$ rpki-client -vvf repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/FBACFC63658425B36399C4B9D0322622B8C5B7F0.mft File: FBACFC63658425B36399C4B9D0322622B8C5B7F0.mft (raw, json) Hash identifier: xa9EMhzOHZLbfgmV+hx/4sAB1EWrzuSi2WrMdYJDbQM= Subject key identifier: 35:64:0B:E7:04:D4:13:50:45:1A:B0:E5:3E:FA:3D:66:0A:44:B5:66 Authority key identifier: FB:AC:FC:63:65:84:25:B3:63:99:C4:B9:D0:32:26:22:B8:C5:B7:F0 Certificate issuer: /CN=FBACFC63658425B36399C4B9D0322622B8C5B7F0 Certificate serial: 1D1C837F4DCB5755970F5202CF6E5E35C7A06474 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBACFC63658425B36399C4B9D0322622B8C5B7F0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/FBACFC63658425B36399C4B9D0322622B8C5B7F0.mft Manifest number: 04D3 Signing time: Tue 29 Apr 2025 03:02:24 +0000 Manifest this update: Tue 29 Apr 2025 02:57:24 +0000 Manifest next update: Fri 02 May 2025 12:03:24 +0000 Files and hashes: 1: 323430373a336538303a363a3a2f34382d3438203d3e203338343936.roa (hash: 4k+7oiIZgf8A+xoNtWkGh4r/bBNQQHgBlobDBAPY3jY=) 2: FBACFC63658425B36399C4B9D0322622B8C5B7F0.crl (hash: C/LofKxIQbO6h74nH3jLzI5fofHbgy9arg6jobgCwE0=) 3: 323430373a336538303a3a2f33322d3438203d3e203338373638.roa (hash: 6jBV+YbQK26iBcOQ7S5zsMw9nUVxGEuIbJ7fF7HfYs0=) 4: 3130332e3233342e3231382e302f32342d3234203d3e203338373638.roa (hash: h2g3sIbdso4gRFxWGiYO/f5Y9InbwTXbbshwWzTUD+Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/FBACFC63658425B36399C4B9D0322622B8C5B7F0.crl rsync://repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/FBACFC63658425B36399C4B9D0322622B8C5B7F0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBACFC63658425B36399C4B9D0322622B8C5B7F0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 12:03:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:1c:83:7f:4d:cb:57:55:97:0f:52:02:cf:6e:5e:35:c7:a0:64:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FBACFC63658425B36399C4B9D0322622B8C5B7F0 Validity Not Before: Apr 29 02:57:24 2025 GMT Not After : May 2 12:03:24 2025 GMT Subject: CN=35640BE704D41350451AB0E53EFA3D660A44B566 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a5:3a:c2:55:33:e6:32:59:55:c3:6b:8e:cd: d7:07:d5:d5:4a:5d:61:97:e0:9d:ec:1c:49:2f:63: 44:d1:05:2a:06:93:68:d3:c2:b8:f4:50:0b:9b:30: 71:b2:85:7e:dc:b1:15:29:5d:2a:b0:90:df:ec:82: 34:23:19:74:63:2b:52:de:2f:ec:34:59:a9:6d:ce: 92:01:72:ad:cb:53:ba:27:ea:49:30:e7:fa:a9:da: db:9f:a6:57:8e:b2:b9:f9:32:04:4d:d0:57:5a:6c: 09:81:17:1c:d8:d0:35:ef:85:af:d5:2a:3b:1f:c9: 56:70:12:b3:c3:43:c8:ed:87:b6:6c:e8:a4:9e:10: 73:75:25:7f:11:8a:7d:24:79:df:9a:56:e5:bb:46: a7:1d:47:7c:36:8c:94:33:43:2f:6b:41:ea:e9:a8: 27:f4:53:77:1c:78:9a:c1:a5:37:cf:e2:88:87:50: b4:9f:bc:77:4d:7d:d6:60:f4:28:3b:0c:ae:b7:6a: e0:3f:0a:73:0f:5d:3f:f8:f0:41:db:38:3c:91:c4: 33:52:c9:65:ee:eb:c3:bc:cc:8a:fe:3d:15:26:7c: 13:03:8a:a2:83:4b:2a:89:d5:bc:ce:4f:73:28:2b: 00:a3:cf:ed:9d:e3:58:51:6d:19:53:58:f3:da:61: d4:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:64:0B:E7:04:D4:13:50:45:1A:B0:E5:3E:FA:3D:66:0A:44:B5:66 