$ rpki-client -vvf repo-rpki.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.mft File: FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.mft (raw, json) Hash identifier: W4xQz2rmC06oHPL15wYppK4AYCgkiNRgsWZ8Scmm49k= Subject key identifier: 26:8C:16:FC:2C:05:F8:3A:16:18:A4:4D:0E:A6:03:7F:6F:C3:E9:E8 Authority key identifier: FA:62:D8:28:54:4F:70:BE:AD:8B:3C:04:A8:61:75:E4:FB:07:C4:B6 Certificate issuer: /CN=FA62D828544F70BEAD8B3C04A86175E4FB07C4B6 Certificate serial: 613FE67E6A4CA7A688F6E787ED0CC355C2E280AC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.mft Manifest number: D7 Signing time: Sun 19 Oct 2025 06:00:43 +0000 Manifest this update: Sun 19 Oct 2025 05:55:43 +0000 Manifest next update: Wed 22 Oct 2025 06:04:43 +0000 Files and hashes: 1: FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.crl (hash: fUwtLflc0J/Cf/haJmkU3I2embR6S8aE3NqwYCA8u7I=) 2: 3135372e36362e33372e302f32342d3234203d3e20313338383034.roa (hash: elAlykoINKnAZ1hNxzJ7Wy9Qz4JU3YMP6UNvlutp4wU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.crl rsync://repo-rpki.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 06:04:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:3f:e6:7e:6a:4c:a7:a6:88:f6:e7:87:ed:0c:c3:55:c2:e2:80:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA62D828544F70BEAD8B3C04A86175E4FB07C4B6 Validity Not Before: Oct 19 05:55:43 2025 GMT Not After : Oct 22 06:04:43 2025 GMT Subject: CN=268C16FC2C05F83A1618A44D0EA6037F6FC3E9E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a8:48:2e:84:c3:8c:5e:dc:54:ab:fe:7e:50: 38:a0:ae:e9:a6:95:8a:bd:9c:6a:31:41:fb:8d:7a: c3:18:ec:1d:8f:61:b5:74:a2:d8:8d:c5:64:13:27: 44:e3:e0:c5:c9:58:f2:d6:58:e3:f2:4b:e6:0b:e3: fd:a7:56:8e:38:24:0f:61:c8:58:86:66:b1:b0:6f: 67:9f:6b:c8:2b:32:77:df:4f:04:20:73:b4:b9:bd: 82:96:36:7f:75:cb:e6:ed:ae:05:0a:84:c4:95:f1: 5c:c6:4b:ea:c5:c7:9a:c2:79:3f:40:18:bd:89:2c: 57:e9:7e:20:71:5c:68:64:da:c1:f5:ba:a7:72:cb: 93:5a:89:2e:da:6a:54:2f:87:fa:ed:79:39:0a:72: 62:58:73:e9:1d:e1:79:c1:37:05:10:e8:0f:6a:72: 1b:ed:09:4d:fa:17:04:b4:d7:ab:2a:7b:ed:ef:40: a7:a4:75:98:51:63:17:46:40:a2:47:f3:df:70:93: 26:8f:4e:ee:f0:e1:d4:5b:ec:6e:6e:59:55:a1:61: b6:78:e7:ab:d5:b2:4f:e3:9f:4f:3e:15:6f:5e:d4: 8f:cf:6f:66:a9:4f:ff:c4:c4:5b:fd:62:ea:6e:55: 29:9e:78:07:64:69:46:37:56:2d:12:49:19:c1:e1: b8:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:8C:16:FC:2C:05:F8:3A:16:18:A4:4D:0E:A6:03:7F:6F:C3:E9:E8 X509v3 Authority Key Identifier: keyid:FA:62:D8:28:54:4F:70:BE:AD:8B:3C:04:A8:61:75:E4:FB:07:C4:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:79:67:a1:c2:5d:5d:81:08:2c:d2:56:7e:6d:2f:b5:9b:c8: 