$ rpki-client -vvf repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/FCD05385904E00F3C10A339EE19D924D72FFAE0E.mft File: FCD05385904E00F3C10A339EE19D924D72FFAE0E.mft (raw, json) Hash identifier: kzM7twvb7UX26rOC2/FbCrySMR0xkm8d4QnkaNToOLI= Subject key identifier: 0A:E7:E1:D4:DE:0D:8D:84:2F:CF:86:E4:1B:7F:B2:7E:CA:32:E1:84 Authority key identifier: FC:D0:53:85:90:4E:00:F3:C1:0A:33:9E:E1:9D:92:4D:72:FF:AE:0E Certificate issuer: /CN=FCD05385904E00F3C10A339EE19D924D72FFAE0E Certificate serial: 6E7BE9EDAE77FF1CA0D2EC128AF3079276D7D85E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD05385904E00F3C10A339EE19D924D72FFAE0E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/FCD05385904E00F3C10A339EE19D924D72FFAE0E.mft Manifest number: 04FC Signing time: Tue 22 Jul 2025 23:51:38 +0000 Manifest this update: Tue 22 Jul 2025 23:46:38 +0000 Manifest next update: Sat 26 Jul 2025 10:00:38 +0000 Files and hashes: 1: FCD05385904E00F3C10A339EE19D924D72FFAE0E.crl (hash: Eejksa4H4sXXXGv1SELDdiZ1TM5ImRH5jYftDBIgK7s=) 2: 3137352e3135382e33322e302f32322d3234203d3e2034373837.roa (hash: uZQkOk+CpUIXDZqH2BmXwSFTNgck/jA2xelBBArMP0k=) 3: 323430323a393830303a343030363a3a2f34382d3438203d3e20313338313338.roa (hash: qLMS5n6MICGX7jMIWrfU1gynyNSBdRm2V/YFupb8Gq4=) 4: 323430323a393830303a343030313a3a2f34382d3438203d3e20313331313138.roa (hash: d5986EOySqOf25Kh0+1S+OCcFuFk0+QM0Sd3IiA6baE=) 5: 3137352e3135382e33322e302f31392d3139203d3e2034373837.roa (hash: MQJI+s1kh56D+8PlegoVLWOh3j30QL4aJfmh+K7dBRI=) 6: 323430323a393830303a3a2f33322d3438203d3e203338313538.roa (hash: YuhlhGpBa/rvdjFiICmkr20uOyD33Y2ob8cJ0jjldVM=) 7: 323430323a393830303a343030323a3a2f34382d3438203d3e20313331313139.roa (hash: romvh4P9a79Pr4J569XqtgjdGIrqpQXhEG/K5DHlLes=) 8: 3132312e3130302e302e302f32312d3234203d3e203338313538.roa (hash: R/eJpCGlRI/zV/XFrfuap+1qh+BYzQ+18W4bHCKPljo=) 9: 323430323a393830303a343030353a3a2f34382d3438203d3e20313336313038.roa (hash: ONp4B01vgh7iWIU+RoQbzYAR3JD5eNkfucFDErVtZKQ=) 10: 323430323a393830303a343030343a3a2f34382d3438203d3e203436303235.roa (hash: 7Zt9Qo2CwU5k43ZU/bzxQ7yO/llsHySgXleKYAIqOl0=) 11: 323430323a393830303a343030303a3a2f34382d3438203d3e20313331313137.roa (hash: EhLhnkz+tJZEa0MJMT1YkNCBA4ZvjDWQMMMtcKGynfI=) 12: 3137352e3135382e33322e302f32302d3234203d3e20313335343738.roa (hash: 7pDLsHgOcZwn1eSxA+Npm2ov2bKnIJgWI3SSJl41Zls=) 13: 3137352e3135382e34382e302f32302d3234203d3e20313335343738.roa (hash: 