$ rpki-client -vvf repo-rpki.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.mft File: FCA55FE68BF147AE20F00C45DADCDF960C120CF8.mft (raw, json) Hash identifier: oIuhj+f06BRUr5z6ZnbVsQF3yXjsTKN+nXstm6dK+sQ= Subject key identifier: 4E:23:80:E6:14:DF:61:CA:E3:2D:3D:65:F6:04:FC:B8:64:A6:08:88 Authority key identifier: FC:A5:5F:E6:8B:F1:47:AE:20:F0:0C:45:DA:DC:DF:96:0C:12:0C:F8 Certificate issuer: /CN=FCA55FE68BF147AE20F00C45DADCDF960C120CF8 Certificate serial: 1EDDDE31791A8D27CCB9EC9ACF4F52CCE637F690 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.mft Manifest number: 0194 Signing time: Sat 19 Jul 2025 00:22:07 +0000 Manifest this update: Sat 19 Jul 2025 00:17:07 +0000 Manifest next update: Tue 22 Jul 2025 07:56:07 +0000 Files and hashes: 1: 3130332e3132312e3234342e302f32332d3234203d3e20313335343738.roa (hash: mb2pM5mXThua6WdA1EeTpxCUj69c6y3IginfkESyKCw=) 2: FCA55FE68BF147AE20F00C45DADCDF960C120CF8.crl (hash: PDzIkfXnBu2BQnSH4WV+7BCk0XsFV+tk4kXgPleYmsU=) 3: 3130332e3132312e3234362e302f32332d3234203d3e20313335343738.roa (hash: Fa70W79FWJwGU7udTAwUgPXNTPP4kX8Q9MJvZfIXGU4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.crl rsync://repo-rpki.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 07:56:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:dd:de:31:79:1a:8d:27:cc:b9:ec:9a:cf:4f:52:cc:e6:37:f6:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FCA55FE68BF147AE20F00C45DADCDF960C120CF8 Validity Not Before: Jul 19 00:17:07 2025 GMT Not After : Jul 22 07:56:07 2025 GMT Subject: CN=4E2380E614DF61CAE32D3D65F604FCB864A60888 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:4d:93:cb:e5:09:a0:36:a9:f4:e4:a8:bb:fc: a5:a2:32:ff:b8:46:54:e4:b2:aa:98:59:e2:1c:31: 1e:63:1b:34:8a:38:2c:fc:be:e4:67:18:fa:88:c9: 17:77:73:0e:89:aa:5b:95:2a:c1:16:cd:7d:32:0f: 3c:15:89:09:6b:e5:d7:e0:bc:2f:f0:76:91:36:39: 5a:7a:20:e2:d2:3e:ba:aa:cb:c5:fe:88:e3:52:92: 87:90:9b:fc:7c:c1:8a:da:6e:31:7f:05:38:a1:c2: b7:df:54:3a:7d:34:b3:92:19:e6:93:a3:d0:51:52: ba:9f:4e:b7:03:41:04:3e:9e:26:34:d1:a8:14:6f: 68:f3:ef:57:cd:a2:f5:b1:2f:60:cb:20:16:2f:4d: ec:52:ed:cb:1a:7d:4e:70:d9:8a:24:2c:01:48:a2: f8:f2:45:ae:c3:fd:76:7a:9b:f4:20:1f:9d:8d:60: 35:af:5c:38:30:34:20:30:0b:4a:c8:e5:fa:c8:b1: 50:c0:a4:d3:42:bc:25:8a:cc:f0:3a:9c:e6:de:8d: 78:cc:f2:fc:55:78:fe:bb:82:69:6f:c5:33:23:a7: 41:5f:06:a1:36:a1:ca:98:ba:c5:44:0d:ec:14:97: ff:bb:59:58:a3:f1:21:39:9f:bc:bb:41:8d:b1:13: 19:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:23:80:E6:14:DF:61:CA:E3:2D:3D:65:F6:04:FC:B8:64:A6:08:88 X509v3 Authority Key Identifier: keyid:FC:A5:5F:E6:8B:F1:47:AE:20:F0:0C:45:DA:DC:DF:96:0C:12:0C:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:81:f7:88:db:93:78:16:17:fd:2c:06:7e:2e:ee:6a:6f:51: 1a:2c:a0:9e:bf:81:16:da:58:f7:50:06:48:56:51:1c:49:b9: 5c:a3:7f:47:90:7e:13:b4:df:4e:c9:12:10:3d:f1:3d:77:db: 28:01:b3:e5:ab:19:2a:06:6c:d8:5f:c0:4b:89:8d:1d:ae:b8: 35:0f:27:2b:54:28:98:11:22:40:0e:99:67:b3:6a:31:cd:f9: 69:80:5d:da:4b:2f:f1:75:e2:49:7a:47:af:69:2b:2c:ab:1f: f1:61:a5:b5:40:dd:d0:0a:d5:f3:9a:4b:17:19:93:40:53:ca: ab:0d:b8:e4:91:b8:c1:4d:90:dc:29:99:98:44:db:90:ed:c9: 9a:37:d1:f8:d3:19:77:34:b2:f4:0d:28:c5:93:18:cf:fa:0f: 3a:3e:7c:2c:29:53:2e:7d:75:74:b5:69:c2:80:6c:5d:12:94: ab:47:09:e0:02:54:47:25:57:a8:6b:9f:4f:0b:86:04:cf:af: 61:ca:dd:84:9e:9a:9f:3b:ca:d3:5d:0d:a7:98:37:7b:0e:c4: 3d:d8:70:9d:7d:bb:4f:35:cc:7b:12:38:c8:80:cd:4d:ff:b2: c8:91:39:7a:9b:3a:bc:ff:c2:97:6c:93:62:7f:0c:80:13:c3: ae:62:9c:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHt3eMXkajSfMueyaz09SzOY39pAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkNBNTVGRTY4QkYxNDdBRTIwRjAwQzQ1REFEQ0RGOTYw QzEyMENGODAeFw0yNTA3MTkwMDE3MDdaFw0yNTA3MjIwNzU2MDdaMDMxMTAvBgNV BAMTKDRFMjM4MEU2MTRERjYxQ0FFMzJEM0Q2NUY2MDRGQ0I4NjRBNjA4ODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+TZPL5QmgNqn05Ki7/KWiMv+4 RlTksqqYWeIcMR5jGzSKOCz8vuRnGPqIyRd3cw6JqluVKsEWzX0yDzwViQlr5dfg vC/wdpE2OVp6IOLSPrqqy8X+iONSkoeQm/x8wYrabjF/BTihwrffVDp9NLOSGeaT o9BRUrqfTrcDQQQ+niY00agUb2jz71fNovWxL2DLIBYvTexS7csafU5w2YokLAFI ovjyRa7D/XZ6m/QgH52NYDWvXDgwNCAwC0rI5frIsVDApNNCvCWKzPA6nObejXjM 8vxVeP67gmlvxTMjp0FfBqE2ocqYusVEDewUl/+7WVij8SE5n7y7QY2xExkzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTiOA5hTfYcrjLT1l9gT8uGSmCIgwHwYDVR0j BBgwFoAU/KVf5ovxR64g8AxF2tzflgwSDPgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OTVlZThmYy02ZWZlLTQxNWQtYjZjMS0wZjBjY2NmMjYxNDQvMC9GQ0E1NUZFNjhC RjE0N0FFMjBGMDBDNDVEQURDREY5NjBDMTIwQ0Y4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkNBNTVGRTY4QkYxNDdBRTIwRjAwQzQ1REFEQ0RGOTYwQzEy MENGOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzk1ZWU4ZmMtNmVmZS00MTVkLWI2 YzEtMGYwY2NjZjI2MTQ0LzAvRkNBNTVGRTY4QkYxNDdBRTIwRjAwQzQ1REFEQ0RG OTYwQzEyMENGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACyB94jbk3gWF/0sBn4u7mpvURosoJ6/gRba WPdQBkhWURxJuVyjf0eQfhO0307JEhA98T132ygBs+WrGSoGbNhfwEuJjR2uuDUP JytUKJgRIkAOmWezajHN+WmAXdpLL/F14kl6R69pKyyrH/FhpbVA3dAK1fOaSxcZ k0BTyqsNuOSRuMFNkNwpmZhE25DtyZo30fjTGXc0svQNKMWTGM/6Dzo+fCwpUy59 dXS1acKAbF0SlKtHCeACVEclV6hrn08LhgTPr2HK3YSemp87ytNdDaeYN3sOxD3Y cJ19u081zHsSOMiAzU3/ssiROXqbOrz/wpdsk2J/DIATw65inI8= -----END CERTIFICATE-----Generated at Mon Jul 21 07:26:47 2025 by rpki-client