$ rpki-client -vvf repo-rpki.idnic.net/repo/5b9752f6-6066-4b38-87cc-9ba63d19e22c/0/FC1C6395AD65E53AB9BC4BBD451AE79234BF63D7.mft File: FC1C6395AD65E53AB9BC4BBD451AE79234BF63D7.mft (raw, json) Hash identifier: c/3N32tsFrioI4K6ORaufRvlept92S/yPymCG2PH1es= Subject key identifier: A5:DD:DC:67:DF:23:2C:7C:59:2C:CC:F9:45:E8:6F:81:11:96:73:4D Authority key identifier: FC:1C:63:95:AD:65:E5:3A:B9:BC:4B:BD:45:1A:E7:92:34:BF:63:D7 Certificate issuer: /CN=FC1C6395AD65E53AB9BC4BBD451AE79234BF63D7 Certificate serial: 1FC6142DBFD9E8F4C06376903E07551A47AAD0D9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC1C6395AD65E53AB9BC4BBD451AE79234BF63D7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5b9752f6-6066-4b38-87cc-9ba63d19e22c/0/FC1C6395AD65E53AB9BC4BBD451AE79234BF63D7.mft Manifest number: 04D7 Signing time: Mon 20 Oct 2025 11:52:02 +0000 Manifest this update: Mon 20 Oct 2025 11:47:02 +0000 Manifest next update: Thu 23 Oct 2025 16:26:02 +0000 Files and hashes: 1: FC1C6395AD65E53AB9BC4BBD451AE79234BF63D7.crl (hash: xEoL+1XcnDErDlgucxBpQ6VoT199Z7rqPs4+FER/tcg=) 2: 3130332e33392e35322e302f32342d3234203d3e203633353033.roa (hash: Bw5xJfUWgUnZZKn8O2MlqxKM9AFTPxg86d/p/QbMwfs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5b9752f6-6066-4b38-87cc-9ba63d19e22c/0/FC1C6395AD65E53AB9BC4BBD451AE79234BF63D7.crl rsync://repo-rpki.idnic.net/repo/5b9752f6-6066-4b38-87cc-9ba63d19e22c/0/FC1C6395AD65E53AB9BC4BBD451AE79234BF63D7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC1C6395AD65E53AB9BC4BBD451AE79234BF63D7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:c6:14:2d:bf:d9:e8:f4:c0:63:76:90:3e:07:55:1a:47:aa:d0:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC1C6395AD65E53AB9BC4BBD451AE79234BF63D7 Validity Not Before: Oct 20 11:47:02 2025 GMT Not After : Oct 23 16:26:02 2025 GMT Subject: CN=A5DDDC67DF232C7C592CCCF945E86F811196734D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:5c:c9:14:81:b4:99:75:c9:f5:c7:32:29:cd: 4f:5c:f5:b5:47:84:55:fd:a5:e3:3d:75:6a:3f:b1: 6f:87:7d:83:a1:77:df:e3:76:64:a4:db:e9:c7:67: d3:e4:a6:d1:05:29:5f:c1:d3:38:39:7b:8d:06:11: 39:e2:32:52:1a:1b:9e:e6:a1:73:b4:4c:87:42:30: e3:0e:fd:51:0d:d1:fe:df:bb:d7:e6:46:c1:b5:f1: e4:13:0b:d8:11:74:32:46:16:17:b5:15:6e:aa:c6: 63:6b:51:4f:24:37:43:3a:cd:46:e9:c6:28:a7:23: 3c:b7:1a:ab:79:51:42:c5:45:c3:64:4a:45:a9:b0: f4:a9:6d:16:6f:5f:60:74:db:e3:f1:9f:f9:9d:d9: 85:e9:bb:54:a6:12:91:3c:d5:76:53:b1:de:19:40: e2:c1:57:d7:76:ae:58:c3:24:b9:c5:90:6a:9f:e7: f8:d7:52:16:68:d2:4e:9b:f4:bf:de:ec:65:97:1f: 41:70:b9:4d:db:87:58:ac:0b:32:11:6d:cb:94:c1: 6d:00:7a:17:4c:24:78:2a:61:f7:79:1f:a8:29:68: 55:78:f4:55:0e:52:58:6b:fe:9d:93:04:2a:34:57: fb:6b:e1:41:49:96:29:ac:11:80:96:10:bd:cb:47: 8b:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:DD:DC:67:DF:23:2C:7C:59:2C:CC:F9:45:E8:6F:81:11:96:73:4D X509v3 Authority Key Identifier: