$ rpki-client -vvf repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.mft File: FC646066A689B77054AF95653FA324395357E6A3.mft (raw, json) Hash identifier: 7QMEtIx3dhieQl7yZvKcYsVVOOyrye/dpDSgiCtGWOY= Subject key identifier: 47:E8:0A:E3:70:1C:35:F6:6B:76:5E:4B:21:00:BD:83:14:4E:67:6B Authority key identifier: FC:64:60:66:A6:89:B7:70:54:AF:95:65:3F:A3:24:39:53:57:E6:A3 Certificate issuer: /CN=FC646066A689B77054AF95653FA324395357E6A3 Certificate serial: 222F14A531F2A3A3BE28976AD6D7ADF7B1D8978D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC646066A689B77054AF95653FA324395357E6A3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.mft Manifest number: 04FF Signing time: Fri 22 Aug 2025 09:03:13 +0000 Manifest this update: Fri 22 Aug 2025 08:58:13 +0000 Manifest next update: Mon 25 Aug 2025 15:21:13 +0000 Files and hashes: 1: 323430323a633330303a3a2f33322d3438203d3e203535363533.roa (hash: bGPK4/XEobq1bk7eW0IqEOt5RrHUWnGxVvGe+M2MWVI=) 2: FC646066A689B77054AF95653FA324395357E6A3.crl (hash: 1rTjmhxnb9hQaeNDcmkyCpTgz/yBauZk2ova+63zck8=) 3: 3230322e31302e36332e302f32342d3234203d3e203535363533.roa (hash: 3x/TagzWw9AEnitF9/BKz1IoUShxY7ix8DtkXTWs+vs=) 4: 34332e3234392e3134302e302f32322d3234203d3e203535363533.roa (hash: VXuEsrUjBUraWB5GeM4W6dfuMEU9X+IXajG+jXJX29c=) 5: 3130332e31312e39362e302f32322d3234203d3e203535363533.roa (hash: PVQdneK9Q2r+2YuMkyuS3S7JvDEOimiQ6kS5G4qY3D8=) 6: 3130332e3235342e3132362e302f32332d3234203d3e203535363533.roa (hash: 9BxarKCax6xXzwA7sCkwW9bstNPy4ZEaa9LRlsVppIQ=) 7: 3230322e35322e31322e302f32322d3234203d3e203535363533.roa (hash: r4N7YVGjSR/vf/OS/81YrBx8jNMdTo+vkJbDS2Aeqlg=) 8: 31342e3130322e3135322e302f32322d3234203d3e203535363533.roa (hash: tcAOfelZsfvkpX9bUklTUsOMqUIe7iMnYq8XrY6rniM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.crl rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC646066A689B77054AF95653FA324395357E6A3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 15:21:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:2f:14:a5:31:f2:a3:a3:be:28:97:6a:d6:d7:ad:f7:b1:d8:97:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC646066A689B77054AF95653FA324395357E6A3 Validity Not Before: Aug 22 08:58:13 2025 GMT Not After : Aug 25 15:21:13 2025 GMT Subject: CN=47E80AE3701C35F66B765E4B2100BD83144E676B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:9a:07:2f:45:bc:41:1a:1c:02:40:b0:d4:05: ac:93:9b:41:44:d5:2e:7d:c7:85:d3:eb:d6:b5:ec: da:0a:c5:78:25:ce:5b:8c:6b:6c:94:ce:48:da:a2: ed:5d:a9:7b:1e:a7:7f:56:95:34:b9:0b:d5:88:e0: 46:0e:59:e3:f9:49:e3:46:d6:51:7d:cc:21:7d:e7: 2a:34:4b:11:11:5d:63:b8:72:87:07:78:fd:f5:dc: 9e:65:6a:4c:63:e7:54:40:1d:71:30:7f:e0:74:31: f9:d2:a8:79:6f:2e:e4:36:cc:2f:f0:be:3f:37:90: fb:4d:18:8c:2f:a7:43:3a:84:f2:a5:cd:50:a1:d8: d7:f5:2f:c1:0a:02:94:94:27:81:05:8a:7c:b1:cc: 74:f9:d8:7e:2b:d5:ad:21:5d:66:fb:72:79:33:e2: 77:69:6f:9f:25:1f:ae:b7:a1:bc:ac:68:3a:db:3b: 16:3a:81:73:82:f6:2e:05:7d:9f:17:7e:a0:48:33: 7f:90:e9:8b:d4:08:79:dd:63:b1:91:9e:98:d2:4e: 