$ rpki-client -vvf repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.mft File: FC646066A689B77054AF95653FA324395357E6A3.mft (raw, json) Hash identifier: tAX8eORYVagUix8Kdd7TzDduqCLDboSPCck3qRsJ+tA= Subject key identifier: 89:72:EA:09:3F:3C:BE:FB:7C:8D:1B:23:45:ED:14:DC:2A:41:CF:3F Authority key identifier: FC:64:60:66:A6:89:B7:70:54:AF:95:65:3F:A3:24:39:53:57:E6:A3 Certificate issuer: /CN=FC646066A689B77054AF95653FA324395357E6A3 Certificate serial: 5A44AD16A8E7218AB6EE2691EC2DC04941557641 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC646066A689B77054AF95653FA324395357E6A3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.mft Manifest number: 0519 Signing time: Sun 19 Oct 2025 18:12:11 +0000 Manifest this update: Sun 19 Oct 2025 18:07:11 +0000 Manifest next update: Wed 22 Oct 2025 21:44:11 +0000 Files and hashes: 1: FC646066A689B77054AF95653FA324395357E6A3.crl (hash: /L/h1jCZbaWo9YX3eaVGXsuIu8EG6Nv64bgClVUOSOY=) 2: 31342e3130322e3135322e302f32322d3234203d3e203535363533.roa (hash: tcAOfelZsfvkpX9bUklTUsOMqUIe7iMnYq8XrY6rniM=) 3: 323430323a633330303a3a2f33322d3438203d3e203535363533.roa (hash: bGPK4/XEobq1bk7eW0IqEOt5RrHUWnGxVvGe+M2MWVI=) 4: 3230322e35322e31322e302f32322d3234203d3e203535363533.roa (hash: r4N7YVGjSR/vf/OS/81YrBx8jNMdTo+vkJbDS2Aeqlg=) 5: 3130332e3235342e3132362e302f32332d3234203d3e203535363533.roa (hash: 9BxarKCax6xXzwA7sCkwW9bstNPy4ZEaa9LRlsVppIQ=) 6: 3130332e31312e39362e302f32322d3234203d3e203535363533.roa (hash: PVQdneK9Q2r+2YuMkyuS3S7JvDEOimiQ6kS5G4qY3D8=) 7: 34332e3234392e3134302e302f32322d3234203d3e203535363533.roa (hash: VXuEsrUjBUraWB5GeM4W6dfuMEU9X+IXajG+jXJX29c=) 8: 3230322e31302e36332e302f32342d3234203d3e203535363533.roa (hash: 3x/TagzWw9AEnitF9/BKz1IoUShxY7ix8DtkXTWs+vs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.crl rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC646066A689B77054AF95653FA324395357E6A3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 21:44:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:44:ad:16:a8:e7:21:8a:b6:ee:26:91:ec:2d:c0:49:41:55:76:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC646066A689B77054AF95653FA324395357E6A3 Validity Not Before: Oct 19 18:07:11 2025 GMT Not After : Oct 22 21:44:11 2025 GMT Subject: CN=8972EA093F3CBEFB7C8D1B2345ED14DC2A41CF3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:fb:c9:fc:7f:52:07:06:06:83:70:2f:3d:6c: 1e:5b:87:4f:37:33:d3:5c:4d:76:bb:5d:af:95:de: 63:c3:b1:52:7f:a9:44:b5:04:bb:51:b7:8a:c9:38: 2a:67:07:27:4b:92:27:e2:1c:69:31:f5:d7:de:25: fe:7a:02:e1:9d:13:e1:81:1c:4a:07:f5:7f:3d:3d: 62:81:91:2e:66:7d:34:5e:ce:16:2a:26:40:28:1a: 43:2f:1b:18:a9:e0:4d:5b:5f:49:f0:8e:a6:ad:ef: d9:46:3d:5c:d3:c8:47:80:12:99:21:1d:45:18:2c: a3:56:14:94:70:0d:4f:24:6f:c5:fa:c2:14:4d:64: fa:8d:2d:f9:53:f7:8e:e1:81:8c:34:bc:d2:3e:11: 8e:27:03:da:8b:3e:c5:f0:cb:d7:c3:fb:d2:99:a1: c2:b2:4f:f7:af:ed:ad:9d:1e:bc:ac:63:94:22:f7: 31:fd:f5:af:d8:dc:94:7d:e2:20:2a:81:1c:65:9d: db:ca:10:55:37:3f:41:9e:9d:96:e1:8c:6c:38:2c: 