keyid:FC:1C:63:95:AD:65:E5:3A:B9:BC:4B:BD:45:1A:E7:92:34:BF:63:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5b9752f6-6066-4b38-87cc-9ba63d19e22c/0/FC1C6395AD65E53AB9BC4BBD451AE79234BF63D7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC1C6395AD65E53AB9BC4BBD451AE79234BF63D7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5b9752f6-6066-4b38-87cc-9ba63d19e22c/0/FC1C6395AD65E53AB9BC4BBD451AE79234BF63D7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:c9:51:e8:15:f3:de:2f:d8:2d:6c:5f:12:d2:8f:da:4c:5b: 5b:e3:33:4f:d7:84:b5:56:dd:7c:32:36:2a:d9:95:81:2b:c2: 81:52:76:4c:dc:f8:3d:73:79:37:3c:2a:c3:0c:df:f2:f2:5e: c7:b7:2c:7b:7c:e2:d5:15:e8:cb:c0:3c:5d:8c:2a:8e:b7:2f: cb:3d:d1:0a:00:de:6b:6e:11:5c:4d:2d:98:87:d8:6e:3e:5f: 96:03:82:f9:74:f7:dc:ae:c2:03:ec:6b:63:1d:86:57:07:ad: 68:65:be:a4:32:ea:63:35:f1:83:31:3f:ab:3b:03:63:33:82: 0a:9f:77:bb:53:fd:83:d0:92:e8:96:93:5a:30:03:53:88:31: 8d:53:4e:43:de:f5:72:1d:f2:f3:ec:56:e0:4e:81:88:1d:a6: 84:c7:c8:a3:3d:cf:6e:e1:db:33:fd:b8:ad:b6:b9:14:af:3b: 56:87:37:36:90:95:a2:ca:f8:66:9b:73:12:1b:4d:d3:19:89: 05:10:cf:62:10:0c:b4:9b:15:9d:c9:ef:04:34:b2:2e:6c:39: 3f:f0:b1:90:ab:e6:29:6f:48:eb:96:ee:bb:83:df:22:ee:f8: 63:e2:9d:1b:43:4a:7c:8d:40:ee:be:94:41:bf:f4:c0:d1:5f: 86:81:da:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH8YULb/Z6PTAY3aQPgdVGkeq0NkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkMxQzYzOTVBRDY1RTUzQUI5QkM0QkJENDUxQUU3OTIz NEJGNjNENzAeFw0yNTEwMjAxMTQ3MDJaFw0yNTEwMjMxNjI2MDJaMDMxMTAvBgNV BAMTKEE1REREQzY3REYyMzJDN0M1OTJDQ0NGOTQ1RTg2RjgxMTE5NjczNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLXMkUgbSZdcn1xzIpzU9c9bVH hFX9peM9dWo/sW+HfYOhd9/jdmSk2+nHZ9PkptEFKV/B0zg5e40GETniMlIaG57m oXO0TIdCMOMO/VEN0f7fu9fmRsG18eQTC9gRdDJGFhe1FW6qxmNrUU8kN0M6zUbp xiinIzy3Gqt5UULFRcNkSkWpsPSpbRZvX2B02+Pxn/md2YXpu1SmEpE81XZTsd4Z QOLBV9d2rljDJLnFkGqf5/jXUhZo0k6b9L/e7GWXH0FwuU3bh1isCzIRbcuUwW0A ehdMJHgqYfd5H6gpaFV49FUOUlhr/p2TBCo0V/tr4UFJlimsEYCWEL3LR4uhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpd3cZ98jLHxZLMz5RehvgRGWc00wHwYDVR0j BBgwFoAU/Bxjla1l5Tq5vEu9RRrnkjS/Y9cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Yjk3NTJmNi02MDY2LTRiMzgtODdjYy05YmE2M2QxOWUyMmMvMC9GQzFDNjM5NUFE NjVFNTNBQjlCQzRCQkQ0NTFBRTc5MjM0QkY2M0Q3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkMxQzYzOTVBRDY1RTUzQUI5QkM0QkJENDUxQUU3OTIzNEJG NjNENy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWI5NzUyZjYtNjA2Ni00YjM4LTg3 Y2MtOWJhNjNkMTllMjJjLzAvRkMxQzYzOTVBRDY1RTUzQUI5QkM0QkJENDUxQUU3 OTIzNEJGNjNENy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKfJUegV894v2C1sXxLSj9pMW1vjM0/XhLVW 3XwyNirZlYErwoFSdkzc+D1zeTc8KsMM3/LyXse3LHt84tUV6MvAPF2MKo63L8s9 0QoA3mtuEVxNLZiH2G4+X5YDgvl099yuwgPsa2MdhlcHrWhlvqQy6mM18YMxP6s7 A2Mzggqfd7tT/YPQkuiWk1owA1OIMY1TTkPe9XId8vPsVuBOgYgdpoTHyKM9z27h 2zP9uK22uRSvO1aHNzaQlaLK+GabcxIbTdMZiQUQz2IQDLSbFZ3J7wQ0si5sOT/w sZCr5ilvSOuW7ruD3yLu+GPinRtDSnyNQO6+lEG/9MDRX4aB2qM= -----END CERTIFICATE-----Generated at Mon Oct 20 19:08:27 2025 by rpki-client