$ rpki-client -vvf repo-rpki.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.mft File: FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.mft (raw, json) Hash identifier: f5g1dDBF/JhUinHiLsWiabKExAJzrPItUHefmXtydWE= Subject key identifier: FE:1B:BA:52:44:5E:8C:68:D9:21:82:0E:38:5D:80:A3:07:BD:3A:B7 Authority key identifier: FC:9D:A1:A7:62:5B:27:FD:B4:66:B1:D8:A6:90:37:7E:4C:7B:CE:72 Certificate issuer: /CN=FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72 Certificate serial: 62C7931BC3780AD303A3DF8945AE690F40D5418A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.mft Manifest number: 04FD Signing time: Fri 22 Aug 2025 14:01:08 +0000 Manifest this update: Fri 22 Aug 2025 13:56:08 +0000 Manifest next update: Mon 25 Aug 2025 21:42:08 +0000 Files and hashes: 1: 3130332e33312e3130392e302f32342d3234203d3e20313339343430.roa (hash: iRZXCDlLv0igia0Lk/WxM1oJP6cq9J+UPskJIy0xfv8=) 2: FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.crl (hash: QIUfZhXpoZ4WKyRArF2krgobjFwKFNU/5lxN6jNocTc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.crl rsync://repo-rpki.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 21:42:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:c7:93:1b:c3:78:0a:d3:03:a3:df:89:45:ae:69:0f:40:d5:41:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72 Validity Not Before: Aug 22 13:56:08 2025 GMT Not After : Aug 25 21:42:08 2025 GMT Subject: CN=FE1BBA52445E8C68D921820E385D80A307BD3AB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:5a:3f:2e:d4:6f:80:49:9c:b3:cc:40:fa:e0: 64:d7:a0:dd:e9:59:69:ee:2c:1c:9f:58:c8:ce:ab: 07:b8:8d:29:a6:4a:9a:bd:d7:8a:5f:53:5c:e3:ef: 04:10:af:fb:45:07:86:2e:92:97:92:8e:66:3e:c0: 34:6d:f5:d2:62:a2:ca:c8:a8:00:19:11:dd:b1:ee: e5:e6:d4:99:ca:7d:65:1f:18:e5:d6:f3:96:eb:4f: a4:d1:8a:9e:44:82:da:5c:b2:1b:1b:f4:81:61:0f: 8f:da:7b:de:95:b1:13:c5:7f:2c:e2:fb:b2:2d:a8: ea:dc:1e:52:df:18:f0:2e:0f:e7:e8:23:0a:3a:ec: fe:da:20:13:b3:33:f4:ce:83:f2:f5:fb:6b:1e:d7: 6e:03:66:a9:c3:e6:f9:aa:ae:47:f1:9a:72:7c:39: a4:84:d5:a9:20:1f:93:88:e5:f6:7a:e1:4d:6c:9e: be:14:e9:dc:18:5b:63:c3:c0:01:92:ac:34:3d:d2: b4:49:b1:95:6b:c5:62:64:55:80:f9:84:95:1e:37: d4:28:69:fc:c6:5d:87:8d:b8:48:d4:5f:3d:5d:19: 55:b2:65:b1:c7:40:f2:dd:b5:8a:63:76:23:12:23: 53:2d:f6:ab:5c:01:5c:62:5d:b1:9f:31:ce:3b:b9: a0:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:1B:BA:52:44:5E:8C:68:D9:21:82:0E:38:5D:80:A3:07:BD:3A:B7 X509v3 Authority Key Identifier: keyid:FC:9D:A1:A7:62:5B:27:FD:B4:66:B1:D8:A6:90:37:7E:4C:7B:CE:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:77:26:2b:c3:b0:9f:d6:37:a5:fb:4f:d4:39:07:7c:52:01: cd:2e:a4:9d:5c:37:f5:ca:16:c9:7d:2d:06:57:19:e7:82:91: f4:43:45:f9:c9:f2:cf:c9:b0:6a:9e:6c:38:9f:e7:95:4d:7c: d2:bc:ac:57:82:d7:e8:ee:c5:d5:0b:b0:43:bc:3c:16:39:13: bc:8f:06:1d:0e:73:bf:dd:72:80:84:45:d3:2d:d0:ad:24:f8: 28:c0:a0:6b:d7:cf:8f:c9:f5:ca:37:5d:15:1f:ad:6a:72:ca: ff:1e:81:26:15:74:92:89:cf:2b:c9:42:68:76:ac:ef:35:99: 96:05:56:a5:b7:ac:99:e3:4e:d5:c6:a3:50:a2:2a:1a:fb:5c: ef:b7:43:ad:86:1b:ee:0e:7b:11:e6:02:bc:b0:8a:d7:75:7b: e9:4c:92:6a:5a:9f:b9:7e:84:07:de:8c:5d:2a:d5:1f:66:2b: 5a:07:09:08:df:6a:8d:87:7c:1d:5c:a5:b0:c6:46:70:41:87: 2e:77:87:85:4b:a0:f7:96:2e:b7:9d:81:59:61:ae:3a:01:2d: 65:2b:6a:98:51:81:b0:d4:8c:58:8c:24:09:c1:f4:c7:84:92: 23:a4:c7:08:93:aa:8b:fb:6b:c2:4e:2f:db:57:63:6f:ad:85: 7d:35:02:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYseTG8N4CtMDo9+JRa5pD0DVQYowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkM5REExQTc2MjVCMjdGREI0NjZCMUQ4QTY5MDM3N0U0 QzdCQ0U3MjAeFw0yNTA4MjIxMzU2MDhaFw0yNTA4MjUyMTQyMDhaMDMxMTAvBgNV BAMTKEZFMUJCQTUyNDQ1RThDNjhEOTIxODIwRTM4NUQ4MEEzMDdCRDNBQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFWj8u1G+ASZyzzED64GTXoN3p WWnuLByfWMjOqwe4jSmmSpq914pfU1zj7wQQr/tFB4YukpeSjmY+wDRt9dJiosrI qAAZEd2x7uXm1JnKfWUfGOXW85brT6TRip5Egtpcshsb9IFhD4/ae96VsRPFfyzi +7ItqOrcHlLfGPAuD+foIwo67P7aIBOzM/TOg/L1+2se124DZqnD5vmqrkfxmnJ8 OaSE1akgH5OI5fZ64U1snr4U6dwYW2PDwAGSrDQ90rRJsZVrxWJkVYD5hJUeN9Qo afzGXYeNuEjUXz1dGVWyZbHHQPLdtYpjdiMSI1Mt9qtcAVxiXbGfMc47uaA5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/hu6UkRejGjZIYIOOF2Aowe9OrcwHwYDVR0j BBgwFoAU/J2hp2JbJ/20ZrHYppA3fkx7znIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZjZhYTMxYS1kZDBkLTRjMTAtYjVkZC1iMWE4M2ZhNTc3NjMvMC9GQzlEQTFBNzYy NUIyN0ZEQjQ2NkIxRDhBNjkwMzc3RTRDN0JDRTcyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkM5REExQTc2MjVCMjdGREI0NjZCMUQ4QTY5MDM3N0U0QzdC Q0U3Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGY2YWEzMWEtZGQwZC00YzEwLWI1 ZGQtYjFhODNmYTU3NzYzLzAvRkM5REExQTc2MjVCMjdGREI0NjZCMUQ4QTY5MDM3 N0U0QzdCQ0U3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIZ3JivDsJ/WN6X7T9Q5B3xSAc0upJ1cN/XK Fsl9LQZXGeeCkfRDRfnJ8s/JsGqebDif55VNfNK8rFeC1+juxdULsEO8PBY5E7yP Bh0Oc7/dcoCERdMt0K0k+CjAoGvXz4/J9co3XRUfrWpyyv8egSYVdJKJzyvJQmh2 rO81mZYFVqW3rJnjTtXGo1CiKhr7XO+3Q62GG+4OexHmArywitd1e+lMkmpan7l+ hAfejF0q1R9mK1oHCQjfao2HfB1cpbDGRnBBhy53h4VLoPeWLredgVlhrjoBLWUr aphRgbDUjFiMJAnB9MeEkiOkxwiTqov7a8JOL9tXY2+thX01Avc= -----END CERTIFICATE-----Generated at Sat Aug 23 21:58:13 2025 by rpki-client