$ rpki-client -vvf repo-rpki.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.mft File: FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.mft (raw, json) Hash identifier: /C2LFDZTqN6SipRYLtTe8j5YFj1ETBuOpnXDWOzQZCk= Subject key identifier: 87:1D:64:AB:D0:04:2E:06:D1:1C:B7:CA:4D:41:BA:E6:87:E6:9F:A6 Authority key identifier: FE:79:E5:6C:BE:99:C7:73:CD:72:1D:F7:AB:0E:5C:A2:80:9D:07:39 Certificate issuer: /CN=FE79E56CBE99C773CD721DF7AB0E5CA2809D0739 Certificate serial: 4DDB07247F47A9F047C371FEEAF99305D048E6BD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.mft Manifest number: E9 Signing time: Sat 06 Sep 2025 10:31:16 +0000 Manifest this update: Sat 06 Sep 2025 10:26:16 +0000 Manifest next update: Tue 09 Sep 2025 19:34:16 +0000 Files and hashes: 1: 3135372e32302e3232322e302f32342d3234203d3e20313532343337.roa (hash: xA0yIhK/pel57ulFN3HOQ4z99q0P1jOo4pSKaz4ovzA=) 2: FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.crl (hash: zIfRSL+bVpUhCg9PmQJBO0saTV1WnNFPdoRkcZNWoLw=) 3: 3135372e32302e3232332e302f32342d3234203d3e20313532343337.roa (hash: wm/OwjMJ3Mw2kK4LX3m4F0/jsfG1NixZfT/MRVx2gUc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.crl rsync://repo-rpki.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 19:34:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:db:07:24:7f:47:a9:f0:47:c3:71:fe:ea:f9:93:05:d0:48:e6:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FE79E56CBE99C773CD721DF7AB0E5CA2809D0739 Validity Not Before: Sep 6 10:26:16 2025 GMT Not After : Sep 9 19:34:16 2025 GMT Subject: CN=871D64ABD0042E06D11CB7CA4D41BAE687E69FA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ee:55:8d:b4:c1:43:e8:5c:de:35:36:ef:1e: cf:fd:5f:65:ad:35:5a:79:07:b7:3d:ca:a8:2d:ed: 0e:04:2e:3d:64:da:1c:01:9c:0a:94:22:54:36:bd: 72:82:ac:51:69:cd:65:e6:7c:c0:f6:96:c5:2e:ff: 0c:56:b4:f0:8e:ac:b5:84:d2:24:b9:60:3e:83:21: 88:2b:56:55:6d:b4:fd:cf:98:0b:01:f9:ff:35:04: c5:34:c1:2f:15:d5:ff:8e:84:1b:9c:1a:fd:f4:9f: fb:35:6b:0e:c5:79:f8:90:41:09:9f:9f:fc:89:83: f1:e9:eb:6d:15:88:36:7e:23:a3:81:eb:8b:51:14: 58:75:e8:ba:6d:c0:23:f4:d4:d4:8f:65:fa:4d:14: 32:99:17:2c:65:06:f3:af:78:2d:4d:d9:9e:2c:5e: e3:83:81:f6:4a:f3:3b:8f:5b:d3:91:48:e2:45:23: 76:3e:84:ed:8d:38:67:34:f9:82:46:20:46:c9:9e: fe:d0:2f:01:91:cb:cc:8d:4d:a3:01:a4:60:ef:d0: 7e:33:01:da:77:27:c6:f6:6c:94:26:67:28:5b:0e: 87:e3:56:66:a5:75:d1:90:f4:5c:7e:18:23:ca:2b: fd:9e:ff:0a:2e:6d:18:65:c5:f2:26:5d:d4:b6:e1: da:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:1D:64:AB:D0:04:2E:06:D1:1C:B7:CA:4D:41:BA:E6:87:E6:9F:A6 X509v3 Authority Key Identifier: keyid:FE:79:E5:6C:BE:99:C7:73:CD:72:1D:F7:AB:0E:5C:A2:80:9D:07:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:22:8e:7a:8e:39:a2:8b:9e:75:e8:3c:e3:f7:4e:df:c7:fb: 4e:77:fd:6c:32:76:93:42:4b:ec:83:f8:d8:3f:dc:57:01:f7: 5f:3c:a2:cc:5e:ce:94:05:60:b3:2c:eb:25:1b:66:15:ba:98: 40:ad:6f:30:56:26:fd:c3:58:64:46:75:dc:e1:15:92:1e:13: 9e:c4:9b:b2:57:3f:52:61:f8:88:6b:97:5b:3f:1e:4f:15:a4: 5e:07:b6:70:f5:20:ab:c2:4f:d8:57:50:fc:65:d1:68:bc:71: d9:67:e9:b7:6c:44:b0:ae:1f:a6:d5:c4:77:03:ce:fe:74:25: 82:65:05:4d:94:fc:4e:ad:33:e0:cc:ca:f1:8e:91:31:52:09: a9:3d:11:e6:5d:ed:1d:26:9d:80:0f:d5:b7:44:b5:ee:0b:62: cd:12:97:cd:22:5f:22:95:72:1c:e2:36:a4:b3:f8:38:1f:80: a9:89:a1:85:dd:bf:4d:b6:ac:50:6b:1b:60:14:25:77:17:87: 0f:6b:92:11:a3:e9:bd:46:0f:55:35:4d:0b:ba:46:bd:20:df: 1f:d2:6d:c7:b8:48:21:59:06:6f:27:90:74:5b:d9:39:04:3d: cf:43:0f:c7:1c:10:28:aa:c2:d3:a2:4c:8f:40:48:3b:85:ab: 64:a7:5a:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTdsHJH9HqfBHw3H+6vmTBdBI5r0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkU3OUU1NkNCRTk5Qzc3M0NENzIxREY3QUIwRTVDQTI4 MDlEMDczOTAeFw0yNTA5MDYxMDI2MTZaFw0yNTA5MDkxOTM0MTZaMDMxMTAvBgNV BAMTKDg3MUQ2NEFCRDAwNDJFMDZEMTFDQjdDQTRENDFCQUU2ODdFNjlGQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX7lWNtMFD6FzeNTbvHs/9X2Wt NVp5B7c9yqgt7Q4ELj1k2hwBnAqUIlQ2vXKCrFFpzWXmfMD2lsUu/wxWtPCOrLWE 0iS5YD6DIYgrVlVttP3PmAsB+f81BMU0wS8V1f+OhBucGv30n/s1aw7FefiQQQmf n/yJg/Hp620ViDZ+I6OB64tRFFh16LptwCP01NSPZfpNFDKZFyxlBvOveC1N2Z4s XuODgfZK8zuPW9ORSOJFI3Y+hO2NOGc0+YJGIEbJnv7QLwGRy8yNTaMBpGDv0H4z Adp3J8b2bJQmZyhbDofjVmalddGQ9Fx+GCPKK/2e/woubRhlxfImXdS24dphAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhx1kq9AELgbRHLfKTUG65ofmn6YwHwYDVR0j BBgwFoAU/nnlbL6Zx3PNch33qw5cooCdBzkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MWYxNWExZC01ZGFjLTRjYzktODExYS1lNDljYjRlN2JjZTEvMC9GRTc5RTU2Q0JF OTlDNzczQ0Q3MjFERjdBQjBFNUNBMjgwOUQwNzM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkU3OUU1NkNCRTk5Qzc3M0NENzIxREY3QUIwRTVDQTI4MDlE MDczOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTFmMTVhMWQtNWRhYy00Y2M5LTgx MWEtZTQ5Y2I0ZTdiY2UxLzAvRkU3OUU1NkNCRTk5Qzc3M0NENzIxREY3QUIwRTVD QTI4MDlEMDczOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALYijnqOOaKLnnXoPOP3Tt/H+053/WwydpNC S+yD+Ng/3FcB9188osxezpQFYLMs6yUbZhW6mECtbzBWJv3DWGRGddzhFZIeE57E m7JXP1Jh+Ihrl1s/Hk8VpF4HtnD1IKvCT9hXUPxl0Wi8cdln6bdsRLCuH6bVxHcD zv50JYJlBU2U/E6tM+DMyvGOkTFSCak9EeZd7R0mnYAP1bdEte4LYs0Sl80iXyKV chziNqSz+DgfgKmJoYXdv022rFBrG2AUJXcXhw9rkhGj6b1GD1U1TQu6Rr0g3x/S bce4SCFZBm8nkHRb2TkEPc9DD8ccECiqwtOiTI9ASDuFq2SnWrE= -----END CERTIFICATE-----Generated at Mon Sep 8 05:09:27 2025 by rpki-client