$ rpki-client -vvf repo-rpki.idnic.net/repo/fcde1cfd-cbbc-4f08-89cb-435a5911f2c2/0/F95ABFECD1F2CDA83B975C1651646721A611A82E.mft File: F95ABFECD1F2CDA83B975C1651646721A611A82E.mft (raw, json) Hash identifier: U5iTbcsHMa4Y2woiUTPf1inY+TkA2d+kbL9Hq4RVDKc= Subject key identifier: DA:1F:E0:94:31:10:2E:2C:27:E3:0C:9C:49:8D:4F:43:CF:2A:62:3F Authority key identifier: F9:5A:BF:EC:D1:F2:CD:A8:3B:97:5C:16:51:64:67:21:A6:11:A8:2E Certificate issuer: /CN=F95ABFECD1F2CDA83B975C1651646721A611A82E Certificate serial: 4EEDFECA3DBAE13E9900CBA2BCF30D1F531184BB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F95ABFECD1F2CDA83B975C1651646721A611A82E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fcde1cfd-cbbc-4f08-89cb-435a5911f2c2/0/F95ABFECD1F2CDA83B975C1651646721A611A82E.mft Manifest number: 019B Signing time: Wed 03 Sep 2025 19:02:13 +0000 Manifest this update: Wed 03 Sep 2025 18:57:13 +0000 Manifest next update: Sun 07 Sep 2025 04:14:13 +0000 Files and hashes: 1: 3130332e3132372e3135342e302f32342d3234203d3e20313530353138.roa (hash: G6TGVbIdxDM3PGXqhIliPZL2762vyLXXOxGMZfTWgBw=) 2: F95ABFECD1F2CDA83B975C1651646721A611A82E.crl (hash: rt9B+GSd96hK7a8CBeqnFESKDTRQ9xYEBIelKBYWUNo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fcde1cfd-cbbc-4f08-89cb-435a5911f2c2/0/F95ABFECD1F2CDA83B975C1651646721A611A82E.crl rsync://repo-rpki.idnic.net/repo/fcde1cfd-cbbc-4f08-89cb-435a5911f2c2/0/F95ABFECD1F2CDA83B975C1651646721A611A82E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F95ABFECD1F2CDA83B975C1651646721A611A82E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 04:14:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:ed:fe:ca:3d:ba:e1:3e:99:00:cb:a2:bc:f3:0d:1f:53:11:84:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F95ABFECD1F2CDA83B975C1651646721A611A82E Validity Not Before: Sep 3 18:57:13 2025 GMT Not After : Sep 7 04:14:13 2025 GMT Subject: CN=DA1FE09431102E2C27E30C9C498D4F43CF2A623F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b6:79:b5:ad:23:2a:99:dc:01:3e:3b:28:fa: cf:a1:4f:cd:fb:a3:d9:63:80:e7:3d:1e:c5:e0:60: a6:28:53:e3:03:87:df:51:fa:a6:8d:64:87:10:a7: 98:74:2e:19:df:44:c7:4d:f1:e1:57:86:87:69:e9: 2d:02:79:e8:de:89:bf:c6:58:61:ee:c9:c6:37:c3: 79:2e:ff:49:49:8b:85:ee:ad:18:44:d8:d3:55:e8: 41:f7:0b:09:39:7b:d3:62:53:65:d1:c3:31:99:55: dc:63:11:50:ef:a5:54:a2:dc:f4:62:d8:0f:b8:fd: 4a:bf:6e:c1:4f:d3:50:7b:e7:b7:9a:e1:f7:38:d9: 01:dd:a6:87:2a:0b:3b:3a:5e:df:4c:4a:22:67:20: d2:c5:11:3f:17:67:ba:a6:ad:ac:74:80:ff:65:ae: f4:dd:c1:ca:49:8a:07:70:ab:d4:11:28:06:1d:2b: b2:6e:e5:07:cf:b8:69:b6:b4:a7:f5:41:3f:37:82: ed:41:5e:61:04:6d:12:df:0a:59:f8:f7:14:3d:00: f8:ef:ac:a8:22:0b:77:33:63:6d:7b:6a:97:80:d4: 08:53:b0:d4:f0:6c:57:95:f7:fa:8b:78:4f:9b:55: 02:5e:51:fd:4a:a7:ce:4f:46:52:11:77:c4:dd:50: ad:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:1F:E0:94:31:10:2E:2C:27:E3:0C:9C:49:8D:4F:43:CF:2A:62:3F X509v3 Authority Key Identifier: keyid:F9:5A:BF:EC:D1:F2:CD:A8:3B:97:5C:16:51:64:67:21:A6:11:A8:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fcde1cfd-cbbc-4f08-89cb-435a5911f2c2/0/F95ABFECD1F2CDA83B975C1651646721A611A82E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F95ABFECD1F2CDA83B975C1651646721A611A82E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fcde1cfd-cbbc-4f08-89cb-435a5911f2c2/0/F95ABFECD1F2CDA83B975C1651646721A611A82E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:b3:b7:9c:ea:74:4f:01:e4:3b:b1:ce:18:28:ef:b6:22:98: 03:a3:df:d9:a5:58:fa:dd:32:72:22:5d:4d:05:14:62:91:7b: 25:5f:19:56:8b:d0:a4:4e:85:22:7a:d6:b3:6b:88:cb:70:11: 24:5c:f8:32:85:2c:c8:f1:2c:c0:13:10:b1:98:75:8e:99:81: 80:4d:83:57:1a:a9:4a:b9:cb:5b:4e:77:40:d7:97:46:6c:54: 5f:57:7b:0a:19:ee:f5:2d:a0:a3:62:74:12:e8:95:d0:12:6a: 3f:cc:8b:3e:a9:c1:4b:e9:2f:24:b6:14:27:31:a2:9b:9a:28: 40:00:6c:ca:36:57:03:9e:4f:a6:46:76:10:ec:41:6d:d3:39: 0d:14:0e:5a:e0:57:4b:c6:05:e3:73:26:8f:24:a3:08:2e:1c: f3:54:44:96:d0:b5:f0:e7:8f:81:9f:40:61:8d:30:30:09:65: 91:2f:5c:70:b4:22:45:c4:70:d9:2b:66:41:9e:0d:e7:6e:62: 41:46:fb:23:94:e1:53:69:81:99:a4:a7:8e:17:d4:89:75:1f: 34:27:49:5f:ba:7d:1e:c1:1d:a2:c6:f4:8f:79:f0:d4:1b:02: 62:6f:a2:0c:22:fa:c3:1d:fe:18:b7:7a:6a:68:17:a1:49:b3: 58:c8:bd:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTu3+yj264T6ZAMuivPMNH1MRhLswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjk1QUJGRUNEMUYyQ0RBODNCOTc1QzE2NTE2NDY3MjFB NjExQTgyRTAeFw0yNTA5MDMxODU3MTNaFw0yNTA5MDcwNDE0MTNaMDMxMTAvBgNV BAMTKERBMUZFMDk0MzExMDJFMkMyN0UzMEM5QzQ5OEQ0RjQzQ0YyQTYyM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0tnm1rSMqmdwBPjso+s+hT837 o9ljgOc9HsXgYKYoU+MDh99R+qaNZIcQp5h0LhnfRMdN8eFXhodp6S0Ceejeib/G WGHuycY3w3ku/0lJi4XurRhE2NNV6EH3Cwk5e9NiU2XRwzGZVdxjEVDvpVSi3PRi 2A+4/Uq/bsFP01B757ea4fc42QHdpocqCzs6Xt9MSiJnINLFET8XZ7qmrax0gP9l rvTdwcpJigdwq9QRKAYdK7Ju5QfPuGm2tKf1QT83gu1BXmEEbRLfCln49xQ9APjv rKgiC3czY217apeA1AhTsNTwbFeV9/qLeE+bVQJeUf1Kp85PRlIRd8TdUK2vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2h/glDEQLiwn4wycSY1PQ88qYj8wHwYDVR0j BBgwFoAU+Vq/7NHyzag7l1wWUWRnIaYRqC4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m Y2RlMWNmZC1jYmJjLTRmMDgtODljYi00MzVhNTkxMWYyYzIvMC9GOTVBQkZFQ0Qx RjJDREE4M0I5NzVDMTY1MTY0NjcyMUE2MTFBODJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjk1QUJGRUNEMUYyQ0RBODNCOTc1QzE2NTE2NDY3MjFBNjEx QTgyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmNkZTFjZmQtY2JiYy00ZjA4LTg5 Y2ItNDM1YTU5MTFmMmMyLzAvRjk1QUJGRUNEMUYyQ0RBODNCOTc1QzE2NTE2NDY3 MjFBNjExQTgyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK+zt5zqdE8B5Duxzhgo77YimAOj39mlWPrd MnIiXU0FFGKReyVfGVaL0KROhSJ61rNriMtwESRc+DKFLMjxLMATELGYdY6ZgYBN g1caqUq5y1tOd0DXl0ZsVF9XewoZ7vUtoKNidBLoldASaj/Miz6pwUvpLyS2FCcx opuaKEAAbMo2VwOeT6ZGdhDsQW3TOQ0UDlrgV0vGBeNzJo8kowguHPNURJbQtfDn j4GfQGGNMDAJZZEvXHC0IkXEcNkrZkGeDeduYkFG+yOU4VNpgZmkp44X1Il1HzQn SV+6fR7BHaLG9I958NQbAmJvogwi+sMd/hi3empoF6FJs1jIvbQ= -----END CERTIFICATE-----Generated at Fri Sep 5 10:09:31 2025 by rpki-client