$ rpki-client -vvf repo-rpki.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.mft File: FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.mft (raw, json) Hash identifier: XK+cnKRfJ73Z4BQcze8RE68M7m/D9q/vZn4i7YuYKig= Subject key identifier: 18:28:90:72:B6:74:4D:BA:2E:13:38:CE:8A:24:4B:02:59:D6:21:46 Authority key identifier: FC:D5:B5:62:FA:ED:9B:9D:67:F9:DE:5D:B7:05:78:BF:DB:00:57:B3 Certificate issuer: /CN=FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3 Certificate serial: 78A730C49B6040D31A405BD284D65BC206CE7AE0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.mft Manifest number: 031B Signing time: Mon 21 Jul 2025 00:11:10 +0000 Manifest this update: Mon 21 Jul 2025 00:06:10 +0000 Manifest next update: Thu 24 Jul 2025 02:37:10 +0000 Files and hashes: 1: 3130332e3135312e3134302e302f32332d3234203d3e20313430343137.roa (hash: maLwNGdhj2YMExFHAn5+1Sop9522GuyaLGRVR2YiAsA=) 2: FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.crl (hash: /JZfgLcjef6l8i5MzU1xT/f3EY8YCQn2iJwkdAmK8QU=) 3: 3130332e3135312e3134302e302f32332d3233203d3e20313430343137.roa (hash: 8NA8ztqKmdQKSo6VJIi8+Ky4DaNAGzE3fau0y6GTEzI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.crl rsync://repo-rpki.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 02:37:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:a7:30:c4:9b:60:40:d3:1a:40:5b:d2:84:d6:5b:c2:06:ce:7a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3 Validity Not Before: Jul 21 00:06:10 2025 GMT Not After : Jul 24 02:37:10 2025 GMT Subject: CN=18289072B6744DBA2E1338CE8A244B0259D62146 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:47:30:79:b2:0a:c9:65:16:c5:86:8e:8e:cf: 52:18:3c:3b:52:46:0b:61:0c:cf:93:73:4f:84:7c: 76:84:97:ea:14:98:c8:7e:5c:d7:c0:3f:ab:33:ce: 2e:c3:b5:94:b5:c5:3c:e8:54:13:39:46:b4:0b:86: c9:6f:49:00:f7:ca:58:67:40:41:c5:d3:e8:a8:2b: ac:e3:f0:a7:e0:0a:0a:8a:e2:89:44:e3:03:25:f1: 87:b8:ae:7e:fc:85:c7:18:f8:f8:35:71:f1:67:56: b9:54:cd:45:06:94:87:fa:72:a4:9d:68:85:6e:f3: af:55:57:d8:9a:af:25:00:2d:3a:bf:5a:89:0d:67: 39:82:78:26:2b:68:49:01:80:c1:0b:e7:ea:a3:c7: f4:0b:29:9c:41:e7:39:2d:ee:72:7e:3e:ac:57:a7: 1a:0c:d8:c0:de:d5:98:fa:6b:0f:71:93:dd:18:15: 89:f1:5a:b4:36:ff:b1:c5:5b:81:5a:cb:c1:47:25: 95:0e:21:3a:47:68:a3:d7:6d:7c:db:c2:ab:95:ca: 5f:9e:ee:c5:e7:b2:7b:1d:30:bf:44:99:3c:4c:8f: 34:cb:62:b2:f3:a0:78:be:0e:eb:45:7f:73:ea:6d: 91:60:63:63:a0:86:26:6f:28:c3:14:c5:6a:b1:d4: b7:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:28:90:72:B6:74:4D:BA:2E:13:38:CE:8A:24:4B:02:59:D6:21:46 X509v3 Authority Key Identifier: