$ rpki-client -vvf repo-rpki.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.mft File: FC4F8762524C3EBF98126E5F579CCB30C37EEF63.mft (raw, json) Hash identifier: 3bQAYlTmcFeDOSuGfOILX/odlnyuN51BKBOki5+X4I8= Subject key identifier: 81:09:C2:1E:85:4A:25:93:58:79:7B:DF:5D:24:92:D3:53:89:A2:8A Authority key identifier: FC:4F:87:62:52:4C:3E:BF:98:12:6E:5F:57:9C:CB:30:C3:7E:EF:63 Certificate issuer: /CN=FC4F8762524C3EBF98126E5F579CCB30C37EEF63 Certificate serial: 3485D0307D16473A907E99DFC4D56635EE23039B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.cer Subject info access: rsync://repo-rpki.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.mft Manifest number: 010D Signing time: Fri 05 Sep 2025 20:00:44 +0000 Manifest this update: Fri 05 Sep 2025 19:55:44 +0000 Manifest next update: Tue 09 Sep 2025 05:51:44 +0000 Files and hashes: 1: FC4F8762524C3EBF98126E5F579CCB30C37EEF63.crl (hash: v6K8AtNMdUdJu9/5eoCZnKfnJEaHQNDSYnzMctiqZHM=) 2: 323030313a6466373a616630303a3a2f34382d3438203d3e20313338313432.roa (hash: +DXbNG3+5DIfVUdd5cKU3zcHabiuNmOrVbbKp3YlrN4=) 3: 3130332e3133342e31362e302f32342d3234203d3e20313338313432.roa (hash: 8FJnKt5CgklUKcuR3KEOgR9pFXHp2pdnQAzYXqQX2Ag=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.crl rsync://repo-rpki.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 05:51:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:85:d0:30:7d:16:47:3a:90:7e:99:df:c4:d5:66:35:ee:23:03:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC4F8762524C3EBF98126E5F579CCB30C37EEF63 Validity Not Before: Sep 5 19:55:44 2025 GMT Not After : Sep 9 05:51:44 2025 GMT Subject: CN=8109C21E854A259358797BDF5D2492D35389A28A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:e0:00:65:8d:23:d2:61:47:71:2f:f4:c2:cf: 26:9d:d4:00:bc:cb:5c:99:46:e4:00:02:a7:66:8c: fc:e1:33:0f:21:12:5a:a4:c4:ed:cf:8d:9c:ba:6b: 38:15:e9:c8:9e:f0:76:b3:6f:5b:f7:e1:a0:af:25: 77:69:bb:6c:68:dc:dc:2d:5a:29:c3:05:25:42:23: b9:68:bb:24:31:4c:88:8d:26:0f:0c:93:fa:c8:ab: 1c:74:ab:c7:aa:f1:f1:0a:85:10:d9:a8:6d:fa:bc: 0c:b4:57:7a:a1:18:36:d5:27:3a:bf:57:63:36:99: 67:cd:6b:bc:6c:e5:cf:10:2e:84:7c:6d:e4:45:0d: f9:86:f8:52:dd:df:3c:4f:74:11:1f:31:9c:cd:e6: 89:18:12:35:c5:9c:18:2b:ee:23:75:61:c2:0a:71: 9f:9e:9d:4d:2c:ff:16:ea:ee:12:3a:83:0c:73:55: 08:f7:aa:6e:04:4d:e8:ca:95:f8:40:91:c0:92:f2: 49:92:7d:62:02:48:98:e4:32:cd:0d:b9:09:3b:93: be:c1:47:56:83:b8:59:4f:15:f4:17:7c:09:f2:98: c9:80:39:7b:aa:10:ce:12:58:44:23:5e:fa:91:d5: 56:45:74:d1:d2:c8:2d:aa:72:c4:47:0b:10:1a:bf: 0e:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:09:C2:1E:85:4A:25:93:58:79:7B:DF:5D:24:92:D3:53:89:A2:8A X509v3 Authority Key