$ rpki-client -vvf repo-rpki.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.mft File: FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.mft (raw, json) Hash identifier: rls5rQqPROTvYphgGPu94pk/1BfsTidPWbtxv9u03ow= Subject key identifier: 5B:94:0C:35:12:71:63:F8:64:07:50:BD:5C:4A:29:37:12:B3:0E:DD Authority key identifier: FC:9D:A1:A7:62:5B:27:FD:B4:66:B1:D8:A6:90:37:7E:4C:7B:CE:72 Certificate issuer: /CN=FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72 Certificate serial: 7245129EC8861BD92432669FE15010AB96CEFA69 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.mft Manifest number: 0517 Signing time: Sun 19 Oct 2025 07:51:09 +0000 Manifest this update: Sun 19 Oct 2025 07:46:09 +0000 Manifest next update: Wed 22 Oct 2025 08:07:09 +0000 Files and hashes: 1: FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.crl (hash: Tx9iRAVdRKbon90Qx4A7GbzyqR8w5PYn2JukiDqXHL8=) 2: 3130332e33312e3130392e302f32342d3234203d3e20313339343430.roa (hash: iRZXCDlLv0igia0Lk/WxM1oJP6cq9J+UPskJIy0xfv8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.crl rsync://repo-rpki.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 08:07:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:45:12:9e:c8:86:1b:d9:24:32:66:9f:e1:50:10:ab:96:ce:fa:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72 Validity Not Before: Oct 19 07:46:09 2025 GMT Not After : Oct 22 08:07:09 2025 GMT Subject: CN=5B940C35127163F8640750BD5C4A293712B30EDD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:da:ab:4c:44:c2:b4:98:5d:76:77:a7:d2:23: 2a:22:95:f4:2a:3f:57:2f:5f:29:7e:1c:e1:05:5c: 38:21:ad:b1:2e:94:44:36:b5:20:2e:65:c2:f8:49: 3f:b6:cb:66:31:ff:30:08:14:cc:57:27:77:93:0d: 85:f9:1b:5c:67:4b:37:dc:fd:65:70:9a:d4:a7:34: 1f:f6:b5:e6:22:d9:83:6e:65:42:d0:c6:23:41:55: 0c:f5:2c:54:fe:e9:6b:f7:17:f8:ea:c3:01:aa:a3: b2:7c:9b:18:78:21:6d:b6:47:ed:2f:3f:92:ab:ea: ac:8a:44:31:69:14:c7:7e:b1:7e:97:ee:18:16:fd: fa:6c:52:9b:5c:62:61:0c:98:c7:7d:7f:b7:84:88: 15:dd:b8:17:1d:dc:44:60:73:77:a2:5c:20:86:27: f7:ac:66:ce:ad:9a:5a:00:46:41:92:de:70:7c:c0: 8d:b8:c5:dc:0c:d0:5f:8b:6e:7e:fd:a3:80:89:9b: 73:88:cc:0c:e9:4a:77:6e:a5:96:f9:5a:c0:6e:70: 7d:fa:34:87:d1:ec:b6:5d:33:6e:29:37:0c:db:77: e5:ef:da:33:6a:eb:5e:d2:a7:46:bf:76:7a:87:bc: 26:a5:4e:1e:ff:77:2a:6d:47:3e:6e:bc:82:02:71: 15:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:94:0C:35:12:71:63:F8:64:07:50:BD:5C:4A:29:37:12:B3:0E:DD X509v3 Authority Key Identifier: keyid:FC:9D:A1:A7:62:5B:27:FD:B4:66:B1:D8:A6:90:37:7E:4C:7B:CE:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:72:6d:b2:3a:07:30:c4:a5:59:53:46:d6:c7:8d:82:84:d4: 