$ rpki-client -vvf repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.mft File: FC2DAAA409BA60DE33EC91F3A861D1A00719D426.mft (raw, json) Hash identifier: twPrHTFnwXRZhPuK7nKVzhvmiY3E/TYODa5OyACRB4A= Subject key identifier: 67:6D:2F:43:C9:8D:2F:BF:11:78:DC:0D:D2:24:73:C3:09:D3:EF:04 Authority key identifier: FC:2D:AA:A4:09:BA:60:DE:33:EC:91:F3:A8:61:D1:A0:07:19:D4:26 Certificate issuer: /CN=FC2DAAA409BA60DE33EC91F3A861D1A00719D426 Certificate serial: 6B078882E6354AEE796AD57CF266CCDC000B7F70 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.mft Manifest number: 98 Signing time: Sun 27 Apr 2025 01:50:48 +0000 Manifest this update: Sun 27 Apr 2025 01:45:48 +0000 Manifest next update: Wed 30 Apr 2025 02:04:48 +0000 Files and hashes: 1: 3135372e36362e322e302f32332d3234203d3e20313532343430.roa (hash: k1ABqECpixq2cAGwylGOS1bNZF6AWmXzRRrM23inilg=) 2: FC2DAAA409BA60DE33EC91F3A861D1A00719D426.crl (hash: FaGFZgpBVSk4tLayoWsAm1z0VV3oRRX9YLRrE5YbZ9s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.crl rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 02:04:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:07:88:82:e6:35:4a:ee:79:6a:d5:7c:f2:66:cc:dc:00:0b:7f:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC2DAAA409BA60DE33EC91F3A861D1A00719D426 Validity Not Before: Apr 27 01:45:48 2025 GMT Not After : Apr 30 02:04:48 2025 GMT Subject: CN=676D2F43C98D2FBF1178DC0DD22473C309D3EF04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:6f:54:aa:25:37:cb:05:9e:34:3c:5a:76:5e: 5f:9e:78:91:b1:58:15:e7:ad:ac:46:2c:07:92:e8: e4:55:48:ba:b6:ea:78:37:1e:4d:4f:6d:23:df:bd: 05:55:08:aa:a7:60:6c:42:b4:6c:59:55:fc:e5:60: 7e:c6:a9:a5:ac:76:9c:31:ac:5b:ed:54:39:50:9e: 58:c5:8f:2e:ab:0a:87:36:6b:ff:3d:02:c0:46:23: b5:77:97:d4:b1:51:3e:7c:84:a5:cf:d0:98:35:bb: b3:b5:2b:91:17:92:0c:7a:1f:a1:b1:65:b1:73:ae: 8c:0b:09:b3:24:e8:92:1f:0a:c3:ef:cb:e1:32:9a: 65:f4:7b:07:9b:5f:28:04:88:56:a8:c5:9a:2d:3f: 13:ce:7f:af:f7:c5:fa:88:17:03:a3:06:03:9b:5f: d8:a1:69:31:17:c6:b0:c4:ef:e2:cd:a1:29:b1:cc: 73:f4:02:17:1f:99:17:ac:fb:2a:de:a7:ff:35:4f: e1:85:3a:0e:01:44:0c:f8:6a:48:9d:e8:54:57:ff: 49:dd:50:a3:69:34:27:d5:eb:b2:c6:99:e5:4a:39: 01:74:fa:d2:68:dd:6c:60:4a:e1:75:af:2b:80:4f: 6f:a3:2f:54:29:3e:1a:89:36:40:1a:db:5d:f0:01: 4f:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:6D:2F:43:C9:8D:2F:BF:11:78:DC:0D:D2:24:73:C3:09:D3:EF:04 X509v3 Authority Key Identifier: keyid:FC:2D:AA:A4:09:BA:60:DE:33:EC:91:F3:A8:61:D1:A0:07:19:D4:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:89:c9:4f:ba:0c:56:e4:7a:b3:1b:4d:8d:3f:58:c8:e3:af: 