$ rpki-client -vvf repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.mft File: FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.mft (raw, json) Hash identifier: bQGbu9IIYT+hHdfqO4HrndgYXBcqw73c1jPDlPQzDkg= Subject key identifier: E4:40:94:A7:56:CD:FC:E9:25:39:D7:CB:A1:27:35:40:BC:67:89:BC Authority key identifier: FB:D3:B2:8C:90:75:52:9D:EE:81:51:C4:E4:4B:0C:BC:13:FF:DA:91 Certificate issuer: /CN=FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91 Certificate serial: 4E028C857AFF266BBAA634E8922BDF16050E965F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.cer Subject info access: rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.mft Manifest number: 04CC Signing time: Sun 27 Apr 2025 20:41:12 +0000 Manifest this update: Sun 27 Apr 2025 20:36:12 +0000 Manifest next update: Thu 01 May 2025 06:44:12 +0000 Files and hashes: 1: 3130332e3139382e3132302e302f32332d3234203d3e203436303535.roa (hash: lBk+MLisEIo2PZv6+uPNgR6V2FGWrogLPB8MGeJ08Wk=) 2: 323430333a313838303a3a2f33322d3332203d3e203436303535.roa (hash: eTKlxr7RgLcyLUitqv8ngcrRv7CLJWNxdWI/HpMYSL4=) 3: 3130332e3139382e3132322e302f32332d3234203d3e203436303535.roa (hash: 1ijvclpULPgdCfBDissNP0l83v/riKHy/8gjcp65S8Y=) 4: FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.crl (hash: lAA5pBlXpO1WGWNkSP27k6rPiYwaZtVB2VM6TjdsYS4=) 5: 3230322e35322e34382e302f32332d3234203d3e203436303535.roa (hash: RObXqV2h2Y7B94Dk0WIVsNRj4cjkiSDSsAdqCU52AWM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.crl rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 06:44:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:02:8c:85:7a:ff:26:6b:ba:a6:34:e8:92:2b:df:16:05:0e:96:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91 Validity Not Before: Apr 27 20:36:12 2025 GMT Not After : May 1 06:44:12 2025 GMT Subject: CN=E44094A756CDFCE92539D7CBA1273540BC6789BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c1:2b:ce:6c:25:61:fb:52:37:6c:b2:d5:12: c3:5a:2f:b5:c4:a8:21:cd:b3:47:16:a4:9b:57:0f: 07:67:f6:57:3b:97:14:9d:f4:cd:6c:63:0b:db:ee: 54:68:3f:98:f5:c4:22:7a:07:b4:f9:c1:54:25:a0: 03:13:34:f4:c8:f8:01:66:dd:a9:82:10:56:d7:73: 2f:dd:8a:4a:60:10:4e:8a:06:b8:b9:17:7d:e0:b9: 45:d8:e8:ff:e3:f0:e9:d7:d3:dc:5e:56:d3:72:ad: a7:3f:1c:d6:38:dd:6d:9f:e1:6c:66:48:ec:af:d2: f8:05:f2:2f:30:ac:e3:1c:bb:37:4e:58:52:57:fe: 5f:18:9d:30:b9:af:bc:72:75:5e:65:5d:26:14:db: 4b:ea:a5:cb:31:9f:cc:a1:5b:8f:ea:4b:b8:9c:e7: 8b:26:a7:d6:aa:3a:c9:5e:be:36:28:63:fe:74:62: 23:10:c4:0d:68:90:03:56:67:39:98:c0:50:79:d6: 28:35:45:b7:43:e6:44:98:92:16:bf:3b:7b:45:dc: 3f:e0:f4:98:88:44:9a:90:3b:b6:05:91:c2:28:9d: c0:40:b7:da:3c:57:67:86:55:45:0a:4b:2d:09:e6: f1:a6:2a:43:67:c4:bb:df:ee:75:d2:71:7e:d2:1a: 97:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:40:94:A7:56:CD:FC:E9:25:39:D7:CB:A1:27:35:40:BC:67:89:BC X509v3 Authority Key Identifier: keyid:FB:D3:B2:8C:90:75:52:9D:EE:81:51:C4:E4:4B:0C:BC:13:FF:DA:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e9:a6:04:be:01:bb:cb:80:69:02:ac:09:ab:99:0e:e2:da:d6: bd:42:b6:64:3c:d3:49:d5:a0:59:82:6b:a4:65:57:fb:c2:ce: cf:a3:17:08:e2:3d:17:16:45:6d:7d:ba:fa:41:04:dc:05:35: 90:a1:b5:5e:c9:a4:ba:cb:e3:cc:bf:b7:a4:95:e9:2b:80:bb: 31:a3:a5:6d:52:47:75:6b:88:08:e3:7c:40:e2:87:e8:1a:e3: e7:fb:fb:5e:d7:1e:95:7c:34:12:8a:e6:da:d6:df:ea:2c:8f: 98:f7:1f:c5:cc:f8:f0:8e:77:aa:2c:12:0d:90:c7:50:e1:7e: b8:5a:48:c7:3f:e8:1c:cb:ae:4b:93:23:63:e3:62:4a:88:37: c9:1c:cc:8e:6f:51:42:52:9a:61:59:d8:4e:10:b3:43:1b:93: d4:65:cf:46:a5:14:27:9c:9a:84:62:44:a5:9b:57:a6:1f:0f: d5:86:ba:f5:76:08:5d:e1:de:2f:fd:d1:ec:ea:ea:02:43:bd: 02:97:88:d3:8c:c3:23:d9:77:68:2e:16:98:35:30:91:e7:af: 32:f2:4c:1f:e4:36:c7:59:12:38:23:12:b5:61:de:6e:a6:0a: 1a:34:a3:de:3f:c7:7b:92:9a:32:c3:c4:27:b4:2f:f1:78:ba: 8c:30:54:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTgKMhXr/Jmu6pjTokivfFgUOll8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkJEM0IyOEM5MDc1NTI5REVFODE1MUM0RTQ0QjBDQkMx M0ZGREE5MTAeFw0yNTA0MjcyMDM2MTJaFw0yNTA1MDEwNjQ0MTJaMDMxMTAvBgNV BAMTKEU0NDA5NEE3NTZDREZDRTkyNTM5RDdDQkExMjczNTQwQkM2Nzg5QkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgwSvObCVh+1I3bLLVEsNaL7XE qCHNs0cWpJtXDwdn9lc7lxSd9M1sYwvb7lRoP5j1xCJ6B7T5wVQloAMTNPTI+AFm 3amCEFbXcy/dikpgEE6KBri5F33guUXY6P/j8OnX09xeVtNyrac/HNY43W2f4Wxm SOyv0vgF8i8wrOMcuzdOWFJX/l8YnTC5r7xydV5lXSYU20vqpcsxn8yhW4/qS7ic 54smp9aqOslevjYoY/50YiMQxA1okANWZzmYwFB51ig1RbdD5kSYkha/O3tF3D/g 9JiIRJqQO7YFkcIoncBAt9o8V2eGVUUKSy0J5vGmKkNnxLvf7nXScX7SGpdFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5ECUp1bN/OklOdfLoSc1QLxnibwwHwYDVR0j BBgwFoAU+9OyjJB1Up3ugVHE5EsMvBP/2pEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ODM5NzdmNC04YzJkLTRlYjEtYjRjZC0zNWI0OTIxNmUwNzMvMC9GQkQzQjI4Qzkw NzU1MjlERUU4MTUxQzRFNDRCMENCQzEzRkZEQTkxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkJEM0IyOEM5MDc1NTI5REVFODE1MUM0RTQ0QjBDQkMxM0ZG REE5MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDgzOTc3ZjQtOGMyZC00ZWIxLWI0 Y2QtMzViNDkyMTZlMDczLzAvRkJEM0IyOEM5MDc1NTI5REVFODE1MUM0RTQ0QjBD QkMxM0ZGREE5MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOmmBL4Bu8uAaQKsCauZDuLa1r1CtmQ800nV oFmCa6RlV/vCzs+jFwjiPRcWRW19uvpBBNwFNZChtV7JpLrL48y/t6SV6SuAuzGj pW1SR3VriAjjfEDih+ga4+f7+17XHpV8NBKK5trW3+osj5j3H8XM+PCOd6osEg2Q x1DhfrhaSMc/6BzLrkuTI2PjYkqIN8kczI5vUUJSmmFZ2E4Qs0Mbk9Rlz0alFCec moRiRKWbV6YfD9WGuvV2CF3h3i/90ezq6gJDvQKXiNOMwyPZd2guFpg1MJHnrzLy TB/kNsdZEjgjErVh3m6mCho0o94/x3uSmjLDxCe0L/F4uowwVKk= -----END CERTIFICATE-----Generated at Tue Apr 29 14:16:20 2025 by rpki-client