7f:7b:9d:e3:21:c3:77:0e:68:f4:33:af:25:07:12: 3e:05:aa:99:d2:01:5a:1d:65:2e:5e:3a:eb:0d:c4: cb:ad:7d:b1:46:f9:10:1f:f1:37:f3:1d:77:04:d2: 2f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:E8:0A:E3:70:1C:35:F6:6B:76:5E:4B:21:00:BD:83:14:4E:67:6B X509v3 Authority Key Identifier: keyid:FC:64:60:66:A6:89:B7:70:54:AF:95:65:3F:A3:24:39:53:57:E6:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC646066A689B77054AF95653FA324395357E6A3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:b1:86:67:54:16:64:69:58:3b:61:33:66:77:22:74:7d:b3: 43:aa:95:22:2a:8c:34:28:03:c9:90:8a:1f:8b:7b:07:75:f0: b5:c5:91:15:d3:17:d3:42:39:e5:67:10:aa:92:72:ce:a1:1a: 90:27:d5:2d:f9:4b:5d:0c:bb:a8:f9:b1:5a:af:c9:a0:0a:96: b7:06:6a:45:94:37:7c:07:78:c4:8a:d5:69:9a:cd:4e:3e:2a: 90:f6:12:3f:aa:2f:b9:5d:c4:6d:39:2b:d3:7e:f7:f2:86:6c: fb:31:90:e9:86:3e:5e:a2:c7:4d:70:2c:8a:a3:a3:4f:3e:55: 59:f5:19:51:ff:c2:39:83:08:e0:30:7d:f1:c8:6e:24:57:58: be:fe:8b:5e:a4:10:22:c9:a3:2a:ae:e4:5f:dd:16:c7:b2:7b: 93:58:90:90:e0:cd:d0:5f:f0:9a:66:79:b9:c4:d0:46:c3:e1: 33:8d:ff:55:0e:d7:c3:99:4f:b9:ee:c1:43:2c:a1:16:0b:75: 84:39:af:af:c1:b1:9b:94:bb:04:56:f4:67:e8:44:6d:28:6a: 43:60:61:73:72:ff:6e:f0:9b:af:8e:06:08:bd:1e:61:27:37: 7e:34:de:1c:9b:44:3a:83:7c:08:7d:f5:a0:04:6c:da:81:6c: 0e:09:fb:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIi8UpTHyo6O+KJdq1tet97HYl40wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkM2NDYwNjZBNjg5Qjc3MDU0QUY5NTY1M0ZBMzI0Mzk1 MzU3RTZBMzAeFw0yNTA4MjIwODU4MTNaFw0yNTA4MjUxNTIxMTNaMDMxMTAvBgNV BAMTKDQ3RTgwQUUzNzAxQzM1RjY2Qjc2NUU0QjIxMDBCRDgzMTQ0RTY3NkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGmgcvRbxBGhwCQLDUBayTm0FE 1S59x4XT69a17NoKxXglzluMa2yUzkjaou1dqXsep39WlTS5C9WI4EYOWeP5SeNG 1lF9zCF95yo0SxERXWO4cocHeP313J5lakxj51RAHXEwf+B0MfnSqHlvLuQ2zC/w vj83kPtNGIwvp0M6hPKlzVCh2Nf1L8EKApSUJ4EFinyxzHT52H4r1a0hXWb7cnkz 4ndpb58lH663obysaDrbOxY6gXOC9i4FfZ8XfqBIM3+Q6YvUCHndY7GRnpjSTn97 neMhw3cOaPQzryUHEj4FqpnSAVodZS5eOusNxMutfbFG+RAf8TfzHXcE0i+fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUR+gK43AcNfZrdl5LIQC9gxROZ2swHwYDVR0j BBgwFoAU/GRgZqaJt3BUr5VlP6MkOVNX5qMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OTc0NjVlMy03OGEwLTQ5NjUtYWUxNC1lNGNiNGQwZmMxODUvMC9GQzY0NjA2NkE2 ODlCNzcwNTRBRjk1NjUzRkEzMjQzOTUzNTdFNkEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkM2NDYwNjZBNjg5Qjc3MDU0QUY5NTY1M0ZBMzI0Mzk1MzU3 RTZBMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzk3NDY1ZTMtNzhhMC00OTY1LWFl MTQtZTRjYjRkMGZjMTg1LzAvRkM2NDYwNjZBNjg5Qjc3MDU0QUY5NTY1M0ZBMzI0 Mzk1MzU3RTZBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEGxhmdUFmRpWDthM2Z3InR9s0OqlSIqjDQo A8mQih+Lewd18LXFkRXTF9NCOeVnEKqScs6hGpAn1S35S10Mu6j5sVqvyaAKlrcG akWUN3wHeMSK1WmazU4+KpD2Ej+qL7ldxG05K9N+9/KGbPsxkOmGPl6ix01wLIqj o08+VVn1GVH/wjmDCOAwffHIbiRXWL7+i16kECLJoyqu5F/dFseye5NYkJDgzdBf 8JpmebnE0EbD4TON/1UO18OZT7nuwUMsoRYLdYQ5r6/BsZuUuwRW9GfoRG0oakNg YXNy/27wm6+OBgi9HmEnN3403hybRDqDfAh99aAEbNqBbA4J+5U= -----END CERTIFICATE-----Generated at Sat Aug 23 12:26:38 2025 by rpki-client