$ rpki-client -vvf repo-rpki.idnic.net/repo/3cf0a77c-3928-4130-a098-b437572d722c/0/FC4AE05C1547B778063F91C4687D12E8D6978309.mft File: FC4AE05C1547B778063F91C4687D12E8D6978309.mft (raw, json) Hash identifier: gPKc1bE+BJDQhPmFilDTKG+AEKALq40ujubLKSnj4Fw= Subject key identifier: 2C:AE:88:E9:73:11:81:B4:1F:6B:6B:DE:FC:48:73:3A:C5:4E:1D:34 Authority key identifier: FC:4A:E0:5C:15:47:B7:78:06:3F:91:C4:68:7D:12:E8:D6:97:83:09 Certificate issuer: /CN=FC4AE05C1547B778063F91C4687D12E8D6978309 Certificate serial: 0CF6964728189E4DA9484C8122B3F7C93853A4EA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FC4AE05C1547B778063F91C4687D12E8D6978309.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3cf0a77c-3928-4130-a098-b437572d722c/0/FC4AE05C1547B778063F91C4687D12E8D6978309.mft Manifest number: B9 Signing time: Mon 16 Jun 2025 18:01:45 +0000 Manifest this update: Mon 16 Jun 2025 17:56:45 +0000 Manifest next update: Thu 19 Jun 2025 18:52:45 +0000 Files and hashes: 1: FC4AE05C1547B778063F91C4687D12E8D6978309.crl (hash: 59bpH6o8BeRiTw8oUdvq7SCFDqYBrYJt1s3WjRQpHmE=) 2: 3135372e32302e3233302e302f32332d3234203d3e20313532343331.roa (hash: zEX2zvBjt157yqeJ3lViczjWUiYCUWpG52AxWV4xz8k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3cf0a77c-3928-4130-a098-b437572d722c/0/FC4AE05C1547B778063F91C4687D12E8D6978309.crl rsync://repo-rpki.idnic.net/repo/3cf0a77c-3928-4130-a098-b437572d722c/0/FC4AE05C1547B778063F91C4687D12E8D6978309.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FC4AE05C1547B778063F91C4687D12E8D6978309.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 14:36:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:f6:96:47:28:18:9e:4d:a9:48:4c:81:22:b3:f7:c9:38:53:a4:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC4AE05C1547B778063F91C4687D12E8D6978309 Validity Not Before: Jun 16 17:56:45 2025 GMT Not After : Jun 19 18:52:45 2025 GMT Subject: CN=2CAE88E9731181B41F6B6BDEFC48733AC54E1D34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:a8:35:77:c2:53:bf:ef:3b:04:7a:fc:54:19: de:48:16:a0:af:4a:9c:c6:f8:68:64:df:6c:15:2f: d2:e8:22:46:57:b0:ab:35:ff:09:04:13:46:4f:19: 25:e5:13:32:7b:d0:d8:50:55:b6:e4:b7:16:ee:20: 9b:c9:17:9a:fc:d2:69:52:90:2f:16:c6:9c:5a:27: 65:20:e5:a8:50:8c:a7:3a:08:02:44:bd:bb:70:65: 5a:08:a6:ac:40:76:64:c5:61:1c:ed:03:f1:ed:6a: 77:da:ea:e5:7e:34:33:0b:cf:b9:5d:46:66:b2:45: b6:1e:4a:9f:75:16:5d:f6:95:90:fb:d2:1f:c1:9f: e2:4c:56:7a:12:3a:ae:6f:00:84:ee:47:19:86:0e: 50:e8:82:db:e0:68:1b:c7:db:6b:ae:19:8a:f0:62: 6a:8f:e3:ce:05:fd:23:dc:41:09:f6:67:99:4b:11: e2:83:cf:52:a1:3a:ef:ac:b4:f1:a8:72:22:04:a5: c2:49:34:e6:01:2d:0c:8a:f3:18:bc:f5:91:bb:bd: a0:39:3d:88:44:e9:b2:9f:98:de:9c:00:d9:19:89: e5:b4:fb:5d:ef:94:0c:be:12:e2:fd:be:7d:cd:88: e7:a1:1b:cb:7a:54:85:55:ad:b9:44:e0:79:ba:f1: 97:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:AE:88:E9:73:11:81:B4:1F:6B:6B:DE:FC:48:73:3A:C5:4E:1D:34 X509v3 Authority Key Identifier: keyid:FC:4A:E0:5C:15:47:B7:78:06:3F:91:C4:68:7D:12:E8:D6:97:83:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3cf0a77c-3928-4130-a098-b437572d722c/0/FC4AE05C1547B778063F91C4687D12E8D6978309.