$ rpki-client -vvf repo-rpki.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.mft File: FC4F8762524C3EBF98126E5F579CCB30C37EEF63.mft (raw, json) Hash identifier: yNJc1uE8EmLPPWpr3jPatJVpVrBogaMAWwFVhLsqeSU= Subject key identifier: B5:15:B3:F1:D0:98:8D:4B:0B:00:F8:D0:A0:A0:54:EC:4C:0C:A3:56 Authority key identifier: FC:4F:87:62:52:4C:3E:BF:98:12:6E:5F:57:9C:CB:30:C3:7E:EF:63 Certificate issuer: /CN=FC4F8762524C3EBF98126E5F579CCB30C37EEF63 Certificate serial: 776D109560CBED05DCDDD3FD63B986AAF1B968EB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.cer Subject info access: rsync://repo-rpki.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.mft Manifest number: 0107 Signing time: Sat 23 Aug 2025 00:10:39 +0000 Manifest this update: Sat 23 Aug 2025 00:05:39 +0000 Manifest next update: Tue 26 Aug 2025 05:52:39 +0000 Files and hashes: 1: 323030313a6466373a616630303a3a2f34382d3438203d3e20313338313432.roa (hash: +DXbNG3+5DIfVUdd5cKU3zcHabiuNmOrVbbKp3YlrN4=) 2: FC4F8762524C3EBF98126E5F579CCB30C37EEF63.crl (hash: YokD9qmGpNaXpvZrd+SgOcd2OQOKjPRv3VM2KSiF4vI=) 3: 3130332e3133342e31362e302f32342d3234203d3e20313338313432.roa (hash: 8FJnKt5CgklUKcuR3KEOgR9pFXHp2pdnQAzYXqQX2Ag=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.crl rsync://repo-rpki.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 05:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:6d:10:95:60:cb:ed:05:dc:dd:d3:fd:63:b9:86:aa:f1:b9:68:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC4F8762524C3EBF98126E5F579CCB30C37EEF63 Validity Not Before: Aug 23 00:05:39 2025 GMT Not After : Aug 26 05:52:39 2025 GMT Subject: CN=B515B3F1D0988D4B0B00F8D0A0A054EC4C0CA356 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d5:69:94:f0:7c:40:f6:4b:de:42:2b:d3:e9: 29:2d:34:7a:65:87:8d:0e:e0:d1:2c:f1:25:b5:d2: 67:7b:11:b9:d8:7a:48:b2:e1:e7:4e:bb:8a:65:81: 72:9b:a5:d0:03:fb:84:06:b2:45:42:8b:a2:08:e5: 44:73:9b:85:05:87:a9:31:bb:63:5f:f3:45:ca:8b: f3:01:2e:b1:fd:3b:3d:a1:7b:71:eb:3f:a3:dc:45: c5:63:fa:95:57:f6:11:ae:a9:c9:86:4b:7a:7f:10: 1b:fb:09:8e:f0:0b:36:4c:50:c0:3a:db:b5:c1:cf: f0:69:f1:56:bf:3d:0b:4d:1a:23:e5:e2:40:56:65: f3:a8:7c:0b:0b:34:e4:7f:9f:22:d5:a9:3b:14:e1: 42:40:7d:19:bc:4d:07:f4:94:df:a3:d4:54:53:ca: 38:eb:57:e6:32:08:06:da:1e:01:46:b9:01:e0:13: 19:77:49:86:4b:1b:5a:e9:1a:30:fc:8f:2f:c0:d4: a9:06:c9:a7:bb:10:a5:ca:3b:0f:a0:89:3a:78:f6: e7:68:80:7d:32:07:30:c9:54:6c:bb:07:79:dc:39: a2:a7:90:1c:f2:10:d3:96:43:0c:9d:a1:75:e8:d3: 84:bd:ea:a6:49:09:73:45:e7:2f:e1:41:42:3c:e3: 6f:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:15:B3:F1:D0:98:8D:4B:0B:00:F8:D0:A0:A0:54:EC:4C:0C:A3:56 X509v3 Authority Key