$ rpki-client -vvf repo-rpki.idnic.net/repo/a7afd57a-e6de-4a5f-b5c6-10865d5a8c98/0/FE5652AD4702104DB082C396B05EE5D04542E7D7.mft File: FE5652AD4702104DB082C396B05EE5D04542E7D7.mft (raw, json) Hash identifier: Z526laXluKD4/I9V7D/hEIlgprnWZbE4VFfKmpoafOc= Subject key identifier: A9:54:96:D7:82:43:E7:01:DB:99:D9:06:83:CD:B3:99:E8:6C:76:7A Authority key identifier: FE:56:52:AD:47:02:10:4D:B0:82:C3:96:B0:5E:E5:D0:45:42:E7:D7 Certificate issuer: /CN=FE5652AD4702104DB082C396B05EE5D04542E7D7 Certificate serial: 0C7E83B1DA34FFB740FC30BAA3714C90A2B81BFD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE5652AD4702104DB082C396B05EE5D04542E7D7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a7afd57a-e6de-4a5f-b5c6-10865d5a8c98/0/FE5652AD4702104DB082C396B05EE5D04542E7D7.mft Manifest number: 015B Signing time: Sat 06 Sep 2025 12:21:55 +0000 Manifest this update: Sat 06 Sep 2025 12:16:55 +0000 Manifest next update: Tue 09 Sep 2025 12:26:55 +0000 Files and hashes: 1: FE5652AD4702104DB082C396B05EE5D04542E7D7.crl (hash: 3gE7nOUjpc4KnmY32oaAsxD63Hg86rolqs+pJZTTlnA=) 2: 3130332e3233392e32302e302f32342d3234203d3e20313531353139.roa (hash: 20qa29YtuQDpydBxT+l3i2qfQTa2+tFQJ7mFZgoSVhk=) 3: 3130332e3233392e32302e302f32332d3234203d3e20313531353139.roa (hash: J6vL2iPNUwb9fYjqqj1vv1gpk3+iSC5RPrrqhYMFLI8=) 4: 3130332e3233392e32312e302f32342d3234203d3e20313531353139.roa (hash: 03BXaxAzi9VaO+DQQ6QWjZsMJ2gPh3wF9aEYxb1vAPc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a7afd57a-e6de-4a5f-b5c6-10865d5a8c98/0/FE5652AD4702104DB082C396B05EE5D04542E7D7.crl rsync://repo-rpki.idnic.net/repo/a7afd57a-e6de-4a5f-b5c6-10865d5a8c98/0/FE5652AD4702104DB082C396B05EE5D04542E7D7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE5652AD4702104DB082C396B05EE5D04542E7D7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 12:26:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:7e:83:b1:da:34:ff:b7:40:fc:30:ba:a3:71:4c:90:a2:b8:1b:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FE5652AD4702104DB082C396B05EE5D04542E7D7 Validity Not Before: Sep 6 12:16:55 2025 GMT Not After : Sep 9 12:26:55 2025 GMT Subject: CN=A95496D78243E701DB99D90683CDB399E86C767A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:77:ae:56:7e:8b:04:53:b2:9a:f7:13:11:67: 98:dc:eb:d2:f6:32:38:a7:6f:99:97:ce:46:ba:70: 71:ba:31:64:b9:cc:06:cb:ad:7d:a5:b2:aa:21:18: d7:b4:4d:63:8c:70:64:86:90:14:28:98:69:8e:ac: eb:9b:53:04:47:3f:30:ff:16:d4:2e:04:e0:45:41: 27:59:28:94:4d:ba:47:94:c9:d3:52:7a:c9:a7:9b: f9:2f:70:d5:a7:18:5a:c1:91:47:0b:e3:b2:7f:6a: 56:71:2c:d3:5a:6d:6c:0e:37:51:35:63:db:68:85: 2b:c2:0a:76:3c:dc:a0:56:ee:5f:70:ea:10:3c:47: dd:6d:b2:2b:9e:18:ae:79:e3:07:b5:15:98:36:dc: e3:17:85:c3:c4:b8:14:e9:d5:7b:f7:df:6c:e7:0e: 4b:b8:73:f6:21:3f:69:25:fb:15:ca:0d:7d:b4:92: 5d:82:45:e0:e8:27:2a:3b:0f:67:5b:b3:c4:d2:0c: 9a:04:9e:37:bd:e0:7c:07:f4:e0:f8:5d:79:c1:6c: 6f:74:15:5a:65:b8:81:d3:10:f2:b7:02:4e:20:09: bb:a5:c7:ce:4f:93:78:1a:e7:84:21:86:d3:e5:6c: 2f:bc:2a:f9:58:ea:c4:10:3c:88:75:36:f9:71:2a: 01:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:54:96:D7:82:43:E7:01:DB:99:D9:06:83:CD:B3:99:E8:6C:76:7A