$ rpki-client -vvf repo-rpki.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.mft File: FC4F8762524C3EBF98126E5F579CCB30C37EEF63.mft (raw, json) Hash identifier: yaChPqYrLxe73fjFSx/li63K3CcGguq2JT5nl0GIH7g= Subject key identifier: 0A:7E:39:C3:12:CF:06:BA:AB:62:02:0C:FC:DB:1A:23:CA:A9:7D:0E Authority key identifier: FC:4F:87:62:52:4C:3E:BF:98:12:6E:5F:57:9C:CB:30:C3:7E:EF:63 Certificate issuer: /CN=FC4F8762524C3EBF98126E5F579CCB30C37EEF63 Certificate serial: 1288FE23561F4E89623526D42044A508BBFEB17E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.cer Subject info access: rsync://repo-rpki.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.mft Manifest number: 0100 Signing time: Thu 07 Aug 2025 01:10:39 +0000 Manifest this update: Thu 07 Aug 2025 01:05:39 +0000 Manifest next update: Sun 10 Aug 2025 10:15:39 +0000 Files and hashes: 1: 323030313a6466373a616630303a3a2f34382d3438203d3e20313338313432.roa (hash: +DXbNG3+5DIfVUdd5cKU3zcHabiuNmOrVbbKp3YlrN4=) 2: FC4F8762524C3EBF98126E5F579CCB30C37EEF63.crl (hash: /+gUz90YMNdhk9Oru1GlCBIk1J8kv/ImErc1gNC513E=) 3: 3130332e3133342e31362e302f32342d3234203d3e20313338313432.roa (hash: 8FJnKt5CgklUKcuR3KEOgR9pFXHp2pdnQAzYXqQX2Ag=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.crl rsync://repo-rpki.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 10:15:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:88:fe:23:56:1f:4e:89:62:35:26:d4:20:44:a5:08:bb:fe:b1:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC4F8762524C3EBF98126E5F579CCB30C37EEF63 Validity Not Before: Aug 7 01:05:39 2025 GMT Not After : Aug 10 10:15:39 2025 GMT Subject: CN=0A7E39C312CF06BAAB62020CFCDB1A23CAA97D0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f1:64:29:c6:7c:ed:8f:85:a8:8c:b6:6d:7c: 64:0f:e1:a9:78:b4:de:37:8a:0d:39:55:03:62:16: 88:20:fd:41:6e:98:01:bd:94:ff:a7:c6:19:b3:23: df:73:68:96:db:73:75:ef:3e:75:54:b3:bf:5a:7e: 00:d8:91:dd:e5:a4:35:8b:d5:f0:c7:b2:74:6b:06: 2a:59:85:82:a0:de:fd:89:61:d2:60:41:69:d2:e9: ff:b6:63:7f:73:09:40:24:c6:66:63:bd:40:8c:c5: 8d:3c:8c:b5:e8:f2:37:6c:dc:f4:90:d0:4f:aa:83: f4:11:b3:70:8c:f9:05:2f:e6:fd:55:60:ae:61:a7: 13:3a:d3:be:bd:d7:79:6b:01:4a:3f:62:fe:83:8f: 1d:a2:dc:48:3d:34:0f:28:23:ab:91:8c:22:4f:cd: cb:88:73:6e:56:0f:56:e7:45:24:40:f5:a6:12:7d: 9f:c9:aa:14:f7:b2:de:91:e1:9a:5d:06:68:8b:c7: d4:2b:c5:82:a8:bf:23:ef:0d:0a:c6:3a:df:4c:8d: 6a:0b:53:14:0a:94:dd:52:7a:a5:83:27:af:4c:fd: 54:84:ee:c7:7c:23:24:52:2d:98:3d:a6:43:4f:03: cd:be:2e:53:f9:0f:e8:b9:18:c6:e1:cc:c3:87:c6: 29:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:7E:39:C3:12:CF:06:BA:AB:62:02:0C:FC:DB:1A:23:CA:A9:7D:0E X509v3 Authority Key