$ rpki-client -vvf repo-rpki.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/FE47963FB6E13EFC318606E3CA31013421827343.mft File: FE47963FB6E13EFC318606E3CA31013421827343.mft (raw, json) Hash identifier: pCZ8C21DqKSmZBaIhUJgsKEiUFqU5pQ9idE22godgac= Subject key identifier: 80:D3:50:87:0F:8B:97:3B:3B:57:04:42:8A:47:18:B3:0F:0B:DC:DD Authority key identifier: FE:47:96:3F:B6:E1:3E:FC:31:86:06:E3:CA:31:01:34:21:82:73:43 Certificate issuer: /CN=FE47963FB6E13EFC318606E3CA31013421827343 Certificate serial: 2BAF50CD52509110AB6D2B266134070E922E671B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE47963FB6E13EFC318606E3CA31013421827343.cer Subject info access: rsync://repo-rpki.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/FE47963FB6E13EFC318606E3CA31013421827343.mft Manifest number: DB Signing time: Mon 28 Apr 2025 14:41:25 +0000 Manifest this update: Mon 28 Apr 2025 14:36:25 +0000 Manifest next update: Thu 01 May 2025 20:28:25 +0000 Files and hashes: 1: 3130332e36372e34392e302f32342d3234203d3e20313431363732.roa (hash: SqLVtRzYDgsE8xtvHEkXfWSJ3eq3r1xvCOHzgU8XSVA=) 2: FE47963FB6E13EFC318606E3CA31013421827343.crl (hash: 6piuTc3I0HuL81zYFpDmMG8ZH0N9q29LXLks4clTPaY=) 3: 3130332e3136322e3235322e302f32342d3234203d3e20313431363732.roa (hash: F/PrgRQWyjl54TnGtCvaw2IbmQgpyQyxqaaKjq7WP0U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/FE47963FB6E13EFC318606E3CA31013421827343.crl rsync://repo-rpki.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/FE47963FB6E13EFC318606E3CA31013421827343.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE47963FB6E13EFC318606E3CA31013421827343.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:28:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:af:50:cd:52:50:91:10:ab:6d:2b:26:61:34:07:0e:92:2e:67:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FE47963FB6E13EFC318606E3CA31013421827343 Validity Not Before: Apr 28 14:36:25 2025 GMT Not After : May 1 20:28:25 2025 GMT Subject: CN=80D350870F8B973B3B5704428A4718B30F0BDCDD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:71:f4:e2:b3:82:8b:f8:2a:f3:86:79:d0:ad: 18:5a:e4:f1:db:ff:2c:43:e7:37:ba:27:04:3a:6c: ec:e2:46:9d:0f:8a:63:d4:5f:4d:54:4f:88:a9:58: 1c:89:f3:da:15:76:ce:00:55:0e:19:29:9c:cf:2b: 8a:06:3e:74:0d:e7:2b:6f:99:f2:bf:0d:42:7d:28: 85:8b:79:66:aa:72:7e:68:74:e2:6b:ee:90:be:fa: 20:59:18:d1:63:a4:27:cb:e1:17:2b:57:59:a6:ee: 00:dc:a5:8b:1f:d1:8e:a3:d4:d7:40:19:2a:2b:f9: 88:17:40:5f:0e:10:0c:cc:a9:5c:ab:89:25:c5:e1: 6f:c6:3a:b0:bb:6b:d0:e9:84:87:55:58:4b:d7:57: 27:6e:43:2d:14:90:f9:f3:57:be:57:45:84:57:39: f4:25:72:fa:17:32:ac:bf:c8:35:1f:b6:7c:e2:b2: 8f:7b:ae:2b:af:e3:25:4d:d7:79:75:36:64:16:77: e8:9e:00:78:f6:11:14:8f:f6:1e:cb:eb:8f:cf:ee: 1e:d9:2d:2f:85:ad:65:9f:69:70:df:c6:bb:f1:29: 20:91:a9:24:2c:25:4c:27:1f:48:e1:ed:84:75:bd: b8:68:c9:5e:4e:dd:2c:85:a0:83:28:2d:c9:0e:a9: 8f:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:D3:50:87:0F:8B:97:3B:3B:57:04:42:8A:47:18:B3:0F:0B:DC:DD X509v3 Authority Key Identifier: keyid:FE:47:96:3F:B6:E1:3E:FC:31:86:06:E3:CA:31:01:34:21:82:73:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/FE47963FB6E13EFC318606E3CA31013421827343.