/jsfG1NixZfT/MRVx2gUc=) 2: 3135372e32302e3232322e302f32342d3234203d3e20313532343337.roa (hash: xA0yIhK/pel57ulFN3HOQ4z99q0P1jOo4pSKaz4ovzA=) 3: FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.crl (hash: H04Uh0zD0nMF1JouIDYhUXci0S40rUgwUh80D82Hw5E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.crl rsync://repo-rpki.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 08:33:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:ca:55:53:09:23:48:11:bd:ec:df:be:46:30:ae:56:6d:2c:af:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FE79E56CBE99C773CD721DF7AB0E5CA2809D0739 Validity Not Before: Jul 21 01:58:27 2025 GMT Not After : Jul 24 08:33:27 2025 GMT Subject: CN=4CE74E0CC37587080E771FA64DD185A58CE74C23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:21:1d:87:40:02:62:87:05:4a:91:89:9d:a1: 3e:44:3c:8d:fe:46:ee:91:87:86:7e:67:92:42:eb: 99:f1:63:42:bf:c0:88:57:25:ec:cb:f1:49:c3:51: de:8e:0b:79:0a:b5:5f:49:ea:7c:36:66:f7:44:c3: 2f:29:90:e3:42:97:fa:76:e9:7e:43:1a:b2:31:33: c3:0d:3b:79:77:76:8d:a0:2a:f2:81:5b:9b:51:3e: 99:89:ee:c5:3a:c2:eb:f8:97:0a:53:9b:36:53:21: ea:50:ab:4b:ec:f5:07:48:2e:7f:cb:bd:17:99:8b: 92:83:c7:33:df:e6:aa:7d:36:8f:02:af:c7:fc:14: 32:38:a4:8a:68:24:fe:bc:f3:f9:aa:9b:d6:ab:c0: cf:44:19:16:dc:bd:66:b5:ae:30:fc:87:b5:4b:7d: 52:4e:62:ce:2f:13:94:75:36:32:ac:42:57:6b:7e: aa:30:83:0f:f2:fe:91:9f:f1:56:ea:a1:70:7a:49: cb:89:c7:e3:1e:49:6b:af:c1:46:27:7c:99:3e:20: ae:3f:f5:7e:24:ba:fb:ea:ca:37:8b:bf:e2:e9:6e: 80:5d:a9:71:b6:fa:0c:40:a0:49:80:65:96:f6:2b: 0a:6d:f9:44:f0:6d:9e:47:d6:19:7f:69:e9:e1:58: a6:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:E7:4E:0C:C3:75:87:08:0E:77:1F:A6:4D:D1:85:A5:8C:E7:4C:23 X509v3 Authority Key Identifier: keyid:FE:79:E5:6C:BE:99:C7:73:CD:72:1D:F7:AB:0E:5C:A2:80:9D:07:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:93:11:09:b3:40:e9:cf:66:b8:61:be:74:2c:aa:81:4f:bc: d6:53:87:34:a6:c1:5e:14:1d:ed:d6:d6:88:f6:37:72:70:c6: 26:2f:a3:ad:76:3e:0f:11:a0:5c:d9:dd:31:ce:29:b0:1d:a3: 09:ca:17:fd:51:b1:70:8b:33:e1:ab:22:de:81:a5:d3:d0:9e: 56:fa:96:01:0a:9b:9b:05:f1:33:83:f0:7c:1f:c3:74:51:bc: c8:90:ce:ae:6b:6f:75:bd:f0:46:09:1e:f0:1c:8f:6c:58:6d: 84:33:92:bd:bd:a6:98:f1:b9:bd:8c:9a:5e:e1:a2:61:1f:1b: 5f:d4:cf:59:21:be:af:5b:24:47:7c:84:88:72:48:a8:0a:ff: 96:8f:94:83:51:df:dc:f3:d1:a0:10:83:92:ad:d0:26:2a:df: 12:57:79:33:12:10:42:96:4c:d0:b1:96:9d:7c:03:fa:91:ef: ec:ee:97:6b:ea:3d:ac:a7:10:57:25:5e:49:98:84:11:02:ee: c3:9b:6d:59:78:72:81:c8:e2:6c:ee:e6:62:05:13:35:0f:62: 6e:fd:74:ad:5e:25:f0:d7:5c:b1:63:7c:eb:33:15:48:61:35: 3a:55:9b:58:0f:d6:30:54:98:da:45:8b:9d:3f:39:a2:da:5a: 54:8f:91:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJcpVUwkjSBG97N++RjCuVm0sr30wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkU3OUU1NkNCRTk5Qzc3M0NENzIxREY3QUIwRTVDQTI4 MDlEMDczOTAeFw0yNTA3MjEwMTU4MjdaFw0yNTA3MjQwODMzMjdaMDMxMTAvBgNV BAMTKDRDRTc0RTBDQzM3NTg3MDgwRTc3MUZBNjRERDE4NUE1OENFNzRDMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOIR2HQAJihwVKkYmdoT5EPI3+ Ru6Rh4Z+Z5JC65nxY0K/wIhXJezL8UnDUd6OC3kKtV9J6nw2ZvdEwy8pkONCl/p2 6X5DGrIxM8MNO3l3do2gKvKBW5tRPpmJ7sU6wuv4lwpTmzZTIepQq0vs9QdILn/L vReZi5KDxzPf5qp9No8Cr8f8FDI4pIpoJP688/mqm9arwM9EGRbcvWa1rjD8h7VL fVJOYs4vE5R1NjKsQldrfqowgw/y/pGf8VbqoXB6ScuJx+MeSWuvwUYnfJk+IK4/ 9X4kuvvqyjeLv+LpboBdqXG2+gxAoEmAZZb2Kwpt+UTwbZ5H1hl/aenhWKaLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTOdODMN1hwgOdx+mTdGFpYznTCMwHwYDVR0j BBgwFoAU/nnlbL6Zx3PNch33qw5cooCdBzkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MWYxNWExZC01ZGFjLTRjYzktODExYS1lNDljYjRlN2JjZTEvMC9GRTc5RTU2Q0JF OTlDNzczQ0Q3MjFERjdBQjBFNUNBMjgwOUQwNzM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkU3OUU1NkNCRTk5Qzc3M0NENzIxREY3QUIwRTVDQTI4MDlE MDczOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTFmMTVhMWQtNWRhYy00Y2M5LTgx MWEtZTQ5Y2I0ZTdiY2UxLzAvRkU3OUU1NkNCRTk5Qzc3M0NENzIxREY3QUIwRTVD QTI4MDlEMDczOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKyTEQmzQOnPZrhhvnQsqoFPvNZThzSmwV4U He3W1oj2N3JwxiYvo612Pg8RoFzZ3THOKbAdownKF/1RsXCLM+GrIt6BpdPQnlb6 lgEKm5sF8TOD8Hwfw3RRvMiQzq5rb3W98EYJHvAcj2xYbYQzkr29ppjxub2Mml7h omEfG1/Uz1khvq9bJEd8hIhySKgK/5aPlINR39zz0aAQg5Kt0CYq3xJXeTMSEEKW TNCxlp18A/qR7+zul2vqPaynEFclXkmYhBEC7sObbVl4coHI4mzu5mIFEzUPYm79 dK1eJfDXXLFjfOszFUhhNTpVm1gP1jBUmNpFi50/OaLaWlSPkf8= -----END CERTIFICATE-----Generated at Wed Jul 23 01:58:53 2025 by rpki-client