$ rpki-client -vvf repo-rpki.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.mft File: FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.mft (raw, json) Hash identifier: Ki3VvpjP5vDmpDkputMxsVj/Rpk5j+2ByVREyCKXHfA= Subject key identifier: CC:3B:89:50:CD:F7:8E:92:F6:85:3C:C5:94:64:6F:A4:C6:DB:3B:E8 Authority key identifier: FD:18:E3:EC:B5:F2:28:5C:07:51:C4:8E:AF:23:EF:21:0B:A8:FD:CC Certificate issuer: /CN=FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC Certificate serial: 6DBE32AED615B3C9ADE1FFBE11BA38AFE60BB92F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.mft Manifest number: DD Signing time: Mon 21 Jul 2025 04:21:10 +0000 Manifest this update: Mon 21 Jul 2025 04:16:10 +0000 Manifest next update: Thu 24 Jul 2025 13:57:10 +0000 Files and hashes: 1: FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.crl (hash: L7KCdntuRQKhny5hdkXLJ9+b4znnTc/NeX15nR4EgUQ=) 2: 3135372e32302e39352e302f32342d3234203d3e20313431363032.roa (hash: 88y84elDiek3O/IhTaNMS2vLlPQVqlAnqgDoLBdJafc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.crl rsync://repo-rpki.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 13:57:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:be:32:ae:d6:15:b3:c9:ad:e1:ff:be:11:ba:38:af:e6:0b:b9:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC Validity Not Before: Jul 21 04:16:10 2025 GMT Not After : Jul 24 13:57:10 2025 GMT Subject: CN=CC3B8950CDF78E92F6853CC594646FA4C6DB3BE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:b8:25:4d:df:ee:51:99:35:4b:a1:82:e2:7a: 25:8b:43:81:ce:11:13:f0:8e:2a:4d:cb:28:bf:bc: 1c:2b:73:eb:53:60:db:10:0b:d8:c2:86:c9:73:74: 08:c1:30:80:4b:56:4e:39:e9:21:27:f4:ed:c3:ae: 34:95:1d:df:da:5a:1c:27:b2:a5:28:a2:31:b8:e0: bd:98:ca:83:7e:6c:df:a3:a1:11:3f:c6:86:51:c9: 6a:f8:ea:5a:e9:04:95:52:04:32:d3:7e:04:66:e6: 1e:64:20:b2:47:7c:61:ac:f7:75:99:24:28:5d:d0: 70:53:b3:42:d0:7b:61:a3:e9:04:22:63:4d:78:9d: 64:66:75:5b:4e:3b:8c:e2:00:b5:5b:03:3a:20:fa: 68:ec:29:b9:1b:86:05:5a:e2:4f:80:aa:91:23:36: 9b:05:20:41:d5:b4:42:b7:d9:8f:b4:b6:e1:a9:21: 87:60:a4:1c:9b:d5:60:a4:b4:51:3d:55:49:ef:f2: 4a:cd:ea:bf:36:f8:f8:ce:14:2a:9f:1e:24:f2:77: 96:d2:09:00:0c:ee:51:93:56:3f:61:2d:1e:7d:62: dc:fa:46:35:88:68:e7:7d:ac:a0:d9:93:54:ba:ed: c2:78:fd:fb:bb:42:b4:6a:1d:55:be:ad:d2:5e:2d: f6:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:3B:89:50:CD:F7:8E:92:F6:85:3C:C5:94:64:6F:A4:C6:DB:3B:E8 X509v3 Authority Key Identifier: keyid:FD:18:E3:EC:B5:F2:28:5C:07:51:C4:8E:AF:23:EF:21:0B:A8:FD:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:32:43:9b:72:cb:50:e0:d8:b8:d8:b7:a0:da:9b:78:d2:8a: 