$ rpki-client -vvf repo-rpki.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.mft File: FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.mft (raw, json) Hash identifier: SqEf31ujZp9zU0Yes63wASefeD4RXzkfJkO+Sogo4M8= Subject key identifier: A2:56:1C:AB:74:C2:82:32:BF:09:1E:7A:E1:05:12:8B:6A:2A:74:8A Authority key identifier: FC:9D:A1:A7:62:5B:27:FD:B4:66:B1:D8:A6:90:37:7E:4C:7B:CE:72 Certificate issuer: /CN=FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72 Certificate serial: 1F4FD450C2FDEE09DE2CC5EDC730B911ACBBA46E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.mft Manifest number: 0504 Signing time: Sun 07 Sep 2025 06:31:08 +0000 Manifest this update: Sun 07 Sep 2025 06:26:08 +0000 Manifest next update: Wed 10 Sep 2025 13:01:08 +0000 Files and hashes: 1: FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.crl (hash: mrkcNbdyg2BgGb/EWd2C7mFB8SoXRFS3vJW7aIxizXI=) 2: 3130332e33312e3130392e302f32342d3234203d3e20313339343430.roa (hash: iRZXCDlLv0igia0Lk/WxM1oJP6cq9J+UPskJIy0xfv8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.crl rsync://repo-rpki.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 10:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:4f:d4:50:c2:fd:ee:09:de:2c:c5:ed:c7:30:b9:11:ac:bb:a4:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72 Validity Not Before: Sep 7 06:26:08 2025 GMT Not After : Sep 10 13:01:08 2025 GMT Subject: CN=A2561CAB74C28232BF091E7AE105128B6A2A748A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e2:39:86:b4:de:48:77:2e:7c:53:96:e3:50: 70:20:9c:9e:6d:47:6d:62:02:2c:9d:45:1f:32:3f: 97:68:b1:8c:33:29:98:90:62:3e:c4:4d:ce:18:bf: 65:ee:38:40:6f:e2:b3:f6:e1:80:34:c6:3a:21:ba: 3c:60:aa:3b:5b:52:76:bc:46:11:c1:a0:1c:33:e7: 17:da:e5:36:3e:98:c7:bf:65:e3:f2:63:2c:6d:99: 81:0b:25:94:4f:b9:34:a2:2e:f4:93:c6:b0:ef:4d: a0:10:a7:fb:6e:27:78:31:e3:9e:60:62:84:26:6b: 79:4e:87:de:28:11:4f:f2:24:e9:a0:a1:eb:c8:b7: 86:14:a4:1b:fc:3d:41:5c:28:56:2b:e4:bb:65:0a: 46:84:b7:64:dc:43:ea:aa:5c:0a:ee:7d:c5:c9:06: 4c:5e:60:a3:88:6d:2d:1a:0b:47:02:fe:25:b2:5d: 34:8c:10:05:f5:b6:00:3d:6b:01:f2:b5:a3:ed:bd: 97:ee:0b:e3:0a:b6:9d:3f:89:d8:5e:ee:9c:39:97: 85:9c:40:57:28:0c:15:f7:ab:40:26:c0:82:ef:1b: ed:d6:3d:d6:af:e9:69:53:5d:b1:be:93:04:8c:6c: eb:47:8d:2b:c4:87:b9:90:af:09:98:4f:e5:b9:97: 1c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:56:1C:AB:74:C2:82:32:BF:09:1E:7A:E1:05:12:8B:6A:2A:74:8A X509v3 Authority Key Identifier: keyid:FC:9D:A1:A7:62:5B:27:FD:B4:66:B1:D8:A6:90:37:7E:4C:7B:CE:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:af:ad:03:48:11:36:18:01:0b:5d:43:c8:e7:03:bc:b3:76: 