$ rpki-client -vvf repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.mft File: FC2DAAA409BA60DE33EC91F3A861D1A00719D426.mft (raw, json) Hash identifier: SjUJa/fxj75vlK+dUOuc/Curug9WvvtAiOWWSrC9hX8= Subject key identifier: 8A:B1:B3:68:CB:AB:1B:43:A7:05:25:6C:F8:81:9A:AC:DD:B8:83:8B Authority key identifier: FC:2D:AA:A4:09:BA:60:DE:33:EC:91:F3:A8:61:D1:A0:07:19:D4:26 Certificate issuer: /CN=FC2DAAA409BA60DE33EC91F3A861D1A00719D426 Certificate serial: 77304941A99B7B715B1444CB532FED7F0F8385D7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.mft Manifest number: D0 Signing time: Sat 30 Aug 2025 20:40:51 +0000 Manifest this update: Sat 30 Aug 2025 20:35:51 +0000 Manifest next update: Tue 02 Sep 2025 22:53:51 +0000 Files and hashes: 1: FC2DAAA409BA60DE33EC91F3A861D1A00719D426.crl (hash: HHSXnoFcBhrfRkUJPwjulAa8v1TZ8j1Vc9nJQ6c5Q80=) 2: 3135372e36362e322e302f32332d3234203d3e20313532343430.roa (hash: 3ZS5/0NJnXKv4Pk0J4oSOH1r1VKtA3mh1qb3WAlsXUw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.crl rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 02 Sep 2025 02:27:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:30:49:41:a9:9b:7b:71:5b:14:44:cb:53:2f:ed:7f:0f:83:85:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC2DAAA409BA60DE33EC91F3A861D1A00719D426 Validity Not Before: Aug 30 20:35:51 2025 GMT Not After : Sep 2 22:53:51 2025 GMT Subject: CN=8AB1B368CBAB1B43A705256CF8819AACDDB8838B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:b5:10:f9:b8:7b:5d:89:7d:1a:46:ad:54:36: b3:ea:d7:8f:d5:46:16:a9:e6:13:41:8f:a6:d8:98: 18:a0:99:21:95:ae:6c:9d:67:6a:7d:d2:f2:ee:fc: 79:82:65:db:dd:c1:10:9b:6e:18:cd:8f:83:9f:6d: c0:e8:af:df:08:c2:44:18:fb:a9:10:46:d3:ec:af: cc:d9:da:51:61:12:17:32:6b:2e:0c:ac:38:6d:06: 80:55:c4:c7:87:3c:18:2b:06:85:34:71:66:d3:8f: 07:04:52:b8:ac:f8:bf:ef:fb:ac:f8:28:4c:82:90: 45:fa:10:4b:66:e4:a7:78:53:7c:7d:9d:d5:b0:b0: 75:4f:db:19:d0:6f:39:28:a2:0c:f7:94:50:c4:4f: 56:d7:08:73:15:16:21:13:b5:a7:7d:36:49:fb:08: 6f:f7:ca:76:b5:8e:ba:32:f5:9b:cb:72:57:bd:79: 74:dc:79:01:c1:a2:e9:a5:56:ec:77:a9:a7:9f:ab: 1d:05:18:33:8e:04:1f:50:b9:23:f1:32:22:29:3b: 53:8e:b4:4d:35:f7:19:85:47:97:4a:06:49:cb:a3: fb:d6:c3:80:35:a0:c5:3f:93:43:2e:a0:a2:84:3f: 0c:52:47:0e:e7:11:40:2e:aa:e5:3b:39:a2:d2:9a: eb:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:B1:B3:68:CB:AB:1B:43:A7:05:25:6C:F8:81:9A:AC:DD:B8:83:8B X509v3 Authority Key Identifier: keyid:FC:2D:AA:A4:09:BA:60:DE:33:EC:91:F3:A8:61:D1:A0:07:19:D4:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:f3:bf:d3:f0:1f:d6:3c:8c:46:48:13:5f:cc:7b:3a:ec:d9: 