$ rpki-client -vvf repo-rpki.idnic.net/repo/ede4719a-ace4-41f2-a070-8de3192b7f49/0/FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.mft File: FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.mft (raw, json) Hash identifier: Ywi3kWcM8bWr8gVRU/NM9DwnJAZS0UCZObPjwcP8iTI= Subject key identifier: AD:C0:5F:B1:3F:A7:41:DF:09:B2:0C:66:8A:0D:17:D2:1B:DA:05:91 Authority key identifier: FC:31:DB:70:F7:B2:F1:7F:13:E9:2A:2E:7B:AE:55:54:79:2E:FB:BF Certificate issuer: /CN=FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF Certificate serial: 03E0D685501027D8D096B35D5E0375B8B3F29137 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ede4719a-ace4-41f2-a070-8de3192b7f49/0/FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.mft Manifest number: 0501 Signing time: Sat 06 Sep 2025 13:20:43 +0000 Manifest this update: Sat 06 Sep 2025 13:15:43 +0000 Manifest next update: Tue 09 Sep 2025 17:42:43 +0000 Files and hashes: 1: FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.crl (hash: enO0BUTDQfUyfUB1TsxG3qBFgtWLkcTJxf4eDpZa96s=) 2: 3230322e36312e39382e302f32332d3234203d3e203234353337.roa (hash: 7v+UWewpBXKuzE8AR/fYejkKyBNOrEBvR5vrqtJwA4s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ede4719a-ace4-41f2-a070-8de3192b7f49/0/FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.crl rsync://repo-rpki.idnic.net/repo/ede4719a-ace4-41f2-a070-8de3192b7f49/0/FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 17:42:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:e0:d6:85:50:10:27:d8:d0:96:b3:5d:5e:03:75:b8:b3:f2:91:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF Validity Not Before: Sep 6 13:15:43 2025 GMT Not After : Sep 9 17:42:43 2025 GMT Subject: CN=ADC05FB13FA741DF09B20C668A0D17D21BDA0591 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:85:ee:36:f2:33:66:d3:38:88:c9:f1:bc:75: bf:c7:85:08:f5:15:e5:7d:68:49:a7:f0:7f:e5:33: 8d:10:8e:c7:71:c7:04:32:88:e9:26:fa:01:17:5f: 4b:a2:22:ec:09:48:cc:29:f9:54:7b:72:1a:32:a0: 68:1c:26:3b:27:62:5f:90:49:1a:82:55:29:55:bc: a4:5a:0c:c4:c0:90:8f:4f:ef:5f:a9:3e:59:74:6d: 93:27:e5:8c:5d:65:0a:24:c6:17:ab:e9:81:86:ea: 8e:76:bc:71:a0:67:5a:db:dc:f4:29:03:58:42:b4: 3d:73:b0:a9:44:89:41:66:66:30:b3:b1:5c:b4:ed: ff:0f:57:1a:24:a9:a9:99:ac:da:96:9c:49:ad:fa: cd:20:1e:73:ad:df:14:c1:09:c5:b8:88:2d:1d:f0: 7f:10:0d:7a:f5:d1:66:aa:4d:32:8c:9b:51:85:bf: 09:40:c5:56:cd:eb:b6:bb:0a:94:7d:b4:36:83:08: 07:29:14:86:5d:cb:76:f9:b6:7e:40:39:1b:56:54: 71:40:a4:08:1d:2a:b1:12:ec:3e:ab:44:a5:a0:da: a8:d0:81:4c:66:ee:09:19:26:da:17:b1:fd:82:ba: 33:ea:94:7c:20:39:d4:3a:46:03:8a:f7:43:97:33: bf:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:C0:5F:B1:3F:A7:41:DF:09:B2:0C:66:8A:0D:17:D2:1B:DA:05:91 X509v3 Authority Key Identifier: keyid:FC:31:DB:70:F7:B2:F1:7F:13:E9:2A:2E:7B:AE:55:54:79:2E:FB:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ede4719a-ace4-41f2-a070-8de3192b7f49/0/FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ede4719a-ace4-41f2-a070-8de3192b7f49/0/FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:4d:a1:6a:8b:aa:07:ba:ef:b9:28:10:f2:9d:9b:53:30:e0: 86:6a:d1:14:55:2d:b3:8a:97:7f:a2:aa:c3:17:67:2d:22:94: f9:f8:6d:8c:64:c8:34:6f:bf:f5:d5:fa:07:10:f1:24:38:b4: 2f:fa:16:93:4b:73:ac:91:04:82:97:ec:11:38:ff:c6:ce:65: b3:94:8b:2f:6a:cd:b8:8a:94:21:95:a5:44:c0:40:c8:2a:fe: 63:d9:fc:66:47:15:11:1a:67:a9:18:f3:64:13:36:40:c7:d5: 9c:b6:53:96:b3:78:38:b6:77:b3:ef:4b:35:0c:c2:54:5f:04: a6:c8:6f:92:d2:41:1e:ba:12:e7:21:f5:bb:17:6c:6c:75:c0: 58:ee:3d:2b:8c:55:b5:f5:13:45:99:a6:8c:c6:85:d7:73:fd: 42:d6:47:ae:f3:b4:ce:75:7b:c8:d9:43:16:8a:fd:95:0b:a9: 26:9d:0d:c6:54:24:00:36:29:ac:40:1d:94:da:80:30:3f:ff: 59:3f:61:35:a1:73:20:aa:67:9a:a1:fa:04:c2:5c:04:c3:53: 64:14:e0:0b:1c:07:fe:35:bd:ea:45:07:2b:a9:f9:ed:85:70: cc:df:85:13:bc:a0:5e:b7:da:5a:07:92:60:90:6f:ad:db:fd: 89:07:fe:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA+DWhVAQJ9jQlrNdXgN1uLPykTcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkMzMURCNzBGN0IyRjE3RjEzRTkyQTJFN0JBRTU1NTQ3 OTJFRkJCRjAeFw0yNTA5MDYxMzE1NDNaFw0yNTA5MDkxNzQyNDNaMDMxMTAvBgNV BAMTKEFEQzA1RkIxM0ZBNzQxREYwOUIyMEM2NjhBMEQxN0QyMUJEQTA1OTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVhe428jNm0ziIyfG8db/HhQj1 FeV9aEmn8H/lM40QjsdxxwQyiOkm+gEXX0uiIuwJSMwp+VR7choyoGgcJjsnYl+Q SRqCVSlVvKRaDMTAkI9P71+pPll0bZMn5YxdZQokxher6YGG6o52vHGgZ1rb3PQp A1hCtD1zsKlEiUFmZjCzsVy07f8PVxokqamZrNqWnEmt+s0gHnOt3xTBCcW4iC0d 8H8QDXr10WaqTTKMm1GFvwlAxVbN67a7CpR9tDaDCAcpFIZdy3b5tn5AORtWVHFA pAgdKrES7D6rRKWg2qjQgUxm7gkZJtoXsf2CujPqlHwgOdQ6RgOK90OXM7/bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrcBfsT+nQd8Jsgxmig0X0hvaBZEwHwYDVR0j BBgwFoAU/DHbcPey8X8T6Soue65VVHku+78wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZGU0NzE5YS1hY2U0LTQxZjItYTA3MC04ZGUzMTkyYjdmNDkvMC9GQzMxREI3MEY3 QjJGMTdGMTNFOTJBMkU3QkFFNTU1NDc5MkVGQkJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkMzMURCNzBGN0IyRjE3RjEzRTkyQTJFN0JBRTU1NTQ3OTJF RkJCRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWRlNDcxOWEtYWNlNC00MWYyLWEw NzAtOGRlMzE5MmI3ZjQ5LzAvRkMzMURCNzBGN0IyRjE3RjEzRTkyQTJFN0JBRTU1 NTQ3OTJFRkJCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGlNoWqLqge677koEPKdm1Mw4IZq0RRVLbOK l3+iqsMXZy0ilPn4bYxkyDRvv/XV+gcQ8SQ4tC/6FpNLc6yRBIKX7BE4/8bOZbOU iy9qzbiKlCGVpUTAQMgq/mPZ/GZHFREaZ6kY82QTNkDH1Zy2U5azeDi2d7PvSzUM wlRfBKbIb5LSQR66Euch9bsXbGx1wFjuPSuMVbX1E0WZpozGhddz/ULWR67ztM51 e8jZQxaK/ZULqSadDcZUJAA2KaxAHZTagDA//1k/YTWhcyCqZ5qh+gTCXATDU2QU 4AscB/41vepFByup+e2FcMzfhRO8oF632loHkmCQb63b/YkH/iY= -----END CERTIFICATE-----Generated at Sun Sep 7 15:27:06 2025 by rpki-client