$ rpki-client -vvf repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.mft File: FC646066A689B77054AF95653FA324395357E6A3.mft (raw, json) Hash identifier: tYWsN4+yjSvtypDD5tusr4YCrAna4DBp7MRORC00SZE= Subject key identifier: 6D:4B:52:79:E8:A1:EE:69:45:46:05:8B:39:FC:BD:C6:79:4A:63:47 Authority key identifier: FC:64:60:66:A6:89:B7:70:54:AF:95:65:3F:A3:24:39:53:57:E6:A3 Certificate issuer: /CN=FC646066A689B77054AF95653FA324395357E6A3 Certificate serial: 1FA1D9C1EBC2054CD8385B4A4EB9AC0B1B1464D5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC646066A689B77054AF95653FA324395357E6A3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.mft Manifest number: 0505 Signing time: Thu 04 Sep 2025 20:02:13 +0000 Manifest this update: Thu 04 Sep 2025 19:57:13 +0000 Manifest next update: Mon 08 Sep 2025 00:36:13 +0000 Files and hashes: 1: 34332e3234392e3134302e302f32322d3234203d3e203535363533.roa (hash: VXuEsrUjBUraWB5GeM4W6dfuMEU9X+IXajG+jXJX29c=) 2: FC646066A689B77054AF95653FA324395357E6A3.crl (hash: 5uVevK/xB5TJWvpIcrDrozbXsl0+vdvw91KEKaM9Krg=) 3: 31342e3130322e3135322e302f32322d3234203d3e203535363533.roa (hash: tcAOfelZsfvkpX9bUklTUsOMqUIe7iMnYq8XrY6rniM=) 4: 3230322e35322e31322e302f32322d3234203d3e203535363533.roa (hash: r4N7YVGjSR/vf/OS/81YrBx8jNMdTo+vkJbDS2Aeqlg=) 5: 3130332e3235342e3132362e302f32332d3234203d3e203535363533.roa (hash: 9BxarKCax6xXzwA7sCkwW9bstNPy4ZEaa9LRlsVppIQ=) 6: 3130332e31312e39362e302f32322d3234203d3e203535363533.roa (hash: PVQdneK9Q2r+2YuMkyuS3S7JvDEOimiQ6kS5G4qY3D8=) 7: 323430323a633330303a3a2f33322d3438203d3e203535363533.roa (hash: bGPK4/XEobq1bk7eW0IqEOt5RrHUWnGxVvGe+M2MWVI=) 8: 3230322e31302e36332e302f32342d3234203d3e203535363533.roa (hash: 3x/TagzWw9AEnitF9/BKz1IoUShxY7ix8DtkXTWs+vs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.crl rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC646066A689B77054AF95653FA324395357E6A3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 00:36:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:a1:d9:c1:eb:c2:05:4c:d8:38:5b:4a:4e:b9:ac:0b:1b:14:64:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC646066A689B77054AF95653FA324395357E6A3 Validity Not Before: Sep 4 19:57:13 2025 GMT Not After : Sep 8 00:36:13 2025 GMT Subject: CN=6D4B5279E8A1EE694546058B39FCBDC6794A6347 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:de:53:be:fe:ef:19:98:70:a5:3f:31:06:f4: 73:27:6a:80:b2:f0:c8:60:3e:89:66:80:a3:58:12: 55:5f:8d:2b:28:eb:f8:06:aa:02:ac:05:37:55:52: 92:b1:e3:d7:ca:14:24:71:be:fd:fe:78:a7:b5:c4: 2f:04:5b:df:d8:d4:0c:62:00:b4:a9:ad:9e:d0:f2: f1:f3:2f:22:7d:48:04:48:1c:0a:34:ed:f7:53:1a: 14:cf:f3:fe:7d:d0:80:6c:13:e1:3e:7b:6a:46:c3: 9f:62:38:0d:01:50:bf:af:d7:f2:80:94:a8:9f:aa: 71:95:71:da:4a:0f:e5:39:4d:3a:a6:9c:88:2e:5f: 14:ed:80:84:7f:c0:3a:a1:c9:22:78:1b:aa:03:4c: 53:a0:20:37:6b:1f:81:40:97:cc:6b:c6:aa:c7:75: 7f:17:d4:99:e3:10:3c:83:47:64:88:d3:cf:31:b4: fe:82:9e:50:b2:6f:ce:30:72:cc:6f:c3:ec:5f:40: 72:44:cd:a8:fe:d4:95:c3:eb:cb:a8:3e:17:6d:f0: 