$ rpki-client -vvf repo-rpki.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/FA5F6CC99BAC829D4DE7BECEE823199657D018CD.mft File: FA5F6CC99BAC829D4DE7BECEE823199657D018CD.mft (raw, json) Hash identifier: lezy/gOM2ylhDgcZXztmm6ks2ko3JwxF19iX8OmBk1o= Subject key identifier: 8F:8C:5E:61:63:AC:DC:58:E1:E9:8E:F9:A7:B3:ED:5C:52:A6:55:F5 Authority key identifier: FA:5F:6C:C9:9B:AC:82:9D:4D:E7:BE:CE:E8:23:19:96:57:D0:18:CD Certificate issuer: /CN=FA5F6CC99BAC829D4DE7BECEE823199657D018CD Certificate serial: 14D75F2D7642B4058E36372F0067DF6BB2A2AE2D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA5F6CC99BAC829D4DE7BECEE823199657D018CD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/FA5F6CC99BAC829D4DE7BECEE823199657D018CD.mft Manifest number: 010C Signing time: Sat 23 Aug 2025 08:21:23 +0000 Manifest this update: Sat 23 Aug 2025 08:16:23 +0000 Manifest next update: Tue 26 Aug 2025 18:15:23 +0000 Files and hashes: 1: 3138302e39342e382e302f32342d3234203d3e20313532303430.roa (hash: c2NPfXxSOck24WuWyT1N3C7BCQbBB0F0oXAud+7dRiM=) 2: FA5F6CC99BAC829D4DE7BECEE823199657D018CD.crl (hash: W71FYujbE2DgYUha7tF4kzuHIW/WBu9PqYNuu0FvO6U=) 3: 3138302e39342e392e302f32342d3234203d3e20313532303430.roa (hash: qufNb3/LUFwbrIvm8YtRzGBfloSV6jK/5s6hJyz0aXI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/FA5F6CC99BAC829D4DE7BECEE823199657D018CD.crl rsync://repo-rpki.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/FA5F6CC99BAC829D4DE7BECEE823199657D018CD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA5F6CC99BAC829D4DE7BECEE823199657D018CD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:19:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:d7:5f:2d:76:42:b4:05:8e:36:37:2f:00:67:df:6b:b2:a2:ae:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA5F6CC99BAC829D4DE7BECEE823199657D018CD Validity Not Before: Aug 23 08:16:23 2025 GMT Not After : Aug 26 18:15:23 2025 GMT Subject: CN=8F8C5E6163ACDC58E1E98EF9A7B3ED5C52A655F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:35:8f:aa:7a:e6:d0:c1:66:61:fe:06:36:88: 6d:2e:9e:ef:d1:32:fc:81:3e:79:88:a5:24:0a:16: 79:3c:22:81:7e:55:2b:fa:08:a0:57:a3:6f:75:3b: 55:45:72:85:2f:e3:52:eb:e5:19:f5:88:44:c0:c0: ac:81:cc:c8:5b:75:cb:05:75:f3:bc:bb:77:61:93: 77:46:1a:bd:5a:02:b4:05:11:ea:c0:7f:19:ea:12: 98:b8:0c:2d:52:12:8f:a7:c8:e4:7d:4a:32:16:33: 70:b7:f8:2c:16:c4:f0:46:35:19:30:33:2b:59:a4: 48:17:84:64:34:9f:be:8b:d9:a1:8e:5b:ac:7e:2c: b0:66:74:ed:a8:40:ab:a8:e0:78:80:3a:87:53:d1: f1:4b:68:99:87:23:10:be:34:df:f5:2b:44:e0:90: c2:d6:9f:02:90:70:73:16:47:fa:97:68:05:fd:42: 9d:6d:cd:2d:b7:d8:6a:40:ba:33:47:2d:b6:c1:1f: 9c:3e:b4:03:d8:7b:1a:1f:b5:70:8d:f2:c1:5d:db: ac:93:1b:8a:54:65:62:42:0c:58:32:76:a3:e8:2e: 69:fa:9e:d5:45:f1:ab:cd:db:07:43:90:96:03:4b: d5:e1:c9:77:01:b7:f1:b1:8d:61:05:fe:b0:3d:47: e9:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:8C:5E:61:63:AC:DC:58:E1:E9:8E:F9:A7:B3:ED:5C:52:A6:55:F5 X509v3 Authority Key