$ rpki-client -vvf repo-rpki.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.mft File: FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.mft (raw, json) Hash identifier: K48ZXizbwOJfbmiUTblLL0+4k2Eqvl8MxHGoSf+PGnI= Subject key identifier: 6F:BC:15:5A:C7:AA:6E:5E:BA:C9:72:7E:7E:70:2B:A0:94:FB:CF:13 Authority key identifier: FC:9D:A1:A7:62:5B:27:FD:B4:66:B1:D8:A6:90:37:7E:4C:7B:CE:72 Certificate issuer: /CN=FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72 Certificate serial: 213F28F36AA8DD745BCFACB326E90CF2B69D789B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.mft Manifest number: 04EE Signing time: Sat 19 Jul 2025 08:22:04 +0000 Manifest this update: Sat 19 Jul 2025 08:17:04 +0000 Manifest next update: Tue 22 Jul 2025 09:02:04 +0000 Files and hashes: 1: FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.crl (hash: Ykpeq/He9niw/L6SclXusWfUN2OHz+8HicwANJToJkQ=) 2: 3130332e33312e3130392e302f32342d3234203d3e20313339343430.roa (hash: iRZXCDlLv0igia0Lk/WxM1oJP6cq9J+UPskJIy0xfv8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.crl rsync://repo-rpki.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 09:02:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:3f:28:f3:6a:a8:dd:74:5b:cf:ac:b3:26:e9:0c:f2:b6:9d:78:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72 Validity Not Before: Jul 19 08:17:04 2025 GMT Not After : Jul 22 09:02:04 2025 GMT Subject: CN=6FBC155AC7AA6E5EBAC9727E7E702BA094FBCF13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d1:5b:6d:84:9a:fd:dd:ea:a0:c4:06:a0:2a: f0:29:cb:15:a2:85:af:da:eb:25:6d:6b:38:3f:cc: 6d:fd:cd:ac:d3:84:2d:03:45:3b:13:ac:b2:ca:c4: c1:6b:22:43:71:b3:52:cc:d0:96:bc:71:99:30:48: 61:94:73:86:22:c9:2c:a1:70:89:f6:ae:15:4e:db: d5:9d:21:8e:21:e5:4e:5b:84:14:73:43:98:4b:30: c0:b3:86:12:fb:ab:6c:3b:34:e1:ef:e8:64:9a:2d: cc:73:bb:86:81:4c:30:82:70:32:35:b2:e6:71:7d: 0f:c6:61:d3:f4:b9:e5:cd:f8:68:55:97:05:1d:a8: f9:d5:11:42:10:34:bc:8a:6a:ec:82:28:07:1a:50: 98:06:c6:d3:24:1d:2c:a5:da:f7:e1:95:fa:3a:ea: b5:1e:de:cb:13:01:d2:98:bd:0b:9d:f9:60:73:e9: fc:e9:30:ec:47:0e:2c:0c:cb:e3:ae:8c:c4:83:92: e3:26:60:d2:34:ac:0d:40:6b:b9:54:54:74:3c:9a: 17:01:0f:71:20:45:40:8f:15:b7:01:ce:61:9c:66: 16:0e:8a:3e:27:05:03:ef:f4:67:2e:9d:c3:82:71: 2d:5c:d4:cb:90:f5:e8:6b:31:f6:c3:1a:f8:8a:0e: ff:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:BC:15:5A:C7:AA:6E:5E:BA:C9:72:7E:7E:70:2B:A0:94:FB:CF:13 X509v3 Authority Key Identifier: keyid:FC:9D:A1:A7:62:5B:27:FD:B4:66:B1:D8:A6:90:37:7E:4C:7B:CE:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:9f:37:d7:bf:62:7c:91:8b:27:6a:db:2c:5a:2f:e8:43:db: 