$ rpki-client -vvf repo-rpki.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.mft File: FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.mft (raw, json) Hash identifier: lh/pKNREPKznod4h7e0tFw1c1eo9RupehdZTK9po/88= Subject key identifier: 5C:1E:BA:20:31:43:F2:17:24:98:E1:A0:4A:74:53:E6:CC:60:9E:54 Authority key identifier: FA:B0:81:FC:D8:6A:B0:F8:1D:41:C9:E5:FB:9C:3D:32:22:0F:48:CD Certificate issuer: /CN=FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD Certificate serial: 1B3AE509AD133CA63C6BDF0B0E6CB01841A8B033 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.mft Manifest number: C0 Signing time: Sat 26 Apr 2025 06:51:18 +0000 Manifest this update: Sat 26 Apr 2025 06:46:18 +0000 Manifest next update: Tue 29 Apr 2025 09:04:18 +0000 Files and hashes: 1: 3135372e31302e302e302f32342d3234203d3e20313532303739.roa (hash: /rLqhw2hFwRMsfI5zGP3QkMBxOWlLSkauOe3xFxChRo=) 2: FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.crl (hash: ftXHx+a1geI77+my3c/XnBFfCyLjpVDGeSsuyXxgNK4=) 3: 3135372e31302e312e302f32342d3234203d3e20313532303739.roa (hash: 8mKHP2haWx9nDqWVpffr2HLwx0PW3MsCMnqlWHBgH8s=) 4: 3135372e31302e302e302f32332d3233203d3e20313532303739.roa (hash: LI/HMaoSlImx3bWiKBUR5SBmy9IHEOgEnYbWctfALp8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.crl rsync://repo-rpki.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 03:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:3a:e5:09:ad:13:3c:a6:3c:6b:df:0b:0e:6c:b0:18:41:a8:b0:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD Validity Not Before: Apr 26 06:46:18 2025 GMT Not After : Apr 29 09:04:18 2025 GMT Subject: CN=5C1EBA203143F2172498E1A04A7453E6CC609E54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a4:0a:2f:eb:84:0d:d3:d2:30:6b:f0:8f:2b: 6b:61:d7:ce:ab:7c:13:12:f9:5e:bd:ad:60:8e:e6: c5:d5:27:42:0d:77:f2:7f:04:fa:88:a3:1d:d8:1c: f6:70:34:5a:a7:94:c5:81:d3:96:52:b2:a5:29:1a: 5b:1c:a9:29:4d:05:5e:29:0c:f5:b2:a9:27:b4:2a: f3:3f:db:cb:95:72:fc:c6:b5:48:3a:4b:12:d6:7d: 41:5f:d9:c0:e0:fc:b8:49:5c:ee:f2:f4:2a:38:aa: f6:78:61:28:7b:97:d9:b7:61:a4:02:27:11:4c:ef: d0:0c:94:53:22:4f:8c:85:de:79:7c:fe:d2:ac:ef: a8:a6:1f:0d:61:65:7a:39:3d:32:6c:64:c5:3d:b7: b0:e1:b2:6e:d8:21:65:63:3d:63:2e:61:c6:96:aa: 79:42:ba:73:a7:ae:07:05:d3:a0:dc:06:ae:c0:6e: f9:e4:c7:b3:bc:b9:eb:04:88:ae:73:a7:50:a1:7c: d6:05:67:ed:81:19:3b:87:1f:1e:82:94:11:10:33: 9a:07:41:3d:86:9d:11:c8:9e:05:5c:e3:e6:86:ba: a8:c9:42:23:d9:e6:d9:2a:02:fe:dd:4c:41:5d:78: b1:ca:c9:e7:8d:2e:96:69:23:69:8f:4e:ab:ba:ef: 39:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:1E:BA:20:31:43:F2:17:24:98:E1:A0:4A:74:53:E6:CC:60:9E:54 X509v3 Authority Key