89:86:02:36:91:87:e3:a8:7c:4d:32:d4:ba:85:30:df:6d:b6: e1:86:ea:9e:97:54:65:a6:1d:53:15:54:c3:2a:8a:13:12:bf: 25:74:cc:52:97:95:1b:67:1d:33:66:ec:92:0f:dd:c8:76:cf: 8d:89:3f:3c:18:7e:5c:30:c6:57:98:68:33:9b:67:cd:f0:5a: 89:95:4b:d2:16:83:19:c4:e1:36:5c:9f:cb:d7:d4:79:77:a4: 82:5a:36:e6:49:0a:d6:33:1b:21:f9:ae:d5:e0:f5:95:24:37: dd:1a:89:9e:f1:a3:3f:65:a7:cc:a4:22:f8:22:18:9d:7f:8c: dd:81:28:dd:90:ed:02:c3:7f:a1:35:da:54:a5:9a:ea:1b:19: 7e:d4:16:eb:e7:79:47:e2:73:73:3f:7d:c7:95:e0:52:69:cf: 3e:21:80:2a:18:13:88:29:8a:cf:aa:47:a2:c4:0a:ec:17:81: 6e:63:65:00:86:26:f9:e2:43:1a:85:a5:b7:fa:ba:1d:c0:1d: 07:d6:27:5e:3b:d3:2d:1d:58:87:89:42:d8:f1:97:c4:b4:15: 26:ca:de:08:00:eb:0b:3e:d6:a1:a3:36:09:a7:d4:ac:36:5e: 36:aa:b1:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbb4yrtYVs8mt4f++Ebo4r+YLuS8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkQxOEUzRUNCNUYyMjg1QzA3NTFDNDhFQUYyM0VGMjEw QkE4RkRDQzAeFw0yNTA3MjEwNDE2MTBaFw0yNTA3MjQxMzU3MTBaMDMxMTAvBgNV BAMTKENDM0I4OTUwQ0RGNzhFOTJGNjg1M0NDNTk0NjQ2RkE0QzZEQjNCRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcuCVN3+5RmTVLoYLieiWLQ4HO ERPwjipNyyi/vBwrc+tTYNsQC9jChslzdAjBMIBLVk456SEn9O3DrjSVHd/aWhwn sqUoojG44L2YyoN+bN+joRE/xoZRyWr46lrpBJVSBDLTfgRm5h5kILJHfGGs93WZ JChd0HBTs0LQe2Gj6QQiY014nWRmdVtOO4ziALVbAzog+mjsKbkbhgVa4k+AqpEj NpsFIEHVtEK32Y+0tuGpIYdgpByb1WCktFE9VUnv8krN6r82+PjOFCqfHiTyd5bS CQAM7lGTVj9hLR59Ytz6RjWIaOd9rKDZk1S67cJ4/fu7QrRqHVW+rdJeLfaHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzDuJUM33jpL2hTzFlGRvpMbbO+gwHwYDVR0j BBgwFoAU/Rjj7LXyKFwHUcSOryPvIQuo/cwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YWUxM2JhYy05MWMxLTQ2M2ItODMzMy02NGVlYzZkMjc5N2UvMC9GRDE4RTNFQ0I1 RjIyODVDMDc1MUM0OEVBRjIzRUYyMTBCQThGRENDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkQxOEUzRUNCNUYyMjg1QzA3NTFDNDhFQUYyM0VGMjEwQkE4 RkRDQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGFlMTNiYWMtOTFjMS00NjNiLTgz MzMtNjRlZWM2ZDI3OTdlLzAvRkQxOEUzRUNCNUYyMjg1QzA3NTFDNDhFQUYyM0VG MjEwQkE4RkRDQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHQyQ5tyy1Dg2LjYt6Dam3jSiomGAjaRh+Oo fE0y1LqFMN9ttuGG6p6XVGWmHVMVVMMqihMSvyV0zFKXlRtnHTNm7JIP3ch2z42J PzwYflwwxleYaDObZ83wWomVS9IWgxnE4TZcn8vX1Hl3pIJaNuZJCtYzGyH5rtXg 9ZUkN90aiZ7xoz9lp8ykIvgiGJ1/jN2BKN2Q7QLDf6E12lSlmuobGX7UFuvneUfi c3M/fceV4FJpzz4hgCoYE4gpis+qR6LECuwXgW5jZQCGJvniQxqFpbf6uh3AHQfW J1470y0dWIeJQtjxl8S0FSbK3ggA6ws+1qGjNgmn1Kw2XjaqsUU= -----END CERTIFICATE-----Generated at Tue Jul 22 11:48:40 2025 by rpki-client