$ rpki-client -vvf repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/FBACFC63658425B36399C4B9D0322622B8C5B7F0.mft File: FBACFC63658425B36399C4B9D0322622B8C5B7F0.mft (raw, json) Hash identifier: AfMzvACL3k49ehvHuOXlrb/eobLLrVfvr8UPfHKntJA= Subject key identifier: B9:D0:89:F7:3A:AA:10:13:22:6E:DF:DE:4A:04:F4:5C:8B:D2:22:CE Authority key identifier: FB:AC:FC:63:65:84:25:B3:63:99:C4:B9:D0:32:26:22:B8:C5:B7:F0 Certificate issuer: /CN=FBACFC63658425B36399C4B9D0322622B8C5B7F0 Certificate serial: 5A2C3122E5B59A5DEF5BA724B6268FFE98B85BAC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBACFC63658425B36399C4B9D0322622B8C5B7F0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/FBACFC63658425B36399C4B9D0322622B8C5B7F0.mft Manifest number: 04E9 Signing time: Mon 16 Jun 2025 04:02:22 +0000 Manifest this update: Mon 16 Jun 2025 03:57:22 +0000 Manifest next update: Thu 19 Jun 2025 09:22:22 +0000 Files and hashes: 1: FBACFC63658425B36399C4B9D0322622B8C5B7F0.crl (hash: YPSwjsYCxtkKrebc3eQRqM8UqeohCggASb9mUNhjTyU=) 2: 3130332e3233342e3231382e302f32342d3234203d3e203338373638.roa (hash: vWQKx1TT5Vb7zbmKfpDwSS1ZiebEmEmR3LksZYKeYp8=) 3: 323430373a336538303a363a3a2f34382d3438203d3e203338343936.roa (hash: 4k+7oiIZgf8A+xoNtWkGh4r/bBNQQHgBlobDBAPY3jY=) 4: 323430373a336538303a3a2f33322d3438203d3e203338373638.roa (hash: jCqzfoNt2x+8bcJ6fatZirQ8CiZyxgl3URZLZEZ3szo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/FBACFC63658425B36399C4B9D0322622B8C5B7F0.crl rsync://repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/FBACFC63658425B36399C4B9D0322622B8C5B7F0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBACFC63658425B36399C4B9D0322622B8C5B7F0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 09:22:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:2c:31:22:e5:b5:9a:5d:ef:5b:a7:24:b6:26:8f:fe:98:b8:5b:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FBACFC63658425B36399C4B9D0322622B8C5B7F0 Validity Not Before: Jun 16 03:57:22 2025 GMT Not After : Jun 19 09:22:22 2025 GMT Subject: CN=B9D089F73AAA1013226EDFDE4A04F45C8BD222CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:4b:f6:ec:3d:24:e2:60:2f:87:c1:3b:b8:52: 1a:57:77:f9:d9:e7:75:69:0d:b2:c8:89:df:bd:6c: de:a4:87:0e:5a:41:37:02:11:2e:ac:f1:11:3b:21: 5f:21:70:23:d0:e9:22:50:88:17:80:a2:ec:b7:5f: 86:d2:c5:93:a3:30:5f:65:a8:eb:1e:d9:cf:a7:65: 52:ff:5f:87:ac:7a:66:7c:1d:1d:75:6f:36:25:9f: 7f:ef:1f:1b:b8:a7:a7:6e:84:6a:30:1a:5d:b4:a3: 24:0b:7c:45:85:4b:06:a2:87:27:b1:fd:ad:78:dc: 37:b4:ba:29:43:d7:b9:e8:c0:8a:e8:24:76:8f:16: 83:31:9a:b6:e2:0c:ff:b6:d2:46:7f:cc:55:ff:29: f7:06:c9:c1:18:be:89:53:ea:ab:04:8e:1d:c6:fa: 5f:90:a8:b1:49:56:0b:90:ab:10:8c:22:78:35:0c: c4:3a:24:1b:1e:6f:58:91:00:28:47:f0:20:d2:64: 52:fc:47:1f:1f:f1:0a:6b:87:e4:31:a3:50:63:0c: ea:06:7a:d9:0c:8a:86:83:ae:47:30:62:cf:6e:7a: e4:ab:3a:78:da:0d:38:74:ce:f8:2e:07:9f:c6:a7: c1:49:5b:e3:53:71:a9:f9:25:99:45:4f:b4:c1:6b: 1d:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:D0:89:F7:3A:AA:10:13:22:6E:DF:DE:4A:04:F4:5C:8B:D2:22:CE