$ rpki-client -vvf repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.mft File: FC646066A689B77054AF95653FA324395357E6A3.mft (raw, json) Hash identifier: VdUJ4SuJJV3Hcqqq7qeWKGRoM4drrAz2b1wKhchUbCg= Subject key identifier: 1A:AA:AF:98:C5:64:05:12:96:88:E4:2B:82:11:EC:EF:3A:1C:BF:6D Authority key identifier: FC:64:60:66:A6:89:B7:70:54:AF:95:65:3F:A3:24:39:53:57:E6:A3 Certificate issuer: /CN=FC646066A689B77054AF95653FA324395357E6A3 Certificate serial: 38C2B377028F7040F0CA4603229976C1DF2BB4B5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC646066A689B77054AF95653FA324395357E6A3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.mft Manifest number: 051F Signing time: Sun 02 Nov 2025 09:02:12 +0000 Manifest this update: Sun 02 Nov 2025 08:57:12 +0000 Manifest next update: Wed 05 Nov 2025 13:30:12 +0000 Files and hashes: 1: FC646066A689B77054AF95653FA324395357E6A3.crl (hash: 9xTIh6R147ZGWIC12wsFYEi4hGovgdvrrDEUBp/Hhl8=) 2: 3130332e31312e39362e302f32322d3234203d3e203535363533.roa (hash: PVQdneK9Q2r+2YuMkyuS3S7JvDEOimiQ6kS5G4qY3D8=) 3: 3130332e3235342e3132362e302f32332d3234203d3e203535363533.roa (hash: 9BxarKCax6xXzwA7sCkwW9bstNPy4ZEaa9LRlsVppIQ=) 4: 31342e3130322e3135322e302f32322d3234203d3e203535363533.roa (hash: tcAOfelZsfvkpX9bUklTUsOMqUIe7iMnYq8XrY6rniM=) 5: 3230322e35322e31322e302f32322d3234203d3e203535363533.roa (hash: r4N7YVGjSR/vf/OS/81YrBx8jNMdTo+vkJbDS2Aeqlg=) 6: 3230322e31302e36332e302f32342d3234203d3e203535363533.roa (hash: 3x/TagzWw9AEnitF9/BKz1IoUShxY7ix8DtkXTWs+vs=) 7: 323430323a633330303a3a2f33322d3438203d3e203535363533.roa (hash: bGPK4/XEobq1bk7eW0IqEOt5RrHUWnGxVvGe+M2MWVI=) 8: 34332e3234392e3134302e302f32322d3234203d3e203535363533.roa (hash: VXuEsrUjBUraWB5GeM4W6dfuMEU9X+IXajG+jXJX29c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.crl rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC646066A689B77054AF95653FA324395357E6A3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 13:30:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:c2:b3:77:02:8f:70:40:f0:ca:46:03:22:99:76:c1:df:2b:b4:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC646066A689B77054AF95653FA324395357E6A3 Validity Not Before: Nov 2 08:57:12 2025 GMT Not After : Nov 5 13:30:12 2025 GMT Subject: CN=1AAAAF98C56405129688E42B8211ECEF3A1CBF6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:69:ed:18:bb:7f:e7:85:40:06:8f:35:df:b5: 37:c8:42:64:55:d4:3f:44:7c:fc:09:44:e6:39:1c: 7a:9a:a2:fb:6d:2f:0f:bf:fc:2c:51:b6:6d:6b:a1: 9f:7f:33:c9:98:ef:d6:e7:35:ee:26:77:46:8d:6c: 7e:e8:39:9b:11:36:e7:22:b8:86:86:8c:26:a5:c9: cb:cf:f7:a9:4b:55:02:5e:0a:89:35:9c:69:da:87: 36:4d:5a:a4:93:e6:7b:b7:a8:ec:03:ca:13:60:aa: 14:5c:3f:de:2d:26:d6:b8:fc:62:98:89:79:f3:d9: c7:a7:f4:6a:40:39:39:cf:07:0a:4e:b8:b9:0b:5e: fb:3d:dc:5f:69:34:d8:52:48:0e:d3:83:11:41:54: 08:c3:cd:b1:4a:57:af:1a:0f:66:c7:e7:ec:b8:c8: eb:eb:7b:2e:90:82:2f:b1:e9:b4:3e:bd:44:57:c2: 0d:69:c9:15:4b:5e:fb:a2:fa:eb:87:e9:6a:b9:ba: ae:a1:3f:39:75:54:71:4a:8a:f8:ef:d8:1b:01:4f: bc:f5:25:20:7c:64:57:ab:d6:97:86:25:42:7c:a7: 57:2e:6e:b4:6f:32:d4:a2:3d:af:f7:d0:2e:66:30: 13:95:08:65:ac:b4:29:85:3b:2e:50:ca:91:0f:e4: 72:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:AA:AF:98:C5:64:05:12:96:88:E4:2B:82:11:EC:EF:3A:1C:BF:6D X509v3 Authority Key Identifier: keyid:FC:64:60:66:A6:89:B7:70:54:AF:95:65:3F:A3:24:39:53:57:E6:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC646066A689B77054AF95653FA324395357E6A3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:d5:64:6e:c7:7d:0f:74:04:bb:3d:12:9e:4a:65:75:fd:a6: 9b:a9:c8:78:b5:0b:78:86:52:b6:0c:bc:ad:c4:c4:91:2b:20: 43:a2:91:68:b6:c0:4d:a3:55:99:1f:49:f0:6d:ad:cf:7f:d7: ce:35:c0:b7:5d:ed:da:00:e9:da:71:1b:bc:0b:10:c3:d8:62: 97:c1:9e:b4:fe:dc:89:6c:87:09:b7:28:a4:06:66:25:9f:f9: 55:36:2a:4e:29:d2:9a:3d:bb:4a:e2:94:12:e5:ca:14:2c:55: 72:8a:9e:82:94:89:32:d8:ae:c3:16:d7:25:6d:88:c6:0c:aa: 29:9b:b6:30:f1:54:d0:a7:d5:a0:ce:d0:4b:f0:85:f6:ea:1e: d8:31:92:32:2e:74:81:e1:6a:18:22:c1:c9:40:c7:70:ba:4b: 26:fa:35:a9:05:fd:55:d8:a9:bf:19:cf:93:85:75:75:f8:92: 9c:c6:85:c5:d9:7c:f0:6a:76:82:45:f9:f7:83:63:27:6a:c3: f8:b1:15:38:4b:77:53:00:de:ae:cb:d2:c5:0f:00:64:9a:3b: 85:7c:b6:c7:22:7a:85:b9:4b:ed:cf:cf:53:9e:6c:97:e0:52: 5e:53:ff:19:1f:da:0c:50:78:ae:8c:70:c0:59:02:f0:1e:83: e5:4a:65:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOMKzdwKPcEDwykYDIpl2wd8rtLUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkM2NDYwNjZBNjg5Qjc3MDU0QUY5NTY1M0ZBMzI0Mzk1 MzU3RTZBMzAeFw0yNTExMDIwODU3MTJaFw0yNTExMDUxMzMwMTJaMDMxMTAvBgNV BAMTKDFBQUFBRjk4QzU2NDA1MTI5Njg4RTQyQjgyMTFFQ0VGM0ExQ0JGNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzae0Yu3/nhUAGjzXftTfIQmRV 1D9EfPwJROY5HHqaovttLw+//CxRtm1roZ9/M8mY79bnNe4md0aNbH7oOZsRNuci uIaGjCalycvP96lLVQJeCok1nGnahzZNWqST5nu3qOwDyhNgqhRcP94tJta4/GKY iXnz2cen9GpAOTnPBwpOuLkLXvs93F9pNNhSSA7TgxFBVAjDzbFKV68aD2bH5+y4 yOvrey6Qgi+x6bQ+vURXwg1pyRVLXvui+uuH6Wq5uq6hPzl1VHFKivjv2BsBT7z1 JSB8ZFer1peGJUJ8p1cubrRvMtSiPa/30C5mMBOVCGWstCmFOy5QypEP5HKBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGqqvmMVkBRKWiOQrghHs7zocv20wHwYDVR0j BBgwFoAU/GRgZqaJt3BUr5VlP6MkOVNX5qMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OTc0NjVlMy03OGEwLTQ5NjUtYWUxNC1lNGNiNGQwZmMxODUvMC9GQzY0NjA2NkE2 ODlCNzcwNTRBRjk1NjUzRkEzMjQzOTUzNTdFNkEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkM2NDYwNjZBNjg5Qjc3MDU0QUY5NTY1M0ZBMzI0Mzk1MzU3 RTZBMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzk3NDY1ZTMtNzhhMC00OTY1LWFl MTQtZTRjYjRkMGZjMTg1LzAvRkM2NDYwNjZBNjg5Qjc3MDU0QUY5NTY1M0ZBMzI0 Mzk1MzU3RTZBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ3VZG7HfQ90BLs9Ep5KZXX9ppupyHi1C3iG UrYMvK3ExJErIEOikWi2wE2jVZkfSfBtrc9/1841wLdd7doA6dpxG7wLEMPYYpfB nrT+3Ilshwm3KKQGZiWf+VU2Kk4p0po9u0rilBLlyhQsVXKKnoKUiTLYrsMW1yVt iMYMqimbtjDxVNCn1aDO0EvwhfbqHtgxkjIudIHhahgiwclAx3C6Syb6NakF/VXY qb8Zz5OFdXX4kpzGhcXZfPBqdoJF+feDYydqw/ixFThLd1MA3q7L0sUPAGSaO4V8 tscieoW5S+3Pz1OebJfgUl5T/xkf2gxQeK6McMBZAvAeg+VKZaU= -----END CERTIFICATE-----Generated at Tue Nov 4 02:20:29 2025 by rpki-client