X509v3 Authority Key Identifier: keyid:FB:AC:FC:63:65:84:25:B3:63:99:C4:B9:D0:32:26:22:B8:C5:B7:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/FBACFC63658425B36399C4B9D0322622B8C5B7F0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBACFC63658425B36399C4B9D0322622B8C5B7F0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/FBACFC63658425B36399C4B9D0322622B8C5B7F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:a9:a1:b5:83:1d:89:b1:82:eb:07:7f:3d:58:03:6f:97:c7: 9e:3c:79:31:e1:12:a7:41:90:36:4a:aa:f2:3d:31:6d:37:4d: 97:b9:b1:cb:5a:bd:c8:28:21:d5:c7:31:31:9f:14:d5:1f:12: 7d:b0:33:39:8d:87:21:c2:62:4c:81:73:0d:3a:07:6a:aa:95: 04:6e:23:be:ba:b1:a5:93:b8:b6:42:df:f5:bc:a3:81:49:91: ba:59:60:58:4e:62:f1:e2:ed:72:5b:c4:05:0d:d2:69:53:3e: 69:1d:a7:67:bc:08:5a:21:93:86:a2:7c:99:79:f5:16:4c:c3: 9f:ff:7c:84:66:06:06:65:84:d8:84:fd:91:fe:a3:c4:49:0f: 49:54:8f:bb:49:74:43:1a:bb:f2:03:63:88:4b:ec:e6:40:5d: 5c:e1:be:e7:f3:e7:e3:e6:54:fa:f0:08:b5:70:65:26:31:e5: 26:ea:58:86:76:b8:4a:29:b1:80:25:61:98:15:f1:13:0e:02: 2c:93:d8:e1:0c:34:97:ca:31:ae:64:c5:72:f5:60:8c:b2:0d: 5e:e9:18:3f:d8:96:02:bf:1b:97:72:2b:38:19:94:ae:76:f6: 24:9b:a9:33:8e:91:88:f9:90:35:ab:75:84:e4:6b:aa:d6:5d: dd:00:5a:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHRyDf03LV1WXD1ICz25eNcegZHQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkJBQ0ZDNjM2NTg0MjVCMzYzOTlDNEI5RDAzMjI2MjJC OEM1QjdGMDAeFw0yNTA0MjkwMjU3MjRaFw0yNTA1MDIxMjAzMjRaMDMxMTAvBgNV BAMTKDM1NjQwQkU3MDRENDEzNTA0NTFBQjBFNTNFRkEzRDY2MEE0NEI1NjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCpTrCVTPmMllVw2uOzdcH1dVK XWGX4J3sHEkvY0TRBSoGk2jTwrj0UAubMHGyhX7csRUpXSqwkN/sgjQjGXRjK1Le L+w0WaltzpIBcq3LU7on6kkw5/qp2tufpleOsrn5MgRN0FdabAmBFxzY0DXvha/V KjsfyVZwErPDQ8jth7Zs6KSeEHN1JX8Rin0ked+aVuW7RqcdR3w2jJQzQy9rQerp qCf0U3cceJrBpTfP4oiHULSfvHdNfdZg9Cg7DK63auA/CnMPXT/48EHbODyRxDNS yWXu68O8zIr+PRUmfBMDiqKDSyqJ1bzOT3MoKwCjz+2d41hRbRlTWPPaYdRzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNWQL5wTUE1BFGrDlPvo9ZgpEtWYwHwYDVR0j BBgwFoAU+6z8Y2WEJbNjmcS50DImIrjFt/AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MWU5NDI0My04N2YwLTQyNmYtYTljYS00YzE5ZWRiMDZiNDIvMC9GQkFDRkM2MzY1 ODQyNUIzNjM5OUM0QjlEMDMyMjYyMkI4QzVCN0YwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkJBQ0ZDNjM2NTg0MjVCMzYzOTlDNEI5RDAzMjI2MjJCOEM1 QjdGMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTFlOTQyNDMtODdmMC00MjZmLWE5 Y2EtNGMxOWVkYjA2YjQyLzAvRkJBQ0ZDNjM2NTg0MjVCMzYzOTlDNEI5RDAzMjI2 MjJCOEM1QjdGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGKpobWDHYmxgusHfz1YA2+Xx548eTHhEqdB kDZKqvI9MW03TZe5sctavcgoIdXHMTGfFNUfEn2wMzmNhyHCYkyBcw06B2qqlQRu I766saWTuLZC3/W8o4FJkbpZYFhOYvHi7XJbxAUN0mlTPmkdp2e8CFohk4aifJl5 9RZMw5//fIRmBgZlhNiE/ZH+o8RJD0lUj7tJdEMau/IDY4hL7OZAXVzhvufz5+Pm VPrwCLVwZSYx5SbqWIZ2uEopsYAlYZgV8RMOAiyT2OEMNJfKMa5kxXL1YIyyDV7p GD/YlgK/G5dyKzgZlK529iSbqTOOkYj5kDWrdYTka6rWXd0AWhA= -----END CERTIFICATE-----Generated at Wed Apr 30 05:44:42 2025 by rpki-client