$ rpki-client -vvf repo-rpki.idnic.net/repo/0546183c-d9ef-4c33-be99-e84bedb10b68/0/FC4A38DAAF15E8284373FD82AE59B27383D4A68F.mft File: FC4A38DAAF15E8284373FD82AE59B27383D4A68F.mft (raw, json) Hash identifier: iA/zCclf0LGWnYst5Chh4ISDEPC7QvIb0yeNSMzNeRY= Subject key identifier: C7:73:84:BC:1A:89:DF:FD:29:04:F8:C1:3C:C6:3B:C4:5C:2D:00:D7 Authority key identifier: FC:4A:38:DA:AF:15:E8:28:43:73:FD:82:AE:59:B2:73:83:D4:A6:8F Certificate issuer: /CN=FC4A38DAAF15E8284373FD82AE59B27383D4A68F Certificate serial: 724135987AE0E1AB774C96B46EBC2BF6793CDE2C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC4A38DAAF15E8284373FD82AE59B27383D4A68F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0546183c-d9ef-4c33-be99-e84bedb10b68/0/FC4A38DAAF15E8284373FD82AE59B27383D4A68F.mft Manifest number: 04F0 Signing time: Sun 20 Jul 2025 18:51:13 +0000 Manifest this update: Sun 20 Jul 2025 18:46:13 +0000 Manifest next update: Thu 24 Jul 2025 04:47:13 +0000 Files and hashes: 1: 3130332e3133372e3134342e302f32332d3234203d3e20313338383439.roa (hash: UgrkGIb65avdk0c9bxD0Hl16cvFjKtiPVw8WTE1xwNs=) 2: FC4A38DAAF15E8284373FD82AE59B27383D4A68F.crl (hash: 4n7Bf3rxLPrl7Bw7sJjpdSX1JebSE/FtvlTg8raV6F0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0546183c-d9ef-4c33-be99-e84bedb10b68/0/FC4A38DAAF15E8284373FD82AE59B27383D4A68F.crl rsync://repo-rpki.idnic.net/repo/0546183c-d9ef-4c33-be99-e84bedb10b68/0/FC4A38DAAF15E8284373FD82AE59B27383D4A68F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC4A38DAAF15E8284373FD82AE59B27383D4A68F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 04:47:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:41:35:98:7a:e0:e1:ab:77:4c:96:b4:6e:bc:2b:f6:79:3c:de:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC4A38DAAF15E8284373FD82AE59B27383D4A68F Validity Not Before: Jul 20 18:46:13 2025 GMT Not After : Jul 24 04:47:13 2025 GMT Subject: CN=C77384BC1A89DFFD2904F8C13CC63BC45C2D00D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:fb:11:2b:c7:a7:ca:0b:25:e0:89:92:a4:28: ff:6c:e1:c7:f0:b9:b5:eb:9b:93:81:e5:b7:46:96: 55:2b:fb:74:ea:c5:7b:01:b9:ad:98:65:62:97:e0: e6:41:3e:79:b9:08:33:06:65:e4:26:0d:e5:2a:f4: fe:37:c7:23:95:21:2e:ad:54:b0:ab:69:9a:a5:fc: d5:76:fb:a0:1e:62:28:24:75:c7:7e:36:99:b3:89: 53:77:b3:c6:4c:8f:d2:ad:f7:63:be:fd:42:db:b4: fb:91:fc:04:e0:a8:c6:9d:13:58:14:66:71:39:65: ed:39:aa:68:75:b1:54:56:7c:59:1e:70:2e:99:71: 40:e3:67:ec:e6:71:6e:38:9f:73:85:8c:e4:83:b0: c5:2c:d2:ca:19:6d:e1:68:34:58:1a:fc:f0:01:6b: 02:f4:66:cc:77:99:b3:fa:20:e5:54:93:27:e3:c3: 32:ce:0f:e2:40:d7:8a:44:f2:0c:e8:b3:90:b3:db: 79:65:6c:7b:24:64:47:aa:49:c9:f3:1b:e4:fe:12: c2:4e:6d:7d:6f:a9:95:23:25:5a:59:b2:94:c2:ee: f1:84:80:7d:31:74:76:78:80:ee:7c:85:93:df:3d: 68:48:31:50:d1:74:6b:fa:30:6c:0e:df:fc:11:91: 9a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:73:84:BC:1A:89:DF:FD:29:04:F8:C1:3C:C6:3B:C4:5C:2D:00:D7 X509v3 Authority Key Identifier: keyid:FC:4A:38:DA:AF:15:E8:28:43:73:FD:82:AE:59:B2:73:83:D4:A6:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0546183c-d9ef-4c33-be99-e84bedb10b68/0/FC4A38DAAF15E8284373FD82AE59B27383D4A68F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC4A38DAAF15E8284373FD82AE59B27383D4A68F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0546183c-d9ef-4c33-be99-e84bedb10b68/0/FC4A38DAAF15E8284373FD82AE59B27383D4A68F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:50:8e:97:70:45:ba:47:63:e6:9e:e2:45:82:5f:d5:e8:51: 6d:1c:e0:be:c2:a7:ee:ff:1e:a6:e1:28:77:7e:55:c0:c4:c6: 95:85:cd:f3:33:e1:18:b6:85:6c:02:37:84:a3:d9:64:a3:60: ce:8e:80:43:1b:20:8a:d2:c8:41:d3:1f:82:d7:47:e6:3f:97: 48:a0:4d:dc:30:dd:51:ab:c7:b6:3b:85:72:0f:c8:c5:8c:96: b3:60:84:1d:91:58:d2:0e:c8:c2:82:5a:ae:e0:bb:df:ce:41: 7e:19:ff:22:d0:03:59:95:4d:f7:36:38:7c:ac:ab:02:80:af: b4:1f:b5:67:9a:6d:8f:b5:cc:f4:a4:ac:7e:39:fa:e2:a3:6c: 74:2a:e7:7d:02:60:cf:87:a1:c1:71:5f:fd:0f:4c:de:6c:9c: 82:3e:44:43:e9:81:42:b8:60:8b:08:8a:98:78:81:12:58:cb: 0d:ce:bd:44:91:c8:d3:f1:4d:61:4c:a8:cf:04:e6:22:50:69: be:a6:1a:b3:c3:00:1f:85:dc:64:f8:d6:28:71:8e:e7:f1:ae: 4d:da:ff:a3:d9:93:c5:ee:1b:e3:06:a5:41:ad:b7:43:8c:49: c0:2e:5a:9e:53:22:e3:99:dd:46:47:75:e9:cb:8e:77:7f:c8: 26:20:0a:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUckE1mHrg4at3TJa0brwr9nk83iwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkM0QTM4REFBRjE1RTgyODQzNzNGRDgyQUU1OUIyNzM4 M0Q0QTY4RjAeFw0yNTA3MjAxODQ2MTNaFw0yNTA3MjQwNDQ3MTNaMDMxMTAvBgNV BAMTKEM3NzM4NEJDMUE4OURGRkQyOTA0RjhDMTNDQzYzQkM0NUMyRDAwRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6+xErx6fKCyXgiZKkKP9s4cfw ubXrm5OB5bdGllUr+3TqxXsBua2YZWKX4OZBPnm5CDMGZeQmDeUq9P43xyOVIS6t VLCraZql/NV2+6AeYigkdcd+NpmziVN3s8ZMj9Kt92O+/ULbtPuR/ATgqMadE1gU ZnE5Ze05qmh1sVRWfFkecC6ZcUDjZ+zmcW44n3OFjOSDsMUs0soZbeFoNFga/PAB awL0Zsx3mbP6IOVUkyfjwzLOD+JA14pE8gzos5Cz23llbHskZEeqScnzG+T+EsJO bX1vqZUjJVpZspTC7vGEgH0xdHZ4gO58hZPfPWhIMVDRdGv6MGwO3/wRkZq7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUx3OEvBqJ3/0pBPjBPMY7xFwtANcwHwYDVR0j BBgwFoAU/Eo42q8V6ChDc/2Crlmyc4PUpo8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NTQ2MTgzYy1kOWVmLTRjMzMtYmU5OS1lODRiZWRiMTBiNjgvMC9GQzRBMzhEQUFG MTVFODI4NDM3M0ZEODJBRTU5QjI3MzgzRDRBNjhGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkM0QTM4REFBRjE1RTgyODQzNzNGRDgyQUU1OUIyNzM4M0Q0 QTY4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDU0NjE4M2MtZDllZi00YzMzLWJl OTktZTg0YmVkYjEwYjY4LzAvRkM0QTM4REFBRjE1RTgyODQzNzNGRDgyQUU1OUIy NzM4M0Q0QTY4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJxQjpdwRbpHY+ae4kWCX9XoUW0c4L7Cp+7/ HqbhKHd+VcDExpWFzfMz4Ri2hWwCN4Sj2WSjYM6OgEMbIIrSyEHTH4LXR+Y/l0ig Tdww3VGrx7Y7hXIPyMWMlrNghB2RWNIOyMKCWq7gu9/OQX4Z/yLQA1mVTfc2OHys qwKAr7QftWeabY+1zPSkrH45+uKjbHQq530CYM+HocFxX/0PTN5snII+REPpgUK4 YIsIiph4gRJYyw3OvUSRyNPxTWFMqM8E5iJQab6mGrPDAB+F3GT41ihxjufxrk3a /6PZk8XuG+MGpUGtt0OMScAuWp5TIuOZ3UZHdenLjnd/yCYgCsA= -----END CERTIFICATE-----Generated at Tue Jul 22 04:29:39 2025 by rpki-client