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE47963FB6E13EFC318606E3CA31013421827343.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/FE47963FB6E13EFC318606E3CA31013421827343.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:e1:ac:54:c1:3d:9d:49:29:8e:35:91:ab:51:43:2f:df:03: 7e:bc:73:40:e9:f1:61:3f:58:80:64:49:d7:6f:06:1b:6d:37: 32:b2:f0:a8:01:90:d7:4f:cd:ea:f6:ea:7a:9b:14:7e:ce:48: ea:a4:e2:fd:51:dc:77:31:61:19:7e:ab:ac:b6:cd:f1:66:2f: da:32:50:dc:8c:32:dd:b7:7c:74:34:dd:13:ff:a3:bb:2a:71: 47:99:bb:81:1e:fb:78:e2:64:81:d3:eb:44:35:d2:13:63:e9: 9f:62:30:2f:43:f3:3d:07:e0:09:33:42:bc:36:c5:aa:62:d5: 6b:e2:a4:ac:1c:f7:7f:ea:ad:94:c3:83:74:a2:1e:5b:f3:27: 0a:83:9e:30:71:f5:42:86:6d:9a:4a:82:f8:49:e4:e3:04:58: 2e:29:4b:ad:2f:f8:44:16:64:9b:2c:db:f4:70:40:4f:c0:6c: ed:de:72:cc:65:3f:37:a9:1f:60:50:83:6d:6f:0d:a5:1e:e1: 26:a7:3e:7c:8c:93:7e:99:bd:9c:7a:a2:64:32:e3:2e:10:76: ad:ed:d4:dd:86:92:1f:d2:e6:8c:be:76:e4:a4:c7:23:d6:4b: e0:40:b6:9f:42:b9:2a:7f:ea:dc:af:64:ff:62:b1:9b:3f:fb: 4c:04:af:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK69QzVJQkRCrbSsmYTQHDpIuZxswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkU0Nzk2M0ZCNkUxM0VGQzMxODYwNkUzQ0EzMTAxMzQy MTgyNzM0MzAeFw0yNTA0MjgxNDM2MjVaFw0yNTA1MDEyMDI4MjVaMDMxMTAvBgNV BAMTKDgwRDM1MDg3MEY4Qjk3M0IzQjU3MDQ0MjhBNDcxOEIzMEYwQkRDREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDacfTis4KL+CrzhnnQrRha5PHb /yxD5ze6JwQ6bOziRp0PimPUX01UT4ipWByJ89oVds4AVQ4ZKZzPK4oGPnQN5ytv mfK/DUJ9KIWLeWaqcn5odOJr7pC++iBZGNFjpCfL4RcrV1mm7gDcpYsf0Y6j1NdA GSor+YgXQF8OEAzMqVyriSXF4W/GOrC7a9DphIdVWEvXVyduQy0UkPnzV75XRYRX OfQlcvoXMqy/yDUftnziso97riuv4yVN13l1NmQWd+ieAHj2ERSP9h7L64/P7h7Z LS+FrWWfaXDfxrvxKSCRqSQsJUwnH0jh7YR1vbhoyV5O3SyFoIMoLckOqY9zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgNNQhw+Llzs7VwRCikcYsw8L3N0wHwYDVR0j BBgwFoAU/keWP7bhPvwxhgbjyjEBNCGCc0MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ODQ2Njg4OS1jMWVmLTQ0MTAtYWQ5Yy0zMDZjMDllMWJlMDYvMC9GRTQ3OTYzRkI2 RTEzRUZDMzE4NjA2RTNDQTMxMDEzNDIxODI3MzQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkU0Nzk2M0ZCNkUxM0VGQzMxODYwNkUzQ0EzMTAxMzQyMTgy NzM0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjg0NjY4ODktYzFlZi00NDEwLWFk OWMtMzA2YzA5ZTFiZTA2LzAvRkU0Nzk2M0ZCNkUxM0VGQzMxODYwNkUzQ0EzMTAx MzQyMTgyNzM0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA3hrFTBPZ1JKY41katRQy/fA368c0Dp8WE/ WIBkSddvBhttNzKy8KgBkNdPzer26nqbFH7OSOqk4v1R3HcxYRl+q6y2zfFmL9oy UNyMMt23fHQ03RP/o7sqcUeZu4Ee+3jiZIHT60Q10hNj6Z9iMC9D8z0H4AkzQrw2 xapi1WvipKwc93/qrZTDg3SiHlvzJwqDnjBx9UKGbZpKgvhJ5OMEWC4pS60v+EQW ZJss2/RwQE/AbO3ecsxlPzepH2BQg21vDaUe4SanPnyMk36ZvZx6omQy4y4Qdq3t 1N2Gkh/S5oy+duSkxyPWS+BAtp9CuSp/6tyvZP9isZs/+0wEr3I= -----END CERTIFICATE-----Generated at Tue Apr 29 09:42:10 2025 by rpki-client