$ rpki-client -vvf repo-rpki.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.mft File: FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.mft (raw, json) Hash identifier: +DmUXadCdUh+UxchQdE/SXL8/BVQAKhj0BwPiVBuiDo= Subject key identifier: 82:B9:9E:6F:FF:B3:27:07:C9:DF:AA:C3:03:0B:44:DD:C6:AD:81:2B Authority key identifier: FD:18:E3:EC:B5:F2:28:5C:07:51:C4:8E:AF:23:EF:21:0B:A8:FD:CC Certificate issuer: /CN=FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC Certificate serial: 0FF104648FDD5F328C96D956CA6871E901DC05E7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.mft Manifest number: F2 Signing time: Sun 07 Sep 2025 18:01:12 +0000 Manifest this update: Sun 07 Sep 2025 17:56:12 +0000 Manifest next update: Thu 11 Sep 2025 03:12:12 +0000 Files and hashes: 1: 3135372e32302e39352e302f32342d3234203d3e20313431363032.roa (hash: 88y84elDiek3O/IhTaNMS2vLlPQVqlAnqgDoLBdJafc=) 2: FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.crl (hash: bTmIOu+hyyxQ0LUUf/hrNr2GU4BuaAeHKhKsHQJ/eYQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.crl rsync://repo-rpki.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 03:12:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:f1:04:64:8f:dd:5f:32:8c:96:d9:56:ca:68:71:e9:01:dc:05:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC Validity Not Before: Sep 7 17:56:12 2025 GMT Not After : Sep 11 03:12:12 2025 GMT Subject: CN=82B99E6FFFB32707C9DFAAC3030B44DDC6AD812B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c2:3f:22:ab:80:6a:62:2c:aa:f8:99:97:74: 87:01:2f:4a:2a:20:b3:a7:ef:b6:6c:4f:c9:73:85: 47:e7:de:ef:cc:77:c4:c0:a6:8c:74:65:05:80:10: 83:e4:ee:f6:39:36:6b:4e:5a:35:4c:3f:c4:7f:03: ac:17:9d:3c:bc:99:30:52:12:ea:94:82:3a:e8:38: 19:5f:74:30:fc:e8:48:f3:dc:d1:ea:ea:f2:07:06: 49:f7:f7:13:12:10:f1:0a:7e:70:ab:29:54:55:fd: 47:00:a6:40:dd:a2:ad:55:8e:43:fc:65:ac:b2:98: 75:e2:dd:f4:d4:a8:7d:c7:d3:74:74:95:4f:4d:c0: df:0f:4f:3b:03:09:a2:f8:d4:d0:b8:ae:30:85:50: 96:71:31:d2:b7:88:59:6d:46:13:0c:46:c7:8d:61: c7:65:fc:93:86:3a:0c:6d:1d:ef:3b:7a:b9:a0:06: 67:1e:9b:57:67:06:ab:d4:3c:d3:b0:bd:6b:90:e7: db:dd:db:14:c3:28:c3:85:05:c4:ba:c7:ee:c6:18: b0:ed:d9:ab:4f:d4:1a:57:1b:59:40:03:7c:5a:4d: b7:1b:45:e9:54:23:8f:c3:ae:25:cc:c3:e4:7c:33: 45:03:28:98:69:70:25:23:b7:1c:bd:17:09:ca:df: a9:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:B9:9E:6F:FF:B3:27:07:C9:DF:AA:C3:03:0B:44:DD:C6:AD:81:2B X509v3 Authority Key Identifier: keyid:FD:18:E3:EC:B5:F2:28:5C:07:51:C4:8E:AF:23:EF:21:0B:A8:FD:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:3e:67:84:8c:c6:c2:15:c5:31:b1:a5:5f:67:e8:7e:4b:32: 