Identifier: keyid:FC:4F:87:62:52:4C:3E:BF:98:12:6E:5F:57:9C:CB:30:C3:7E:EF:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:da:42:77:07:1b:e1:09:bc:cd:74:b2:91:7c:3f:8b:87:73: 4c:df:30:58:70:94:3c:49:73:e8:c2:b7:e4:40:1c:57:f9:33: 2f:e1:a1:b6:34:35:57:42:21:d6:8a:63:ba:8c:0e:c5:4a:a7: 02:2d:84:c7:36:b0:50:99:03:28:15:b5:e7:ed:67:ab:0c:c8: 28:7f:8c:e9:8d:0c:7d:88:06:97:eb:44:9b:70:64:8b:16:27: 01:3d:c8:95:aa:93:9b:78:30:03:44:57:f2:4d:ac:5a:2c:17: 27:a8:73:c1:7c:54:40:1a:25:38:5c:7c:3e:3a:60:97:57:d1: 3e:71:eb:21:5f:4b:48:c8:e4:62:94:be:e1:ba:80:7f:e6:e8: 95:eb:35:f7:bf:44:69:98:8c:99:e7:2e:cf:d0:f3:6d:9d:ea: 9f:6c:2a:fb:bc:da:97:3f:93:1f:db:92:cf:f3:c8:2f:89:e1: 8a:03:94:69:09:aa:6c:af:2a:30:a0:cb:34:9c:5f:3c:4a:24: f2:92:09:4c:18:bd:d0:ff:a6:11:38:b0:38:50:9a:7d:98:64: 7d:46:bb:19:ba:50:d5:c7:2b:57:d7:c8:5a:3b:97:99:e2:f9: cf:3d:59:e0:e7:d0:39:6b:ec:f8:5d:19:98:be:f9:97:9e:e5: c4:48:3c:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd20QlWDL7QXc3dP9Y7mGqvG5aOswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkM0Rjg3NjI1MjRDM0VCRjk4MTI2RTVGNTc5Q0NCMzBD MzdFRUY2MzAeFw0yNTA4MjMwMDA1MzlaFw0yNTA4MjYwNTUyMzlaMDMxMTAvBgNV BAMTKEI1MTVCM0YxRDA5ODhENEIwQjAwRjhEMEEwQTA1NEVDNEMwQ0EzNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+1WmU8HxA9kveQivT6SktNHpl h40O4NEs8SW10md7EbnYekiy4edOu4plgXKbpdAD+4QGskVCi6II5URzm4UFh6kx u2Nf80XKi/MBLrH9Oz2he3HrP6PcRcVj+pVX9hGuqcmGS3p/EBv7CY7wCzZMUMA6 27XBz/Bp8Va/PQtNGiPl4kBWZfOofAsLNOR/nyLVqTsU4UJAfRm8TQf0lN+j1FRT yjjrV+YyCAbaHgFGuQHgExl3SYZLG1rpGjD8jy/A1KkGyae7EKXKOw+giTp49udo gH0yBzDJVGy7B3ncOaKnkBzyENOWQwydoXXo04S96qZJCXNF5y/hQUI842/3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtRWz8dCYjUsLAPjQoKBU7EwMo1YwHwYDVR0j BBgwFoAU/E+HYlJMPr+YEm5fV5zLMMN+72MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZTVhYTkzZC03ODdiLTRhMTctODdkMC03ZWY0MWIwZjJkZWYvMC9GQzRGODc2MjUy NEMzRUJGOTgxMjZFNUY1NzlDQ0IzMEMzN0VFRjYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkM0Rjg3NjI1MjRDM0VCRjk4MTI2RTVGNTc5Q0NCMzBDMzdF RUY2My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmU1YWE5M2QtNzg3Yi00YTE3LTg3 ZDAtN2VmNDFiMGYyZGVmLzAvRkM0Rjg3NjI1MjRDM0VCRjk4MTI2RTVGNTc5Q0NC MzBDMzdFRUY2My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAALaQncHG+EJvM10spF8P4uHc0zfMFhwlDxJ c+jCt+RAHFf5My/hobY0NVdCIdaKY7qMDsVKpwIthMc2sFCZAygVteftZ6sMyCh/ jOmNDH2IBpfrRJtwZIsWJwE9yJWqk5t4MANEV/JNrFosFyeoc8F8VEAaJThcfD46 YJdX0T5x6yFfS0jI5GKUvuG6gH/m6JXrNfe/RGmYjJnnLs/Q822d6p9sKvu82pc/ kx/bks/zyC+J4YoDlGkJqmyvKjCgyzScXzxKJPKSCUwYvdD/phE4sDhQmn2YZH1G uxm6UNXHK1fXyFo7l5ni+c89WeDn0Dlr7PhdGZi++Zee5cRIPPY= -----END CERTIFICATE-----Generated at Sat Aug 23 22:03:32 2025 by rpki-client