$ rpki-client -vvf repo-rpki.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.mft File: FCA55FE68BF147AE20F00C45DADCDF960C120CF8.mft (raw, json) Hash identifier: KQctQ62pp9Ctwvj+9S1A+yifHwoY2oIaQcKzGsR5/K4= Subject key identifier: 3B:7E:74:CE:CD:CD:21:99:86:1F:E1:0F:83:C6:F7:1A:BE:20:13:E7 Authority key identifier: FC:A5:5F:E6:8B:F1:47:AE:20:F0:0C:45:DA:DC:DF:96:0C:12:0C:F8 Certificate issuer: /CN=FCA55FE68BF147AE20F00C45DADCDF960C120CF8 Certificate serial: 0279CAED75E9FCF5C85522987287D5A29B2D4170 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.mft Manifest number: 01AA Signing time: Sat 06 Sep 2025 10:42:09 +0000 Manifest this update: Sat 06 Sep 2025 10:37:09 +0000 Manifest next update: Tue 09 Sep 2025 13:11:09 +0000 Files and hashes: 1: 3130332e3132312e3234342e302f32332d3234203d3e20313335343738.roa (hash: mb2pM5mXThua6WdA1EeTpxCUj69c6y3IginfkESyKCw=) 2: FCA55FE68BF147AE20F00C45DADCDF960C120CF8.crl (hash: 4inuricvdxXRD+nCbNoYMXwca5Wr/izQBfsKT4ntplg=) 3: 3130332e3132312e3234362e302f32332d3234203d3e20313335343738.roa (hash: Fa70W79FWJwGU7udTAwUgPXNTPP4kX8Q9MJvZfIXGU4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.crl rsync://repo-rpki.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 13:11:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:79:ca:ed:75:e9:fc:f5:c8:55:22:98:72:87:d5:a2:9b:2d:41:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FCA55FE68BF147AE20F00C45DADCDF960C120CF8 Validity Not Before: Sep 6 10:37:09 2025 GMT Not After : Sep 9 13:11:09 2025 GMT Subject: CN=3B7E74CECDCD2199861FE10F83C6F71ABE2013E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:2e:37:90:80:22:6d:35:74:d8:57:0d:ad:b9: cd:17:d0:e1:a2:9d:e9:17:05:b3:41:ce:92:6f:d3: 31:b3:39:55:c9:eb:8f:df:68:56:c4:af:c4:63:01: 95:0f:0e:69:d3:9d:7a:d1:18:a1:cb:29:aa:ec:0c: f9:69:2b:17:1b:db:0a:f8:2c:5b:dc:cc:4d:cf:8f: fb:1c:60:71:bb:ca:a0:ae:8d:12:70:19:f8:06:0c: ff:2d:c5:99:26:c8:42:d8:5f:6a:4a:87:ec:06:78: 88:86:e8:44:69:81:7a:14:d2:d1:1f:1d:f8:2d:d3: aa:e7:24:d1:53:9f:dd:38:07:2c:8d:3f:82:5a:4d: 6f:c8:37:72:0b:f1:06:eb:05:73:2b:b5:24:a6:f3: 4c:cf:e2:46:3a:5e:2d:6e:41:d9:0d:76:bc:22:8b: a6:6f:b8:bb:3c:03:e0:3f:5e:24:3a:f1:1b:85:31: 97:e3:52:f5:fb:e5:71:dd:1b:9b:a6:bc:56:bb:1d: a7:7c:09:62:69:7d:c7:b4:cc:8f:52:2f:b0:b9:b4: 4f:34:32:7d:f8:7f:56:b3:ff:76:fc:aa:26:78:3f: 27:c1:24:73:4b:b4:9c:14:3c:80:37:95:85:a0:09: 6c:75:70:06:d6:f1:dd:ac:e4:7d:be:ac:03:56:1a: 92:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:7E:74:CE:CD:CD:21:99:86:1F:E1:0F:83:C6:F7:1A:BE:20:13:E7 X509v3 Authority Key Identifier: keyid:FC:A5:5F:E6:8B:F1:47:AE:20:F0:0C:45:DA:DC:DF:96:0C:12:0C:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:6f:a3:36:c7:3e:b5:8e:ed:0c:f3:0a:ad:b6:01:26:de:21: b9:e4:36:09:43:69:0d:f8:39:2b:df:82:cb:3d:03:a9:06:2f: d2:c2:d3:d3:5b:9a:0e:5f:07:97:a3:d8:98:13:cf:91:43:0e: df:d3:de:07:1e:17:26:19:e5:02:ee:9b:87:65:43:93:a5:c0: cc:d2:0f:e9:50:03:01:cc:41:de:94:70:0a:0d:7a:4d:26:59: 0d:44:db:d3:79:05:58:69:b9:e9:4e:bf:94:85:31:45:21:ed: f6:dd:bc:3e:4c:cb:db:6f:56:b9:65:fe:d9:f8:97:38:c9:a7: d5:4b:6e:4e:f8:33:c4:57:31:4c:cf:c5:a6:9a:30:f7:95:d8: 31:36:c9:40:c2:fd:4a:d7:81:8f:7a:9e:6e:23:bd:41:29:56: 25:c8:4c:f1:aa:fb:93:87:40:35:02:2b:d2:01:00:20:50:ac: 6f:25:0e:22:18:6d:0e:0c:f2:d3:22:57:49:17:74:c8:ee:59: e3:27:7d:a8:aa:72:e5:52:21:69:f8:97:8f:43:2e:e0:5d:be: bd:08:c7:e9:0e:4e:c0:e2:79:aa:b7:7c:b7:86:f7:05:0d:52: 6a:49:81:9b:e7:d5:d7:54:19:2a:be:f5:d7:04:9a:32:14:58: 03:55:b3:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAnnK7XXp/PXIVSKYcofVopstQXAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkNBNTVGRTY4QkYxNDdBRTIwRjAwQzQ1REFEQ0RGOTYw QzEyMENGODAeFw0yNTA5MDYxMDM3MDlaFw0yNTA5MDkxMzExMDlaMDMxMTAvBgNV BAMTKDNCN0U3NENFQ0RDRDIxOTk4NjFGRTEwRjgzQzZGNzFBQkUyMDEzRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgLjeQgCJtNXTYVw2tuc0X0OGi nekXBbNBzpJv0zGzOVXJ64/faFbEr8RjAZUPDmnTnXrRGKHLKarsDPlpKxcb2wr4 LFvczE3Pj/scYHG7yqCujRJwGfgGDP8txZkmyELYX2pKh+wGeIiG6ERpgXoU0tEf Hfgt06rnJNFTn904ByyNP4JaTW/IN3IL8QbrBXMrtSSm80zP4kY6Xi1uQdkNdrwi i6ZvuLs8A+A/XiQ68RuFMZfjUvX75XHdG5umvFa7Had8CWJpfce0zI9SL7C5tE80 Mn34f1az/3b8qiZ4PyfBJHNLtJwUPIA3lYWgCWx1cAbW8d2s5H2+rANWGpJtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUO350zs3NIZmGH+EPg8b3Gr4gE+cwHwYDVR0j BBgwFoAU/KVf5ovxR64g8AxF2tzflgwSDPgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OTVlZThmYy02ZWZlLTQxNWQtYjZjMS0wZjBjY2NmMjYxNDQvMC9GQ0E1NUZFNjhC RjE0N0FFMjBGMDBDNDVEQURDREY5NjBDMTIwQ0Y4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkNBNTVGRTY4QkYxNDdBRTIwRjAwQzQ1REFEQ0RGOTYwQzEy MENGOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzk1ZWU4ZmMtNmVmZS00MTVkLWI2 YzEtMGYwY2NjZjI2MTQ0LzAvRkNBNTVGRTY4QkYxNDdBRTIwRjAwQzQ1REFEQ0RG OTYwQzEyMENGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFdvozbHPrWO7QzzCq22ASbeIbnkNglDaQ34 OSvfgss9A6kGL9LC09Nbmg5fB5ej2JgTz5FDDt/T3gceFyYZ5QLum4dlQ5OlwMzS D+lQAwHMQd6UcAoNek0mWQ1E29N5BVhpuelOv5SFMUUh7fbdvD5My9tvVrll/tn4 lzjJp9VLbk74M8RXMUzPxaaaMPeV2DE2yUDC/UrXgY96nm4jvUEpViXITPGq+5OH QDUCK9IBACBQrG8lDiIYbQ4M8tMiV0kXdMjuWeMnfaiqcuVSIWn4l49DLuBdvr0I x+kOTsDieaq3fLeG9wUNUmpJgZvn1ddUGSq+9dcEmjIUWANVswM= -----END CERTIFICATE-----Generated at Sun Sep 7 15:36:38 2025 by rpki-client