Identifier: keyid:FA:B0:81:FC:D8:6A:B0:F8:1D:41:C9:E5:FB:9C:3D:32:22:0F:48:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:5e:c5:7e:66:36:11:21:fd:24:8f:fe:6e:1a:b5:71:bf:52: 7e:11:bd:d1:2b:55:e1:55:20:43:39:6f:01:4a:3d:7f:8f:40: c6:a5:04:8d:0c:2f:24:80:71:1e:63:95:a5:b0:cd:55:4f:77: ca:9b:2d:6c:77:f8:68:df:fd:bb:d8:34:83:c7:54:54:42:a9: 59:8c:01:49:cd:2e:cb:b0:41:70:3f:bc:39:71:45:0b:c7:82: 6f:d2:51:b6:b4:ae:9e:9f:c3:ac:ab:90:22:ef:b5:8e:3c:88: 06:0d:81:b5:1f:c7:03:89:9c:6a:e2:f6:a4:79:c5:5e:69:e5: 8e:0e:7f:99:80:fd:04:b2:85:e7:88:3c:e0:79:6b:98:8b:aa: 02:2b:4e:e1:9e:f5:73:36:9a:79:54:8f:12:ba:12:7c:28:f7: 62:83:c7:8a:d8:08:f0:2a:40:77:32:d0:4a:de:b5:a9:6e:f0: 1b:b9:03:41:ec:c6:08:83:a7:14:8b:22:97:6a:60:1b:7b:e3: 66:78:0f:26:74:38:aa:b2:06:9c:f9:bf:b9:15:c6:33:e9:39: a4:29:5c:82:50:9f:37:da:c3:bd:fa:79:91:39:e7:e9:f5:68: 6e:c2:c2:91:e1:a7:b9:64:0d:0d:c8:8c:9e:e2:60:9a:4b:0c: 94:bb:94:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGzrlCa0TPKY8a98LDmywGEGosDMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkFCMDgxRkNEODZBQjBGODFENDFDOUU1RkI5QzNEMzIy MjBGNDhDRDAeFw0yNTA0MjYwNjQ2MThaFw0yNTA0MjkwOTA0MThaMDMxMTAvBgNV BAMTKDVDMUVCQTIwMzE0M0YyMTcyNDk4RTFBMDRBNzQ1M0U2Q0M2MDlFNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEpAov64QN09Iwa/CPK2th186r fBMS+V69rWCO5sXVJ0INd/J/BPqIox3YHPZwNFqnlMWB05ZSsqUpGlscqSlNBV4p DPWyqSe0KvM/28uVcvzGtUg6SxLWfUFf2cDg/LhJXO7y9Co4qvZ4YSh7l9m3YaQC JxFM79AMlFMiT4yF3nl8/tKs76imHw1hZXo5PTJsZMU9t7Dhsm7YIWVjPWMuYcaW qnlCunOnrgcF06DcBq7Abvnkx7O8uesEiK5zp1ChfNYFZ+2BGTuHHx6ClBEQM5oH QT2GnRHIngVc4+aGuqjJQiPZ5tkqAv7dTEFdeLHKyeeNLpZpI2mPTqu67zmdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXB66IDFD8hckmOGgSnRT5sxgnlQwHwYDVR0j BBgwFoAU+rCB/NhqsPgdQcnl+5w9MiIPSM0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OTRkMWY2Mi04NDg4LTQwODYtOGQ0Yy1mMmRlNWM3NmRhM2QvMC9GQUIwODFGQ0Q4 NkFCMEY4MUQ0MUM5RTVGQjlDM0QzMjIyMEY0OENELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkFCMDgxRkNEODZBQjBGODFENDFDOUU1RkI5QzNEMzIyMjBG NDhDRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTk0ZDFmNjItODQ4OC00MDg2LThk NGMtZjJkZTVjNzZkYTNkLzAvRkFCMDgxRkNEODZBQjBGODFENDFDOUU1RkI5QzNE MzIyMjBGNDhDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALVexX5mNhEh/SSP/m4atXG/Un4RvdErVeFV IEM5bwFKPX+PQMalBI0MLySAcR5jlaWwzVVPd8qbLWx3+Gjf/bvYNIPHVFRCqVmM AUnNLsuwQXA/vDlxRQvHgm/SUba0rp6fw6yrkCLvtY48iAYNgbUfxwOJnGri9qR5 xV5p5Y4Of5mA/QSyheeIPOB5a5iLqgIrTuGe9XM2mnlUjxK6Enwo92KDx4rYCPAq QHcy0Eretalu8Bu5A0HsxgiDpxSLIpdqYBt742Z4DyZ0OKqyBpz5v7kVxjPpOaQp XIJQnzfaw736eZE55+n1aG7CwpHhp7lkDQ3IjJ7iYJpLDJS7lB8= -----END CERTIFICATE-----Generated at Sun Apr 27 11:19:48 2025 by rpki-client