$ rpki-client -vvf repo-rpki.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.mft File: FC4F8762524C3EBF98126E5F579CCB30C37EEF63.mft (raw, json) Hash identifier: o3QSYGjBNeS1l5AeUDwObfGqIkYvgbPO8Xcz6kZDyAQ= Subject key identifier: 78:89:A2:C7:34:72:55:89:B3:08:2C:C6:A0:38:C3:56:88:31:12:77 Authority key identifier: FC:4F:87:62:52:4C:3E:BF:98:12:6E:5F:57:9C:CB:30:C3:7E:EF:63 Certificate issuer: /CN=FC4F8762524C3EBF98126E5F579CCB30C37EEF63 Certificate serial: 5FC17D93C318486D1E03422EC32D83049332A53F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.cer Subject info access: rsync://repo-rpki.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.mft Manifest number: F8 Signing time: Sat 19 Jul 2025 23:00:39 +0000 Manifest this update: Sat 19 Jul 2025 22:55:39 +0000 Manifest next update: Wed 23 Jul 2025 09:54:39 +0000 Files and hashes: 1: 323030313a6466373a616630303a3a2f34382d3438203d3e20313338313432.roa (hash: +DXbNG3+5DIfVUdd5cKU3zcHabiuNmOrVbbKp3YlrN4=) 2: 3130332e3133342e31362e302f32342d3234203d3e20313338313432.roa (hash: 8FJnKt5CgklUKcuR3KEOgR9pFXHp2pdnQAzYXqQX2Ag=) 3: FC4F8762524C3EBF98126E5F579CCB30C37EEF63.crl (hash: uak38GUMfblKnCzJEax2TEV7KmT/BzuG41EXicE00Fk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.crl rsync://repo-rpki.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 09:54:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:c1:7d:93:c3:18:48:6d:1e:03:42:2e:c3:2d:83:04:93:32:a5:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC4F8762524C3EBF98126E5F579CCB30C37EEF63 Validity Not Before: Jul 19 22:55:39 2025 GMT Not After : Jul 23 09:54:39 2025 GMT Subject: CN=7889A2C734725589B3082CC6A038C35688311277 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f4:90:d6:d9:af:f9:4b:28:42:26:63:4b:37: 8e:b0:e3:61:1f:cb:77:9b:2b:fa:08:11:2b:7e:b3: 69:64:73:b5:4a:53:dd:a0:e1:bb:b4:0c:6f:64:23: 0d:c4:a1:03:48:3c:69:80:ed:21:75:5c:e1:ef:0b: 39:7b:6a:50:1c:2d:87:0a:0b:a3:61:3f:aa:5e:db: ac:53:e8:61:1e:0e:5e:a1:58:9f:e0:13:70:40:cc: cc:16:e7:2b:be:dd:8a:4a:23:2a:45:82:48:cc:5c: 4b:ba:cd:58:6a:cd:8b:16:60:19:54:e6:34:57:61: 1f:e2:2a:1d:73:4d:97:68:71:0f:2e:8c:10:f8:af: 29:14:00:cb:51:6c:5e:9a:a9:44:cf:75:ef:e4:2a: 83:a3:25:f4:b4:a3:11:d9:19:b6:6f:e7:98:02:63: e6:26:2e:c1:a7:c6:03:a1:fa:a9:bc:44:9f:c6:90: fb:f4:0a:81:62:a6:ae:e2:8c:3f:81:f6:74:bf:05: 17:24:ae:ea:4a:a5:8d:61:32:50:1c:c8:61:89:1b: 44:fd:95:a8:c0:4d:db:0a:65:10:c2:f2:ab:01:a3: 40:94:8c:1c:88:09:93:b5:c1:38:ed:b2:55:6c:07: 1a:26:59:f6:86:b1:70:fb:34:94:ca:99:ef:5a:45: 7e:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:89:A2:C7:34:72:55:89:B3:08:2C:C6:A0:38:C3:56:88:31:12:77 X509v3 Authority Key