$ rpki-client -vvf repo-rpki.idnic.net/repo/3cf0a77c-3928-4130-a098-b437572d722c/0/FC4AE05C1547B778063F91C4687D12E8D6978309.mft File: FC4AE05C1547B778063F91C4687D12E8D6978309.mft (raw, json) Hash identifier: e3g9ZwLgfisUriG5Hho/5vBIY4a5PQTPrmc7C3buAeQ= Subject key identifier: DB:F3:B9:E5:52:EF:09:E6:E4:11:DF:26:18:93:74:DF:FC:27:D1:73 Authority key identifier: FC:4A:E0:5C:15:47:B7:78:06:3F:91:C4:68:7D:12:E8:D6:97:83:09 Certificate issuer: /CN=FC4AE05C1547B778063F91C4687D12E8D6978309 Certificate serial: 602FDB19C9943894D10864A32DECC0A16B56EA91 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FC4AE05C1547B778063F91C4687D12E8D6978309.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3cf0a77c-3928-4130-a098-b437572d722c/0/FC4AE05C1547B778063F91C4687D12E8D6978309.mft Manifest number: F7 Signing time: Tue 04 Nov 2025 04:21:45 +0000 Manifest this update: Tue 04 Nov 2025 04:16:45 +0000 Manifest next update: Fri 07 Nov 2025 06:51:45 +0000 Files and hashes: 1: 3135372e32302e3233302e302f32332d3234203d3e20313532343331.roa (hash: zEX2zvBjt157yqeJ3lViczjWUiYCUWpG52AxWV4xz8k=) 2: FC4AE05C1547B778063F91C4687D12E8D6978309.crl (hash: qbv0QyHRC9HKWGaLbXIHx2VXNYebVrsdUofV1UbXsaY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3cf0a77c-3928-4130-a098-b437572d722c/0/FC4AE05C1547B778063F91C4687D12E8D6978309.crl rsync://repo-rpki.idnic.net/repo/3cf0a77c-3928-4130-a098-b437572d722c/0/FC4AE05C1547B778063F91C4687D12E8D6978309.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FC4AE05C1547B778063F91C4687D12E8D6978309.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 06:51:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:2f:db:19:c9:94:38:94:d1:08:64:a3:2d:ec:c0:a1:6b:56:ea:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC4AE05C1547B778063F91C4687D12E8D6978309 Validity Not Before: Nov 4 04:16:45 2025 GMT Not After : Nov 7 06:51:45 2025 GMT Subject: CN=DBF3B9E552EF09E6E411DF26189374DFFC27D173 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:8a:01:76:54:e3:8c:5a:f7:9f:00:c7:bd:2f: 77:29:f9:42:5e:18:30:27:8c:0f:4e:4d:c0:f5:71: 83:dc:d8:0f:28:21:2c:68:9d:78:c2:5e:df:6b:ac: 50:bd:fe:5b:1d:b7:5f:d4:7d:44:0b:77:82:70:35: da:d4:f9:43:22:d9:6d:dc:e8:6b:a3:93:36:ab:fa: a7:d1:d9:93:e9:f0:24:f8:3e:da:bb:83:24:50:27: 10:db:77:59:b2:ea:d8:42:7a:16:1e:79:ec:7e:91: bc:20:c4:3e:aa:df:0f:f6:8d:25:81:dd:b6:43:72: f0:8a:7c:13:a9:4f:1b:d8:fe:70:b9:29:36:69:21: 6d:59:17:be:de:91:20:12:45:4f:18:01:8b:35:a8: ce:40:ca:ce:f9:4e:65:49:2c:5d:a8:1a:af:ac:b9: 09:37:2d:df:ec:80:5f:0c:4a:84:de:9d:6f:c4:dd: 8c:13:9d:de:c1:c9:72:99:fa:a6:d7:90:4b:1b:bb: bf:bd:60:57:4c:44:32:3a:9b:83:c1:fb:a0:f5:92: 99:56:40:09:a4:cf:b1:a5:d3:2a:fe:7c:5d:5a:4f: ae:01:f3:bf:d9:71:cb:b4:67:95:c1:f4:51:b6:25: 63:4e:ac:1a:c0:66:03:d6:76:9f:54:b1:a6:9e:4f: c8:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:F3:B9:E5:52:EF:09:E6:E4:11:DF:26:18:93:74:DF:FC:27:D1:73 X509v3 Authority Key Identifier: keyid:FC:4A:E0:5C:15:47:B7:78:06:3F:91:C4:68:7D:12:E8:D6:97:83:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3cf0a77c-3928-4130-a098-b437572d722c/0/FC4AE05C1547B778063F91C4687D12E8D6978309.