$ rpki-client -vvf repo-rpki.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/FA5F6CC99BAC829D4DE7BECEE823199657D018CD.mft File: FA5F6CC99BAC829D4DE7BECEE823199657D018CD.mft (raw, json) Hash identifier: s+Zdoe4xs9ViIHU4Gcss/CEzO7QKWXA0rkSHgJfwx/A= Subject key identifier: 5F:53:B8:B4:58:D7:01:00:FB:4D:04:59:F2:1F:ED:AC:86:2C:7D:E4 Authority key identifier: FA:5F:6C:C9:9B:AC:82:9D:4D:E7:BE:CE:E8:23:19:96:57:D0:18:CD Certificate issuer: /CN=FA5F6CC99BAC829D4DE7BECEE823199657D018CD Certificate serial: 32728688CD74ACB281ABB0452756612515858FCB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA5F6CC99BAC829D4DE7BECEE823199657D018CD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/FA5F6CC99BAC829D4DE7BECEE823199657D018CD.mft Manifest number: 0112 Signing time: Fri 05 Sep 2025 14:31:15 +0000 Manifest this update: Fri 05 Sep 2025 14:26:15 +0000 Manifest next update: Mon 08 Sep 2025 19:02:15 +0000 Files and hashes: 1: 3138302e39342e392e302f32342d3234203d3e20313532303430.roa (hash: qufNb3/LUFwbrIvm8YtRzGBfloSV6jK/5s6hJyz0aXI=) 2: FA5F6CC99BAC829D4DE7BECEE823199657D018CD.crl (hash: HF+jwRFKZS8DSIA9FNRRzTPeLMTUsz95GD4fIW3xm3s=) 3: 3138302e39342e382e302f32342d3234203d3e20313532303430.roa (hash: c2NPfXxSOck24WuWyT1N3C7BCQbBB0F0oXAud+7dRiM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/FA5F6CC99BAC829D4DE7BECEE823199657D018CD.crl rsync://repo-rpki.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/FA5F6CC99BAC829D4DE7BECEE823199657D018CD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA5F6CC99BAC829D4DE7BECEE823199657D018CD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 19:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:72:86:88:cd:74:ac:b2:81:ab:b0:45:27:56:61:25:15:85:8f:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA5F6CC99BAC829D4DE7BECEE823199657D018CD Validity Not Before: Sep 5 14:26:15 2025 GMT Not After : Sep 8 19:02:15 2025 GMT Subject: CN=5F53B8B458D70100FB4D0459F21FEDAC862C7DE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:28:d3:64:9e:ac:bc:6b:2a:1d:cc:af:79:e2: 7f:4f:28:25:af:e6:fb:48:1a:b1:78:df:32:d5:ca: c0:27:9d:e7:c4:c9:e3:27:c7:53:51:c0:c0:65:f0: a7:15:b1:ee:27:52:0e:5e:bf:d1:fe:c6:e4:eb:96: 5b:cd:b3:f5:de:eb:4d:f6:8f:c5:32:e7:6c:30:80: 95:04:6e:ca:22:8e:01:f5:26:34:24:e7:a3:8d:61: 32:c8:b0:d0:13:b3:17:99:45:c3:25:02:89:08:43: 9d:2e:77:f1:82:c5:35:93:a5:e6:9e:17:70:ad:89: 0f:db:80:9d:36:14:08:ae:9c:c1:d5:2d:b1:c9:92: ff:d6:3c:41:7a:63:84:b8:03:43:e1:be:b1:f6:a7: 80:47:6a:e0:63:fb:62:48:a3:26:59:f4:47:e1:4a: 31:22:d7:05:d5:e5:9e:05:bd:21:73:67:07:3c:79: 3c:00:08:4d:26:6e:40:f1:0f:f1:6a:77:01:40:18: 11:a8:2d:d2:1f:2f:27:b5:1f:8a:9e:6d:f9:1f:a0: f4:a9:34:83:14:33:37:78:67:dd:f6:10:b1:3f:31: 47:49:73:4e:3b:82:25:0d:b7:b6:dc:6b:f0:d9:fb: 00:78:6f:f9:29:bf:a3:62:b0:a1:7b:ff:d4:71:3b: 9c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:53:B8:B4:58:D7:01:00:FB:4D:04:59:F2:1F:ED:AC:86:2C:7D:E4 X509v3 Authority Key