keyid:FC:D5:B5:62:FA:ED:9B:9D:67:F9:DE:5D:B7:05:78:BF:DB:00:57:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:78:81:78:2a:35:4f:46:6d:f9:fe:a2:b6:2c:92:7d:13:e9: 14:d9:fd:45:cd:1c:d9:f3:d5:e9:e4:dd:90:87:53:c8:d2:5c: b4:3e:fc:df:92:a0:b4:1c:ed:f1:f4:d8:30:50:7c:44:f7:18: 93:cb:d4:b4:3f:95:32:cb:2f:3a:a1:33:40:c4:89:9b:08:f8: c4:fa:31:b8:67:4d:e6:ad:f7:92:68:ba:9e:6d:32:b3:90:9d: 2e:ed:c4:33:1c:2b:d8:7a:b7:6c:92:d6:ad:12:58:f1:10:f1: 7f:43:d6:81:dc:b6:08:76:9e:1c:e3:69:27:eb:73:88:56:3e: fb:c6:bb:3b:db:79:98:1f:d4:00:2d:92:4b:23:aa:34:b7:46: 07:8f:7a:34:2b:63:a2:a7:7b:58:e6:d0:19:f5:f3:f1:7b:87: 4f:0c:5c:b0:86:47:43:34:2c:bc:36:8b:8c:aa:d0:6f:02:14: 3e:2d:c9:97:63:af:c0:44:eb:f2:a4:96:68:65:f4:ce:ec:55: 51:ec:af:f0:95:6a:2b:a7:af:17:2a:18:ab:03:19:b4:c9:77: 82:1c:2c:91:bb:13:db:60:27:23:f0:e3:89:e8:0b:36:25:96: cc:ef:4b:37:f8:d5:94:87:fc:ea:a3:b2:42:eb:f3:44:04:c6: b6:ad:83:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeKcwxJtgQNMaQFvShNZbwgbOeuAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkNENUI1NjJGQUVEOUI5RDY3RjlERTVEQjcwNTc4QkZE QjAwNTdCMzAeFw0yNTA3MjEwMDA2MTBaFw0yNTA3MjQwMjM3MTBaMDMxMTAvBgNV BAMTKDE4Mjg5MDcyQjY3NDREQkEyRTEzMzhDRThBMjQ0QjAyNTlENjIxNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiRzB5sgrJZRbFho6Oz1IYPDtS RgthDM+Tc0+EfHaEl+oUmMh+XNfAP6szzi7DtZS1xTzoVBM5RrQLhslvSQD3ylhn QEHF0+ioK6zj8KfgCgqK4olE4wMl8Ye4rn78hccY+Pg1cfFnVrlUzUUGlIf6cqSd aIVu869VV9iaryUALTq/WokNZzmCeCYraEkBgMEL5+qjx/QLKZxB5zkt7nJ+PqxX pxoM2MDe1Zj6aw9xk90YFYnxWrQ2/7HFW4Fay8FHJZUOITpHaKPXbXzbwquVyl+e 7sXnsnsdML9EmTxMjzTLYrLzoHi+DutFf3PqbZFgY2OghiZvKMMUxWqx1LdBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGCiQcrZ0TbouEzjOiiRLAlnWIUYwHwYDVR0j BBgwFoAU/NW1Yvrtm51n+d5dtwV4v9sAV7MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NDcwMjZhOS0wYzlhLTRkNzktYWQ2Ny0yYzlkYmQzNjZkMGIvMC9GQ0Q1QjU2MkZB RUQ5QjlENjdGOURFNURCNzA1NzhCRkRCMDA1N0IzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkNENUI1NjJGQUVEOUI5RDY3RjlERTVEQjcwNTc4QkZEQjAw NTdCMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDQ3MDI2YTktMGM5YS00ZDc5LWFk NjctMmM5ZGJkMzY2ZDBiLzAvRkNENUI1NjJGQUVEOUI5RDY3RjlERTVEQjcwNTc4 QkZEQjAwNTdCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMJ4gXgqNU9Gbfn+orYskn0T6RTZ/UXNHNnz 1enk3ZCHU8jSXLQ+/N+SoLQc7fH02DBQfET3GJPL1LQ/lTLLLzqhM0DEiZsI+MT6 MbhnTeat95Joup5tMrOQnS7txDMcK9h6t2yS1q0SWPEQ8X9D1oHctgh2nhzjaSfr c4hWPvvGuzvbeZgf1AAtkksjqjS3RgePejQrY6Kne1jm0Bn18/F7h08MXLCGR0M0 LLw2i4yq0G8CFD4tyZdjr8BE6/Kklmhl9M7sVVHsr/CVaiunrxcqGKsDGbTJd4Ic LJG7E9tgJyPw44noCzYllszvSzf41ZSH/OqjskLr80QExratgyM= -----END CERTIFICATE-----Generated at Mon Jul 21 08:34:05 2025 by rpki-client