10:e4:73:49:9f:0a:f8:b7:a7:6d:c6:e5:f8:39:3f: 24:62:33:d1:ea:51:00:13:a6:f0:b1:83:9a:ff:91: 19:d5:8d:f4:68:7b:ef:84:45:ce:ce:42:70:15:71: 40:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:4B:52:79:E8:A1:EE:69:45:46:05:8B:39:FC:BD:C6:79:4A:63:47 X509v3 Authority Key Identifier: keyid:FC:64:60:66:A6:89:B7:70:54:AF:95:65:3F:A3:24:39:53:57:E6:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC646066A689B77054AF95653FA324395357E6A3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:c6:69:ed:0f:d3:5a:55:74:d2:a0:10:8b:2b:86:dd:33:b3: 93:0d:c5:0f:63:68:67:68:64:2f:22:03:b9:5e:8b:22:1a:20: 2c:a8:dc:69:cd:81:82:ca:76:5b:5a:7f:9c:67:9c:c9:14:0f: ae:fa:e1:45:26:b5:a8:ac:c0:0a:bb:2c:78:07:bf:2d:fb:69: 82:a5:a7:0b:16:53:08:f4:e2:30:58:8a:c7:8d:3a:75:38:44: f7:53:33:f6:2f:b6:2b:8c:99:8b:f7:26:cb:21:c0:b0:fc:35: c8:5f:dd:05:fb:51:ca:ff:8b:ed:da:b5:cb:79:71:9d:7e:d7: 58:68:4b:b4:67:e0:73:03:12:ae:89:57:ed:d0:e5:c1:cd:39: 2c:49:94:4c:c6:68:fa:08:8a:1c:f5:60:2b:10:77:52:52:57: 73:13:80:85:f8:4b:92:ed:c0:8d:8f:56:df:51:f4:bf:85:fa: 5d:f6:d1:37:cf:8b:7f:e4:4c:f3:ac:42:f6:50:e7:45:65:8e: 1e:da:08:1b:9b:0e:23:e5:40:89:4e:4a:dc:d4:09:d1:da:92: 90:30:64:90:ff:a6:b1:bd:4f:29:1d:61:27:f0:42:31:91:67: 43:e0:3c:f6:f4:50:0d:cd:27:bd:bc:4b:bf:28:5e:c7:44:10: a6:f4:33:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH6HZwevCBUzYOFtKTrmsCxsUZNUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkM2NDYwNjZBNjg5Qjc3MDU0QUY5NTY1M0ZBMzI0Mzk1 MzU3RTZBMzAeFw0yNTA5MDQxOTU3MTNaFw0yNTA5MDgwMDM2MTNaMDMxMTAvBgNV BAMTKDZENEI1Mjc5RThBMUVFNjk0NTQ2MDU4QjM5RkNCREM2Nzk0QTYzNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS3lO+/u8ZmHClPzEG9HMnaoCy 8MhgPolmgKNYElVfjSso6/gGqgKsBTdVUpKx49fKFCRxvv3+eKe1xC8EW9/Y1Axi ALSprZ7Q8vHzLyJ9SARIHAo07fdTGhTP8/590IBsE+E+e2pGw59iOA0BUL+v1/KA lKifqnGVcdpKD+U5TTqmnIguXxTtgIR/wDqhySJ4G6oDTFOgIDdrH4FAl8xrxqrH dX8X1JnjEDyDR2SI088xtP6CnlCyb84wcsxvw+xfQHJEzaj+1JXD68uoPhdt8BDk c0mfCvi3p23G5fg5PyRiM9HqUQATpvCxg5r/kRnVjfRoe++ERc7OQnAVcUCBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbUtSeeih7mlFRgWLOfy9xnlKY0cwHwYDVR0j BBgwFoAU/GRgZqaJt3BUr5VlP6MkOVNX5qMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OTc0NjVlMy03OGEwLTQ5NjUtYWUxNC1lNGNiNGQwZmMxODUvMC9GQzY0NjA2NkE2 ODlCNzcwNTRBRjk1NjUzRkEzMjQzOTUzNTdFNkEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkM2NDYwNjZBNjg5Qjc3MDU0QUY5NTY1M0ZBMzI0Mzk1MzU3 RTZBMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzk3NDY1ZTMtNzhhMC00OTY1LWFl MTQtZTRjYjRkMGZjMTg1LzAvRkM2NDYwNjZBNjg5Qjc3MDU0QUY5NTY1M0ZBMzI0 Mzk1MzU3RTZBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJTGae0P01pVdNKgEIsrht0zs5MNxQ9jaGdo ZC8iA7leiyIaICyo3GnNgYLKdltaf5xnnMkUD6764UUmtaiswAq7LHgHvy37aYKl pwsWUwj04jBYiseNOnU4RPdTM/YvtiuMmYv3JsshwLD8Nchf3QX7Ucr/i+3atct5 cZ1+11hoS7Rn4HMDEq6JV+3Q5cHNOSxJlEzGaPoIihz1YCsQd1JSV3MTgIX4S5Lt wI2PVt9R9L+F+l320TfPi3/kTPOsQvZQ50Vljh7aCBubDiPlQIlOStzUCdHakpAw ZJD/prG9TykdYSfwQjGRZ0PgPPb0UA3NJ728S78oXsdEEKb0M3g= -----END CERTIFICATE-----Generated at Fri Sep 5 10:34:33 2025 by rpki-client