4d:ea:fe:6b:33:c8:41:36:28:2d:ab:3e:a1:33:0c:aa:ff:f6: bd:49:af:52:9f:e3:82:e5:a2:be:9f:38:c6:a5:bf:d1:d1:69: da:9d:06:37:ac:8c:0b:48:28:91:1c:f0:a2:48:23:53:36:61: cd:77:90:a6:76:0c:a4:44:dd:7c:fa:76:df:16:5d:40:b9:f7: 89:22:a8:69:37:3b:d5:d4:28:c4:9e:b5:13:d3:98:99:1a:f8: b8:a3:0d:f1:bf:b0:bf:cb:62:0b:79:c8:38:93:b2:75:ad:09: 09:e7:02:b6:58:d9:1f:a0:8f:57:86:84:21:69:30:84:73:23: 84:f7:36:c7:9e:bd:f7:ab:11:e2:c2:05:ed:87:42:43:9c:8a: 0d:b2:e5:65:01:11:bb:8e:9b:94:85:23:8d:60:82:80:14:f6: 29:ad:a2:b4:89:fc:f9:d5:f2:65:7b:27:08:d6:3d:66:ed:a4: 49:47:2a:92:5a:d0:59:77:6b:05:76:73:27:c1:7e:b2:69:4f: 19:ca:07:66:98:90:59:77:65:b8:4a:f1:63:ca:d4:9f:5e:2c: c8:d6:b3:d7:db:30:dd:79:ba:d9:52:f8:e4:35:53:82:80:eb: 3c:15:59:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD/EEZI/dXzKMltlWymhx6QHcBecwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkQxOEUzRUNCNUYyMjg1QzA3NTFDNDhFQUYyM0VGMjEw QkE4RkRDQzAeFw0yNTA5MDcxNzU2MTJaFw0yNTA5MTEwMzEyMTJaMDMxMTAvBgNV BAMTKDgyQjk5RTZGRkZCMzI3MDdDOURGQUFDMzAzMEI0NEREQzZBRDgxMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAwj8iq4BqYiyq+JmXdIcBL0oq ILOn77ZsT8lzhUfn3u/Md8TApox0ZQWAEIPk7vY5NmtOWjVMP8R/A6wXnTy8mTBS EuqUgjroOBlfdDD86Ejz3NHq6vIHBkn39xMSEPEKfnCrKVRV/UcApkDdoq1VjkP8 ZayymHXi3fTUqH3H03R0lU9NwN8PTzsDCaL41NC4rjCFUJZxMdK3iFltRhMMRseN Ycdl/JOGOgxtHe87ermgBmcem1dnBqvUPNOwvWuQ59vd2xTDKMOFBcS6x+7GGLDt 2atP1BpXG1lAA3xaTbcbRelUI4/DriXMw+R8M0UDKJhpcCUjtxy9FwnK36kZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgrmeb/+zJwfJ36rDAwtE3catgSswHwYDVR0j BBgwFoAU/Rjj7LXyKFwHUcSOryPvIQuo/cwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YWUxM2JhYy05MWMxLTQ2M2ItODMzMy02NGVlYzZkMjc5N2UvMC9GRDE4RTNFQ0I1 RjIyODVDMDc1MUM0OEVBRjIzRUYyMTBCQThGRENDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkQxOEUzRUNCNUYyMjg1QzA3NTFDNDhFQUYyM0VGMjEwQkE4 RkRDQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGFlMTNiYWMtOTFjMS00NjNiLTgz MzMtNjRlZWM2ZDI3OTdlLzAvRkQxOEUzRUNCNUYyMjg1QzA3NTFDNDhFQUYyM0VG MjEwQkE4RkRDQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH0+Z4SMxsIVxTGxpV9n6H5LMk3q/mszyEE2 KC2rPqEzDKr/9r1Jr1Kf44Llor6fOMalv9HRadqdBjesjAtIKJEc8KJII1M2Yc13 kKZ2DKRE3Xz6dt8WXUC594kiqGk3O9XUKMSetRPTmJka+LijDfG/sL/LYgt5yDiT snWtCQnnArZY2R+gj1eGhCFpMIRzI4T3NseevferEeLCBe2HQkOcig2y5WUBEbuO m5SFI41ggoAU9imtorSJ/PnV8mV7JwjWPWbtpElHKpJa0Fl3awV2cyfBfrJpTxnK B2aYkFl3ZbhK8WPK1J9eLMjWs9fbMN15utlS+OQ1U4KA6zwVWS4= -----END CERTIFICATE-----Generated at Mon Sep 8 05:11:15 2025 by rpki-client