$ rpki-client -vvf repo-rpki.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.mft File: FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.mft (raw, json) Hash identifier: mwf78K8JEHcc9b9ZUf3/4aBoUGgjDqAIjolEs8CGVI4= Subject key identifier: 7E:8E:AF:54:B2:78:37:50:49:8E:D2:0B:86:CA:FA:1E:9F:B7:64:CE Authority key identifier: FC:9D:A1:A7:62:5B:27:FD:B4:66:B1:D8:A6:90:37:7E:4C:7B:CE:72 Certificate issuer: /CN=FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72 Certificate serial: 5B160ABB08F06D3D66E1440CD3C920074DF3B92F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.mft Manifest number: 04F6 Signing time: Wed 06 Aug 2025 04:01:09 +0000 Manifest this update: Wed 06 Aug 2025 03:56:09 +0000 Manifest next update: Sat 09 Aug 2025 11:48:09 +0000 Files and hashes: 1: FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.crl (hash: jTF6oQ5JJJJk7jRuEBET7a6Rs5uT1Cpw7cJvdPF2ztU=) 2: 3130332e33312e3130392e302f32342d3234203d3e20313339343430.roa (hash: iRZXCDlLv0igia0Lk/WxM1oJP6cq9J+UPskJIy0xfv8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.crl rsync://repo-rpki.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 11:48:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:16:0a:bb:08:f0:6d:3d:66:e1:44:0c:d3:c9:20:07:4d:f3:b9:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72 Validity Not Before: Aug 6 03:56:09 2025 GMT Not After : Aug 9 11:48:09 2025 GMT Subject: CN=7E8EAF54B2783750498ED20B86CAFA1E9FB764CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:55:21:09:ae:54:f3:a0:28:ec:b1:ca:88:be: 66:11:a5:76:1c:61:56:e3:80:4a:20:72:33:11:58: 16:ec:d9:56:4a:17:b2:fa:67:48:af:c8:f2:f9:3d: 55:d8:ef:ab:04:a4:cc:92:6c:44:46:45:90:70:ef: b8:74:13:73:3f:71:39:ff:a3:db:ee:0c:69:73:b9: b5:09:e3:cd:24:81:3e:89:47:a8:33:ca:f7:25:06: ad:e2:cd:dc:08:69:29:4f:0c:42:df:6f:90:6b:45: cf:fd:94:84:e4:6e:03:3b:98:5a:de:0e:36:f7:35: 73:37:ba:6a:2b:ac:77:1f:3f:7f:5f:e4:ea:ab:c1: 3c:1e:a6:0d:e6:71:b1:f3:3d:55:4c:e9:d7:ad:f6: bf:9f:4c:80:de:66:19:43:c1:76:32:38:47:9c:15: a0:59:6d:02:2b:4d:4a:74:b2:a8:50:7d:ab:25:70: 84:80:0b:d8:0d:9f:4b:38:d6:ed:99:b9:7d:11:a8: 47:7f:84:68:54:a5:e0:f4:94:86:82:07:8b:3a:f0: 9e:3b:ed:3a:27:28:b0:6f:51:f3:45:08:0e:3b:f3: 3d:a6:6c:df:00:f5:a7:c9:ba:0c:cf:b9:65:74:b2: 7e:8c:40:9c:c0:58:52:40:79:b2:03:95:24:6d:c7: 2d:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:8E:AF:54:B2:78:37:50:49:8E:D2:0B:86:CA:FA:1E:9F:B7:64:CE X509v3 Authority Key Identifier: keyid:FC:9D:A1:A7:62:5B:27:FD:B4:66:B1:D8:A6:90:37:7E:4C:7B:CE:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:ab:21:1b:4e:3d:50:0c:12:c9:23:55:06:e1:7b:37:0b:cd: fa:0d:e2:fe:a2:02:bd:2f:84:79:fb:e0:b5:bb:43:51:0e:c0: f3:74:e4:91:31:dd:9d:d2:45:b6:59:6d:cf:5f:87:32:ca:d1: f1:c5:f1:90:ff:a4:65:0b:77:6f:ca:e7:a8:c6:5f:95:90:75: 26:66:11:01:26:e0:6d:7f:ff:bb:ca:a5:12:0e:92:5e:05:16: 0e:8b:81:92:d8:1e:4b:ef:a7:55:c9:d0:8b:e2:85:aa:33:fa: 22:f1:ff:29:0b:c9:c7:91:bd:8f:04:bd:d5:60:d6:b3:20:ca: 48:c5:d3:29:cc:04:6e:7f:7e:fd:bf:81:b2:42:87:78:cf:20: ad:b7:fc:77:6f:e3:0b:f8:94:20:7f:87:a7:13:67:89:63:fe: c6:ee:7c:01:33:be:8c:c9:86:ef:ab:00:bc:46:d8:9a:44:94: 2b:7a:07:86:68:26:02:bf:fc:94:eb:8e:aa:f8:91:ac:d4:0a: 72:05:9a:48:a3:de:d5:18:9a:f4:5e:d6:3e:dc:f5:fd:68:5c: 58:f8:79:2f:02:20:5c:cf:cb:4d:b6:08:c0:14:99:07:a1:06: 28:61:a5:48:6f:5c:31:58:a3:31:6a:e4:10:19:a2:68:82:8c: 2b:8d:de:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWxYKuwjwbT1m4UQM08kgB03zuS8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkM5REExQTc2MjVCMjdGREI0NjZCMUQ4QTY5MDM3N0U0 QzdCQ0U3MjAeFw0yNTA4MDYwMzU2MDlaFw0yNTA4MDkxMTQ4MDlaMDMxMTAvBgNV BAMTKDdFOEVBRjU0QjI3ODM3NTA0OThFRDIwQjg2Q0FGQTFFOUZCNzY0Q0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLVSEJrlTzoCjsscqIvmYRpXYc YVbjgEogcjMRWBbs2VZKF7L6Z0ivyPL5PVXY76sEpMySbERGRZBw77h0E3M/cTn/ o9vuDGlzubUJ480kgT6JR6gzyvclBq3izdwIaSlPDELfb5BrRc/9lITkbgM7mFre Djb3NXM3umorrHcfP39f5OqrwTwepg3mcbHzPVVM6det9r+fTIDeZhlDwXYyOEec FaBZbQIrTUp0sqhQfaslcISAC9gNn0s41u2ZuX0RqEd/hGhUpeD0lIaCB4s68J47 7TonKLBvUfNFCA478z2mbN8A9afJugzPuWV0sn6MQJzAWFJAebIDlSRtxy0TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfo6vVLJ4N1BJjtILhsr6Hp+3ZM4wHwYDVR0j BBgwFoAU/J2hp2JbJ/20ZrHYppA3fkx7znIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZjZhYTMxYS1kZDBkLTRjMTAtYjVkZC1iMWE4M2ZhNTc3NjMvMC9GQzlEQTFBNzYy NUIyN0ZEQjQ2NkIxRDhBNjkwMzc3RTRDN0JDRTcyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkM5REExQTc2MjVCMjdGREI0NjZCMUQ4QTY5MDM3N0U0QzdC Q0U3Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGY2YWEzMWEtZGQwZC00YzEwLWI1 ZGQtYjFhODNmYTU3NzYzLzAvRkM5REExQTc2MjVCMjdGREI0NjZCMUQ4QTY5MDM3 N0U0QzdCQ0U3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACOrIRtOPVAMEskjVQbhezcLzfoN4v6iAr0v hHn74LW7Q1EOwPN05JEx3Z3SRbZZbc9fhzLK0fHF8ZD/pGULd2/K56jGX5WQdSZm EQEm4G1//7vKpRIOkl4FFg6LgZLYHkvvp1XJ0Ivihaoz+iLx/ykLyceRvY8EvdVg 1rMgykjF0ynMBG5/fv2/gbJCh3jPIK23/Hdv4wv4lCB/h6cTZ4lj/sbufAEzvozJ hu+rALxG2JpElCt6B4ZoJgK//JTrjqr4kazUCnIFmkij3tUYmvRe1j7c9f1oXFj4 eS8CIFzPy022CMAUmQehBihhpUhvXDFYozFq5BAZomiCjCuN3sI= -----END CERTIFICATE-----Generated at Wed Aug 6 16:04:22 2025 by rpki-client