46:6c:6e:db:63:b4:56:e7:78:d6:6a:b3:bd:14:01:25:39:fd: 54:12:f0:af:34:12:01:05:71:6c:6a:7a:96:d7:a5:33:01:0a: 58:dc:4f:88:80:f2:37:a0:ae:83:1b:40:54:f6:1e:71:2a:7c: 4a:53:37:16:9e:28:b9:38:e9:3e:ca:ae:83:ad:4f:e8:c0:9f: 2e:51:62:8e:04:ff:08:3a:67:9e:85:70:57:db:1d:60:25:85: f0:f3:8b:4f:22:bc:9c:c8:8d:3e:47:25:f3:1e:c0:c6:89:b7: b5:9b:52:d9:62:7d:6f:5c:5d:51:bf:c8:98:1c:32:d0:a8:4e: d9:ae:5d:a9:ca:49:40:c0:88:16:26:02:bd:40:04:89:2f:65: 1b:46:dd:cb:aa:af:f6:84:13:e1:f7:39:9a:06:82:6b:c5:d5: c9:de:d3:b8:05:e5:2e:7c:50:64:e6:2b:0f:08:b2:bd:65:0c: dc:7c:92:29:5c:66:26:cb:17:35:ed:59:41:41:6d:17:d1:df: 6c:4c:40:16:57:08:5e:88:17:22:fb:91:36:4e:bf:da:e5:77: 54:03:32:61:28:2f:6e:a1:d5:b4:a5:86:54:3d:27:40:68:68: c7:13:a9:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUckUSnsiGG9kkMmaf4VAQq5bO+mkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkM5REExQTc2MjVCMjdGREI0NjZCMUQ4QTY5MDM3N0U0 QzdCQ0U3MjAeFw0yNTEwMTkwNzQ2MDlaFw0yNTEwMjIwODA3MDlaMDMxMTAvBgNV BAMTKDVCOTQwQzM1MTI3MTYzRjg2NDA3NTBCRDVDNEEyOTM3MTJCMzBFREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC02qtMRMK0mF12d6fSIyoilfQq P1cvXyl+HOEFXDghrbEulEQ2tSAuZcL4ST+2y2Yx/zAIFMxXJ3eTDYX5G1xnSzfc /WVwmtSnNB/2teYi2YNuZULQxiNBVQz1LFT+6Wv3F/jqwwGqo7J8mxh4IW22R+0v P5Kr6qyKRDFpFMd+sX6X7hgW/fpsUptcYmEMmMd9f7eEiBXduBcd3ERgc3eiXCCG J/esZs6tmloARkGS3nB8wI24xdwM0F+Lbn79o4CJm3OIzAzpSndupZb5WsBucH36 NIfR7LZdM24pNwzbd+Xv2jNq617Sp0a/dnqHvCalTh7/dyptRz5uvIICcRU7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUW5QMNRJxY/hkB1C9XEopNxKzDt0wHwYDVR0j BBgwFoAU/J2hp2JbJ/20ZrHYppA3fkx7znIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZjZhYTMxYS1kZDBkLTRjMTAtYjVkZC1iMWE4M2ZhNTc3NjMvMC9GQzlEQTFBNzYy NUIyN0ZEQjQ2NkIxRDhBNjkwMzc3RTRDN0JDRTcyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkM5REExQTc2MjVCMjdGREI0NjZCMUQ4QTY5MDM3N0U0QzdC Q0U3Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGY2YWEzMWEtZGQwZC00YzEwLWI1 ZGQtYjFhODNmYTU3NzYzLzAvRkM5REExQTc2MjVCMjdGREI0NjZCMUQ4QTY5MDM3 N0U0QzdCQ0U3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABFybbI6BzDEpVlTRtbHjYKE1EZsbttjtFbn eNZqs70UASU5/VQS8K80EgEFcWxqepbXpTMBCljcT4iA8jegroMbQFT2HnEqfEpT NxaeKLk46T7KroOtT+jAny5RYo4E/wg6Z56FcFfbHWAlhfDzi08ivJzIjT5HJfMe wMaJt7WbUtlifW9cXVG/yJgcMtCoTtmuXanKSUDAiBYmAr1ABIkvZRtG3cuqr/aE E+H3OZoGgmvF1cne07gF5S58UGTmKw8Isr1lDNx8kilcZibLFzXtWUFBbRfR32xM QBZXCF6IFyL7kTZOv9rld1QDMmEoL26h1bSlhlQ9J0BoaMcTqQ4= -----END CERTIFICATE-----Generated at Mon Oct 20 18:19:04 2025 by rpki-client