X509v3 Authority Key Identifier: keyid:FB:AC:FC:63:65:84:25:B3:63:99:C4:B9:D0:32:26:22:B8:C5:B7:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/FBACFC63658425B36399C4B9D0322622B8C5B7F0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBACFC63658425B36399C4B9D0322622B8C5B7F0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/FBACFC63658425B36399C4B9D0322622B8C5B7F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:a0:9c:47:e2:9f:1a:04:05:ce:7c:c4:02:42:89:f3:3e:5e: 56:b8:8f:fd:2c:a4:c2:08:28:c5:99:f4:a2:5b:5f:b4:d4:27: fd:dc:b7:ce:8b:d6:0d:ed:46:27:a8:25:f0:0a:4d:92:85:3d: b5:24:49:24:76:5a:41:3a:02:ef:76:31:9d:d1:97:1a:ef:bc: 85:6c:86:42:e7:3c:48:46:7a:51:83:9e:cc:47:15:f4:3b:63: ff:9d:b2:e3:ce:2d:6b:6e:a5:66:a0:a4:e7:ae:89:cd:bc:d7: 89:32:cc:c9:97:4f:ae:df:96:ea:e9:de:b7:91:d9:4e:45:6a: 44:a7:78:0e:9f:66:23:3e:d0:86:91:d6:44:46:ac:70:ce:69: f7:73:8c:28:34:bc:b2:47:ba:ea:b8:68:a5:ea:88:9a:24:24: 22:e4:19:88:e7:f1:cf:3d:ce:e5:4b:39:38:82:01:53:e8:94: 4b:91:53:4e:0d:85:96:e5:a5:72:90:49:a8:06:b0:50:8d:f1: 9c:e4:24:c9:73:7d:03:fd:26:fc:53:6a:88:95:bd:1d:b8:69: eb:55:f1:18:d4:66:c8:6c:c9:64:06:d7:82:c4:2c:42:7a:e7: 23:45:09:80:d0:7a:e6:35:7f:9b:2c:b3:ab:15:6e:c3:05:22: f7:a8:f4:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWiwxIuW1ml3vW6cktiaP/pi4W6wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkJBQ0ZDNjM2NTg0MjVCMzYzOTlDNEI5RDAzMjI2MjJC OEM1QjdGMDAeFw0yNTA2MTYwMzU3MjJaFw0yNTA2MTkwOTIyMjJaMDMxMTAvBgNV BAMTKEI5RDA4OUY3M0FBQTEwMTMyMjZFREZERTRBMDRGNDVDOEJEMjIyQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0S/bsPSTiYC+HwTu4UhpXd/nZ 53VpDbLIid+9bN6khw5aQTcCES6s8RE7IV8hcCPQ6SJQiBeAouy3X4bSxZOjMF9l qOse2c+nZVL/X4esemZ8HR11bzYln3/vHxu4p6duhGowGl20oyQLfEWFSwaihyex /a143De0uilD17nowIroJHaPFoMxmrbiDP+20kZ/zFX/KfcGycEYvolT6qsEjh3G +l+QqLFJVguQqxCMIng1DMQ6JBseb1iRAChH8CDSZFL8Rx8f8Qprh+Qxo1BjDOoG etkMioaDrkcwYs9ueuSrOnjaDTh0zvguB5/Gp8FJW+NTcan5JZlFT7TBax0tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUudCJ9zqqEBMibt/eSgT0XIvSIs4wHwYDVR0j BBgwFoAU+6z8Y2WEJbNjmcS50DImIrjFt/AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MWU5NDI0My04N2YwLTQyNmYtYTljYS00YzE5ZWRiMDZiNDIvMC9GQkFDRkM2MzY1 ODQyNUIzNjM5OUM0QjlEMDMyMjYyMkI4QzVCN0YwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkJBQ0ZDNjM2NTg0MjVCMzYzOTlDNEI5RDAzMjI2MjJCOEM1 QjdGMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTFlOTQyNDMtODdmMC00MjZmLWE5 Y2EtNGMxOWVkYjA2YjQyLzAvRkJBQ0ZDNjM2NTg0MjVCMzYzOTlDNEI5RDAzMjI2 MjJCOEM1QjdGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALignEfinxoEBc58xAJCifM+Xla4j/0spMII KMWZ9KJbX7TUJ/3ct86L1g3tRieoJfAKTZKFPbUkSSR2WkE6Au92MZ3RlxrvvIVs hkLnPEhGelGDnsxHFfQ7Y/+dsuPOLWtupWagpOeuic2814kyzMmXT67flurp3reR 2U5FakSneA6fZiM+0IaR1kRGrHDOafdzjCg0vLJHuuq4aKXqiJokJCLkGYjn8c89 zuVLOTiCAVPolEuRU04NhZblpXKQSagGsFCN8ZzkJMlzfQP9JvxTaoiVvR24aetV 8RjUZshsyWQG14LELEJ65yNFCYDQeuY1f5sss6sVbsMFIveo9F8= -----END CERTIFICATE-----Generated at Tue Jun 17 20:55:30 2025 by rpki-client