39:fd:31:5d:be:cc:f2:a2:fe:ee:40:ad:44:fb:46:2c:e1:2c: 18:1b:f5:46:43:b3:db:c3:af:00:6d:69:58:a6:42:57:c2:48: 99:78:6c:66:07:b6:5b:ea:d2:57:12:07:e5:f8:02:83:37:55: 65:27:8f:aa:46:89:3f:75:b0:f5:99:07:38:8c:ac:bc:48:89: f0:40:92:f1:b5:44:94:e0:8b:d9:33:6d:a2:4a:d5:5b:5a:ff: 5f:93:cb:62:66:51:6f:24:81:91:ea:3d:a2:6e:a8:d1:26:d3: fd:54:d9:9b:9f:a3:3e:28:21:78:a3:6e:c5:93:64:e3:23:68: 0f:c6:65:43:8d:98:86:9b:ae:3b:2b:33:96:36:7c:9a:6f:15: c0:74:a4:cb:16:6b:c3:85:90:6c:b0:48:1b:df:dd:0b:bd:b8: 2f:87:f9:06:ff:90:ac:78:27:3b:57:71:52:9e:05:80:e2:b2: d7:5f:d9:18:00:42:b4:f0:f8:7a:a3:7d:24:b2:8e:9f:d2:69: 4d:c7:8d:a1:05:b0:ab:61:c2:6a:8f:98:fe:a7:45:1e:78:60: b7:5f:c1:37:d8:9a:c2:bd:f1:8c:7e:35:aa:80:f1:92:69:4e: 51:fc:14:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaweIguY1Su55atV88mbM3AALf3AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkMyREFBQTQwOUJBNjBERTMzRUM5MUYzQTg2MUQxQTAw NzE5RDQyNjAeFw0yNTA0MjcwMTQ1NDhaFw0yNTA0MzAwMjA0NDhaMDMxMTAvBgNV BAMTKDY3NkQyRjQzQzk4RDJGQkYxMTc4REMwREQyMjQ3M0MzMDlEM0VGMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsb1SqJTfLBZ40PFp2Xl+eeJGx WBXnraxGLAeS6ORVSLq26ng3Hk1PbSPfvQVVCKqnYGxCtGxZVfzlYH7GqaWsdpwx rFvtVDlQnljFjy6rCoc2a/89AsBGI7V3l9SxUT58hKXP0Jg1u7O1K5EXkgx6H6Gx ZbFzrowLCbMk6JIfCsPvy+EymmX0ewebXygEiFaoxZotPxPOf6/3xfqIFwOjBgOb X9ihaTEXxrDE7+LNoSmxzHP0AhcfmRes+yrep/81T+GFOg4BRAz4akid6FRX/0nd UKNpNCfV67LGmeVKOQF0+tJo3WxgSuF1ryuAT2+jL1QpPhqJNkAa213wAU/RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZ20vQ8mNL78ReNwN0iRzwwnT7wQwHwYDVR0j BBgwFoAU/C2qpAm6YN4z7JHzqGHRoAcZ1CYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZmI4MDhlYi1jOThlLTQwMzYtYmU5YS0xOTNiYmNjNjQ4OTIvMC9GQzJEQUFBNDA5 QkE2MERFMzNFQzkxRjNBODYxRDFBMDA3MTlENDI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkMyREFBQTQwOUJBNjBERTMzRUM5MUYzQTg2MUQxQTAwNzE5 RDQyNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWZiODA4ZWItYzk4ZS00MDM2LWJl OWEtMTkzYmJjYzY0ODkyLzAvRkMyREFBQTQwOUJBNjBERTMzRUM5MUYzQTg2MUQx QTAwNzE5RDQyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACmJyU+6DFbkerMbTY0/WMjjrzn9MV2+zPKi /u5ArUT7RizhLBgb9UZDs9vDrwBtaVimQlfCSJl4bGYHtlvq0lcSB+X4AoM3VWUn j6pGiT91sPWZBziMrLxIifBAkvG1RJTgi9kzbaJK1Vta/1+Ty2JmUW8kgZHqPaJu qNEm0/1U2Zufoz4oIXijbsWTZOMjaA/GZUONmIabrjsrM5Y2fJpvFcB0pMsWa8OF kGywSBvf3Qu9uC+H+Qb/kKx4JztXcVKeBYDistdf2RgAQrTw+HqjfSSyjp/SaU3H jaEFsKthwmqPmP6nRR54YLdfwTfYmsK98Yx+NaqA8ZJpTlH8FPc= -----END CERTIFICATE-----Generated at Tue Apr 29 01:31:25 2025 by rpki-client