Identifier: keyid:FA:5F:6C:C9:9B:AC:82:9D:4D:E7:BE:CE:E8:23:19:96:57:D0:18:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/FA5F6CC99BAC829D4DE7BECEE823199657D018CD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA5F6CC99BAC829D4DE7BECEE823199657D018CD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/FA5F6CC99BAC829D4DE7BECEE823199657D018CD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:46:c8:c2:b7:3a:e0:b4:84:5d:5f:d2:91:fd:9c:31:ca:d5: a2:07:92:7f:40:10:3b:5d:77:10:46:18:e0:c1:96:b9:6d:e5: 00:45:ef:a6:cb:f9:a5:5d:c3:ac:c5:c3:42:0a:55:2e:9f:6c: e4:47:0a:7a:d7:d8:ff:04:4b:ff:bd:59:39:2b:95:a6:db:0d: fe:e9:bd:bb:6b:7e:81:7d:89:5a:2e:49:00:bc:3d:9b:21:ac: e7:2b:1c:40:89:75:c2:be:ce:c6:7d:a9:2a:a4:68:be:1f:84: 70:34:f1:9b:14:03:54:a3:1b:05:ad:cc:d2:60:38:ff:71:b4: 5f:b4:74:7a:b9:7f:06:15:cd:9a:52:0f:22:1f:fd:f9:fd:9f: 79:f0:89:8c:43:94:f9:d8:8e:e9:13:c6:aa:96:06:b2:2a:ad: ff:96:4b:b2:c0:20:24:4d:d9:b2:4f:bb:a5:91:f9:75:45:2f: 0c:95:96:23:4e:83:14:e0:93:0b:d6:83:88:3c:17:89:9f:61: 08:b1:b7:47:57:f1:09:72:9f:03:00:c3:5b:a8:f5:bd:31:9e: 41:93:8b:62:11:c1:13:e3:86:ff:ee:35:10:87:15:4b:cf:95: 53:a7:ad:1d:ac:bb:83:59:49:05:ca:cd:8c:b1:7f:99:48:fd: 7d:36:2c:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMnKGiM10rLKBq7BFJ1ZhJRWFj8swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE1RjZDQzk5QkFDODI5RDRERTdCRUNFRTgyMzE5OTY1 N0QwMThDRDAeFw0yNTA5MDUxNDI2MTVaFw0yNTA5MDgxOTAyMTVaMDMxMTAvBgNV BAMTKDVGNTNCOEI0NThENzAxMDBGQjREMDQ1OUYyMUZFREFDODYyQzdERTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyKNNknqy8ayodzK954n9PKCWv 5vtIGrF43zLVysAnnefEyeMnx1NRwMBl8KcVse4nUg5ev9H+xuTrllvNs/Xe6032 j8Uy52wwgJUEbsoijgH1JjQk56ONYTLIsNATsxeZRcMlAokIQ50ud/GCxTWTpeae F3CtiQ/bgJ02FAiunMHVLbHJkv/WPEF6Y4S4A0PhvrH2p4BHauBj+2JIoyZZ9Efh SjEi1wXV5Z4FvSFzZwc8eTwACE0mbkDxD/FqdwFAGBGoLdIfLye1H4qebfkfoPSp NIMUMzd4Z932ELE/MUdJc047giUNt7bca/DZ+wB4b/kpv6NisKF7/9RxO5x1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUX1O4tFjXAQD7TQRZ8h/trIYsfeQwHwYDVR0j BBgwFoAU+l9syZusgp1N577O6CMZllfQGM0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NmYxZWI0Yi00OGRjLTRlZWEtOTE4MS0xMjhjYjI4YjNkYmEvMC9GQTVGNkNDOTlC QUM4MjlENERFN0JFQ0VFODIzMTk5NjU3RDAxOENELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkE1RjZDQzk5QkFDODI5RDRERTdCRUNFRTgyMzE5OTY1N0Qw MThDRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTZmMWViNGItNDhkYy00ZWVhLTkx ODEtMTI4Y2IyOGIzZGJhLzAvRkE1RjZDQzk5QkFDODI5RDRERTdCRUNFRTgyMzE5 OTY1N0QwMThDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABVGyMK3OuC0hF1f0pH9nDHK1aIHkn9AEDtd dxBGGODBlrlt5QBF76bL+aVdw6zFw0IKVS6fbORHCnrX2P8ES/+9WTkrlabbDf7p vbtrfoF9iVouSQC8PZshrOcrHECJdcK+zsZ9qSqkaL4fhHA08ZsUA1SjGwWtzNJg OP9xtF+0dHq5fwYVzZpSDyIf/fn9n3nwiYxDlPnYjukTxqqWBrIqrf+WS7LAICRN 2bJPu6WR+XVFLwyVliNOgxTgkwvWg4g8F4mfYQixt0dX8QlynwMAw1uo9b0xnkGT i2IRwRPjhv/uNRCHFUvPlVOnrR2su4NZSQXKzYyxf5lI/X02LD4= -----END CERTIFICATE-----Generated at Sun Sep 7 15:25:44 2025 by rpki-client