$ rpki-client -vvf repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.mft File: FC646066A689B77054AF95653FA324395357E6A3.mft (raw, json) Hash identifier: lpRecfAK6c0C5s2xXBoZ9S3IknyEiONXJYNuvrEn3Lo= Subject key identifier: CC:6C:68:E7:C8:F8:49:D0:40:B2:26:48:92:31:47:F1:00:CF:18:FD Authority key identifier: FC:64:60:66:A6:89:B7:70:54:AF:95:65:3F:A3:24:39:53:57:E6:A3 Certificate issuer: /CN=FC646066A689B77054AF95653FA324395357E6A3 Certificate serial: 4204F7BC1BB0781CD159B5D6ED311E69A4F6BE1A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC646066A689B77054AF95653FA324395357E6A3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.mft Manifest number: 04E8 Signing time: Tue 01 Jul 2025 10:12:07 +0000 Manifest this update: Tue 01 Jul 2025 10:07:07 +0000 Manifest next update: Fri 04 Jul 2025 12:35:07 +0000 Files and hashes: 1: 3130332e3235342e3132362e302f32332d3234203d3e203535363533.roa (hash: 9BxarKCax6xXzwA7sCkwW9bstNPy4ZEaa9LRlsVppIQ=) 2: 34332e3234392e3134302e302f32322d3234203d3e203535363533.roa (hash: VXuEsrUjBUraWB5GeM4W6dfuMEU9X+IXajG+jXJX29c=) 3: 3230322e31302e36332e302f32342d3234203d3e203535363533.roa (hash: 3x/TagzWw9AEnitF9/BKz1IoUShxY7ix8DtkXTWs+vs=) 4: 3130332e31312e39362e302f32322d3234203d3e203535363533.roa (hash: PVQdneK9Q2r+2YuMkyuS3S7JvDEOimiQ6kS5G4qY3D8=) 5: 3230322e35322e31322e302f32322d3234203d3e203535363533.roa (hash: r4N7YVGjSR/vf/OS/81YrBx8jNMdTo+vkJbDS2Aeqlg=) 6: 31342e3130322e3135322e302f32322d3234203d3e203535363533.roa (hash: tcAOfelZsfvkpX9bUklTUsOMqUIe7iMnYq8XrY6rniM=) 7: FC646066A689B77054AF95653FA324395357E6A3.crl (hash: EDX0h7rUbgdT5Zrk4K/55LY8wyuE4oX0hVqsuISJ1HM=) 8: 323430323a633330303a3a2f33322d3438203d3e203535363533.roa (hash: bGPK4/XEobq1bk7eW0IqEOt5RrHUWnGxVvGe+M2MWVI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.crl rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC646066A689B77054AF95653FA324395357E6A3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 12:35:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:04:f7:bc:1b:b0:78:1c:d1:59:b5:d6:ed:31:1e:69:a4:f6:be:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC646066A689B77054AF95653FA324395357E6A3 Validity Not Before: Jul 1 10:07:07 2025 GMT Not After : Jul 4 12:35:07 2025 GMT Subject: CN=CC6C68E7C8F849D040B22648923147F100CF18FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f9:c4:c1:73:49:03:b1:bd:2b:85:3b:c8:7c: 43:a9:11:b9:27:91:b3:c6:dc:b9:92:6c:04:59:0e: 42:a3:88:8d:a2:28:d8:80:91:df:bd:eb:b3:ec:59: e3:7f:79:77:0f:8b:81:a6:10:54:a7:d0:ef:ec:e7: 09:5f:2f:62:da:cd:a2:6e:6b:47:55:c6:39:4e:4e: 1e:ca:18:b8:0f:36:1f:3c:df:9b:ad:e6:78:83:65: a2:dd:a0:ec:ae:20:81:fa:b5:13:11:05:1a:6e:06: 49:18:67:05:c0:9d:bf:d9:ab:6c:13:25:79:ea:4f: f3:c0:7a:02:c3:cf:99:46:70:fa:19:d0:57:b7:0f: 2e:70:53:0e:f5:41:9e:5a:d1:98:b7:1f:ca:96:5e: 74:89:ae:5d:a5:bb:f0:fe:71:ff:fd:c1:12:ac:b2: 6e:79:d2:03:37:64:99:00:88:4e:ac:4f:eb:83:8c: ce:46:2e:54:3f:24:e4:28:2b:e8:e0:6c:db:7e:12: c4:34:e4:2a:51:56:15:82:bf:bc:d5:27:18:df:97: 