18:d2:4f:df:a5:5a:72:4d:57:98:7e:2f:73:17:68:b9:a0:ae: b6:21:b5:ec:c3:26:52:dc:9c:a4:04:65:95:c7:b2:3e:46:c3: 2e:62:4b:35:04:d6:b0:ef:49:c0:f8:16:3e:ed:16:4f:ed:b6: d0:78:be:93:7b:7c:8a:fb:73:5b:12:ea:45:1c:e5:e2:8c:63: 0e:5f:4e:01:70:f5:c3:85:29:56:94:4d:8c:93:c7:55:86:3a: 1f:42:79:09:26:11:aa:64:f0:d6:b2:d1:4b:17:6f:a8:9e:f3: 6f:2c:94:dc:99:e1:60:06:df:24:e8:79:29:3b:67:ac:e4:29: ad:4d:56:b3:29:02:3a:e3:de:0d:c3:03:b3:37:a0:05:e0:53: b1:31:ae:6b:18:8a:2e:42:d5:18:14:c4:64:64:f9:33:88:e5: d7:2a:71:06:09:05:72:8a:29:59:0b:53:d7:49:e9:5e:09:09: 3a:26:f2:40:15:a7:88:7d:21:ad:14:3e:4f:53:fd:8d:0c:81: 66:44:8a:80:2b:85:81:a8:d4:c9:de:fb:90:6f:f7:de:12:0f: 70:b2:1c:ab:9b:52:32:93:bd:7a:14:05:42:5a:2a:9d:57:42: e7:2c:f8:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYT/mfmpMp6aI9ueH7QzDVcLigKwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE2MkQ4Mjg1NDRGNzBCRUFEOEIzQzA0QTg2MTc1RTRG QjA3QzRCNjAeFw0yNTEwMTkwNTU1NDNaFw0yNTEwMjIwNjA0NDNaMDMxMTAvBgNV BAMTKDI2OEMxNkZDMkMwNUY4M0ExNjE4QTQ0RDBFQTYwMzdGNkZDM0U5RTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGqEguhMOMXtxUq/5+UDigrumm lYq9nGoxQfuNesMY7B2PYbV0otiNxWQTJ0Tj4MXJWPLWWOPyS+YL4/2nVo44JA9h yFiGZrGwb2efa8grMnffTwQgc7S5vYKWNn91y+btrgUKhMSV8VzGS+rFx5rCeT9A GL2JLFfpfiBxXGhk2sH1uqdyy5NaiS7aalQvh/rteTkKcmJYc+kd4XnBNwUQ6A9q chvtCU36FwS016sqe+3vQKekdZhRYxdGQKJH899wkyaPTu7w4dRb7G5uWVWhYbZ4 56vVsk/jn08+FW9e1I/Pb2apT//ExFv9YupuVSmeeAdkaUY3Vi0SSRnB4bi/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJowW/CwF+DoWGKRNDqYDf2/D6egwHwYDVR0j BBgwFoAU+mLYKFRPcL6tizwEqGF15PsHxLYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YzA0ZGVkOC1iMGY1LTQ1OTQtOGUwZS05MTFlY2I3N2VlNzMvMC9GQTYyRDgyODU0 NEY3MEJFQUQ4QjNDMDRBODYxNzVFNEZCMDdDNEI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkE2MkQ4Mjg1NDRGNzBCRUFEOEIzQzA0QTg2MTc1RTRGQjA3 QzRCNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWMwNGRlZDgtYjBmNS00NTk0LThl MGUtOTExZWNiNzdlZTczLzAvRkE2MkQ4Mjg1NDRGNzBCRUFEOEIzQzA0QTg2MTc1 RTRGQjA3QzRCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALN5Z6HCXV2BCCzSVn5tL7WbyBjST9+lWnJN V5h+L3MXaLmgrrYhtezDJlLcnKQEZZXHsj5Gwy5iSzUE1rDvScD4Fj7tFk/tttB4 vpN7fIr7c1sS6kUc5eKMYw5fTgFw9cOFKVaUTYyTx1WGOh9CeQkmEapk8Nay0UsX b6ie828slNyZ4WAG3yToeSk7Z6zkKa1NVrMpAjrj3g3DA7M3oAXgU7ExrmsYii5C 1RgUxGRk+TOI5dcqcQYJBXKKKVkLU9dJ6V4JCTom8kAVp4h9Ia0UPk9T/Y0MgWZE ioArhYGo1Mne+5Bv994SD3CyHKubUjKTvXoUBUJaKp1XQucs+EI= -----END CERTIFICATE-----Generated at Tue Oct 21 00:13:41 2025 by rpki-client