$ rpki-client -vvf repo-rpki.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.mft File: FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.mft (raw, json) Hash identifier: waIlmWA8M7FY6tXOEuh9AQbUsMAkCGPz+/U0GPpeI5g= Subject key identifier: AC:9D:5A:26:83:20:45:BA:6D:18:6B:F2:69:49:EC:CA:6A:A9:6D:4F Authority key identifier: FC:D5:B5:62:FA:ED:9B:9D:67:F9:DE:5D:B7:05:78:BF:DB:00:57:B3 Certificate issuer: /CN=FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3 Certificate serial: 63003DFC747C0FF5D235E78E9B029EBB3FBF65CA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.mft Manifest number: 0312 Signing time: Mon 30 Jun 2025 17:41:09 +0000 Manifest this update: Mon 30 Jun 2025 17:36:09 +0000 Manifest next update: Thu 03 Jul 2025 23:38:09 +0000 Files and hashes: 1: 3130332e3135312e3134302e302f32332d3233203d3e20313430343137.roa (hash: 8NA8ztqKmdQKSo6VJIi8+Ky4DaNAGzE3fau0y6GTEzI=) 2: 3130332e3135312e3134302e302f32332d3234203d3e20313430343137.roa (hash: maLwNGdhj2YMExFHAn5+1Sop9522GuyaLGRVR2YiAsA=) 3: FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.crl (hash: MQT3Sx4Us4+gEhngNnGckuZw+W0S+OxswiuRKaf+03U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.crl rsync://repo-rpki.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 23:38:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:00:3d:fc:74:7c:0f:f5:d2:35:e7:8e:9b:02:9e:bb:3f:bf:65:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3 Validity Not Before: Jun 30 17:36:09 2025 GMT Not After : Jul 3 23:38:09 2025 GMT Subject: CN=AC9D5A26832045BA6D186BF26949ECCA6AA96D4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:01:a6:b6:a1:00:d0:91:1c:43:d1:a6:20:99: a6:f9:20:ca:eb:91:3b:3a:2c:ae:19:b4:6b:33:48: e8:7e:e8:96:13:a0:2a:54:b0:b9:1d:99:91:fd:5e: 4f:aa:ba:fb:42:12:60:f4:78:ef:2c:c6:c5:09:cf: 3e:54:bc:ba:df:5c:82:47:f3:e4:c6:6b:62:f6:88: 38:0e:d8:56:46:11:82:45:9c:de:7a:b5:35:c5:7a: 4d:cb:64:04:66:d7:fd:ca:80:61:6f:0d:60:2a:06: 4a:ed:7d:10:eb:3a:1b:23:10:ad:32:f8:82:74:99: f8:57:2a:6f:cb:56:83:6f:a5:39:eb:c3:0b:3f:84: 91:b1:4f:77:43:22:0c:c8:0d:af:05:6e:d9:06:eb: ac:57:40:0d:ad:16:a7:44:7a:6b:4c:8a:6b:d8:e3: e0:4b:89:dd:cb:ea:c8:a6:14:9c:ce:7e:d2:25:61: 09:42:f8:36:f1:21:62:5f:3e:ce:e4:db:6e:df:e7: 6d:d9:e7:aa:a8:59:4f:68:9f:6a:d3:bb:af:f2:d8: cc:a6:cc:0a:ec:bc:e3:0b:44:01:c3:08:47:7d:6f: 2b:45:79:29:cf:1c:7f:e9:74:e2:be:b2:68:62:df: a7:ab:d5:27:5e:a2:bc:c1:e4:54:e9:2d:28:f9:57: 3a:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:9D:5A:26:83:20:45:BA:6D:18:6B:F2:69:49:EC:CA:6A:A9:6D:4F X509v3 Authority Key Identifier: keyid:FC:D5:B5:62:FA:ED:9B:9D:67:F9:DE:5D:B7:05:78:BF:DB:00:57:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:c3:23:c5:45:7e:ea:53:d5:d3:2a:6c:9c:70:91:c5:23:e1: 6e:6b:fe:27:8f:af:45:04:cb:c0:21:ea:52:72:f5:3c:7d:c8: bd:9c:23:b7:d1:06:65:d8:2d:1a:8a:a0:aa:b7:b0:74:d7:50: e9:bf:31:14:89:d0:60:5a:6d:e6:8f:58:a0:17:00:2a:72:ac: 9f:36:fa:f1:22:56:4d:69:22:3b:ed:57:0d:5c:59:80:bc:a8: bf:07:97:af:43:e1:ef:0b:e3:59:fb:9d:0a:cf:f1:7f:66:c7: fa:ff:dd:b4:1d:03:47:bd:34:0d:c4:e8:9e:ec:98:ed:a9:9c: de:36:8a:63:d5:9b:3b:68:15:02:88:72:42:35:9d:14:65:ec: be:56:e4:ea:53:6c:5f:79:4c:31:45:cc:8f:61:0b:b3:c7:3f: e2:42:1d:bc:a7:a7:da:4f:4e:93:2f:d1:fc:55:02:73:0a:df: 2b:27:4e:03:90:78:3e:69:fb:9c:47:32:68:5d:31:72:fa:75: 7b:a1:33:81:cc:00:23:7d:98:4e:c3:df:04:1c:d5:6f:45:23: e1:89:1d:b5:5b:99:ca:62:fc:38:24:97:2c:69:78:0f:d8:0f: 89:ae:8a:8f:cb:c2:0e:14:dd:5e:1f:a7:ad:30:25:73:76:d2: 14:71:ce:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYwA9/HR8D/XSNeeOmwKeuz+/ZcowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkNENUI1NjJGQUVEOUI5RDY3RjlERTVEQjcwNTc4QkZE QjAwNTdCMzAeFw0yNTA2MzAxNzM2MDlaFw0yNTA3MDMyMzM4MDlaMDMxMTAvBgNV BAMTKEFDOUQ1QTI2ODMyMDQ1QkE2RDE4NkJGMjY5NDlFQ0NBNkFBOTZENEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzAaa2oQDQkRxD0aYgmab5IMrr kTs6LK4ZtGszSOh+6JYToCpUsLkdmZH9Xk+quvtCEmD0eO8sxsUJzz5UvLrfXIJH 8+TGa2L2iDgO2FZGEYJFnN56tTXFek3LZARm1/3KgGFvDWAqBkrtfRDrOhsjEK0y +IJ0mfhXKm/LVoNvpTnrwws/hJGxT3dDIgzIDa8FbtkG66xXQA2tFqdEemtMimvY 4+BLid3L6simFJzOftIlYQlC+DbxIWJfPs7k227f523Z56qoWU9on2rTu6/y2Mym zArsvOMLRAHDCEd9bytFeSnPHH/pdOK+smhi36er1SdeorzB5FTpLSj5VzpRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrJ1aJoMgRbptGGvyaUnsymqpbU8wHwYDVR0j BBgwFoAU/NW1Yvrtm51n+d5dtwV4v9sAV7MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NDcwMjZhOS0wYzlhLTRkNzktYWQ2Ny0yYzlkYmQzNjZkMGIvMC9GQ0Q1QjU2MkZB RUQ5QjlENjdGOURFNURCNzA1NzhCRkRCMDA1N0IzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkNENUI1NjJGQUVEOUI5RDY3RjlERTVEQjcwNTc4QkZEQjAw NTdCMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDQ3MDI2YTktMGM5YS00ZDc5LWFk NjctMmM5ZGJkMzY2ZDBiLzAvRkNENUI1NjJGQUVEOUI5RDY3RjlERTVEQjcwNTc4 QkZEQjAwNTdCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAErDI8VFfupT1dMqbJxwkcUj4W5r/iePr0UE y8Ah6lJy9Tx9yL2cI7fRBmXYLRqKoKq3sHTXUOm/MRSJ0GBabeaPWKAXACpyrJ82 +vEiVk1pIjvtVw1cWYC8qL8Hl69D4e8L41n7nQrP8X9mx/r/3bQdA0e9NA3E6J7s mO2pnN42imPVmztoFQKIckI1nRRl7L5W5OpTbF95TDFFzI9hC7PHP+JCHbynp9pP TpMv0fxVAnMK3ysnTgOQeD5p+5xHMmhdMXL6dXuhM4HMACN9mE7D3wQc1W9FI+GJ HbVbmcpi/DgklyxpeA/YD4muio/Lwg4U3V4fp60wJXN20hRxzt4= -----END CERTIFICATE-----Generated at Wed Jul 2 14:22:12 2025 by rpki-client