$ rpki-client -vvf repo-rpki.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.mft File: FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.mft (raw, json) Hash identifier: PAZ3Hdi+9zHF8CBZENaDpRDEFNsBNF9bSo7m5zK/Tt0= Subject key identifier: E6:53:CA:DA:98:75:39:22:39:D2:D7:97:3F:6B:44:B6:7B:E7:2D:56 Authority key identifier: FC:D5:B5:62:FA:ED:9B:9D:67:F9:DE:5D:B7:05:78:BF:DB:00:57:B3 Certificate issuer: /CN=FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3 Certificate serial: 1E701ADF714A897AB3DA3483F5EC4BDEE7962952 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.mft Manifest number: 0323 Signing time: Thu 07 Aug 2025 11:31:10 +0000 Manifest this update: Thu 07 Aug 2025 11:26:10 +0000 Manifest next update: Sun 10 Aug 2025 22:19:10 +0000 Files and hashes: 1: 3130332e3135312e3134302e302f32332d3234203d3e20313430343137.roa (hash: maLwNGdhj2YMExFHAn5+1Sop9522GuyaLGRVR2YiAsA=) 2: FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.crl (hash: CaWjUfuM7hZ/fJ4AGdclF3Qcifxwpg/grCIO89GaBw0=) 3: 3130332e3135312e3134302e302f32332d3233203d3e20313430343137.roa (hash: 8NA8ztqKmdQKSo6VJIi8+Ky4DaNAGzE3fau0y6GTEzI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.crl rsync://repo-rpki.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 22:19:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:70:1a:df:71:4a:89:7a:b3:da:34:83:f5:ec:4b:de:e7:96:29:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3 Validity Not Before: Aug 7 11:26:10 2025 GMT Not After : Aug 10 22:19:10 2025 GMT Subject: CN=E653CADA9875392239D2D7973F6B44B67BE72D56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:89:a3:1c:d9:15:e5:b9:1b:bd:31:47:db:b9: 49:4b:07:5b:99:3a:91:de:70:bd:1e:17:74:c9:0b: 7e:90:a1:d1:23:84:86:4e:fe:f9:57:f6:b1:c3:84: d9:29:da:86:31:f6:4a:cd:0a:74:4e:53:58:43:93: 25:31:d8:f4:9f:f1:3e:17:46:e7:05:69:7c:bf:42: bb:de:7c:f9:30:3f:d9:17:dc:78:86:03:33:e9:d1: 5d:95:e5:9c:f4:46:17:92:8e:dd:65:0b:23:5c:f0: 87:a2:dd:54:93:02:32:c0:74:7f:83:b9:5c:d8:39: d0:bf:a5:ee:d9:10:10:d9:56:75:99:12:08:cb:a5: 23:93:ff:6e:45:b8:ed:a9:d4:05:45:dc:6b:a2:fd: 91:7c:c2:ab:93:43:62:f8:97:20:3f:71:94:ef:bb: f9:18:43:62:d2:01:93:94:a2:d4:f3:b3:27:45:8a: 8b:6e:e0:bd:87:5c:db:47:60:20:15:cf:4c:1e:a1: f7:c4:c3:ef:84:51:d7:05:b4:d9:a6:67:48:38:8e: 38:0e:7e:eb:38:91:51:20:bd:16:78:f2:a1:8a:f3: 8c:8d:8c:75:88:12:8f:68:f2:2f:c2:1a:36:9a:81: 0b:13:f1:4d:23:5c:1d:35:e0:39:a3:c2:d4:4c:6b: c1:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:53:CA:DA:98:75:39:22:39:D2:D7:97:3F:6B:44:B6:7B:E7:2D:56 X509v3 Authority Key Identifier: keyid:FC:D5:B5:62:FA:ED:9B:9D:67:F9:DE:5D:B7:05:78:BF:DB:00:57:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:2b:98:8c:48:f6:c6:69:04:0e:55:9e:c5:c3:d2:50:ee:10: e4:9c:04:35:e7:fd:18:ef:18:e8:e4:0e:d7:aa:d9:17:09:89: 5d:03:1d:0c:1c:83:31:1b:d3:fc:d5:f0:b5:d8:9f:c6:7c:70: 83:3e:6e:53:f8:b5:d3:06:be:bb:09:a7:b3:f6:f1:f5:3a:33: dc:f9:fd:1b:82:61:4d:8e:58:06:bf:7c:03:67:f8:b7:40:78: 34:19:73:4c:a9:13:88:75:6f:6f:e8:86:21:60:e2:84:49:24: 70:80:7f:c5:82:90:cc:25:b0:bb:7f:ed:aa:5a:72:05:97:8d: 2b:7a:95:1a:6c:cc:de:f3:a2:43:0e:ac:a9:06:95:0b:64:e6: c5:f1:fa:2b:8a:b6:b4:6f:e2:de:b2:b2:96:89:57:a5:a7:11: 30:2e:83:f6:fe:7a:6f:58:42:a6:d4:f4:88:27:95:af:af:c0: c4:7e:50:b2:67:0a:27:e2:dd:2f:4e:d5:da:45:21:d4:df:7f: 4c:5f:e7:aa:d8:e4:c9:14:0b:cb:01:e6:d7:3a:84:4c:12:37: 7e:52:dc:7f:1a:12:85:e0:2f:45:11:9c:0b:41:08:e8:b6:a4: 46:ba:3c:6e:19:d0:43:44:ab:56:e3:b2:b5:44:7b:56:33:48: 23:fc:f8:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHnAa33FKiXqz2jSD9exL3ueWKVIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkNENUI1NjJGQUVEOUI5RDY3RjlERTVEQjcwNTc4QkZE QjAwNTdCMzAeFw0yNTA4MDcxMTI2MTBaFw0yNTA4MTAyMjE5MTBaMDMxMTAvBgNV BAMTKEU2NTNDQURBOTg3NTM5MjIzOUQyRDc5NzNGNkI0NEI2N0JFNzJENTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1iaMc2RXluRu9MUfbuUlLB1uZ OpHecL0eF3TJC36QodEjhIZO/vlX9rHDhNkp2oYx9krNCnROU1hDkyUx2PSf8T4X RucFaXy/QrvefPkwP9kX3HiGAzPp0V2V5Zz0RheSjt1lCyNc8Iei3VSTAjLAdH+D uVzYOdC/pe7ZEBDZVnWZEgjLpSOT/25FuO2p1AVF3Gui/ZF8wquTQ2L4lyA/cZTv u/kYQ2LSAZOUotTzsydFiotu4L2HXNtHYCAVz0weoffEw++EUdcFtNmmZ0g4jjgO fus4kVEgvRZ48qGK84yNjHWIEo9o8i/CGjaagQsT8U0jXB014DmjwtRMa8EDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5lPK2ph1OSI50teXP2tEtnvnLVYwHwYDVR0j BBgwFoAU/NW1Yvrtm51n+d5dtwV4v9sAV7MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NDcwMjZhOS0wYzlhLTRkNzktYWQ2Ny0yYzlkYmQzNjZkMGIvMC9GQ0Q1QjU2MkZB RUQ5QjlENjdGOURFNURCNzA1NzhCRkRCMDA1N0IzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkNENUI1NjJGQUVEOUI5RDY3RjlERTVEQjcwNTc4QkZEQjAw NTdCMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDQ3MDI2YTktMGM5YS00ZDc5LWFk NjctMmM5ZGJkMzY2ZDBiLzAvRkNENUI1NjJGQUVEOUI5RDY3RjlERTVEQjcwNTc4 QkZEQjAwNTdCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMUrmIxI9sZpBA5VnsXD0lDuEOScBDXn/Rjv GOjkDteq2RcJiV0DHQwcgzEb0/zV8LXYn8Z8cIM+blP4tdMGvrsJp7P28fU6M9z5 /RuCYU2OWAa/fANn+LdAeDQZc0ypE4h1b2/ohiFg4oRJJHCAf8WCkMwlsLt/7apa cgWXjSt6lRpszN7zokMOrKkGlQtk5sXx+iuKtrRv4t6yspaJV6WnETAug/b+em9Y QqbU9Ignla+vwMR+ULJnCifi3S9O1dpFIdTff0xf56rY5MkUC8sB5tc6hEwSN35S 3H8aEoXgL0URnAtBCOi2pEa6PG4Z0ENEq1bjsrVEe1YzSCP8+BY= -----END CERTIFICATE-----Generated at Sat Aug 9 05:51:03 2025 by rpki-client