Identifier: keyid:FC:4F:87:62:52:4C:3E:BF:98:12:6E:5F:57:9C:CB:30:C3:7E:EF:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:c8:95:e3:83:68:69:7c:85:01:06:5b:61:47:6b:93:f2:25: 49:3b:f0:eb:11:e4:8b:92:06:8d:68:02:79:f8:63:26:a8:c0: d2:14:8f:9d:33:7b:32:f1:f8:70:9d:0d:2c:1e:ce:be:2f:64: 6b:dc:38:fd:ec:6a:f1:dd:4f:90:33:09:9d:b2:44:d4:6a:a1: e2:9c:22:5b:b6:55:a3:7c:6a:83:d7:d5:46:82:52:fb:48:da: fb:d8:88:e1:fe:0c:8a:9e:e0:3d:df:4b:a8:35:18:e8:6f:01: 5a:69:24:77:e4:81:c6:ca:ca:a9:20:28:1d:35:bc:0f:20:24: 88:bc:4b:5d:ad:b8:e0:a1:2c:0e:ac:0e:2a:db:20:ec:04:99: 3a:14:d7:5d:3e:22:1b:3a:cc:9b:e0:d8:c6:da:c2:d1:bd:9e: c6:6b:f3:e4:ca:29:18:42:82:9a:7f:d2:9e:3e:67:b2:9b:30: ae:65:f5:2c:7f:9b:b9:80:fc:a3:9b:3a:0b:71:b4:e9:2f:51: e1:0d:51:37:9a:b8:ab:77:9f:4f:27:5b:58:73:ed:18:79:16: 26:15:71:d3:68:21:2d:6d:32:68:c6:eb:21:90:35:76:29:c7: d3:2b:28:e1:1d:7b:c5:67:85:88:34:92:71:cd:cb:8c:b1:9a: 90:f4:c0:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNIXQMH0WRzqQfpnfxNVmNe4jA5swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkM0Rjg3NjI1MjRDM0VCRjk4MTI2RTVGNTc5Q0NCMzBD MzdFRUY2MzAeFw0yNTA5MDUxOTU1NDRaFw0yNTA5MDkwNTUxNDRaMDMxMTAvBgNV BAMTKDgxMDlDMjFFODU0QTI1OTM1ODc5N0JERjVEMjQ5MkQzNTM4OUEyOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW4ABljSPSYUdxL/TCzyad1AC8 y1yZRuQAAqdmjPzhMw8hElqkxO3PjZy6azgV6cie8Hazb1v34aCvJXdpu2xo3Nwt WinDBSVCI7louyQxTIiNJg8Mk/rIqxx0q8eq8fEKhRDZqG36vAy0V3qhGDbVJzq/ V2M2mWfNa7xs5c8QLoR8beRFDfmG+FLd3zxPdBEfMZzN5okYEjXFnBgr7iN1YcIK cZ+enU0s/xbq7hI6gwxzVQj3qm4ETejKlfhAkcCS8kmSfWICSJjkMs0NuQk7k77B R1aDuFlPFfQXfAnymMmAOXuqEM4SWEQjXvqR1VZFdNHSyC2qcsRHCxAavw4rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgQnCHoVKJZNYeXvfXSSS01OJooowHwYDVR0j BBgwFoAU/E+HYlJMPr+YEm5fV5zLMMN+72MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZTVhYTkzZC03ODdiLTRhMTctODdkMC03ZWY0MWIwZjJkZWYvMC9GQzRGODc2MjUy NEMzRUJGOTgxMjZFNUY1NzlDQ0IzMEMzN0VFRjYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkM0Rjg3NjI1MjRDM0VCRjk4MTI2RTVGNTc5Q0NCMzBDMzdF RUY2My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmU1YWE5M2QtNzg3Yi00YTE3LTg3 ZDAtN2VmNDFiMGYyZGVmLzAvRkM0Rjg3NjI1MjRDM0VCRjk4MTI2RTVGNTc5Q0NC MzBDMzdFRUY2My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGzIleODaGl8hQEGW2FHa5PyJUk78OsR5IuS Bo1oAnn4YyaowNIUj50zezLx+HCdDSwezr4vZGvcOP3savHdT5AzCZ2yRNRqoeKc Ilu2VaN8aoPX1UaCUvtI2vvYiOH+DIqe4D3fS6g1GOhvAVppJHfkgcbKyqkgKB01 vA8gJIi8S12tuOChLA6sDirbIOwEmToU110+Ihs6zJvg2MbawtG9nsZr8+TKKRhC gpp/0p4+Z7KbMK5l9Sx/m7mA/KObOgtxtOkvUeENUTeauKt3n08nW1hz7Rh5FiYV cdNoIS1tMmjG6yGQNXYpx9MrKOEde8VnhYg0knHNy4yxmpD0wE8= -----END CERTIFICATE-----Generated at Sun Sep 7 14:00:44 2025 by rpki-client