X509v3 Authority Key Identifier: keyid:FE:56:52:AD:47:02:10:4D:B0:82:C3:96:B0:5E:E5:D0:45:42:E7:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a7afd57a-e6de-4a5f-b5c6-10865d5a8c98/0/FE5652AD4702104DB082C396B05EE5D04542E7D7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE5652AD4702104DB082C396B05EE5D04542E7D7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7afd57a-e6de-4a5f-b5c6-10865d5a8c98/0/FE5652AD4702104DB082C396B05EE5D04542E7D7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:f0:67:e2:ba:17:d5:77:5a:a1:70:a5:ad:f0:71:58:d3:51: df:86:75:11:d8:4a:0c:18:c7:ac:61:86:98:ab:58:1b:f2:49: 1e:9d:02:2c:3d:72:ce:8e:f8:67:1f:e5:dd:74:9c:cd:b5:11: 3b:2e:d7:40:9f:9c:d1:56:0e:3d:58:71:2e:81:35:c5:a2:fc: 96:1b:45:56:f6:af:86:cc:20:ab:7c:01:f7:f9:3c:29:7a:30: b9:20:8f:1e:30:36:b1:6d:7a:1e:7a:6d:6a:1c:47:bc:5d:4c: 85:6a:2d:2a:8f:34:12:b4:f0:c9:38:21:03:d6:e9:81:0a:fe: 15:e2:cd:f4:bc:05:bf:b3:91:18:61:dc:94:c2:c4:36:e3:a2: 76:4d:f3:53:08:0d:76:fb:3f:27:0f:62:f0:05:01:41:c5:f7: bc:57:05:11:05:fc:c4:ac:d6:6d:48:63:9c:12:c3:d0:0d:02: 05:2c:34:f7:b1:5d:bc:32:21:5b:8c:c4:b1:03:76:e9:0a:1a: 0a:c6:0e:78:ae:bf:6d:3f:ed:15:7e:bc:af:a7:9a:c4:02:41: a5:90:c8:29:ee:ee:c3:68:7f:98:00:dc:0a:e3:3d:da:e1:eb: 79:c5:95:8b:b5:65:9d:a2:43:ee:ce:51:59:ab:bf:00:a9:db: 05:d4:df:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDH6Dsdo0/7dA/DC6o3FMkKK4G/0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkU1NjUyQUQ0NzAyMTA0REIwODJDMzk2QjA1RUU1RDA0 NTQyRTdENzAeFw0yNTA5MDYxMjE2NTVaFw0yNTA5MDkxMjI2NTVaMDMxMTAvBgNV BAMTKEE5NTQ5NkQ3ODI0M0U3MDFEQjk5RDkwNjgzQ0RCMzk5RTg2Qzc2N0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzd65WfosEU7Ka9xMRZ5jc69L2 Mjinb5mXzka6cHG6MWS5zAbLrX2lsqohGNe0TWOMcGSGkBQomGmOrOubUwRHPzD/ FtQuBOBFQSdZKJRNukeUydNSesmnm/kvcNWnGFrBkUcL47J/alZxLNNabWwON1E1 Y9tohSvCCnY83KBW7l9w6hA8R91tsiueGK554we1FZg23OMXhcPEuBTp1Xv332zn Dku4c/YhP2kl+xXKDX20kl2CReDoJyo7D2dbs8TSDJoEnje94HwH9OD4XXnBbG90 FVpluIHTEPK3Ak4gCbulx85Pk3ga54QhhtPlbC+8KvlY6sQQPIh1NvlxKgHrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqVSW14JD5wHbmdkGg82zmehsdnowHwYDVR0j BBgwFoAU/lZSrUcCEE2wgsOWsF7l0EVC59cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h N2FmZDU3YS1lNmRlLTRhNWYtYjVjNi0xMDg2NWQ1YThjOTgvMC9GRTU2NTJBRDQ3 MDIxMDREQjA4MkMzOTZCMDVFRTVEMDQ1NDJFN0Q3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkU1NjUyQUQ0NzAyMTA0REIwODJDMzk2QjA1RUU1RDA0NTQy RTdENy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTdhZmQ1N2EtZTZkZS00YTVmLWI1 YzYtMTA4NjVkNWE4Yzk4LzAvRkU1NjUyQUQ0NzAyMTA0REIwODJDMzk2QjA1RUU1 RDA0NTQyRTdENy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGTwZ+K6F9V3WqFwpa3wcVjTUd+GdRHYSgwY x6xhhpirWBvySR6dAiw9cs6O+Gcf5d10nM21ETsu10CfnNFWDj1YcS6BNcWi/JYb RVb2r4bMIKt8Aff5PCl6MLkgjx4wNrFteh56bWocR7xdTIVqLSqPNBK08Mk4IQPW 6YEK/hXizfS8Bb+zkRhh3JTCxDbjonZN81MIDXb7PycPYvAFAUHF97xXBREF/MSs 1m1IY5wSw9ANAgUsNPexXbwyIVuMxLEDdukKGgrGDniuv20/7RV+vK+nmsQCQaWQ yCnu7sNof5gA3ArjPdrh63nFlYu1ZZ2iQ+7OUVmrvwCp2wXU34I= -----END CERTIFICATE-----Generated at Sun Sep 7 15:34:23 2025 by rpki-client