$ rpki-client -vvf repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/FCD05385904E00F3C10A339EE19D924D72FFAE0E.mft File: FCD05385904E00F3C10A339EE19D924D72FFAE0E.mft (raw, json) Hash identifier: W6wcclsE5n+0GWWkmBV5bzYHOr2gBhpKK1KZG0zg6bQ= Subject key identifier: F1:F2:17:D3:19:32:E7:C6:54:87:BD:31:6E:CE:C4:8E:34:85:BB:99 Authority key identifier: FC:D0:53:85:90:4E:00:F3:C1:0A:33:9E:E1:9D:92:4D:72:FF:AE:0E Certificate issuer: /CN=FCD05385904E00F3C10A339EE19D924D72FFAE0E Certificate serial: 47520FB2A328E6F8F7EC81C32DF333397BFBA8FA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD05385904E00F3C10A339EE19D924D72FFAE0E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/FCD05385904E00F3C10A339EE19D924D72FFAE0E.mft Manifest number: 04D3 Signing time: Fri 25 Apr 2025 14:31:38 +0000 Manifest this update: Fri 25 Apr 2025 14:26:38 +0000 Manifest next update: Tue 29 Apr 2025 01:13:38 +0000 Files and hashes: 1: 323430323a393830303a3a2f33322d3438203d3e203338313538.roa (hash: DMFpbMepgA3ovw8pgXBiILyGivq/nq/MXZA9XVMLzGo=) 2: 323430323a393830303a343031303a3a2f34382d3438203d3e20333937373633.roa (hash: MBiGxv0ZO20HmuL2lUlmVAx4s0nmUR8oNwBPTRWxbyM=) 3: 3137352e3135382e34382e302f32302d3234203d3e20313335343738.roa (hash: jSjRAgcVxXEFSpQkNfBkeuinXTt7J0DoP/WXpR5y2NU=) 4: FCD05385904E00F3C10A339EE19D924D72FFAE0E.crl (hash: xcZ9rJpJpaxaAd4RUgGK3Xr33VDm8h+xozwn92nHtbA=) 5: 3137352e3135382e33322e302f32302d3234203d3e20313335343738.roa (hash: jw8PLt91WY8Q+fATFAobnSYP9mjjSmMhBi7jnnt4vSc=) 6: 323430323a393830303a343030313a3a2f34382d3438203d3e20313331313138.roa (hash: WE77Xy2tazxYFCY9JWrG+2DWGpeIwOgl+o6PphGJkaA=) 7: 323430323a393830303a343030363a3a2f34382d3438203d3e20313338313338.roa (hash: N4zXj0n+crGxTMpLt78WSVMbvOXWTjixttF6+IX5i6g=) 8: 323430323a393830303a343030353a3a2f34382d3438203d3e20313336313038.roa (hash: htIfiUj0TS/B8LHMX2Pwb2S3CMhqGS/4MvVddU2RMXs=) 9: 3137352e3135382e33322e302f32322d3234203d3e2034373837.roa (hash: uZQkOk+CpUIXDZqH2BmXwSFTNgck/jA2xelBBArMP0k=) 10: 323430323a393830303a343030303a3a2f34382d3438203d3e20313331313137.roa (hash: KW4EEcwhlrvTNK+l1QgxB5MCIBN4X0Ahf479yXTih5s=) 11: 323430323a393830303a343030343a3a2f34382d3438203d3e203436303235.roa (hash: zoOph4ORgnecC4G3qubgAInEaNPWdnN5nyNNpj+Aosc=) 12: 3137352e3135382e33322e302f31392d3139203d3e2034373837.roa (hash: oT2OowlAV3JFpxVJV1ObFxo2pVML588pYLgJHcYQLoE=) 13: 323430323a393830303a343030323a3a2f34382d3438203d3e20313331313139.roa (hash: ip/l/KBXQ9Q+oLtgt9trdsFnsGK5B7yCV8heS9Wutgk=) 14: 323430323a393830303a343030333a3a2f34382d3438203d3e203338353038.roa (hash: PW6vCtMOERXjYSSh2pseRhWwTwtJ4G23HHQ78zdmJm0=) 15: 3132312e3130302e302e302f32312d3234203d3e203338313538.roa (hash: 4OEVR4t4JntmWKdQ2xyPFDAR1Dn2UjqhKWyVo8OVQ9Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/FCD05385904E00F3C10A339EE19D924D72FFAE0E.crl rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/FCD05385904E00F3C10A339EE19D924D72FFAE0E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD05385904E00F3C10A339EE19D924D72FFAE0E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 01:13:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:52:0f:b2:a3:28:e6:f8:f7:ec:81:c3:2d:f3:33:39:7b:fb:a8:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FCD05385904E00F3C10A339EE19D924D72FFAE0E Validity Not Before: Apr 25 14:26:38 2025 GMT Not After : Apr 29 01:13:38 2025 GMT Subject: CN=F1F217D31932E7C65487BD316ECEC48E3485BB99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c7:56:cd:ac:10:6a:19:41:e7:b4:50:29:06: fc:51:3c:8e:a3:4d:fd:29:f1:44:f4:4a:a8:8e:85: 08:8e:1f:11:fd:39:3c:a8:bb:3b:82:17:3b:8e:3b: 90:44:29:30:8c:46:69:ac:7e:91:91:53:c0:67:5b: 2f:ea:d6:62:18:52:bc:eb:c5:7f:85:be:0d:72:a8: cb:96:5e:27:ff:1a:ce:6c:75:39:26:5b:5c:18:07: e6:37:54:e4:e5:81:cb:1f:2f:6c:c1:a6:60:46:d9: 1e:20:82:0b:0f:e1:c6:a8:d0:69:d3:cb:8a:7b:6f: 61:e3:7a:90:5c:9e:59:9a:eb:4f:a5:bb:03:a8:64: 85:bd:0e:ae:29:72:c6:69:04:61:5e:2e:02:4c:04: 58:68:d5:f3:73:7c:47:b5:b0:ed:f2:75:5d:8b:06: ef:2e:ae:06:32:1e:81:91:5a:4c:a3:9d:9a:f8:de: 2c:ee:66:51:12:1f:46:c8:bf:d9:68:d2:38:10:09: 91:dd:90:0d:aa:c9:ee:76:23:d8:a4:1c:27:8f:47: cb:10:81:37:a7:23:9e:4f:6e:db:38:ac:a3:96:3d: 3b:06:e3:6c:5c:99:d4:19:79:68:da:80:9e:2a:88: cd:2f:13:4b:f5:0a:c1:b1:90:43:bd:6c:1b:6e:2f: f5:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:F2:17:D3:19:32:E7:C6:54:87:BD:31:6E:CE:C4:8E:34:85:BB:99 X509v3 Authority Key Identifier: keyid:FC:D0:53:85:90:4E:00:F3:C1:0A:33:9E:E1:9D:92:4D:72:FF:AE:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/FCD05385904E00F3C10A339EE19D924D72FFAE0E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD05385904E00F3C10A339EE19D924D72FFAE0E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/FCD05385904E00F3C10A339EE19D924D72FFAE0E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:22:f4:bd:90:fd:bc:c8:13:59:16:fc:f5:4b:ad:28:e5:f1: d3:38:7c:0d:f5:74:2b:4d:f0:b7:eb:2a:0f:a6:1c:cb:74:5b: ef:2f:06:62:98:be:5e:1e:3f:c2:80:63:08:6e:9f:8d:a2:e9: e6:d0:63:7b:8f:60:02:a8:1f:14:64:46:ef:f6:61:10:a7:b1: ab:17:94:35:d8:b0:ce:65:a1:01:9a:2b:8a:20:aa:78:f0:91: 76:ef:b7:69:d4:9f:94:71:99:cb:c7:bf:16:e1:25:02:62:ea: 03:6f:0a:2c:2e:85:cb:95:25:02:a7:b6:b4:8b:ca:de:15:af: 1d:aa:8b:c1:8e:95:91:c5:1d:0f:1e:a5:f7:19:b9:be:83:8e: 5d:4e:f6:1e:db:87:6b:a1:18:b5:cc:3e:f3:21:d7:a1:7f:fe: 08:c2:59:b4:88:1a:6e:b9:f4:6f:46:64:1f:dd:c5:f4:18:e7: 90:a9:ea:02:3b:7f:f5:43:d2:90:c8:78:27:06:57:3b:04:83: a8:c5:12:2b:07:6c:d6:26:70:50:75:fb:c5:f4:57:c7:90:67: 26:e0:97:98:59:f7:0e:8d:a9:17:3f:24:3e:b2:12:a3:a0:ab: c7:05:e2:34:64:68:4c:2e:ac:6a:48:d2:85:f0:6e:e8:eb:c3: 8a:57:66:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR1IPsqMo5vj37IHDLfMzOXv7qPowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkNEMDUzODU5MDRFMDBGM0MxMEEzMzlFRTE5RDkyNEQ3 MkZGQUUwRTAeFw0yNTA0MjUxNDI2MzhaFw0yNTA0MjkwMTEzMzhaMDMxMTAvBgNV BAMTKEYxRjIxN0QzMTkzMkU3QzY1NDg3QkQzMTZFQ0VDNDhFMzQ4NUJCOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEx1bNrBBqGUHntFApBvxRPI6j Tf0p8UT0SqiOhQiOHxH9OTyouzuCFzuOO5BEKTCMRmmsfpGRU8BnWy/q1mIYUrzr xX+Fvg1yqMuWXif/Gs5sdTkmW1wYB+Y3VOTlgcsfL2zBpmBG2R4gggsP4cao0GnT y4p7b2HjepBcnlma60+luwOoZIW9Dq4pcsZpBGFeLgJMBFho1fNzfEe1sO3ydV2L Bu8urgYyHoGRWkyjnZr43izuZlESH0bIv9lo0jgQCZHdkA2qye52I9ikHCePR8sQ gTenI55Pbts4rKOWPTsG42xcmdQZeWjagJ4qiM0vE0v1CsGxkEO9bBtuL/WBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8fIX0xky58ZUh70xbs7EjjSFu5kwHwYDVR0j BBgwFoAU/NBThZBOAPPBCjOe4Z2STXL/rg4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NzhmZDRhZi1mZTY3LTQ1YzgtODBiNy0wNmZjMTE4ZGY4ZTIvMC9GQ0QwNTM4NTkw NEUwMEYzQzEwQTMzOUVFMTlEOTI0RDcyRkZBRTBFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkNEMDUzODU5MDRFMDBGM0MxMEEzMzlFRTE5RDkyNEQ3MkZG QUUwRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDc4ZmQ0YWYtZmU2Ny00NWM4LTgw YjctMDZmYzExOGRmOGUyLzAvRkNEMDUzODU5MDRFMDBGM0MxMEEzMzlFRTE5RDky NEQ3MkZGQUUwRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMsi9L2Q/bzIE1kW/PVLrSjl8dM4fA31dCtN 8LfrKg+mHMt0W+8vBmKYvl4eP8KAYwhun42i6ebQY3uPYAKoHxRkRu/2YRCnsasX lDXYsM5loQGaK4ogqnjwkXbvt2nUn5RxmcvHvxbhJQJi6gNvCiwuhcuVJQKntrSL yt4Vrx2qi8GOlZHFHQ8epfcZub6Djl1O9h7bh2uhGLXMPvMh16F//gjCWbSIGm65 9G9GZB/dxfQY55Cp6gI7f/VD0pDIeCcGVzsEg6jFEisHbNYmcFB1+8X0V8eQZybg l5hZ9w6NqRc/JD6yEqOgq8cF4jRkaEwurGpI0oXwbujrw4pXZlY= -----END CERTIFICATE-----Generated at Sun Apr 27 12:45:31 2025 by rpki-client