4c:84:b7:81:61:c4:db:04:79:c5:da:24:16:4e:5a: 40:a0:aa:5d:3e:41:3c:19:9f:bd:8b:f5:81:d2:a6: 5f:25:36:d3:f9:24:6f:8d:41:55:3f:d6:63:2f:8e: b8:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:6C:68:E7:C8:F8:49:D0:40:B2:26:48:92:31:47:F1:00:CF:18:FD X509v3 Authority Key Identifier: keyid:FC:64:60:66:A6:89:B7:70:54:AF:95:65:3F:A3:24:39:53:57:E6:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC646066A689B77054AF95653FA324395357E6A3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:54:08:f2:7c:d9:92:bc:06:97:57:f0:3d:5d:97:cd:1e:b1: a6:65:e6:c0:a7:9e:15:79:62:aa:ad:b9:c9:09:4b:e7:88:fb: 5f:90:08:ed:aa:fc:5f:ed:a1:e1:77:64:69:2c:e5:92:13:67: 9f:11:62:6d:d1:5b:f5:f4:b0:b0:b0:82:df:7e:26:01:2c:3e: 5e:1a:90:fc:32:b0:af:83:79:b0:5b:ce:ae:19:86:38:52:86: ba:39:7e:58:67:9d:1d:4a:ab:04:9d:18:5c:79:75:80:01:52: 69:54:dc:02:70:18:8a:f0:84:c4:a9:9f:ee:ab:8d:17:db:d6: b6:35:29:4c:c9:90:35:04:3f:04:c1:54:40:1c:8f:3d:67:a1: db:1b:43:98:59:61:eb:03:80:a9:12:4f:cc:51:80:37:ff:c4: 86:18:1f:78:f9:fa:bc:cf:c0:a9:e8:d0:2a:3e:05:b3:2b:3e: 0b:ba:89:85:7f:2a:32:d4:eb:48:d8:53:35:b4:ba:f6:f0:2a: 2c:08:5f:59:03:23:c4:25:76:54:94:c1:49:62:a1:60:84:47: 54:7c:4c:85:0f:2d:1b:7d:04:7e:7b:ad:03:b5:a6:4e:ca:74: ac:13:30:35:c5:41:51:5f:b4:4c:b0:86:2a:25:c6:07:f0:46: bb:85:cf:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQgT3vBuweBzRWbXW7TEeaaT2vhowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkM2NDYwNjZBNjg5Qjc3MDU0QUY5NTY1M0ZBMzI0Mzk1 MzU3RTZBMzAeFw0yNTA3MDExMDA3MDdaFw0yNTA3MDQxMjM1MDdaMDMxMTAvBgNV BAMTKENDNkM2OEU3QzhGODQ5RDA0MEIyMjY0ODkyMzE0N0YxMDBDRjE4RkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg+cTBc0kDsb0rhTvIfEOpEbkn kbPG3LmSbARZDkKjiI2iKNiAkd+967PsWeN/eXcPi4GmEFSn0O/s5wlfL2LazaJu a0dVxjlOTh7KGLgPNh8835ut5niDZaLdoOyuIIH6tRMRBRpuBkkYZwXAnb/Zq2wT JXnqT/PAegLDz5lGcPoZ0Fe3Dy5wUw71QZ5a0Zi3H8qWXnSJrl2lu/D+cf/9wRKs sm550gM3ZJkAiE6sT+uDjM5GLlQ/JOQoK+jgbNt+EsQ05CpRVhWCv7zVJxjfl0yE t4FhxNsEecXaJBZOWkCgql0+QTwZn72L9YHSpl8lNtP5JG+NQVU/1mMvjrh3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzGxo58j4SdBAsiZIkjFH8QDPGP0wHwYDVR0j BBgwFoAU/GRgZqaJt3BUr5VlP6MkOVNX5qMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OTc0NjVlMy03OGEwLTQ5NjUtYWUxNC1lNGNiNGQwZmMxODUvMC9GQzY0NjA2NkE2 ODlCNzcwNTRBRjk1NjUzRkEzMjQzOTUzNTdFNkEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkM2NDYwNjZBNjg5Qjc3MDU0QUY5NTY1M0ZBMzI0Mzk1MzU3 RTZBMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzk3NDY1ZTMtNzhhMC00OTY1LWFl MTQtZTRjYjRkMGZjMTg1LzAvRkM2NDYwNjZBNjg5Qjc3MDU0QUY5NTY1M0ZBMzI0 Mzk1MzU3RTZBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK9UCPJ82ZK8BpdX8D1dl80esaZl5sCnnhV5 YqqtuckJS+eI+1+QCO2q/F/toeF3ZGks5ZITZ58RYm3RW/X0sLCwgt9+JgEsPl4a kPwysK+DebBbzq4ZhjhShro5flhnnR1KqwSdGFx5dYABUmlU3AJwGIrwhMSpn+6r jRfb1rY1KUzJkDUEPwTBVEAcjz1nodsbQ5hZYesDgKkST8xRgDf/xIYYH3j5+rzP wKno0Co+BbMrPgu6iYV/KjLU60jYUzW0uvbwKiwIX1kDI8QldlSUwUlioWCER1R8 TIUPLRt9BH57rQO1pk7KdKwTMDXFQVFftEywhiolxgfwRruFz/w= -----END CERTIFICATE-----Generated at Wed Jul 2 10:57:46 2025 by rpki-client