Identifier: keyid:FA:5F:6C:C9:9B:AC:82:9D:4D:E7:BE:CE:E8:23:19:96:57:D0:18:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/FA5F6CC99BAC829D4DE7BECEE823199657D018CD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA5F6CC99BAC829D4DE7BECEE823199657D018CD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/FA5F6CC99BAC829D4DE7BECEE823199657D018CD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:d3:ac:fb:0e:c4:b8:d4:f1:d9:9d:07:91:ef:86:72:0e:ac: 26:01:1d:f2:bd:ef:f3:ff:7e:f1:0b:84:cb:88:02:2b:80:77: 25:a5:20:29:18:6e:f8:8a:f2:9c:ee:bd:bd:e0:cf:80:92:d9: c3:a1:5a:41:aa:d1:87:4e:e1:be:dd:f4:32:b0:a9:b5:54:87: 1a:f6:7b:91:51:42:e3:4f:7f:6b:75:6d:ac:b2:3c:20:f5:f4: 6a:05:7e:43:0f:f7:19:96:13:78:18:06:e5:8d:a0:99:f4:d0: 7a:c1:82:be:7e:d6:cf:ed:1c:81:93:47:c5:ad:73:a6:37:58: 07:d6:53:ab:fe:89:3c:7e:d3:b2:d0:4c:8f:fa:99:5b:9b:40: 8f:75:d2:2b:8b:ec:66:84:70:8c:08:12:8a:c4:13:4e:cb:fc: fb:de:01:35:43:88:eb:02:76:97:50:a8:9b:77:51:80:fb:b8: ad:17:75:3a:9b:41:d2:2f:ae:d2:70:57:2a:3f:05:05:b3:d6: e9:73:6b:fe:02:72:d5:f2:21:29:23:f5:76:00:9f:d3:c2:e0: d1:25:bd:9b:49:a2:59:07:4e:6b:b3:f9:2f:2e:30:02:8b:a5: c7:7f:af:f3:7b:78:ef:cd:be:90:a2:df:27:97:25:e1:6a:e2: ef:75:4a:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFNdfLXZCtAWONjcvAGffa7Kiri0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE1RjZDQzk5QkFDODI5RDRERTdCRUNFRTgyMzE5OTY1 N0QwMThDRDAeFw0yNTA4MjMwODE2MjNaFw0yNTA4MjYxODE1MjNaMDMxMTAvBgNV BAMTKDhGOEM1RTYxNjNBQ0RDNThFMUU5OEVGOUE3QjNFRDVDNTJBNjU1RjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMNY+qeubQwWZh/gY2iG0unu/R MvyBPnmIpSQKFnk8IoF+VSv6CKBXo291O1VFcoUv41Lr5Rn1iETAwKyBzMhbdcsF dfO8u3dhk3dGGr1aArQFEerAfxnqEpi4DC1SEo+nyOR9SjIWM3C3+CwWxPBGNRkw MytZpEgXhGQ0n76L2aGOW6x+LLBmdO2oQKuo4HiAOodT0fFLaJmHIxC+NN/1K0Tg kMLWnwKQcHMWR/qXaAX9Qp1tzS232GpAujNHLbbBH5w+tAPYexoftXCN8sFd26yT G4pUZWJCDFgydqPoLmn6ntVF8avN2wdDkJYDS9XhyXcBt/GxjWEF/rA9R+k5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj4xeYWOs3Fjh6Y75p7PtXFKmVfUwHwYDVR0j BBgwFoAU+l9syZusgp1N577O6CMZllfQGM0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NmYxZWI0Yi00OGRjLTRlZWEtOTE4MS0xMjhjYjI4YjNkYmEvMC9GQTVGNkNDOTlC QUM4MjlENERFN0JFQ0VFODIzMTk5NjU3RDAxOENELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkE1RjZDQzk5QkFDODI5RDRERTdCRUNFRTgyMzE5OTY1N0Qw MThDRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTZmMWViNGItNDhkYy00ZWVhLTkx ODEtMTI4Y2IyOGIzZGJhLzAvRkE1RjZDQzk5QkFDODI5RDRERTdCRUNFRTgyMzE5 OTY1N0QwMThDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADbTrPsOxLjU8dmdB5HvhnIOrCYBHfK97/P/ fvELhMuIAiuAdyWlICkYbviK8pzuvb3gz4CS2cOhWkGq0YdO4b7d9DKwqbVUhxr2 e5FRQuNPf2t1bayyPCD19GoFfkMP9xmWE3gYBuWNoJn00HrBgr5+1s/tHIGTR8Wt c6Y3WAfWU6v+iTx+07LQTI/6mVubQI910iuL7GaEcIwIEorEE07L/PveATVDiOsC dpdQqJt3UYD7uK0XdTqbQdIvrtJwVyo/BQWz1ulza/4CctXyISkj9XYAn9PC4NEl vZtJolkHTmuz+S8uMAKLpcd/r/N7eO/NvpCi3yeXJeFq4u91Sik= -----END CERTIFICATE-----Generated at Sat Aug 23 13:29:14 2025 by rpki-client