84:b4:8f:a5:dd:a9:1c:00:fe:ac:51:2d:b0:20:72:c4:bf:bd: e6:00:64:33:b3:8d:10:8b:be:e8:9a:71:2c:5a:d4:60:61:b0: bf:6f:3c:29:1f:d6:80:79:c7:40:4e:be:07:29:53:24:90:21: ea:ea:0d:1c:bb:c1:41:57:a6:1e:ca:e5:12:c3:46:39:0b:89: 59:5d:d8:f4:7c:0b:2b:d1:81:08:20:2d:80:05:16:59:10:d1: 24:c9:50:15:ab:a5:57:4c:62:ef:23:8e:77:1e:83:05:66:d8: c3:85:1e:81:7d:9b:78:45:a3:87:f8:70:96:e6:c9:e5:ee:0e: 3b:c7:fc:62:8a:ba:2a:56:c8:ac:8d:f2:86:0e:5d:1b:e8:39: 15:62:85:bf:8c:7b:91:81:45:e9:f3:0f:56:f1:b3:0f:aa:5f: 89:fb:df:b2:df:56:34:69:10:b5:a4:cd:55:a5:b4:09:a1:7d: 11:dd:fa:77:42:38:14:e4:17:d3:54:cb:05:ba:6b:ac:19:bc: bb:86:67:8b:73:87:12:29:6f:f9:74:6e:ac:8d:14:74:bf:cd: 54:87:f4:be:44:68:84:6a:8d:69:df:af:3c:9c:25:1c:92:d1: ff:9c:a2:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdzBJQambe3FbFETLUy/tfw+DhdcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkMyREFBQTQwOUJBNjBERTMzRUM5MUYzQTg2MUQxQTAw NzE5RDQyNjAeFw0yNTA4MzAyMDM1NTFaFw0yNTA5MDIyMjUzNTFaMDMxMTAvBgNV BAMTKDhBQjFCMzY4Q0JBQjFCNDNBNzA1MjU2Q0Y4ODE5QUFDRERCODgzOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDytRD5uHtdiX0aRq1UNrPq14/V Rhap5hNBj6bYmBigmSGVrmydZ2p90vLu/HmCZdvdwRCbbhjNj4OfbcDor98IwkQY +6kQRtPsr8zZ2lFhEhcyay4MrDhtBoBVxMeHPBgrBoU0cWbTjwcEUris+L/v+6z4 KEyCkEX6EEtm5Kd4U3x9ndWwsHVP2xnQbzkoogz3lFDET1bXCHMVFiETtad9Nkn7 CG/3yna1jroy9ZvLcle9eXTceQHBoumlVux3qaefqx0FGDOOBB9QuSPxMiIpO1OO tE019xmFR5dKBknLo/vWw4A1oMU/k0MuoKKEPwxSRw7nEUAuquU7OaLSmus9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUirGzaMurG0OnBSVs+IGarN24g4swHwYDVR0j BBgwFoAU/C2qpAm6YN4z7JHzqGHRoAcZ1CYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZmI4MDhlYi1jOThlLTQwMzYtYmU5YS0xOTNiYmNjNjQ4OTIvMC9GQzJEQUFBNDA5 QkE2MERFMzNFQzkxRjNBODYxRDFBMDA3MTlENDI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkMyREFBQTQwOUJBNjBERTMzRUM5MUYzQTg2MUQxQTAwNzE5 RDQyNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWZiODA4ZWItYzk4ZS00MDM2LWJl OWEtMTkzYmJjYzY0ODkyLzAvRkMyREFBQTQwOUJBNjBERTMzRUM5MUYzQTg2MUQx QTAwNzE5RDQyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKDzv9PwH9Y8jEZIE1/Mezrs2YS0j6XdqRwA /qxRLbAgcsS/veYAZDOzjRCLvuiacSxa1GBhsL9vPCkf1oB5x0BOvgcpUySQIerq DRy7wUFXph7K5RLDRjkLiVld2PR8CyvRgQggLYAFFlkQ0STJUBWrpVdMYu8jjnce gwVm2MOFHoF9m3hFo4f4cJbmyeXuDjvH/GKKuipWyKyN8oYOXRvoORVihb+Me5GB RenzD1bxsw+qX4n737LfVjRpELWkzVWltAmhfRHd+ndCOBTkF9NUywW6a6wZvLuG Z4tzhxIpb/l0bqyNFHS/zVSH9L5EaIRqjWnfrzycJRyS0f+cokY= -----END CERTIFICATE-----Generated at Sun Aug 31 00:42:21 2025 by rpki-client