94hNYux8eWZz1uyVT99V5HDegQ13UDwZ7M1KtXnNuOw=) 14: 323430323a393830303a343030333a3a2f34382d3438203d3e203338353038.roa (hash: kVCBdk2VmpyopZqVmrScI5B0Mvq/xa323JLB5pEhsQA=) 15: 323430323a393830303a343031303a3a2f34382d3438203d3e20333937373633.roa (hash: MBiGxv0ZO20HmuL2lUlmVAx4s0nmUR8oNwBPTRWxbyM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/FCD05385904E00F3C10A339EE19D924D72FFAE0E.crl rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/FCD05385904E00F3C10A339EE19D924D72FFAE0E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD05385904E00F3C10A339EE19D924D72FFAE0E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 10:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:7b:e9:ed:ae:77:ff:1c:a0:d2:ec:12:8a:f3:07:92:76:d7:d8:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FCD05385904E00F3C10A339EE19D924D72FFAE0E Validity Not Before: Jul 22 23:46:38 2025 GMT Not After : Jul 26 10:00:38 2025 GMT Subject: CN=0AE7E1D4DE0D8D842FCF86E41B7FB27ECA32E184 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:71:b1:4d:23:7e:78:9f:30:75:18:61:13:46: 8f:bd:3f:9c:ba:ac:eb:f4:3e:1e:aa:82:08:38:a8: c4:92:88:d3:67:66:b2:c0:3f:12:e2:7c:4f:68:20: 9a:e2:78:22:62:35:b5:0a:53:02:46:fa:7b:d1:13: 78:5f:23:c9:f6:a8:86:de:25:8c:d1:6c:39:95:23: 02:d9:93:0b:6d:ad:92:ab:93:fc:06:41:0d:d1:1c: 7c:4c:57:d2:06:71:fe:4a:63:33:4d:62:08:84:25: c2:81:f1:38:a8:ad:36:83:f1:6b:d1:85:f4:c6:5e: ea:e9:fc:33:2a:2b:a4:02:21:49:ee:e3:1a:5c:a6: b8:1f:d8:2c:ab:27:c9:0d:69:fe:2a:07:39:e4:fa: dd:3c:80:0f:7a:86:10:a1:4c:7e:4e:db:08:8d:c6: 44:ef:25:87:d9:1c:d5:33:2f:35:1a:ff:03:f6:e4: 0a:e4:6f:ba:b0:2e:33:72:62:83:cd:e6:49:14:a9: 60:c2:65:4b:9f:02:db:c2:00:ad:c3:4a:bf:76:ac: ef:c8:4f:d7:68:16:96:36:f0:af:56:d0:53:16:19: 1f:5d:64:0f:3e:a3:c3:03:9d:37:f5:88:e4:92:e1: 70:1b:c2:e8:5b:93:4d:61:97:3e:50:bc:e3:70:41: 84:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:E7:E1:D4:DE:0D:8D:84:2F:CF:86:E4:1B:7F:B2:7E:CA:32:E1:84 X509v3 Authority Key Identifier: keyid:FC:D0:53:85:90:4E:00:F3:C1:0A:33:9E:E1:9D:92:4D:72:FF:AE:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/FCD05385904E00F3C10A339EE19D924D72FFAE0E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD05385904E00F3C10A339EE19D924D72FFAE0E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/FCD05385904E00F3C10A339EE19D924D72FFAE0E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:1f:32:fb:c2:2e:6d:3b:33:ce:22:2a:b8:fe:86:4d:5c:a0: a2:25:da:14:56:89:1e:ae:d1:5c:b2:92:b1:e2:e5:ee:8b:85: 