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FC4AE05C1547B778063F91C4687D12E8D6978309.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3cf0a77c-3928-4130-a098-b437572d722c/0/FC4AE05C1547B778063F91C4687D12E8D6978309.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:fa:05:95:13:de:67:2b:26:a9:54:78:2d:54:7e:88:85:41: aa:31:3f:fe:5b:67:5a:93:88:f2:c8:d9:5c:4d:19:c4:b3:60: 2d:93:39:b6:b6:5f:54:91:97:8b:e5:f0:66:4d:96:f3:19:db: 31:f7:b2:47:37:89:8d:e1:14:8b:26:d3:59:42:91:5c:6a:4a: 74:2b:bf:ad:b5:09:a8:7e:a9:50:eb:76:23:02:9d:f0:e8:a6: d9:53:10:d5:07:ec:89:9d:be:28:be:75:58:17:75:c4:f6:4a: cb:24:c8:8b:69:f4:0d:82:e6:c5:b1:ec:58:cc:0f:bd:0c:31: 93:31:78:79:fb:36:b9:9a:3c:a5:bc:d6:63:95:78:07:b2:66: b3:bb:bb:02:3d:6d:dc:a1:9c:5e:e3:92:33:13:98:cc:ca:08: 00:99:22:e1:b0:2b:6d:41:25:1c:7f:61:80:b7:c4:ab:08:b2: ad:d2:c8:8a:c3:c2:e0:d9:bf:cf:5d:a9:33:d1:e9:16:0f:b5: 5c:7d:cc:21:3b:a1:26:38:ee:0a:e7:8b:52:82:bb:d9:57:7a: 35:28:73:6b:1e:c0:8c:b0:4f:0b:c4:2a:4c:66:ab:8d:3b:96: ef:fe:eb:7d:2d:38:80:34:33:c3:1d:a2:01:e7:a6:b4:8e:2b: 65:0d:5d:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDPaWRygYnk2pSEyBIrP3yThTpOowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkM0QUUwNUMxNTQ3Qjc3ODA2M0Y5MUM0Njg3RDEyRThE Njk3ODMwOTAeFw0yNTA2MTYxNzU2NDVaFw0yNTA2MTkxODUyNDVaMDMxMTAvBgNV BAMTKDJDQUU4OEU5NzMxMTgxQjQxRjZCNkJERUZDNDg3MzNBQzU0RTFEMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVqDV3wlO/7zsEevxUGd5IFqCv SpzG+Ghk32wVL9LoIkZXsKs1/wkEE0ZPGSXlEzJ70NhQVbbktxbuIJvJF5r80mlS kC8WxpxaJ2Ug5ahQjKc6CAJEvbtwZVoIpqxAdmTFYRztA/Htanfa6uV+NDMLz7ld RmayRbYeSp91Fl32lZD70h/Bn+JMVnoSOq5vAITuRxmGDlDogtvgaBvH22uuGYrw YmqP484F/SPcQQn2Z5lLEeKDz1KhOu+stPGociIEpcJJNOYBLQyK8xi89ZG7vaA5 PYhE6bKfmN6cANkZieW0+13vlAy+EuL9vn3NiOehG8t6VIVVrblE4Hm68Ze9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQULK6I6XMRgbQfa2ve/EhzOsVOHTQwHwYDVR0j BBgwFoAU/ErgXBVHt3gGP5HEaH0S6NaXgwkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Y2YwYTc3Yy0zOTI4LTQxMzAtYTA5OC1iNDM3NTcyZDcyMmMvMC9GQzRBRTA1QzE1 NDdCNzc4MDYzRjkxQzQ2ODdEMTJFOEQ2OTc4MzA5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkM0QUUwNUMxNTQ3Qjc3ODA2M0Y5MUM0Njg3RDEyRThENjk3 ODMwOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2NmMGE3N2MtMzkyOC00MTMwLWEw OTgtYjQzNzU3MmQ3MjJjLzAvRkM0QUUwNUMxNTQ3Qjc3ODA2M0Y5MUM0Njg3RDEy RThENjk3ODMwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFv6BZUT3mcrJqlUeC1UfoiFQaoxP/5bZ1qT iPLI2VxNGcSzYC2TOba2X1SRl4vl8GZNlvMZ2zH3skc3iY3hFIsm01lCkVxqSnQr v621Cah+qVDrdiMCnfDoptlTENUH7Imdvii+dVgXdcT2SsskyItp9A2C5sWx7FjM D70MMZMxeHn7NrmaPKW81mOVeAeyZrO7uwI9bdyhnF7jkjMTmMzKCACZIuGwK21B JRx/YYC3xKsIsq3SyIrDwuDZv89dqTPR6RYPtVx9zCE7oSY47grni1KCu9lXejUo c2sewIywTwvEKkxmq407lu/+630tOIA0M8MdogHnprSOK2UNXfo= -----END CERTIFICATE-----Generated at Mon Jun 16 20:49:31 2025 by rpki-client