2a:4a:02:ad:d1:c8:66:95:cc:21:86:9a:58:3f:80:5e:59:16: 71:72:a1:e6:c8:d7:57:73:f8:60:10:55:21:b7:b0:25:8c:fd: 5d:f4:b5:82:3e:a4:db:e4:ff:fb:38:e3:02:4a:37:0a:a5:55: 71:da:a4:9d:5d:4f:e6:45:53:0a:f2:de:cd:4d:e7:92:e5:c3: fd:09:d5:63:54:f9:3f:9b:a8:8d:02:9a:85:03:fd:0c:e7:2b: ae:34:6c:5d:1e:8e:c3:8e:f5:ad:8c:fe:80:45:6e:c6:cb:17: 7e:6c:52:96:dc:3e:43:a0:cf:b8:28:97:16:04:73:48:49:fe: 59:4a:04:51:f5:62:84:2c:13:93:c8:22:6c:81:6a:d9:76:fc: b4:3c:40:d2:1e:dd:9d:54:0f:de:cd:d1:99:66:5e:01:6c:a2: c7:bc:04:68:98:c4:35:d3:bf:e8:b9:fd:54:12:78:d4:54:df: 06:d3:1c:98:be:64:3a:2a:ba:36:83:6a:f0:10:ac:17:77:5f: ed:26:aa:4c:54:78:55:80:a9:0a:ae:1f:7e:f1:57:81:91:b0: ed:0b:57:e1:9d:15:d6:78:3f:cc:b0:94:5a:b6:d4:5d:50:32: c6:ce:28:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH0/UUML97gneLMXtxzC5Eay7pG4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkM5REExQTc2MjVCMjdGREI0NjZCMUQ4QTY5MDM3N0U0 QzdCQ0U3MjAeFw0yNTA5MDcwNjI2MDhaFw0yNTA5MTAxMzAxMDhaMDMxMTAvBgNV BAMTKEEyNTYxQ0FCNzRDMjgyMzJCRjA5MUU3QUUxMDUxMjhCNkEyQTc0OEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA4jmGtN5Idy58U5bjUHAgnJ5t R21iAiydRR8yP5dosYwzKZiQYj7ETc4Yv2XuOEBv4rP24YA0xjohujxgqjtbUna8 RhHBoBwz5xfa5TY+mMe/ZePyYyxtmYELJZRPuTSiLvSTxrDvTaAQp/tuJ3gx455g YoQma3lOh94oEU/yJOmgoevIt4YUpBv8PUFcKFYr5LtlCkaEt2TcQ+qqXArufcXJ BkxeYKOIbS0aC0cC/iWyXTSMEAX1tgA9awHytaPtvZfuC+MKtp0/idhe7pw5l4Wc QFcoDBX3q0AmwILvG+3WPdav6WlTXbG+kwSMbOtHjSvEh7mQrwmYT+W5lxxrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUolYcq3TCgjK/CR564QUSi2oqdIowHwYDVR0j BBgwFoAU/J2hp2JbJ/20ZrHYppA3fkx7znIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZjZhYTMxYS1kZDBkLTRjMTAtYjVkZC1iMWE4M2ZhNTc3NjMvMC9GQzlEQTFBNzYy NUIyN0ZEQjQ2NkIxRDhBNjkwMzc3RTRDN0JDRTcyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkM5REExQTc2MjVCMjdGREI0NjZCMUQ4QTY5MDM3N0U0QzdC Q0U3Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGY2YWEzMWEtZGQwZC00YzEwLWI1 ZGQtYjFhODNmYTU3NzYzLzAvRkM5REExQTc2MjVCMjdGREI0NjZCMUQ4QTY5MDM3 N0U0QzdCQ0U3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE2vrQNIETYYAQtdQ8jnA7yzdipKAq3RyGaV zCGGmlg/gF5ZFnFyoebI11dz+GAQVSG3sCWM/V30tYI+pNvk//s44wJKNwqlVXHa pJ1dT+ZFUwry3s1N55Llw/0J1WNU+T+bqI0CmoUD/QznK640bF0ejsOO9a2M/oBF bsbLF35sUpbcPkOgz7golxYEc0hJ/llKBFH1YoQsE5PIImyBatl2/LQ8QNIe3Z1U D97N0ZlmXgFsose8BGiYxDXTv+i5/VQSeNRU3wbTHJi+ZDoqujaDavAQrBd3X+0m qkxUeFWAqQquH37xV4GRsO0LV+GdFdZ4P8ywlFq21F1QMsbOKKU= -----END CERTIFICATE-----Generated at Sun Sep 7 14:04:39 2025 by rpki-client