$ rpki-client -vvf repo-rpki.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.mft File: FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.mft (raw, json) Hash identifier: Vc6/Pr46lQ1Vrbr/tG56+Z3bhu6DkG2NQt8GGc+uq+U= Subject key identifier: 5F:06:8B:DC:41:35:A1:EB:27:5D:96:E7:8C:4C:83:F0:DA:BA:B3:42 Authority key identifier: FC:D5:B5:62:FA:ED:9B:9D:67:F9:DE:5D:B7:05:78:BF:DB:00:57:B3 Certificate issuer: /CN=FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3 Certificate serial: 767C8F61C611689C316FD1407F0854FB17C783FA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.mft Manifest number: 0344 Signing time: Mon 20 Oct 2025 09:31:12 +0000 Manifest this update: Mon 20 Oct 2025 09:26:12 +0000 Manifest next update: Thu 23 Oct 2025 13:10:12 +0000 Files and hashes: 1: FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.crl (hash: t7DtUkiPk8EzA5ushQJa6DSq7btBolqJXP2rm6Q3ai8=) 2: 3130332e3135312e3134302e302f32332d3234203d3e20313430343137.roa (hash: maLwNGdhj2YMExFHAn5+1Sop9522GuyaLGRVR2YiAsA=) 3: 3130332e3135312e3134302e302f32332d3233203d3e20313430343137.roa (hash: 8NA8ztqKmdQKSo6VJIi8+Ky4DaNAGzE3fau0y6GTEzI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.crl rsync://repo-rpki.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:7c:8f:61:c6:11:68:9c:31:6f:d1:40:7f:08:54:fb:17:c7:83:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3 Validity Not Before: Oct 20 09:26:12 2025 GMT Not After : Oct 23 13:10:12 2025 GMT Subject: CN=5F068BDC4135A1EB275D96E78C4C83F0DABAB342 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:2b:ee:60:d7:fe:c1:4a:6d:72:ed:df:18:56: d7:70:c5:0b:2f:25:9b:3c:51:7d:d1:23:20:f3:9c: cd:e1:1f:44:aa:b4:20:ad:7c:4c:28:9b:b9:d8:21: 66:e5:7f:2c:a4:30:b6:59:e6:72:98:ed:ce:78:41: a5:5c:9a:43:38:99:b7:c0:5b:ee:6c:46:a0:4b:20: a0:22:44:6a:94:d6:6d:47:2a:49:d7:4e:0a:48:67: ed:73:85:65:f2:aa:97:ee:12:9d:76:07:ab:21:89: 1b:85:39:e7:27:51:47:81:f9:8c:c6:a3:a7:5f:f8: 17:88:3c:01:63:25:80:40:5e:3f:59:94:a9:2c:8d: b5:9a:6d:d8:90:11:d1:a4:27:ea:29:df:eb:31:cd: ac:b6:84:72:e6:34:85:68:f0:f9:c1:7a:d2:a5:a2: 6d:e8:50:7f:ae:44:21:33:7a:0d:0e:59:30:7b:e9: d2:a9:fc:8d:27:25:c1:bc:36:d8:2a:8a:a7:64:b9: 6e:7a:d2:22:0c:bb:b1:07:0a:03:57:56:48:90:ea: b6:6f:10:ef:2e:df:d8:24:d5:6a:eb:21:09:9b:86: f1:46:9a:d3:a5:e6:90:ac:1b:15:10:b4:e4:c9:31: ba:eb:ab:8d:dc:25:6d:d6:84:fa:0b:a8:f6:04:6a: 0c:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:06:8B:DC:41:35:A1:EB:27:5D:96:E7:8C:4C:83:F0:DA:BA:B3:42 X509v3 Authority Key Identifier: keyid:FC:D5:B5:62:FA:ED:9B:9D:67:F9:DE:5D:B7:05:78:BF:DB:00:57:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:f0:3e:4a:dc:09:10:fe:0e:5f:1d:4e:fd:0a:ec:0f:eb:85: 37:60:09:9c:f9:0b:ad:16:67:1d:d9:9f:4c:89:7f:c2:90:9b: df:e8:96:db:66:d2:42:30:b1:a1:b2:1e:90:a9:e1:83:fe:06: be:9a:2b:bc:36:75:26:96:5e:75:c3:45:66:1e:b3:f0:ef:ee: 47:1f:91:25:08:4a:40:60:af:3b:a0:d9:48:0d:d2:dd:03:fc: bc:e4:96:82:c0:c0:02:39:3e:f4:c7:00:6e:25:6b:c1:53:45: 9d:3d:a7:5b:98:96:e1:7c:a2:71:3a:e0:d5:3b:52:7e:4b:35: 19:e6:a4:fe:be:36:3d:e8:b7:4e:2c:f0:22:34:14:6c:1b:8b: 72:e0:83:53:78:e2:11:58:e7:ea:72:33:72:ff:e5:b3:56:3a: f4:06:c4:43:6a:e3:a1:47:0d:4d:51:e0:88:49:75:7b:ef:a1: 92:30:e2:02:d2:65:44:64:82:33:49:eb:9b:ae:e0:09:4f:95: e7:60:d3:1b:ea:be:18:84:49:e6:a2:72:ac:9e:ab:02:aa:33: 73:f2:70:47:4a:f8:12:b7:23:cb:ec:88:3f:02:d2:74:c7:8f: 39:ae:db:42:cf:e9:92:af:5a:55:0d:8b:d0:87:a4:7c:b3:e8: bf:59:ee:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdnyPYcYRaJwxb9FAfwhU+xfHg/owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkNENUI1NjJGQUVEOUI5RDY3RjlERTVEQjcwNTc4QkZE QjAwNTdCMzAeFw0yNTEwMjAwOTI2MTJaFw0yNTEwMjMxMzEwMTJaMDMxMTAvBgNV BAMTKDVGMDY4QkRDNDEzNUExRUIyNzVEOTZFNzhDNEM4M0YwREFCQUIzNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfK+5g1/7BSm1y7d8YVtdwxQsv JZs8UX3RIyDznM3hH0SqtCCtfEwom7nYIWblfyykMLZZ5nKY7c54QaVcmkM4mbfA W+5sRqBLIKAiRGqU1m1HKknXTgpIZ+1zhWXyqpfuEp12B6shiRuFOecnUUeB+YzG o6df+BeIPAFjJYBAXj9ZlKksjbWabdiQEdGkJ+op3+sxzay2hHLmNIVo8PnBetKl om3oUH+uRCEzeg0OWTB76dKp/I0nJcG8NtgqiqdkuW560iIMu7EHCgNXVkiQ6rZv EO8u39gk1WrrIQmbhvFGmtOl5pCsGxUQtOTJMbrrq43cJW3WhPoLqPYEagwFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXwaL3EE1oesnXZbnjEyD8Nq6s0IwHwYDVR0j BBgwFoAU/NW1Yvrtm51n+d5dtwV4v9sAV7MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NDcwMjZhOS0wYzlhLTRkNzktYWQ2Ny0yYzlkYmQzNjZkMGIvMC9GQ0Q1QjU2MkZB RUQ5QjlENjdGOURFNURCNzA1NzhCRkRCMDA1N0IzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkNENUI1NjJGQUVEOUI5RDY3RjlERTVEQjcwNTc4QkZEQjAw NTdCMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDQ3MDI2YTktMGM5YS00ZDc5LWFk NjctMmM5ZGJkMzY2ZDBiLzAvRkNENUI1NjJGQUVEOUI5RDY3RjlERTVEQjcwNTc4 QkZEQjAwNTdCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAELwPkrcCRD+Dl8dTv0K7A/rhTdgCZz5C60W Zx3Zn0yJf8KQm9/olttm0kIwsaGyHpCp4YP+Br6aK7w2dSaWXnXDRWYes/Dv7kcf kSUISkBgrzug2UgN0t0D/LzkloLAwAI5PvTHAG4la8FTRZ09p1uYluF8onE64NU7 Un5LNRnmpP6+Nj3ot04s8CI0FGwbi3Lgg1N44hFY5+pyM3L/5bNWOvQGxENq46FH DU1R4IhJdXvvoZIw4gLSZURkgjNJ65uu4AlPledg0xvqvhiESeaicqyeqwKqM3Py cEdK+BK3I8vsiD8C0nTHjzmu20LP6ZKvWlUNi9CHpHyz6L9Z7go= -----END CERTIFICATE-----Generated at Mon Oct 20 20:41:05 2025 by rpki-client