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FC4AE05C1547B778063F91C4687D12E8D6978309.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3cf0a77c-3928-4130-a098-b437572d722c/0/FC4AE05C1547B778063F91C4687D12E8D6978309.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:e1:89:d1:4d:e6:6b:4a:3e:11:13:32:7e:6b:a5:e3:ae:3f: 2d:ab:41:7d:a5:a1:83:66:ea:c2:63:c8:b3:7e:06:1a:e4:65: cc:2e:cd:2f:d9:a6:bc:e7:42:0f:fd:e2:d4:fd:e1:90:2f:9a: 89:fa:80:62:44:0b:b1:3a:f3:96:82:c7:0b:ca:93:93:29:90: 1e:e1:18:dd:ca:26:b2:27:ca:78:21:d7:77:99:9e:22:c4:d7: e9:72:b3:b3:ed:86:36:f0:c2:73:b0:c5:f2:70:33:9b:18:0e: db:48:be:a4:1c:c2:c9:5c:04:87:8f:98:48:a4:95:19:9a:b0: b6:0a:ba:57:65:49:8d:79:fe:ce:6d:4c:48:b7:ce:24:f1:ca: 5f:94:a7:10:a5:2e:f6:4c:bf:6e:2e:0b:de:5b:e2:51:f6:be: 29:41:63:da:52:a4:6e:bd:42:03:db:01:f3:b4:20:7b:86:b5: b9:ab:b2:08:bb:a8:e4:bf:ec:a6:1a:11:9d:62:63:13:26:7e: 32:f0:51:99:93:e9:9b:24:81:ee:82:b0:9f:ad:07:f7:a9:8f: 2c:5d:a7:53:68:5a:ee:75:62:14:d0:3a:79:13:d6:d9:e7:d5: 16:c9:d3:dd:78:77:2a:01:dc:6d:a9:07:b4:0d:6c:fb:05:f4: 82:69:a9:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYC/bGcmUOJTRCGSjLezAoWtW6pEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkM0QUUwNUMxNTQ3Qjc3ODA2M0Y5MUM0Njg3RDEyRThE Njk3ODMwOTAeFw0yNTExMDQwNDE2NDVaFw0yNTExMDcwNjUxNDVaMDMxMTAvBgNV BAMTKERCRjNCOUU1NTJFRjA5RTZFNDExREYyNjE4OTM3NERGRkMyN0QxNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKigF2VOOMWvefAMe9L3cp+UJe GDAnjA9OTcD1cYPc2A8oISxonXjCXt9rrFC9/lsdt1/UfUQLd4JwNdrU+UMi2W3c 6Gujkzar+qfR2ZPp8CT4Ptq7gyRQJxDbd1my6thCehYeeex+kbwgxD6q3w/2jSWB 3bZDcvCKfBOpTxvY/nC5KTZpIW1ZF77ekSASRU8YAYs1qM5Ays75TmVJLF2oGq+s uQk3Ld/sgF8MSoTenW/E3YwTnd7ByXKZ+qbXkEsbu7+9YFdMRDI6m4PB+6D1kplW QAmkz7Gl0yr+fF1aT64B87/Zccu0Z5XB9FG2JWNOrBrAZgPWdp9UsaaeT8hXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2/O55VLvCebkEd8mGJN03/wn0XMwHwYDVR0j BBgwFoAU/ErgXBVHt3gGP5HEaH0S6NaXgwkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Y2YwYTc3Yy0zOTI4LTQxMzAtYTA5OC1iNDM3NTcyZDcyMmMvMC9GQzRBRTA1QzE1 NDdCNzc4MDYzRjkxQzQ2ODdEMTJFOEQ2OTc4MzA5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkM0QUUwNUMxNTQ3Qjc3ODA2M0Y5MUM0Njg3RDEyRThENjk3 ODMwOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2NmMGE3N2MtMzkyOC00MTMwLWEw OTgtYjQzNzU3MmQ3MjJjLzAvRkM0QUUwNUMxNTQ3Qjc3ODA2M0Y5MUM0Njg3RDEy RThENjk3ODMwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF/hidFN5mtKPhETMn5rpeOuPy2rQX2loYNm 6sJjyLN+BhrkZcwuzS/ZprznQg/94tT94ZAvmon6gGJEC7E685aCxwvKk5MpkB7h GN3KJrInyngh13eZniLE1+lys7PthjbwwnOwxfJwM5sYDttIvqQcwslcBIePmEik lRmasLYKuldlSY15/s5tTEi3ziTxyl+UpxClLvZMv24uC95b4lH2vilBY9pSpG69 QgPbAfO0IHuGtbmrsgi7qOS/7KYaEZ1iYxMmfjLwUZmT6Zskge6CsJ+tB/epjyxd p1NoWu51YhTQOnkT1tnn1RbJ0914dyoB3G2pB7QNbPsF9IJpqds= -----END CERTIFICATE-----Generated at Tue Nov 4 23:15:35 2025 by rpki-client