$ rpki-client -vvf repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/FED855DD505D24B6FE25BD8656297329F7EF4785.mft File: FED855DD505D24B6FE25BD8656297329F7EF4785.mft (raw, json) Hash identifier: PkmwLnc01pxrPXfDcQkx6ovgZ5CAst0QOwoFOmDPJvw= Subject key identifier: 8F:75:B7:DD:7A:52:C7:1B:E5:05:90:06:C3:7C:54:C2:88:C2:6C:CD Authority key identifier: FE:D8:55:DD:50:5D:24:B6:FE:25:BD:86:56:29:73:29:F7:EF:47:85 Certificate issuer: /CN=FED855DD505D24B6FE25BD8656297329F7EF4785 Certificate serial: 62152264A9DC17F0080E54BAFA0DC2247272ED6E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FED855DD505D24B6FE25BD8656297329F7EF4785.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/FED855DD505D24B6FE25BD8656297329F7EF4785.mft Manifest number: 0443 Signing time: Mon 28 Apr 2025 23:31:22 +0000 Manifest this update: Mon 28 Apr 2025 23:26:22 +0000 Manifest next update: Fri 02 May 2025 01:56:22 +0000 Files and hashes: 1: FED855DD505D24B6FE25BD8656297329F7EF4785.crl (hash: LTLh8c14gXftMki+7zesmWzU0JpkOIiVaOUkkVCgn6s=) 2: 3130332e3130352e3133312e302f32342d3234203d3e203137373237.roa (hash: 7zla6i/CdhAJ+rkrr0QnJT3TEbat42oScFtFbp306GQ=) 3: 3130332e3130352e3133302e302f32342d3234203d3e203137373237.roa (hash: XaJkhpMWFfQiHoigSzAOeB9OLJw8Q/0siNpjbvDEMi4=) 4: 3130332e3130352e3132382e302f32342d3234203d3e203137373237.roa (hash: M4514PXfJTPhQt4OlK6IndpXXY1NhEUELHDBA5WVyuc=) 5: 3130332e3130352e3132382e302f32322d3232203d3e203137373237.roa (hash: bF3yNWnrobMt6M6WVmO7fz+aU3HM2Cfravonu1UTCBk=) 6: 3130332e3130352e3132392e302f32342d3234203d3e203137373237.roa (hash: lJMQNYucnJrPY3dSbvBo/L6VOBHJNLkr/8+rBT1rHAo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/FED855DD505D24B6FE25BD8656297329F7EF4785.crl rsync://repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/FED855DD505D24B6FE25BD8656297329F7EF4785.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FED855DD505D24B6FE25BD8656297329F7EF4785.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:56:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:15:22:64:a9:dc:17:f0:08:0e:54:ba:fa:0d:c2:24:72:72:ed:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FED855DD505D24B6FE25BD8656297329F7EF4785 Validity Not Before: Apr 28 23:26:22 2025 GMT Not After : May 2 01:56:22 2025 GMT Subject: CN=8F75B7DD7A52C71BE5059006C37C54C288C26CCD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:94:a5:5f:a6:03:7d:76:1e:e9:70:1c:69:b0: 46:f5:c3:0c:a0:86:70:be:8a:90:71:c9:df:2f:9e: af:d5:ba:78:70:03:ef:db:0b:7b:d5:2d:35:62:13: 57:2c:3a:7c:41:93:e1:09:bd:0d:76:93:cd:ae:2f: 7d:04:dd:78:98:76:b2:33:24:fd:55:6f:db:03:c7: 12:e1:ed:a7:5c:fe:d9:23:6a:28:d0:ae:0c:7a:dd: cb:3c:44:ea:ad:b3:b9:94:e2:d3:6c:8e:40:1e:98: d1:6b:6e:2d:28:51:7c:6b:b3:d6:a0:3b:33:b1:73: 58:f3:e8:29:ba:dc:fc:a7:36:6f:be:8b:f6:0e:3f: 59:d4:45:e5:80:f2:24:93:0f:20:c0:90:3b:9a:99: 3d:40:73:5e:41:77:08:0a:d7:3e:5a:65:82:59:83: e9:cd:c2:8e:db:ed:4f:73:ef:41:08:2e:d4:c8:ba: 10:06:83:b2:bb:77:dd:99:c9:9c:79:46:0d:bb:f7: c8:50:16:94:8d:1e:c6:94:b6:7e:2e:a0:11:4c:0a: fb:8f:96:64:14:df:bb:53:85:89:91:52:7f:10:d8: 15:c6:64:0c:32:26:46:b8:55:16:d9:c7:1c:7c:f3: e4:44:fc:81:aa:da:6c:4c:ae:bc:81:c9:24:58:56: ea:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:75:B7:DD:7A:52:C7:1B:E5:05:90:06:C3:7C:54:C2:88:C2:6C:CD X509v3 Authority Key Identifier: keyid:FE:D8:55:DD:50:5D:24:B6:FE:25:BD:86:56:29:73:29:F7:EF:47:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/FED855DD505D24B6FE25BD8656297329F7EF4785.