Identifier: keyid:FC:4F:87:62:52:4C:3E:BF:98:12:6E:5F:57:9C:CB:30:C3:7E:EF:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:aa:bc:98:93:10:9d:55:55:8f:bb:33:c7:4b:2f:e3:da:88: 95:2d:29:04:1f:06:7f:d3:df:90:3f:93:bc:e2:7d:d2:40:3b: af:eb:69:1f:05:cd:9d:96:22:98:52:f4:78:16:6c:13:9f:61: 52:40:d4:69:ec:db:2e:2e:fb:03:44:66:76:9d:c3:f5:c7:d9: 93:6a:cb:48:31:28:50:f1:39:80:6c:7d:25:53:77:01:99:35: 96:4a:45:bb:95:1f:59:69:a5:b4:f4:64:97:d6:f2:8d:d4:9c: 97:d0:13:6e:39:13:85:1a:a9:aa:53:8e:30:9b:94:53:9b:cc: 40:e2:ad:7c:b2:a5:8d:a6:78:c9:61:19:4b:e0:ab:c3:26:b5: 1f:b9:be:00:ed:fb:ac:40:f5:b3:0c:ed:7b:37:34:16:53:86: 10:bc:04:e3:ab:21:f9:2e:37:2d:cc:54:45:02:b9:c5:e4:a4: 77:3b:2d:5c:d0:03:0a:2a:48:52:f3:27:7c:c1:c3:a8:37:1f: 82:fe:81:38:f9:9a:8d:fb:ec:60:1c:72:a5:81:28:75:ed:29: 57:b1:41:23:c3:bb:14:2e:3d:a9:2d:f9:4a:be:66:7f:51:39: 54:97:52:8b:db:2e:b1:54:15:1f:8c:fe:99:db:50:c1:21:95: 35:67:59:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEoj+I1YfToliNSbUIESlCLv+sX4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkM0Rjg3NjI1MjRDM0VCRjk4MTI2RTVGNTc5Q0NCMzBD MzdFRUY2MzAeFw0yNTA4MDcwMTA1MzlaFw0yNTA4MTAxMDE1MzlaMDMxMTAvBgNV BAMTKDBBN0UzOUMzMTJDRjA2QkFBQjYyMDIwQ0ZDREIxQTIzQ0FBOTdEMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM8WQpxnztj4WojLZtfGQP4al4 tN43ig05VQNiFogg/UFumAG9lP+nxhmzI99zaJbbc3XvPnVUs79afgDYkd3lpDWL 1fDHsnRrBipZhYKg3v2JYdJgQWnS6f+2Y39zCUAkxmZjvUCMxY08jLXo8jds3PSQ 0E+qg/QRs3CM+QUv5v1VYK5hpxM6076913lrAUo/Yv6Djx2i3Eg9NA8oI6uRjCJP zcuIc25WD1bnRSRA9aYSfZ/JqhT3st6R4ZpdBmiLx9QrxYKovyPvDQrGOt9MjWoL UxQKlN1SeqWDJ69M/VSE7sd8IyRSLZg9pkNPA82+LlP5D+i5GMbhzMOHxim7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCn45wxLPBrqrYgIM/NsaI8qpfQ4wHwYDVR0j BBgwFoAU/E+HYlJMPr+YEm5fV5zLMMN+72MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZTVhYTkzZC03ODdiLTRhMTctODdkMC03ZWY0MWIwZjJkZWYvMC9GQzRGODc2MjUy NEMzRUJGOTgxMjZFNUY1NzlDQ0IzMEMzN0VFRjYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkM0Rjg3NjI1MjRDM0VCRjk4MTI2RTVGNTc5Q0NCMzBDMzdF RUY2My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmU1YWE5M2QtNzg3Yi00YTE3LTg3 ZDAtN2VmNDFiMGYyZGVmLzAvRkM0Rjg3NjI1MjRDM0VCRjk4MTI2RTVGNTc5Q0NC MzBDMzdFRUY2My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGuqvJiTEJ1VVY+7M8dLL+PaiJUtKQQfBn/T 35A/k7zifdJAO6/raR8FzZ2WIphS9HgWbBOfYVJA1Gns2y4u+wNEZnadw/XH2ZNq y0gxKFDxOYBsfSVTdwGZNZZKRbuVH1lppbT0ZJfW8o3UnJfQE245E4UaqapTjjCb lFObzEDirXyypY2meMlhGUvgq8MmtR+5vgDt+6xA9bMM7Xs3NBZThhC8BOOrIfku Ny3MVEUCucXkpHc7LVzQAwoqSFLzJ3zBw6g3H4L+gTj5mo377GAccqWBKHXtKVex QSPDuxQuPakt+Uq+Zn9ROVSXUovbLrFUFR+M/pnbUMEhlTVnWQQ= -----END CERTIFICATE-----Generated at Thu Aug 7 04:24:15 2025 by rpki-client