7b:8c:dd:8c:df:9d:32:cc:41:58:6b:0b:48:2a:b9:09:e8:a3: f5:7a:1c:b7:0a:cc:f2:58:61:cd:27:e2:d4:35:46:68:d9:ea: 0f:20:0b:a7:ad:fc:cc:1a:ae:90:4c:56:de:25:64:96:d0:ff: 99:66:e6:db:79:82:57:d0:a1:17:d1:31:65:f5:53:6f:81:22: dd:78:dc:bb:a4:72:87:f6:bd:81:0c:f6:e1:fa:bf:ad:31:17: 04:80:3e:a4:e3:47:29:ad:d5:e7:ff:47:c3:bc:2b:e9:ff:8b: dd:24:56:a8:8f:53:dc:56:6d:9a:bb:f2:88:95:09:55:f1:f2: 98:07:b3:93:19:55:f8:da:1c:1f:9b:88:d3:d7:bc:cd:6f:f5: 43:4a:64:03:6a:77:b4:71:8a:ae:cb:92:43:03:da:0d:11:96: 3b:53:5a:57:3d:18:c1:e8:ea:3e:e6:09:49:52:12:ac:90:89: d4:90:34:a8:21:91:78:f7:da:15:6b:5e:9c:b2:b6:f4:46:34: 03:f0:32:94:79:ff:a6:17:16:d4:7c:11:db:6d:3a:f8:41:cd: 6b:ad:74:53:f8:bb:ed:43:e3:0f:92:4c:2a:2e:af:73:b5:d3: 6e:aa:e2:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIT8o82qo3XRbz6yzJukM8radeJswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkM5REExQTc2MjVCMjdGREI0NjZCMUQ4QTY5MDM3N0U0 QzdCQ0U3MjAeFw0yNTA3MTkwODE3MDRaFw0yNTA3MjIwOTAyMDRaMDMxMTAvBgNV BAMTKDZGQkMxNTVBQzdBQTZFNUVCQUM5NzI3RTdFNzAyQkEwOTRGQkNGMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM0VtthJr93eqgxAagKvApyxWi ha/a6yVtazg/zG39zazThC0DRTsTrLLKxMFrIkNxs1LM0Ja8cZkwSGGUc4YiySyh cIn2rhVO29WdIY4h5U5bhBRzQ5hLMMCzhhL7q2w7NOHv6GSaLcxzu4aBTDCCcDI1 suZxfQ/GYdP0ueXN+GhVlwUdqPnVEUIQNLyKauyCKAcaUJgGxtMkHSyl2vfhlfo6 6rUe3ssTAdKYvQud+WBz6fzpMOxHDiwMy+OujMSDkuMmYNI0rA1Aa7lUVHQ8mhcB D3EgRUCPFbcBzmGcZhYOij4nBQPv9GcuncOCcS1c1MuQ9ehrMfbDGviKDv+pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUb7wVWseqbl66yXJ+fnAroJT7zxMwHwYDVR0j BBgwFoAU/J2hp2JbJ/20ZrHYppA3fkx7znIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZjZhYTMxYS1kZDBkLTRjMTAtYjVkZC1iMWE4M2ZhNTc3NjMvMC9GQzlEQTFBNzYy NUIyN0ZEQjQ2NkIxRDhBNjkwMzc3RTRDN0JDRTcyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkM5REExQTc2MjVCMjdGREI0NjZCMUQ4QTY5MDM3N0U0QzdC Q0U3Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGY2YWEzMWEtZGQwZC00YzEwLWI1 ZGQtYjFhODNmYTU3NzYzLzAvRkM5REExQTc2MjVCMjdGREI0NjZCMUQ4QTY5MDM3 N0U0QzdCQ0U3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHKfN9e/YnyRiydq2yxaL+hD23uM3YzfnTLM QVhrC0gquQnoo/V6HLcKzPJYYc0n4tQ1RmjZ6g8gC6et/MwarpBMVt4lZJbQ/5lm 5tt5glfQoRfRMWX1U2+BIt143Lukcof2vYEM9uH6v60xFwSAPqTjRymt1ef/R8O8 K+n/i90kVqiPU9xWbZq78oiVCVXx8pgHs5MZVfjaHB+biNPXvM1v9UNKZANqd7Rx iq7LkkMD2g0RljtTWlc9GMHo6j7mCUlSEqyQidSQNKghkXj32hVrXpyytvRGNAPw MpR5/6YXFtR8EdttOvhBzWutdFP4u+1D4w+STCour3O1026q4sg= -----END CERTIFICATE-----Generated at Mon Jul 21 02:05:38 2025 by rpki-client