Identifier: keyid:FC:4F:87:62:52:4C:3E:BF:98:12:6E:5F:57:9C:CB:30:C3:7E:EF:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:58:33:5f:db:d5:ed:10:77:b5:d6:5d:60:ad:96:5a:10:94: 53:41:85:7e:7d:71:00:d7:cc:ee:25:53:4e:b2:8f:45:ee:27: 17:82:28:b4:44:79:51:43:2e:04:47:63:b2:d6:84:bf:96:2d: 9f:a3:cf:48:c0:dd:d4:47:42:b9:10:dd:77:e5:82:42:24:fd: 38:7f:59:20:8e:23:a6:b3:df:fa:22:26:38:38:cf:19:93:62: 67:88:3f:70:9f:77:1c:19:d6:b8:a8:49:9e:85:39:cd:ce:34: e3:0c:71:39:42:20:b4:65:16:dc:48:2f:75:47:da:ee:2b:f7: 40:7c:bb:05:c0:a9:0f:23:a1:35:ef:28:91:87:b0:f3:da:5e: c4:1d:1c:63:07:eb:72:03:5a:36:12:de:28:ea:30:e4:eb:7c: 7d:ff:97:d6:5a:3f:71:52:4d:cd:04:21:be:5e:42:98:02:51: ee:5c:1f:01:c8:06:d5:f9:7c:8e:e0:83:12:48:3a:03:e6:f7: 56:ce:04:55:b7:d2:6f:06:ae:a2:1a:3c:4f:1a:70:0c:d2:ea: b4:97:56:08:a0:d3:cf:08:60:34:77:67:9c:c1:7f:eb:7e:e3: ee:44:6f:da:5d:99:6f:87:c6:c6:a1:10:94:99:82:3e:f5:9b: 51:3f:fc:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX8F9k8MYSG0eA0Iuwy2DBJMypT8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkM0Rjg3NjI1MjRDM0VCRjk4MTI2RTVGNTc5Q0NCMzBD MzdFRUY2MzAeFw0yNTA3MTkyMjU1MzlaFw0yNTA3MjMwOTU0MzlaMDMxMTAvBgNV BAMTKDc4ODlBMkM3MzQ3MjU1ODlCMzA4MkNDNkEwMzhDMzU2ODgzMTEyNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr9JDW2a/5SyhCJmNLN46w42Ef y3ebK/oIESt+s2lkc7VKU92g4bu0DG9kIw3EoQNIPGmA7SF1XOHvCzl7alAcLYcK C6NhP6pe26xT6GEeDl6hWJ/gE3BAzMwW5yu+3YpKIypFgkjMXEu6zVhqzYsWYBlU 5jRXYR/iKh1zTZdocQ8ujBD4rykUAMtRbF6aqUTPde/kKoOjJfS0oxHZGbZv55gC Y+YmLsGnxgOh+qm8RJ/GkPv0CoFipq7ijD+B9nS/BRckrupKpY1hMlAcyGGJG0T9 lajATdsKZRDC8qsBo0CUjByICZO1wTjtslVsBxomWfaGsXD7NJTKme9aRX5NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeImixzRyVYmzCCzGoDjDVogxEncwHwYDVR0j BBgwFoAU/E+HYlJMPr+YEm5fV5zLMMN+72MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZTVhYTkzZC03ODdiLTRhMTctODdkMC03ZWY0MWIwZjJkZWYvMC9GQzRGODc2MjUy NEMzRUJGOTgxMjZFNUY1NzlDQ0IzMEMzN0VFRjYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkM0Rjg3NjI1MjRDM0VCRjk4MTI2RTVGNTc5Q0NCMzBDMzdF RUY2My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmU1YWE5M2QtNzg3Yi00YTE3LTg3 ZDAtN2VmNDFiMGYyZGVmLzAvRkM0Rjg3NjI1MjRDM0VCRjk4MTI2RTVGNTc5Q0NC MzBDMzdFRUY2My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKBYM1/b1e0Qd7XWXWCtlloQlFNBhX59cQDX zO4lU06yj0XuJxeCKLREeVFDLgRHY7LWhL+WLZ+jz0jA3dRHQrkQ3XflgkIk/Th/ WSCOI6az3/oiJjg4zxmTYmeIP3CfdxwZ1rioSZ6FOc3ONOMMcTlCILRlFtxIL3VH 2u4r90B8uwXAqQ8joTXvKJGHsPPaXsQdHGMH63IDWjYS3ijqMOTrfH3/l9ZaP3FS Tc0EIb5eQpgCUe5cHwHIBtX5fI7ggxJIOgPm91bOBFW30m8GrqIaPE8acAzS6rSX Vgig088IYDR3Z5zBf+t+4+5Eb9pdmW+HxsahEJSZgj71m1E//Gs= -----END CERTIFICATE-----Generated at Mon Jul 21 02:06:26 2025 by rpki-client