39:d9:57:7a:7d:69:15:ba:7e:59:93:be:af:be:62:ee:75:a5: fe:2d:af:63:78:a2:dc:4f:89:53:ce:df:72:8d:31:f1:de:2a: c8:34:e9:26:0f:6e:34:ee:ef:ff:d3:83:3c:a9:d6:10:31:17: 9b:5f:cb:f8:0d:78:a3:33:8b:da:fc:3e:d4:b3:d4:49:df:77: 40:b3:d0:c4:45:5f:8f:d9:7f:fa:5a:95:cf:05:b3:03:d3:04: de:ee:82:e8:33:12:f1:5b:b3:da:29:26:6f:5a:cf:30:77:7a: 77:50:6c:97:6a:a8:e6:b0:af:e3:a3:a2:77:58:4e:70:57:19: 55:1a:02:af:d4:9b:ea:36:03:d9:fe:64:8d:12:c0:28:b6:19: d6:53:55:d5:e3:87:1e:e0:22:02:b1:70:0c:bd:06:78:7c:b5: 1b:df:79:32:27:a0:e4:32:c5:ac:15:98:38:12:d1:f5:1b:4f: 2b:ce:cf:fa:8e:f8:29:05:90:46:c6:bf:d6:91:ab:b2:66:d8: c7:d6:94:e3:ca:a8:28:f9:15:d2:5e:fd:ba:c8:13:cb:84:3e: 89:36:34:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbnvp7a53/xyg0uwSivMHknbX2F4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkNEMDUzODU5MDRFMDBGM0MxMEEzMzlFRTE5RDkyNEQ3 MkZGQUUwRTAeFw0yNTA3MjIyMzQ2MzhaFw0yNTA3MjYxMDAwMzhaMDMxMTAvBgNV BAMTKDBBRTdFMUQ0REUwRDhEODQyRkNGODZFNDFCN0ZCMjdFQ0EzMkUxODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFcbFNI354nzB1GGETRo+9P5y6 rOv0Ph6qggg4qMSSiNNnZrLAPxLifE9oIJrieCJiNbUKUwJG+nvRE3hfI8n2qIbe JYzRbDmVIwLZkwttrZKrk/wGQQ3RHHxMV9IGcf5KYzNNYgiEJcKB8TiorTaD8WvR hfTGXurp/DMqK6QCIUnu4xpcprgf2CyrJ8kNaf4qBznk+t08gA96hhChTH5O2wiN xkTvJYfZHNUzLzUa/wP25Arkb7qwLjNyYoPN5kkUqWDCZUufAtvCAK3DSr92rO/I T9doFpY28K9W0FMWGR9dZA8+o8MDnTf1iOSS4XAbwuhbk01hlz5QvONwQYSHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCufh1N4NjYQvz4bkG3+yfsoy4YQwHwYDVR0j BBgwFoAU/NBThZBOAPPBCjOe4Z2STXL/rg4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NzhmZDRhZi1mZTY3LTQ1YzgtODBiNy0wNmZjMTE4ZGY4ZTIvMC9GQ0QwNTM4NTkw NEUwMEYzQzEwQTMzOUVFMTlEOTI0RDcyRkZBRTBFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkNEMDUzODU5MDRFMDBGM0MxMEEzMzlFRTE5RDkyNEQ3MkZG QUUwRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDc4ZmQ0YWYtZmU2Ny00NWM4LTgw YjctMDZmYzExOGRmOGUyLzAvRkNEMDUzODU5MDRFMDBGM0MxMEEzMzlFRTE5RDky NEQ3MkZGQUUwRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHMfMvvCLm07M84iKrj+hk1coKIl2hRWiR6u 0VyykrHi5e6LhTnZV3p9aRW6flmTvq++Yu51pf4tr2N4otxPiVPO33KNMfHeKsg0 6SYPbjTu7//Tgzyp1hAxF5tfy/gNeKMzi9r8PtSz1Enfd0Cz0MRFX4/Zf/palc8F swPTBN7ugugzEvFbs9opJm9azzB3endQbJdqqOawr+OjondYTnBXGVUaAq/Um+o2 A9n+ZI0SwCi2GdZTVdXjhx7gIgKxcAy9Bnh8tRvfeTInoOQyxawVmDgS0fUbTyvO z/qO+CkFkEbGv9aRq7Jm2MfWlOPKqCj5FdJe/brIE8uEPok2NJA= -----END CERTIFICATE-----Generated at Thu Jul 24 04:53:36 2025 by rpki-client