$ rpki-client -vvf repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.mft File: FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.mft (raw, json) Hash identifier: EaDzxVu58MKHJ/RDBmXcLtCOMM6AFtGtRaRccENpfbo= Subject key identifier: 8C:3C:65:1C:1F:78:C9:D8:84:C0:CB:B8:1E:73:DA:C4:48:A5:46:46 Authority key identifier: FB:1D:4F:91:39:A6:1D:F4:B9:1E:31:27:0F:3D:2A:1C:07:B3:5C:E1 Certificate issuer: /CN=FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1 Certificate serial: 64CB13232BBC3C4C7F74002B126A632AF908693B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.mft Manifest number: 017D Signing time: Sun 15 Jun 2025 09:52:01 +0000 Manifest this update: Sun 15 Jun 2025 09:47:01 +0000 Manifest next update: Wed 18 Jun 2025 11:40:01 +0000 Files and hashes: 1: 3130332e3134392e3131382e302f32332d3234203d3e20313431303535.roa (hash: u22TiDBqhxRDgDXVHX7pAHC7nu8jAukDNtzJmORzlts=) 2: FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.crl (hash: hiQ3RTOLNkOqmgHICjiuOiW2FmIwNqJV/eKqzouyUjE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.crl rsync://repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 11:40:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:cb:13:23:2b:bc:3c:4c:7f:74:00:2b:12:6a:63:2a:f9:08:69:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1 Validity Not Before: Jun 15 09:47:01 2025 GMT Not After : Jun 18 11:40:01 2025 GMT Subject: CN=8C3C651C1F78C9D884C0CBB81E73DAC448A54646 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:a0:f0:c3:fc:82:e9:a3:27:32:8f:98:49:13: 34:d0:b8:5e:9c:ca:ea:1e:53:47:1f:18:00:dc:59: 7e:8b:ca:6b:f9:79:18:53:4a:5a:4c:47:db:b4:85: 8d:40:3b:f0:73:c9:cb:a6:50:8e:f2:bc:4b:07:96: 98:d8:a4:ff:01:cc:0c:a9:d8:d9:b4:c6:eb:5a:d9: d6:99:c2:76:46:40:a5:fb:c4:a6:be:26:e1:05:28: b3:69:06:73:fd:de:19:a3:18:51:46:95:e3:40:25: b3:8a:09:e3:f9:19:f2:f2:94:7b:93:96:05:11:80: 7f:32:a9:0f:9e:e9:51:4f:ef:a4:2f:f9:66:1c:58: f6:7e:d6:f2:81:a8:94:c2:4d:ff:51:f1:ea:19:c8: 88:ba:12:cb:c4:d9:20:a1:78:b3:0a:51:92:76:43: a6:a3:4e:3d:e4:1b:11:03:30:bf:e1:56:a8:5e:27: 36:47:95:f2:8a:1c:a8:14:8d:9b:5e:a3:7a:f9:28: 9a:5d:7e:4e:27:b3:2c:61:48:0c:58:a5:1c:2b:d9: 2c:04:1c:d1:64:9d:bc:c4:ab:7b:4d:a9:f7:9d:26: e7:67:85:c0:d8:ab:fe:c8:30:a7:85:ae:36:74:7a: 93:37:2f:02:5f:68:42:08:f1:6f:9a:72:95:f7:4f: 04:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:3C:65:1C:1F:78:C9:D8:84:C0:CB:B8:1E:73:DA:C4:48:A5:46:46 X509v3 Authority Key Identifier: keyid:FB:1D:4F:91:39:A6:1D:F4:B9:1E:31:27:0F:3D:2A:1C:07:B3:5C:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:ce:b8:66:b5:bf:52:a5:be:a6:54:06:41:d4:02:f5:ee:1f: e9:38:0b:b6:bd:05:10:3c:e6:9c:f0:e8:b0:ee:e2:a4:91:12: 48:45:61:f5:1b:63:af:17:8a:52:5f:47:0c:39:1c:0c:0a:de: ea:42:1e:9a:ca:4e:ba:fe:d2:c9:2d:da:09:c6:2d:10:9b:86: 84:93:35:99:a6:7f:92:b9:c1:ce:c3:5e:20:74:e6:06:17:0a: 03:d6:d2:31:a0:7d:a9:70:ce:dd:2d:e0:08:b6:ca:23:59:bc: a1:bf:25:1a:c3:b3:e6:a6:9a:d8:71:91:53:eb:66:07:43:8c: ba:e1:29:88:a3:14:be:79:a2:5c:9f:10:ee:9c:d1:e5:a0:36: 3b:05:8d:e8:44:e7:d8:be:65:26:25:ed:32:50:55:01:e1:2c: ed:d3:96:70:d5:de:07:37:f5:55:78:4f:73:d2:a7:02:7b:e0: f3:0e:1a:b5:02:0b:28:79:05:b3:5a:0f:f3:f2:70:12:15:4a: f1:a9:25:92:ef:75:8a:26:cd:be:f9:db:6b:51:11:64:6d:23: b9:d9:ba:06:72:7d:80:16:df:23:e5:6d:21:df:af:f3:89:59: 48:d0:16:ad:fa:84:ff:bc:92:18:ef:36:e4:f0:d7:87:2b:22: 42:05:99:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZMsTIyu8PEx/dAArEmpjKvkIaTswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkIxRDRGOTEzOUE2MURGNEI5MUUzMTI3MEYzRDJBMUMw N0IzNUNFMTAeFw0yNTA2MTUwOTQ3MDFaFw0yNTA2MTgxMTQwMDFaMDMxMTAvBgNV BAMTKDhDM0M2NTFDMUY3OEM5RDg4NEMwQ0JCODFFNzNEQUM0NDhBNTQ2NDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkoPDD/ILpoycyj5hJEzTQuF6c yuoeU0cfGADcWX6Lymv5eRhTSlpMR9u0hY1AO/BzycumUI7yvEsHlpjYpP8BzAyp 2Nm0xuta2daZwnZGQKX7xKa+JuEFKLNpBnP93hmjGFFGleNAJbOKCeP5GfLylHuT lgURgH8yqQ+e6VFP76Qv+WYcWPZ+1vKBqJTCTf9R8eoZyIi6EsvE2SCheLMKUZJ2 Q6ajTj3kGxEDML/hVqheJzZHlfKKHKgUjZteo3r5KJpdfk4nsyxhSAxYpRwr2SwE HNFknbzEq3tNqfedJudnhcDYq/7IMKeFrjZ0epM3LwJfaEII8W+acpX3TwSlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjDxlHB94ydiEwMu4HnPaxEilRkYwHwYDVR0j BBgwFoAU+x1PkTmmHfS5HjEnDz0qHAezXOEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Y2M3MGY3ZC0zM2ZlLTRkZjItODFlNS1kYzBkNTVhYzUxNzAvMC9GQjFENEY5MTM5 QTYxREY0QjkxRTMxMjcwRjNEMkExQzA3QjM1Q0UxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkIxRDRGOTEzOUE2MURGNEI5MUUzMTI3MEYzRDJBMUMwN0Iz NUNFMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWNjNzBmN2QtMzNmZS00ZGYyLTgx ZTUtZGMwZDU1YWM1MTcwLzAvRkIxRDRGOTEzOUE2MURGNEI5MUUzMTI3MEYzRDJB MUMwN0IzNUNFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACzOuGa1v1KlvqZUBkHUAvXuH+k4C7a9BRA8 5pzw6LDu4qSREkhFYfUbY68XilJfRww5HAwK3upCHprKTrr+0skt2gnGLRCbhoST NZmmf5K5wc7DXiB05gYXCgPW0jGgfalwzt0t4Ai2yiNZvKG/JRrDs+ammthxkVPr ZgdDjLrhKYijFL55olyfEO6c0eWgNjsFjehE59i+ZSYl7TJQVQHhLO3TlnDV3gc3 9VV4T3PSpwJ74PMOGrUCCyh5BbNaD/PycBIVSvGpJZLvdYomzb7522tREWRtI7nZ ugZyfYAW3yPlbSHfr/OJWUjQFq36hP+8khjvNuTw14crIkIFmRk= -----END CERTIFICATE-----Generated at Tue Jun 17 13:20:31 2025 by rpki-client