$ rpki-client -vvf repo-rpki.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.mft File: FCA55FE68BF147AE20F00C45DADCDF960C120CF8.mft (raw, json) Hash identifier: ud1EwbjqgCpnpdBoqpmj7Vtg5tjDdr697WpN8rLir00= Subject key identifier: 52:E8:BB:B5:26:9C:9D:63:6A:37:BF:1D:4B:D9:5D:BB:A9:04:94:D7 Authority key identifier: FC:A5:5F:E6:8B:F1:47:AE:20:F0:0C:45:DA:DC:DF:96:0C:12:0C:F8 Certificate issuer: /CN=FCA55FE68BF147AE20F00C45DADCDF960C120CF8 Certificate serial: 33F1EA141C8D7033541C440E49651D85E3C69894 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.mft Manifest number: 01BD Signing time: Sun 19 Oct 2025 15:22:10 +0000 Manifest this update: Sun 19 Oct 2025 15:17:10 +0000 Manifest next update: Wed 22 Oct 2025 21:17:10 +0000 Files and hashes: 1: FCA55FE68BF147AE20F00C45DADCDF960C120CF8.crl (hash: EE5cQOhmoMsGNG7fDravgnxYmsD8aPN865dPzBYs2mo=) 2: 3130332e3132312e3234362e302f32332d3234203d3e20313335343738.roa (hash: Fa70W79FWJwGU7udTAwUgPXNTPP4kX8Q9MJvZfIXGU4=) 3: 3130332e3132312e3234342e302f32332d3234203d3e20313335343738.roa (hash: mb2pM5mXThua6WdA1EeTpxCUj69c6y3IginfkESyKCw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.crl rsync://repo-rpki.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 21:17:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:f1:ea:14:1c:8d:70:33:54:1c:44:0e:49:65:1d:85:e3:c6:98:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FCA55FE68BF147AE20F00C45DADCDF960C120CF8 Validity Not Before: Oct 19 15:17:10 2025 GMT Not After : Oct 22 21:17:10 2025 GMT Subject: CN=52E8BBB5269C9D636A37BF1D4BD95DBBA90494D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:f2:cc:e7:fd:11:88:ea:d1:7c:ea:41:16:49: c6:c4:3f:8c:4e:50:69:74:f3:c1:90:b3:6d:05:06: 3f:11:16:a7:39:c8:20:5d:45:9e:e2:e5:ea:53:78: 90:1f:d4:39:3a:9a:f5:02:3c:87:5a:d8:c8:d3:69: 98:9a:d0:b4:9b:c8:68:1b:c6:ca:55:d1:26:ae:63: bd:d5:d9:2e:eb:c9:b8:31:0b:fd:88:11:fb:7a:ac: 49:08:57:be:fc:47:01:e9:e5:41:3d:6e:cb:1b:d2: d6:12:b0:b4:f5:90:fa:36:b6:90:06:c6:e8:b4:c6: fd:ad:f7:11:59:b4:51:8e:c1:89:fc:22:79:9e:c4: 15:ca:76:32:46:15:53:96:9a:55:03:02:78:43:f9: 19:2f:30:ed:f6:4c:4e:05:a4:1d:36:79:f6:cb:8b: ae:26:90:75:b8:d3:fc:c1:62:74:00:df:92:25:ef: 3b:3d:31:70:48:c2:6a:af:e3:ff:38:d7:de:ea:76: d5:60:5a:a9:d9:86:66:12:73:c4:52:6b:89:14:2e: 3b:cb:ca:da:f0:33:06:61:2c:84:c3:04:4d:57:91: 82:d1:d2:f3:31:5d:91:c7:82:63:33:1b:7c:49:20: fb:3e:21:27:ef:a5:19:3e:e6:5b:ea:1d:8b:6a:47: 05:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:E8:BB:B5:26:9C:9D:63:6A:37:BF:1D:4B:D9:5D:BB:A9:04:94:D7 X509v3 Authority Key Identifier: keyid:FC:A5:5F:E6:8B:F1:47:AE:20:F0:0C:45:DA:DC:DF:96:0C:12:0C:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:cd:b1:d9:8a:99:bb:e0:28:1b:4b:79:c5:08:d7:c3:82:d2: 1a:01:f1:91:31:cf:cd:3d:3d:75:9f:95:6c:80:96:da:73:fb: d7:49:4d:4d:74:53:47:e4:aa:31:3f:72:15:09:bd:34:68:e1: 1c:ad:bf:0b:46:9b:5a:b5:37:fa:aa:c3:1d:7b:79:b0:a5:5e: 1d:6c:4f:53:60:b7:ce:6b:06:10:03:8a:6b:8d:b0:82:ab:b2: 57:8b:e3:91:8e:b0:bb:02:da:a4:46:a1:e2:8c:14:56:07:56: d4:56:a0:d2:4e:34:3a:f0:d5:a5:88:fb:86:85:e7:61:49:c0: 07:f7:15:e7:7d:73:64:5b:34:0c:45:c0:d6:59:0d:1e:d1:f5: 7f:74:72:9f:67:20:53:fe:8d:86:35:85:4f:bd:4d:d5:fe:60: d3:ff:16:d2:03:20:b9:09:ae:72:51:51:10:07:c3:8d:37:89: 74:8e:0d:d0:a0:cc:d8:50:55:09:7f:19:50:5a:f5:e3:84:29: 34:d3:c9:12:5a:21:32:34:bc:8c:d5:f2:f2:4f:11:6e:92:b4: c6:12:59:1e:4c:ad:4d:30:17:80:98:b8:a1:fd:5a:08:cd:c3: 41:48:3c:25:ab:11:5f:03:bb:6d:8f:f7:ca:b3:99:48:6f:cf: f3:28:db:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM/HqFByNcDNUHEQOSWUdhePGmJQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkNBNTVGRTY4QkYxNDdBRTIwRjAwQzQ1REFEQ0RGOTYw QzEyMENGODAeFw0yNTEwMTkxNTE3MTBaFw0yNTEwMjIyMTE3MTBaMDMxMTAvBgNV BAMTKDUyRThCQkI1MjY5QzlENjM2QTM3QkYxRDRCRDk1REJCQTkwNDk0RDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf8szn/RGI6tF86kEWScbEP4xO UGl088GQs20FBj8RFqc5yCBdRZ7i5epTeJAf1Dk6mvUCPIda2MjTaZia0LSbyGgb xspV0SauY73V2S7rybgxC/2IEft6rEkIV778RwHp5UE9bssb0tYSsLT1kPo2tpAG xui0xv2t9xFZtFGOwYn8InmexBXKdjJGFVOWmlUDAnhD+RkvMO32TE4FpB02efbL i64mkHW40/zBYnQA35Il7zs9MXBIwmqv4/84197qdtVgWqnZhmYSc8RSa4kULjvL ytrwMwZhLITDBE1XkYLR0vMxXZHHgmMzG3xJIPs+ISfvpRk+5lvqHYtqRwWJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUui7tSacnWNqN78dS9ldu6kElNcwHwYDVR0j BBgwFoAU/KVf5ovxR64g8AxF2tzflgwSDPgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OTVlZThmYy02ZWZlLTQxNWQtYjZjMS0wZjBjY2NmMjYxNDQvMC9GQ0E1NUZFNjhC RjE0N0FFMjBGMDBDNDVEQURDREY5NjBDMTIwQ0Y4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkNBNTVGRTY4QkYxNDdBRTIwRjAwQzQ1REFEQ0RGOTYwQzEy MENGOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzk1ZWU4ZmMtNmVmZS00MTVkLWI2 YzEtMGYwY2NjZjI2MTQ0LzAvRkNBNTVGRTY4QkYxNDdBRTIwRjAwQzQ1REFEQ0RG OTYwQzEyMENGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEvNsdmKmbvgKBtLecUI18OC0hoB8ZExz809 PXWflWyAltpz+9dJTU10U0fkqjE/chUJvTRo4RytvwtGm1q1N/qqwx17ebClXh1s T1Ngt85rBhADimuNsIKrsleL45GOsLsC2qRGoeKMFFYHVtRWoNJONDrw1aWI+4aF 52FJwAf3Fed9c2RbNAxFwNZZDR7R9X90cp9nIFP+jYY1hU+9TdX+YNP/FtIDILkJ rnJRURAHw403iXSODdCgzNhQVQl/GVBa9eOEKTTTyRJaITI0vIzV8vJPEW6StMYS WR5MrU0wF4CYuKH9WgjNw0FIPCWrEV8Du22P98qzmUhvz/Mo24s= -----END CERTIFICATE-----Generated at Mon Oct 20 19:08:32 2025 by rpki-client