$ rpki-client -vvf repo-rpki.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.mft File: FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.mft (raw, json) Hash identifier: pJBDQLKnHCNJEBh0ivG75ctW9xbbRxpHXr6tOYI/64g= Subject key identifier: 1E:29:A3:F7:3A:C7:DD:5B:72:D5:1B:ED:7D:9C:76:20:6C:95:FB:29 Authority key identifier: FA:62:D8:28:54:4F:70:BE:AD:8B:3C:04:A8:61:75:E4:FB:07:C4:B6 Certificate issuer: /CN=FA62D828544F70BEAD8B3C04A86175E4FB07C4B6 Certificate serial: 551BC65D7D13A282D918F6CF9D689AE5918E3513 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.mft Manifest number: 9F Signing time: Sun 15 Jun 2025 20:40:47 +0000 Manifest this update: Sun 15 Jun 2025 20:35:47 +0000 Manifest next update: Wed 18 Jun 2025 23:55:47 +0000 Files and hashes: 1: FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.crl (hash: xCUJIXSPGocnplUQk8ekWVVWJ2S770bbPTRPKv1O2/M=) 2: 3135372e36362e33372e302f32342d3234203d3e20313338383034.roa (hash: elAlykoINKnAZ1hNxzJ7Wy9Qz4JU3YMP6UNvlutp4wU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.crl rsync://repo-rpki.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 23:55:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:1b:c6:5d:7d:13:a2:82:d9:18:f6:cf:9d:68:9a:e5:91:8e:35:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA62D828544F70BEAD8B3C04A86175E4FB07C4B6 Validity Not Before: Jun 15 20:35:47 2025 GMT Not After : Jun 18 23:55:47 2025 GMT Subject: CN=1E29A3F73AC7DD5B72D51BED7D9C76206C95FB29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ac:ec:69:a1:9c:23:6e:3a:ca:e9:93:82:72: b4:5f:5d:f0:fb:90:c7:66:a5:f6:f3:c2:af:a3:77: 8e:28:ba:dd:fe:17:8d:7b:fc:7c:15:de:a3:45:4e: 19:74:7d:66:af:a0:27:2c:47:88:f0:89:bf:fe:a4: 14:f4:65:9a:28:c9:09:fe:59:4d:5a:33:17:1c:b2: cb:d4:50:47:e7:15:6e:4e:6c:c8:a0:bb:23:47:f2: 3b:68:7d:50:b8:cf:b9:21:ef:53:fe:2b:65:b5:8a: 25:6b:8a:57:27:23:2f:55:41:b7:39:bf:5b:77:29: 1a:62:c2:d6:f2:72:b9:85:d2:ef:6e:c7:dc:d2:56: f1:32:8f:aa:b0:69:4a:ce:49:6a:d2:a3:6b:ba:88: 4a:31:e6:f5:bc:55:b5:26:d8:fc:16:f7:2d:bc:9e: ef:5b:01:a6:c2:68:cd:b6:ed:ce:31:7a:40:c4:30: 44:26:a2:5b:9c:77:33:2c:73:10:c8:83:88:6e:0a: b1:00:03:3e:20:28:19:70:f6:dd:5d:8b:4d:97:09: ec:00:68:4b:e5:02:ed:05:88:6d:f4:5d:d8:4f:bf: c1:87:5c:07:5e:7b:86:d0:6f:65:00:f7:0d:e7:aa: 98:c6:c3:59:b4:8e:2e:db:a3:cc:ca:97:52:ea:83: 42:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:29:A3:F7:3A:C7:DD:5B:72:D5:1B:ED:7D:9C:76:20:6C:95:FB:29 X509v3 Authority Key Identifier: keyid:FA:62:D8:28:54:4F:70:BE:AD:8B:3C:04:A8:61:75:E4:FB:07:C4:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:ab:96:48:3e:86:91:15:e2:96:24:54:5a:d8:ac:8b:07:d8: bc:68:d2:09:03:9d:81:04:66:72:c2:dd:06:3e:fe:f2:8a:db: 96:11:f5:13:7a:3e:15:8e:de:10:5c:98:e3:3b:22:02:f0:07: 96:fa:6b:8b:c1:4e:8a:8f:a2:f8:2e:98:ea:21:2e:41:ff:50: c0:33:83:26:35:d1:e1:9b:ea:5d:aa:68:80:27:92:47:b4:1b: 9b:69:c1:54:3f:a2:73:df:0e:c9:ca:3a:64:59:1c:84:51:54: 07:71:77:ae:db:fa:a4:08:a0:21:98:3c:ba:9c:a7:42:24:7b: 40:e2:3c:f1:fc:e9:b8:f9:35:2e:6a:68:ca:00:89:a1:44:9a: 24:ad:b0:55:a4:be:c7:eb:b8:6e:37:02:6d:99:ab:d1:43:44: ce:99:f1:d3:30:e7:0e:2e:89:1b:cf:2e:a6:f1:72:ec:54:99: 34:e5:8e:34:03:90:4d:00:98:2f:d9:b7:ef:df:e4:80:f1:ab: 9c:39:e3:63:f7:8d:08:e1:6e:c4:97:7d:15:50:9b:11:7a:61: aa:0a:6d:b2:09:33:7d:7d:5a:e7:b7:95:d0:50:e9:1b:79:ce: 69:ec:30:da:13:9f:37:70:9b:3d:dd:ca:2d:aa:b1:9c:b2:ae: 34:f3:12:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVRvGXX0TooLZGPbPnWia5ZGONRMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE2MkQ4Mjg1NDRGNzBCRUFEOEIzQzA0QTg2MTc1RTRG QjA3QzRCNjAeFw0yNTA2MTUyMDM1NDdaFw0yNTA2MTgyMzU1NDdaMDMxMTAvBgNV BAMTKDFFMjlBM0Y3M0FDN0RENUI3MkQ1MUJFRDdEOUM3NjIwNkM5NUZCMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/rOxpoZwjbjrK6ZOCcrRfXfD7 kMdmpfbzwq+jd44out3+F417/HwV3qNFThl0fWavoCcsR4jwib/+pBT0ZZooyQn+ WU1aMxccssvUUEfnFW5ObMiguyNH8jtofVC4z7kh71P+K2W1iiVrilcnIy9VQbc5 v1t3KRpiwtbycrmF0u9ux9zSVvEyj6qwaUrOSWrSo2u6iEox5vW8VbUm2PwW9y28 nu9bAabCaM227c4xekDEMEQmolucdzMscxDIg4huCrEAAz4gKBlw9t1di02XCewA aEvlAu0FiG30XdhPv8GHXAdee4bQb2UA9w3nqpjGw1m0ji7bo8zKl1Lqg0K7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHimj9zrH3Vty1RvtfZx2IGyV+ykwHwYDVR0j BBgwFoAU+mLYKFRPcL6tizwEqGF15PsHxLYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YzA0ZGVkOC1iMGY1LTQ1OTQtOGUwZS05MTFlY2I3N2VlNzMvMC9GQTYyRDgyODU0 NEY3MEJFQUQ4QjNDMDRBODYxNzVFNEZCMDdDNEI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkE2MkQ4Mjg1NDRGNzBCRUFEOEIzQzA0QTg2MTc1RTRGQjA3 QzRCNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWMwNGRlZDgtYjBmNS00NTk0LThl MGUtOTExZWNiNzdlZTczLzAvRkE2MkQ4Mjg1NDRGNzBCRUFEOEIzQzA0QTg2MTc1 RTRGQjA3QzRCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH+rlkg+hpEV4pYkVFrYrIsH2Lxo0gkDnYEE ZnLC3QY+/vKK25YR9RN6PhWO3hBcmOM7IgLwB5b6a4vBToqPovgumOohLkH/UMAz gyY10eGb6l2qaIAnkke0G5tpwVQ/onPfDsnKOmRZHIRRVAdxd67b+qQIoCGYPLqc p0Ike0DiPPH86bj5NS5qaMoAiaFEmiStsFWkvsfruG43Am2Zq9FDRM6Z8dMw5w4u iRvPLqbxcuxUmTTljjQDkE0AmC/Zt+/f5IDxq5w542P3jQjhbsSXfRVQmxF6YaoK bbIJM319Wue3ldBQ6Rt5zmnsMNoTnzdwmz3dyi2qsZyyrjTzEvs= -----END CERTIFICATE-----Generated at Tue Jun 17 18:05:45 2025 by rpki-client