$ rpki-client -vvf repo-rpki.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.mft File: FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.mft (raw, json) Hash identifier: 1ZGv/Ha6/2+9K6GMzzqgTtEJtLVfAcVqlCR8HbbS4kg= Subject key identifier: 55:86:5B:97:F1:15:D9:1E:F7:73:5D:36:A5:F7:60:1B:94:9F:84:16 Authority key identifier: FC:D5:B5:62:FA:ED:9B:9D:67:F9:DE:5D:B7:05:78:BF:DB:00:57:B3 Certificate issuer: /CN=FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3 Certificate serial: 23547BB224DB1216A6870114B8F363C09CF8E399 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.mft Manifest number: 032A Signing time: Sat 23 Aug 2025 05:51:42 +0000 Manifest this update: Sat 23 Aug 2025 05:46:42 +0000 Manifest next update: Tue 26 Aug 2025 07:20:42 +0000 Files and hashes: 1: 3130332e3135312e3134302e302f32332d3234203d3e20313430343137.roa (hash: maLwNGdhj2YMExFHAn5+1Sop9522GuyaLGRVR2YiAsA=) 2: 3130332e3135312e3134302e302f32332d3233203d3e20313430343137.roa (hash: 8NA8ztqKmdQKSo6VJIi8+Ky4DaNAGzE3fau0y6GTEzI=) 3: FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.crl (hash: hdpD52MUu3wTds0nrWpytVAFf3iky3MsTu8koSKpg2k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.crl rsync://repo-rpki.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 07:20:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:54:7b:b2:24:db:12:16:a6:87:01:14:b8:f3:63:c0:9c:f8:e3:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3 Validity Not Before: Aug 23 05:46:42 2025 GMT Not After : Aug 26 07:20:42 2025 GMT Subject: CN=55865B97F115D91EF7735D36A5F7601B949F8416 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c3:be:3a:91:52:57:e9:84:1a:ab:c2:dc:71: bc:a6:55:14:45:11:73:02:f2:87:7b:a9:79:7f:cf: ce:cb:b5:cf:94:5c:a5:00:f9:e6:6d:05:5f:49:d8: 05:9d:e5:04:a7:e1:94:90:b9:b8:98:28:0f:cf:a7: a1:e8:39:d4:df:6d:d8:89:bb:97:12:72:76:94:26: 7f:96:6e:ba:de:4c:54:25:71:ca:63:26:74:7b:c1: 14:34:a4:d9:27:3e:b9:ac:bf:34:05:bc:62:88:da: 93:a7:76:a4:b5:47:5b:51:39:d0:60:37:f2:3e:9b: 7a:4a:8a:91:73:48:d4:9e:84:75:b7:07:b9:1e:ff: ce:ce:c2:aa:52:d3:8e:c3:25:f6:c9:f2:0d:85:02: 30:9e:44:55:10:a3:96:fc:eb:32:36:84:5f:e3:1f: ed:81:6a:27:c1:33:41:99:0a:1b:88:64:ef:8a:b0: 81:50:54:41:45:ca:b3:e6:54:14:14:d4:51:84:47: a1:bd:31:c7:56:65:cc:73:28:ee:68:fa:55:ab:7f: dc:ac:3a:09:e0:eb:82:eb:a7:f3:1d:f6:96:45:34: d3:18:1f:27:1e:fa:1d:81:a9:19:0b:bd:77:29:e1: 04:e8:14:30:21:dd:6f:2b:4d:e5:f1:86:83:d2:85: 72:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:86:5B:97:F1:15:D9:1E:F7:73:5D:36:A5:F7:60:1B:94:9F:84:16 X509v3 Authority Key Identifier: keyid:FC:D5:B5:62:FA:ED:9B:9D:67:F9:DE:5D:B7:05:78:BF:DB:00:57:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:60:25:47:87:66:c2:18:3a:db:05:98:b6:f7:f3:ff:66:23: 1f:19:2b:b0:1b:49:e5:49:0b:bc:b9:e4:85:39:1e:97:48:b0: c4:cf:e0:30:81:b3:16:ff:07:b5:4c:ff:95:20:35:88:e5:98: 9d:8e:5a:0c:cd:4c:af:36:67:7d:fb:f6:a6:ce:72:f6:11:c9: 31:58:27:f9:34:2c:e6:0f:1a:21:a2:35:78:5b:07:6a:95:c3: 6d:cc:bb:5a:6b:2b:36:51:74:a2:ba:85:82:8e:f9:5f:34:05: 4d:48:dc:42:6e:aa:52:db:1c:d1:d8:18:87:66:87:8c:83:db: bd:41:ec:80:a0:39:57:ac:63:13:96:b7:57:f6:cc:d9:4a:c7: b8:31:6c:4a:94:00:07:a1:67:6e:64:4d:9d:2a:cf:b4:22:a0: af:65:2f:43:5b:eb:b9:aa:3e:0b:98:b6:fb:ef:17:f5:ac:f3: 0c:ac:55:e5:c8:47:e2:fe:27:b9:29:86:70:d9:fa:cc:72:8f: 2e:d4:8c:3e:bd:53:7c:8a:64:6b:95:d7:f3:36:9c:cb:63:e4: 74:fd:67:ff:a4:0f:d0:4d:a3:75:a7:1b:9c:be:61:18:98:e5: cd:03:ea:46:85:02:67:d9:b8:42:45:9d:ae:c5:87:f8:2b:3d: 99:e6:d0:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI1R7siTbEhamhwEUuPNjwJz445kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkNENUI1NjJGQUVEOUI5RDY3RjlERTVEQjcwNTc4QkZE QjAwNTdCMzAeFw0yNTA4MjMwNTQ2NDJaFw0yNTA4MjYwNzIwNDJaMDMxMTAvBgNV BAMTKDU1ODY1Qjk3RjExNUQ5MUVGNzczNUQzNkE1Rjc2MDFCOTQ5Rjg0MTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHw746kVJX6YQaq8LccbymVRRF EXMC8od7qXl/z87Ltc+UXKUA+eZtBV9J2AWd5QSn4ZSQubiYKA/Pp6HoOdTfbdiJ u5cScnaUJn+WbrreTFQlccpjJnR7wRQ0pNknPrmsvzQFvGKI2pOndqS1R1tROdBg N/I+m3pKipFzSNSehHW3B7ke/87OwqpS047DJfbJ8g2FAjCeRFUQo5b86zI2hF/j H+2BaifBM0GZChuIZO+KsIFQVEFFyrPmVBQU1FGER6G9McdWZcxzKO5o+lWrf9ys Ogng64Lrp/Md9pZFNNMYHyce+h2BqRkLvXcp4QToFDAh3W8rTeXxhoPShXLDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVYZbl/EV2R73c102pfdgG5SfhBYwHwYDVR0j BBgwFoAU/NW1Yvrtm51n+d5dtwV4v9sAV7MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NDcwMjZhOS0wYzlhLTRkNzktYWQ2Ny0yYzlkYmQzNjZkMGIvMC9GQ0Q1QjU2MkZB RUQ5QjlENjdGOURFNURCNzA1NzhCRkRCMDA1N0IzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkNENUI1NjJGQUVEOUI5RDY3RjlERTVEQjcwNTc4QkZEQjAw NTdCMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDQ3MDI2YTktMGM5YS00ZDc5LWFk NjctMmM5ZGJkMzY2ZDBiLzAvRkNENUI1NjJGQUVEOUI5RDY3RjlERTVEQjcwNTc4 QkZEQjAwNTdCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ9gJUeHZsIYOtsFmLb38/9mIx8ZK7AbSeVJ C7y55IU5HpdIsMTP4DCBsxb/B7VM/5UgNYjlmJ2OWgzNTK82Z3379qbOcvYRyTFY J/k0LOYPGiGiNXhbB2qVw23Mu1prKzZRdKK6hYKO+V80BU1I3EJuqlLbHNHYGIdm h4yD271B7ICgOVesYxOWt1f2zNlKx7gxbEqUAAehZ25kTZ0qz7QioK9lL0Nb67mq PguYtvvvF/Ws8wysVeXIR+L+J7kphnDZ+sxyjy7UjD69U3yKZGuV1/M2nMtj5HT9 Z/+kD9BNo3WnG5y+YRiY5c0D6kaFAmfZuEJFna7Fh/grPZnm0BA= -----END CERTIFICATE-----Generated at Sat Aug 23 12:14:28 2025 by rpki-client