$ rpki-client -vvf repo-rpki.idnic.net/repo/5b9752f6-6066-4b38-87cc-9ba63d19e22c/0/FC1C6395AD65E53AB9BC4BBD451AE79234BF63D7.mft File: FC1C6395AD65E53AB9BC4BBD451AE79234BF63D7.mft (raw, json) Hash identifier: MhhB2N0crMzmHJtABNOKiYGOaxiREWL72qWeGKMT97U= Subject key identifier: B8:C5:1F:0C:51:42:65:61:7A:19:1E:CC:DB:88:FB:8E:93:7C:1C:EE Authority key identifier: FC:1C:63:95:AD:65:E5:3A:B9:BC:4B:BD:45:1A:E7:92:34:BF:63:D7 Certificate issuer: /CN=FC1C6395AD65E53AB9BC4BBD451AE79234BF63D7 Certificate serial: 3CBFBF8F7E1AA4004A23F2687BC25D39DD915A8D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC1C6395AD65E53AB9BC4BBD451AE79234BF63D7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5b9752f6-6066-4b38-87cc-9ba63d19e22c/0/FC1C6395AD65E53AB9BC4BBD451AE79234BF63D7.mft Manifest number: 04C3 Signing time: Thu 04 Sep 2025 23:02:03 +0000 Manifest this update: Thu 04 Sep 2025 22:57:03 +0000 Manifest next update: Mon 08 Sep 2025 06:18:03 +0000 Files and hashes: 1: FC1C6395AD65E53AB9BC4BBD451AE79234BF63D7.crl (hash: ctwOMEpMa8H97mtCFKEfKY7nRMHC4KsSr6135tqqwhI=) 2: 3130332e33392e35322e302f32342d3234203d3e203633353033.roa (hash: Bw5xJfUWgUnZZKn8O2MlqxKM9AFTPxg86d/p/QbMwfs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5b9752f6-6066-4b38-87cc-9ba63d19e22c/0/FC1C6395AD65E53AB9BC4BBD451AE79234BF63D7.crl rsync://repo-rpki.idnic.net/repo/5b9752f6-6066-4b38-87cc-9ba63d19e22c/0/FC1C6395AD65E53AB9BC4BBD451AE79234BF63D7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC1C6395AD65E53AB9BC4BBD451AE79234BF63D7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 06:18:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:bf:bf:8f:7e:1a:a4:00:4a:23:f2:68:7b:c2:5d:39:dd:91:5a:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC1C6395AD65E53AB9BC4BBD451AE79234BF63D7 Validity Not Before: Sep 4 22:57:03 2025 GMT Not After : Sep 8 06:18:03 2025 GMT Subject: CN=B8C51F0C514265617A191ECCDB88FB8E937C1CEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:fb:25:50:32:3b:d6:da:4c:ae:65:57:bb:30: 3d:fc:70:43:fc:93:65:4c:65:54:ef:6d:28:ec:cf: 49:de:90:0b:53:90:68:32:9b:a3:84:1f:0c:e3:22: ee:1e:e6:63:be:8f:6e:c7:14:07:92:62:e7:66:30: c6:a9:c2:45:96:5e:15:dc:d3:7b:d3:82:a8:00:f3: 02:fe:ca:be:d8:4a:f9:d8:10:6a:72:e2:67:c3:b0: 84:79:67:2c:ae:5f:54:5d:00:a4:c2:f6:bd:cb:c8: 8b:e8:76:ce:08:fc:e0:7e:ff:48:25:8a:6a:a5:dd: 44:07:2a:3c:ed:d9:35:9a:6b:f4:4c:6f:11:24:cb: d3:2d:a9:9b:37:ee:e1:59:55:8f:63:10:e1:0d:d3: 4a:28:28:7f:87:c9:61:88:2b:f5:44:49:0e:b0:66: 34:10:30:de:a1:a5:af:dc:c5:17:6d:f4:27:87:88: a6:f5:1d:14:f3:6d:e4:4d:04:91:4c:e5:8b:ca:45: 02:e5:77:77:2b:e5:50:68:86:56:f4:e1:5f:27:8b: 89:2c:f8:0b:fa:27:a4:ee:26:21:71:af:c0:64:42: bc:75:56:1d:d1:f9:50:a6:b8:1c:75:8c:2e:f9:ec: 30:df:9b:3d:0f:30:04:bf:2b:34:61:87:58:6c:59: aa:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:C5:1F:0C:51:42:65:61:7A:19:1E:CC:DB:88:FB:8E:93:7C:1C:EE X509v3 Authority Key Identifier: keyid:FC:1C:63:95:AD:65:E5:3A:B9:BC:4B:BD:45:1A:E7:92:34:BF:63:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5b9752f6-6066-4b38-87cc-9ba63d19e22c/0/FC1C6395AD65E53AB9BC4BBD451AE79234BF63D7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC1C6395AD65E53AB9BC4BBD451AE79234BF63D7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5b9752f6-6066-4b38-87cc-9ba63d19e22c/0/FC1C6395AD65E53AB9BC4BBD451AE79234BF63D7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:ed:cc:5c:6d:09:42:df:eb:3f:d2:65:03:90:c9:61:05:6c: 6d:f5:27:09:9e:99:db:3a:af:59:a2:c0:fc:84:f1:01:69:36: a7:0d:e7:d2:92:1c:2d:d4:f6:eb:d0:0d:ec:60:b6:d8:7f:bc: 14:08:72:30:d4:5e:dd:e0:f0:76:ff:ed:24:97:3f:cb:3a:0a: 5a:5a:5d:31:96:59:70:b6:9a:0a:41:92:bb:a7:80:9b:1d:31: 83:ba:03:53:27:f5:83:a0:41:3f:43:9e:ab:58:3e:03:7a:f5: ea:a3:d0:02:7e:ae:72:8b:09:8f:10:ea:60:6e:6d:ae:66:ba: d0:ed:88:5e:d4:9d:55:44:6a:bf:3d:4a:7f:e6:0a:fe:5d:d8: b5:20:18:0f:24:7f:8c:46:9a:47:83:e2:aa:fd:2b:4d:15:b8: e7:35:06:86:42:59:ef:d0:9f:7f:e0:40:fa:11:fa:ee:d5:2a: 01:e0:7d:86:8c:13:5b:0a:8c:4a:76:79:62:22:f3:52:a5:8b: 9b:e2:cb:d5:db:2e:b4:c0:36:fe:1f:a1:87:e3:12:8f:fb:f8: 53:80:8b:fd:86:fe:d7:90:6e:5a:20:83:ed:8d:83:56:4f:c3: 4a:3b:0f:ad:a2:74:64:43:47:b0:83:5a:97:72:e1:8f:40:97: a8:b0:9d:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPL+/j34apABKI/Joe8JdOd2RWo0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkMxQzYzOTVBRDY1RTUzQUI5QkM0QkJENDUxQUU3OTIz NEJGNjNENzAeFw0yNTA5MDQyMjU3MDNaFw0yNTA5MDgwNjE4MDNaMDMxMTAvBgNV BAMTKEI4QzUxRjBDNTE0MjY1NjE3QTE5MUVDQ0RCODhGQjhFOTM3QzFDRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1+yVQMjvW2kyuZVe7MD38cEP8 k2VMZVTvbSjsz0nekAtTkGgym6OEHwzjIu4e5mO+j27HFAeSYudmMMapwkWWXhXc 03vTgqgA8wL+yr7YSvnYEGpy4mfDsIR5ZyyuX1RdAKTC9r3LyIvods4I/OB+/0gl imql3UQHKjzt2TWaa/RMbxEky9MtqZs37uFZVY9jEOEN00ooKH+HyWGIK/VESQ6w ZjQQMN6hpa/cxRdt9CeHiKb1HRTzbeRNBJFM5YvKRQLld3cr5VBohlb04V8ni4ks +Av6J6TuJiFxr8BkQrx1Vh3R+VCmuBx1jC757DDfmz0PMAS/KzRhh1hsWaqTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuMUfDFFCZWF6GR7M24j7jpN8HO4wHwYDVR0j BBgwFoAU/Bxjla1l5Tq5vEu9RRrnkjS/Y9cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Yjk3NTJmNi02MDY2LTRiMzgtODdjYy05YmE2M2QxOWUyMmMvMC9GQzFDNjM5NUFE NjVFNTNBQjlCQzRCQkQ0NTFBRTc5MjM0QkY2M0Q3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkMxQzYzOTVBRDY1RTUzQUI5QkM0QkJENDUxQUU3OTIzNEJG NjNENy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWI5NzUyZjYtNjA2Ni00YjM4LTg3 Y2MtOWJhNjNkMTllMjJjLzAvRkMxQzYzOTVBRDY1RTUzQUI5QkM0QkJENDUxQUU3 OTIzNEJGNjNENy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD3tzFxtCULf6z/SZQOQyWEFbG31Jwmemds6 r1miwPyE8QFpNqcN59KSHC3U9uvQDexgtth/vBQIcjDUXt3g8Hb/7SSXP8s6Clpa XTGWWXC2mgpBkrungJsdMYO6A1Mn9YOgQT9DnqtYPgN69eqj0AJ+rnKLCY8Q6mBu ba5mutDtiF7UnVVEar89Sn/mCv5d2LUgGA8kf4xGmkeD4qr9K00VuOc1BoZCWe/Q n3/gQPoR+u7VKgHgfYaME1sKjEp2eWIi81Kli5viy9XbLrTANv4foYfjEo/7+FOA i/2G/teQblogg+2Ng1ZPw0o7D62idGRDR7CDWpdy4Y9Al6iwnX8= -----END CERTIFICATE-----Generated at Fri Sep 5 10:29:34 2025 by rpki-client