$ rpki-client -vvf repo-rpki.idnic.net/repo/ede4719a-ace4-41f2-a070-8de3192b7f49/0/FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.mft File: FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.mft (raw, json) Hash identifier: pULA9FwltwEDrTs81SQtA2Sdtwfwyy2ZY2Wh86I7UG4= Subject key identifier: A3:E0:CD:39:53:E1:95:D0:E3:B1:96:73:CB:D0:82:E7:39:7A:B0:74 Authority key identifier: FC:31:DB:70:F7:B2:F1:7F:13:E9:2A:2E:7B:AE:55:54:79:2E:FB:BF Certificate issuer: /CN=FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF Certificate serial: 6AA5AEB1FAB61A1FC6F5B60C48D1426A394E5F61 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ede4719a-ace4-41f2-a070-8de3192b7f49/0/FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.mft Manifest number: 0514 Signing time: Mon 20 Oct 2025 04:20:43 +0000 Manifest this update: Mon 20 Oct 2025 04:15:43 +0000 Manifest next update: Thu 23 Oct 2025 08:21:43 +0000 Files and hashes: 1: 3230322e36312e39382e302f32332d3234203d3e203234353337.roa (hash: 7v+UWewpBXKuzE8AR/fYejkKyBNOrEBvR5vrqtJwA4s=) 2: FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.crl (hash: WPcMKd2ZNQaPP0f9ZfH47gh/IVrvMJoVBBn2uCPi9mg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ede4719a-ace4-41f2-a070-8de3192b7f49/0/FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.crl rsync://repo-rpki.idnic.net/repo/ede4719a-ace4-41f2-a070-8de3192b7f49/0/FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 08:21:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:a5:ae:b1:fa:b6:1a:1f:c6:f5:b6:0c:48:d1:42:6a:39:4e:5f:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF Validity Not Before: Oct 20 04:15:43 2025 GMT Not After : Oct 23 08:21:43 2025 GMT Subject: CN=A3E0CD3953E195D0E3B19673CBD082E7397AB074 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:68:ce:32:f7:33:fc:0a:e9:e9:19:4b:9c:61: 97:73:e5:a7:b4:ef:3f:02:d3:2b:ec:e7:52:d8:8f: 66:30:94:d0:65:6e:35:50:85:cf:9d:32:20:72:03: 26:31:b7:d3:86:50:96:5f:b1:b9:73:6d:5d:0e:bd: 4b:f7:2d:8a:cc:66:45:da:a4:4d:d2:74:c1:0c:34: 0d:fa:92:ac:b6:6d:b1:07:47:ce:9b:46:10:e4:2c: a7:64:42:dc:43:f4:d9:74:37:ea:6e:86:9b:57:59: a4:e3:8e:83:73:17:07:12:7a:ca:d4:c1:7e:ef:ec: 26:4d:c6:b9:54:a8:b4:a6:1e:78:0d:64:3c:15:b1: 8b:c2:88:0c:fb:6d:32:93:df:9d:d5:56:c5:4b:db: d9:01:ef:3a:57:0a:86:0a:9e:f7:41:d4:20:81:5a: ef:40:c7:d8:8c:6f:39:02:b7:92:45:7c:23:86:fc: 49:85:92:77:7d:5c:a3:38:8d:70:eb:73:55:e8:08: 48:62:3a:ad:2d:30:92:fe:02:a8:20:88:89:61:44: b2:b8:57:a6:a2:82:66:bd:5b:d8:ce:83:12:1c:fa: 5e:1a:c3:c0:be:4e:6e:16:1e:96:f0:81:db:ef:c7: 4d:4b:3c:ee:d2:a1:eb:32:cd:eb:02:f7:40:71:a9: df:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:E0:CD:39:53:E1:95:D0:E3:B1:96:73:CB:D0:82:E7:39:7A:B0:74 X509v3 Authority Key Identifier: keyid:FC:31:DB:70:F7:B2:F1:7F:13:E9:2A:2E:7B:AE:55:54:79:2E:FB:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ede4719a-ace4-41f2-a070-8de3192b7f49/0/FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ede4719a-ace4-41f2-a070-8de3192b7f49/0/FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:ea:36:97:a3:86:c3:21:2a:80:ef:35:93:a7:c0:7f:64:6d: 2f:54:0e:ba:40:7b:dd:dc:45:0d:8c:44:8b:50:06:09:d3:d9: 7e:9e:10:e7:b2:77:34:81:92:21:b4:ac:fd:28:86:a4:ce:8b: fc:ac:62:d9:c6:3a:c5:7c:6a:37:d2:5f:e7:c7:09:93:5b:a7: cb:2f:5f:d9:74:29:af:4f:7d:7a:28:7e:7d:81:58:f4:41:79: 1c:19:39:fb:24:41:20:81:67:96:e7:6a:da:14:7d:78:5b:dc: c9:59:de:d8:e4:83:19:5b:a5:33:c9:95:5a:57:71:f9:22:6e: 5b:d9:7a:20:cd:e4:f7:5a:56:4f:37:bd:57:98:30:70:74:ff: f5:a1:13:f8:d3:c9:36:5f:31:5a:0b:63:85:f0:fd:ed:cd:0e: 9a:55:cc:53:c4:6a:88:28:ce:f8:2a:6f:b6:45:aa:7a:6f:14: 2a:8d:fb:fb:90:2b:3b:c0:d3:ba:38:45:af:5f:0e:61:d1:32: 82:92:67:94:22:57:1d:42:1a:b1:ef:ff:94:89:f4:aa:a6:f6: f0:16:60:df:f2:54:d4:2d:69:4e:60:0e:e8:6a:5f:80:4e:48: 92:96:a2:b2:6b:d2:ca:d7:cc:8a:f0:b9:34:fc:29:43:63:ed: ec:30:18:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaqWusfq2Gh/G9bYMSNFCajlOX2EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkMzMURCNzBGN0IyRjE3RjEzRTkyQTJFN0JBRTU1NTQ3 OTJFRkJCRjAeFw0yNTEwMjAwNDE1NDNaFw0yNTEwMjMwODIxNDNaMDMxMTAvBgNV BAMTKEEzRTBDRDM5NTNFMTk1RDBFM0IxOTY3M0NCRDA4MkU3Mzk3QUIwNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxaM4y9zP8CunpGUucYZdz5ae0 7z8C0yvs51LYj2YwlNBlbjVQhc+dMiByAyYxt9OGUJZfsblzbV0OvUv3LYrMZkXa pE3SdMEMNA36kqy2bbEHR86bRhDkLKdkQtxD9Nl0N+puhptXWaTjjoNzFwcSesrU wX7v7CZNxrlUqLSmHngNZDwVsYvCiAz7bTKT353VVsVL29kB7zpXCoYKnvdB1CCB Wu9Ax9iMbzkCt5JFfCOG/EmFknd9XKM4jXDrc1XoCEhiOq0tMJL+AqggiIlhRLK4 V6aigma9W9jOgxIc+l4aw8C+Tm4WHpbwgdvvx01LPO7SoesyzesC90Bxqd95AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUo+DNOVPhldDjsZZzy9CC5zl6sHQwHwYDVR0j BBgwFoAU/DHbcPey8X8T6Soue65VVHku+78wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZGU0NzE5YS1hY2U0LTQxZjItYTA3MC04ZGUzMTkyYjdmNDkvMC9GQzMxREI3MEY3 QjJGMTdGMTNFOTJBMkU3QkFFNTU1NDc5MkVGQkJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkMzMURCNzBGN0IyRjE3RjEzRTkyQTJFN0JBRTU1NTQ3OTJF RkJCRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWRlNDcxOWEtYWNlNC00MWYyLWEw NzAtOGRlMzE5MmI3ZjQ5LzAvRkMzMURCNzBGN0IyRjE3RjEzRTkyQTJFN0JBRTU1 NTQ3OTJFRkJCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACbqNpejhsMhKoDvNZOnwH9kbS9UDrpAe93c RQ2MRItQBgnT2X6eEOeydzSBkiG0rP0ohqTOi/ysYtnGOsV8ajfSX+fHCZNbp8sv X9l0Ka9PfXoofn2BWPRBeRwZOfskQSCBZ5bnatoUfXhb3MlZ3tjkgxlbpTPJlVpX cfkiblvZeiDN5PdaVk83vVeYMHB0//WhE/jTyTZfMVoLY4Xw/e3NDppVzFPEaogo zvgqb7ZFqnpvFCqN+/uQKzvA07o4Ra9fDmHRMoKSZ5QiVx1CGrHv/5SJ9Kqm9vAW YN/yVNQtaU5gDuhqX4BOSJKWorJr0srXzIrwuTT8KUNj7ewwGJc= -----END CERTIFICATE-----Generated at Mon Oct 20 09:44:51 2025 by rpki-client