$ rpki-client -vvf repo-rpki.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.mft File: FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.mft (raw, json) Hash identifier: 1uX74Qtx/nFX/2UAA1R0H1wy2QFQUsjigmI7n5P0mi8= Subject key identifier: B6:D5:83:FB:10:79:76:61:7A:AC:75:1C:B9:2C:34:DA:C1:DA:E6:62 Authority key identifier: FA:BD:B6:E4:44:51:B7:F0:37:8A:E9:2C:27:50:EB:FE:5A:3C:FA:38 Certificate issuer: /CN=FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38 Certificate serial: 0B6E603D2DC24D417AA7968C80B3720732737AD3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.mft Manifest number: 04AF Signing time: Sat 26 Apr 2025 14:11:40 +0000 Manifest this update: Sat 26 Apr 2025 14:06:40 +0000 Manifest next update: Tue 29 Apr 2025 19:22:40 +0000 Files and hashes: 1: 323430363a613063303a3a2f33322d3332203d3e20313337333331.roa (hash: Ai0eZhLY+4L7mdTG5liUS7qc6ABicMzreMWiAuYqKfU=) 2: 3130332e3135372e3131362e302f32332d3234203d3e20313337333331.roa (hash: UWkWpy75FXXiO6uLHlRhSo0V3lTHBX2E8QT7GG3BfWs=) 3: FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.crl (hash: N1Y0wLAoZBNE2+sZJaGWY8/TrSDbCRctZWKpnFeJ9aY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.crl rsync://repo-rpki.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 19:22:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:6e:60:3d:2d:c2:4d:41:7a:a7:96:8c:80:b3:72:07:32:73:7a:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38 Validity Not Before: Apr 26 14:06:40 2025 GMT Not After : Apr 29 19:22:40 2025 GMT Subject: CN=B6D583FB107976617AAC751CB92C34DAC1DAE662 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:f2:7a:67:5e:1b:63:0d:37:cd:da:7c:e7:1a: b1:d8:fd:63:a3:b3:21:a5:18:aa:66:6e:1a:3e:b6: a4:9b:51:34:30:3b:ed:6a:93:09:9a:b2:83:34:cc: 35:b3:65:f8:60:48:2d:a4:db:72:45:7c:a2:8a:ce: 53:5c:5d:fc:c7:3c:41:5e:81:43:34:cd:b3:b1:cc: a4:a3:c6:8f:08:af:52:f1:19:88:c6:1a:c1:9c:cd: 90:5a:07:49:a7:6a:dd:1b:c1:6d:58:d4:0c:87:a4: 23:03:42:b9:af:2e:36:a5:a8:fa:cc:4e:3b:4f:7f: 42:ec:5b:bb:24:a5:41:20:f9:f4:80:86:07:d6:25: 4e:f4:57:20:40:93:47:3e:05:72:81:af:aa:0d:2b: d8:a7:f1:75:77:0a:17:07:fd:3a:14:47:ba:a2:1e: 26:f5:74:0d:6f:8d:ce:ed:6c:24:19:20:22:fe:61: fa:2d:c8:48:c4:71:dc:32:06:69:38:ea:9d:cf:bc: 0a:cc:38:e9:5c:12:75:26:24:f5:e9:32:4b:40:ac: 32:57:b8:ed:9c:dc:1b:af:25:48:10:b4:be:1d:ff: f3:b6:c8:c4:4a:8e:1f:94:b1:e2:df:5f:e4:44:3f: e0:63:70:5c:51:c4:1f:b1:a7:66:09:34:15:c8:d7: eb:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:D5:83:FB:10:79:76:61:7A:AC:75:1C:B9:2C:34:DA:C1:DA:E6:62 X509v3 Authority Key Identifier: keyid:FA:BD:B6:E4:44:51:B7:F0:37:8A:E9:2C:27:50:EB:FE:5A:3C:FA:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:95:df:23:10:d5:64:83:a8:3c:ce:15:19:d8:13:21:86:0d: c2:9e:a1:d3:f0:2c:bd:23:b5:ac:2a:51:99:39:30:d3:df:f5: 3d:5d:73:e1:94:48:b9:ee:92:ee:3f:74:6d:0b:81:fe:7b:af: ec:cf:85:34:0d:5e:c1:86:e2:99:ab:d0:a2:89:c2:d4:8d:1e: 94:62:69:d8:c7:d8:af:3d:17:98:34:91:7c:15:d3:04:cb:f6: a5:59:6a:56:60:b3:f1:6c:6a:25:8c:e0:b8:e3:bf:8d:02:c4: 72:b4:aa:b4:72:bb:fe:48:ef:fe:8c:09:de:08:70:a6:cf:c1: fd:16:dc:e2:4b:91:a9:1e:ee:16:44:81:95:1b:9c:53:1d:0d: 41:30:81:04:0e:76:cc:bb:3f:88:55:05:92:1c:bd:5a:46:a5: 78:ee:8c:6c:26:ae:12:d4:76:f6:0d:bf:1c:28:f7:e3:57:ff: e1:33:4f:d3:8d:64:37:e6:c1:8c:f8:a3:7e:76:89:f9:c5:e9: bd:1b:54:a1:1b:cc:d8:2d:4f:d8:8c:1b:40:7e:27:02:9d:f7: 63:d4:5f:a6:e2:7c:46:44:22:3e:f8:d8:fe:31:29:0c:ea:4f: 13:93:e1:3b:c7:a5:4a:c4:e7:21:a4:89:e3:23:f9:f4:b1:4c: 94:92:e6:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC25gPS3CTUF6p5aMgLNyBzJzetMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkFCREI2RTQ0NDUxQjdGMDM3OEFFOTJDMjc1MEVCRkU1 QTNDRkEzODAeFw0yNTA0MjYxNDA2NDBaFw0yNTA0MjkxOTIyNDBaMDMxMTAvBgNV BAMTKEI2RDU4M0ZCMTA3OTc2NjE3QUFDNzUxQ0I5MkMzNERBQzFEQUU2NjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY8npnXhtjDTfN2nznGrHY/WOj syGlGKpmbho+tqSbUTQwO+1qkwmasoM0zDWzZfhgSC2k23JFfKKKzlNcXfzHPEFe gUM0zbOxzKSjxo8Ir1LxGYjGGsGczZBaB0mnat0bwW1Y1AyHpCMDQrmvLjalqPrM TjtPf0LsW7skpUEg+fSAhgfWJU70VyBAk0c+BXKBr6oNK9in8XV3ChcH/ToUR7qi Hib1dA1vjc7tbCQZICL+YfotyEjEcdwyBmk46p3PvArMOOlcEnUmJPXpMktArDJX uO2c3BuvJUgQtL4d//O2yMRKjh+UseLfX+REP+BjcFxRxB+xp2YJNBXI1+spAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUttWD+xB5dmF6rHUcuSw02sHa5mIwHwYDVR0j BBgwFoAU+r225ERRt/A3iuksJ1Dr/lo8+jgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZDA3ZTNkOC05YmZjLTQ0ODMtYTJkZC1hZmE0NTkzODExZTUvMC9GQUJEQjZFNDQ0 NTFCN0YwMzc4QUU5MkMyNzUwRUJGRTVBM0NGQTM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkFCREI2RTQ0NDUxQjdGMDM3OEFFOTJDMjc1MEVCRkU1QTND RkEzOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWQwN2UzZDgtOWJmYy00NDgzLWEy ZGQtYWZhNDU5MzgxMWU1LzAvRkFCREI2RTQ0NDUxQjdGMDM3OEFFOTJDMjc1MEVC RkU1QTNDRkEzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI2V3yMQ1WSDqDzOFRnYEyGGDcKeodPwLL0j tawqUZk5MNPf9T1dc+GUSLnuku4/dG0Lgf57r+zPhTQNXsGG4pmr0KKJwtSNHpRi adjH2K89F5g0kXwV0wTL9qVZalZgs/FsaiWM4Ljjv40CxHK0qrRyu/5I7/6MCd4I cKbPwf0W3OJLkake7hZEgZUbnFMdDUEwgQQOdsy7P4hVBZIcvVpGpXjujGwmrhLU dvYNvxwo9+NX/+EzT9ONZDfmwYz4o352ifnF6b0bVKEbzNgtT9iMG0B+JwKd92PU X6bifEZEIj742P4xKQzqTxOT4TvHpUrE5yGkieMj+fSxTJSS5uk= -----END CERTIFICATE-----Generated at Mon Apr 28 15:21:59 2025 by rpki-client