47:47:3b:8a:50:19:65:d0:b4:bd:96:8e:3b:06:10: f8:4b:55:8b:fb:5b:77:56:e1:7d:21:47:dd:25:12: 6f:6b:10:b9:d0:0a:c2:00:2b:b9:f8:d2:19:a1:43: e7:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:72:EA:09:3F:3C:BE:FB:7C:8D:1B:23:45:ED:14:DC:2A:41:CF:3F X509v3 Authority Key Identifier: keyid:FC:64:60:66:A6:89:B7:70:54:AF:95:65:3F:A3:24:39:53:57:E6:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC646066A689B77054AF95653FA324395357E6A3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:36:3b:df:a8:d6:d5:e9:4d:bd:d6:f0:e6:a5:1c:f9:d6:cc: f8:a5:f8:5f:26:d2:60:c9:38:bd:2c:40:95:17:a2:45:e0:4c: 08:fb:4d:f9:c6:21:3b:ec:af:fc:37:07:98:7e:f1:16:d1:1a: b3:a5:9e:46:fe:1b:e4:7d:d5:48:a0:e0:dd:3e:b9:4e:8c:26: 1e:88:f1:b9:ce:4b:21:7b:fe:50:7a:72:ca:31:af:ba:eb:92: 0d:3f:84:61:30:37:f5:47:5d:43:53:a9:96:6a:b3:3f:11:38: 64:45:f7:3c:a8:19:70:b4:3d:1b:b7:cc:24:17:9c:4f:c6:c1: 46:6f:7f:bd:96:8f:3c:60:6e:b2:b9:c3:2a:e8:b6:df:f5:4d: ef:5f:38:22:c8:9c:0d:6e:d0:7e:18:5e:c9:1b:ef:01:c8:36: ea:a8:91:9b:e7:14:a1:44:be:05:f9:12:64:c7:04:8a:97:eb: 5e:11:1c:af:20:77:35:dc:9a:92:3f:fc:c7:80:fd:31:04:f9: a8:ef:d6:d1:50:8d:23:87:fd:0d:a3:59:0e:8e:fa:66:83:a0: 61:aa:2d:e4:21:ce:fd:41:1d:66:cc:ca:95:77:c1:50:94:05: 26:d0:dd:fe:4f:49:f4:07:15:c5:35:3d:79:bb:1a:6d:eb:91: e5:46:6c:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWkStFqjnIYq27iaR7C3ASUFVdkEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkM2NDYwNjZBNjg5Qjc3MDU0QUY5NTY1M0ZBMzI0Mzk1 MzU3RTZBMzAeFw0yNTEwMTkxODA3MTFaFw0yNTEwMjIyMTQ0MTFaMDMxMTAvBgNV BAMTKDg5NzJFQTA5M0YzQ0JFRkI3QzhEMUIyMzQ1RUQxNERDMkE0MUNGM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe+8n8f1IHBgaDcC89bB5bh083 M9NcTXa7Xa+V3mPDsVJ/qUS1BLtRt4rJOCpnBydLkifiHGkx9dfeJf56AuGdE+GB HEoH9X89PWKBkS5mfTRezhYqJkAoGkMvGxip4E1bX0nwjqat79lGPVzTyEeAEpkh HUUYLKNWFJRwDU8kb8X6whRNZPqNLflT947hgYw0vNI+EY4nA9qLPsXwy9fD+9KZ ocKyT/ev7a2dHrysY5Qi9zH99a/Y3JR94iAqgRxlndvKEFU3P0GenZbhjGw4LEdH O4pQGWXQtL2WjjsGEPhLVYv7W3dW4X0hR90lEm9rELnQCsIAK7n40hmhQ+f3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiXLqCT88vvt8jRsjRe0U3CpBzz8wHwYDVR0j BBgwFoAU/GRgZqaJt3BUr5VlP6MkOVNX5qMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OTc0NjVlMy03OGEwLTQ5NjUtYWUxNC1lNGNiNGQwZmMxODUvMC9GQzY0NjA2NkE2 ODlCNzcwNTRBRjk1NjUzRkEzMjQzOTUzNTdFNkEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkM2NDYwNjZBNjg5Qjc3MDU0QUY5NTY1M0ZBMzI0Mzk1MzU3 RTZBMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzk3NDY1ZTMtNzhhMC00OTY1LWFl MTQtZTRjYjRkMGZjMTg1LzAvRkM2NDYwNjZBNjg5Qjc3MDU0QUY5NTY1M0ZBMzI0 Mzk1MzU3RTZBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE82O9+o1tXpTb3W8OalHPnWzPil+F8m0mDJ OL0sQJUXokXgTAj7TfnGITvsr/w3B5h+8RbRGrOlnkb+G+R91Uig4N0+uU6MJh6I 8bnOSyF7/lB6csoxr7rrkg0/hGEwN/VHXUNTqZZqsz8ROGRF9zyoGXC0PRu3zCQX nE/GwUZvf72WjzxgbrK5wyrott/1Te9fOCLInA1u0H4YXskb7wHINuqokZvnFKFE vgX5EmTHBIqX614RHK8gdzXcmpI//MeA/TEE+ajv1tFQjSOH/Q2jWQ6O+maDoGGq LeQhzv1BHWbMypV3wVCUBSbQ3f5PSfQHFcU1PXm7Gm3rkeVGbKA= -----END CERTIFICATE-----Generated at Mon Oct 20 13:10:25 2025 by rpki-client