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FED855DD505D24B6FE25BD8656297329F7EF4785.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/FED855DD505D24B6FE25BD8656297329F7EF4785.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ef:c7:6b:87:8a:3f:27:b2:95:ed:c0:86:72:e7:eb:0f:c2:02: eb:0a:dd:d9:03:52:cf:5d:7f:10:3a:5c:3c:83:65:cb:74:8c: cf:67:e1:2d:1e:c1:74:cf:a2:8f:78:92:f6:4a:68:b0:9f:fa: e1:13:c7:d4:39:6d:f6:56:03:ad:7d:0a:c2:cf:a4:dc:e3:1d: 06:c4:9e:69:af:ff:b2:d3:22:d7:4e:c7:a9:87:c0:ab:b6:e4: fd:03:79:bd:c4:5e:89:44:ab:64:7a:a7:27:6e:7a:ca:41:04: 23:13:83:31:87:da:c2:4d:76:b4:e2:db:0b:e4:8c:2a:b1:fd: e8:42:87:22:40:ff:2a:e1:f3:7d:ac:1d:77:cd:f4:bb:04:8e: 11:ce:71:10:d5:f0:69:aa:3c:b9:bf:c2:4f:8f:c1:69:6b:2d: 2e:ac:90:0f:d9:72:ad:e0:bf:b6:a6:c9:6f:c4:75:6f:53:9c: 87:88:e6:87:84:80:2d:f5:4d:58:6b:ad:f2:eb:88:c3:e8:de: 16:47:85:9d:81:fb:ca:a0:35:33:ca:2c:6f:8d:03:65:a4:c4: 77:a1:b2:0b:0c:d9:e3:a1:e9:8c:fd:16:50:97:a3:d7:5a:1c: 1d:de:27:0b:55:98:b9:78:bd:ac:5d:22:72:a2:75:60:aa:3b: df:f5:24:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYhUiZKncF/AIDlS6+g3CJHJy7W4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkVEODU1REQ1MDVEMjRCNkZFMjVCRDg2NTYyOTczMjlG N0VGNDc4NTAeFw0yNTA0MjgyMzI2MjJaFw0yNTA1MDIwMTU2MjJaMDMxMTAvBgNV BAMTKDhGNzVCN0REN0E1MkM3MUJFNTA1OTAwNkMzN0M1NEMyODhDMjZDQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwlKVfpgN9dh7pcBxpsEb1wwyg hnC+ipBxyd8vnq/VunhwA+/bC3vVLTViE1csOnxBk+EJvQ12k82uL30E3XiYdrIz JP1Vb9sDxxLh7adc/tkjaijQrgx63cs8ROqts7mU4tNsjkAemNFrbi0oUXxrs9ag OzOxc1jz6Cm63PynNm++i/YOP1nUReWA8iSTDyDAkDuamT1Ac15BdwgK1z5aZYJZ g+nNwo7b7U9z70EILtTIuhAGg7K7d92ZyZx5Rg2798hQFpSNHsaUtn4uoBFMCvuP lmQU37tThYmRUn8Q2BXGZAwyJka4VRbZxxx88+RE/IGq2mxMrryBySRYVurlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj3W33XpSxxvlBZAGw3xUwojCbM0wHwYDVR0j BBgwFoAU/thV3VBdJLb+Jb2GVilzKffvR4UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDYxZDdhNy1hMTFlLTQwMGItOTE3MC1jNzk3ZWQ4OGQ3MDIvMC9GRUQ4NTVERDUw NUQyNEI2RkUyNUJEODY1NjI5NzMyOUY3RUY0Nzg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkVEODU1REQ1MDVEMjRCNkZFMjVCRDg2NTYyOTczMjlGN0VG NDc4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQ2MWQ3YTctYTExZS00MDBiLTkx NzAtYzc5N2VkODhkNzAyLzAvRkVEODU1REQ1MDVEMjRCNkZFMjVCRDg2NTYyOTcz MjlGN0VGNDc4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAO/Ha4eKPyeyle3AhnLn6w/CAusK3dkDUs9d fxA6XDyDZct0jM9n4S0ewXTPoo94kvZKaLCf+uETx9Q5bfZWA619CsLPpNzjHQbE nmmv/7LTItdOx6mHwKu25P0Deb3EXolEq2R6pyduespBBCMTgzGH2sJNdrTi2wvk jCqx/ehChyJA/yrh832sHXfN9LsEjhHOcRDV8GmqPLm/wk+PwWlrLS6skA/Zcq3g v7amyW/EdW9TnIeI5oeEgC31TVhrrfLriMPo3hZHhZ2B+8qgNTPKLG+NA2WkxHeh sgsM2eOh6Yz9FlCXo9daHB3eJwtVmLl4vaxdInKidWCqO9/1JLw= -----END CERTIFICATE-----Generated at Tue Apr 29 12:48:31 2025 by rpki-client