$ rpki-client -vvf repo-rpki.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.mft File: FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.mft (raw, json) Hash identifier: y0snCzuXXoeW/rW8O+xxwnhWELotZllgYqHQL+ABYas= Subject key identifier: F3:55:15:CC:BE:5E:5B:3D:EC:AB:C0:4F:A9:6B:6B:31:43:76:32:F5 Authority key identifier: FD:7C:5A:44:A3:CA:AF:7C:D1:40:CF:D1:C6:16:22:BA:5E:A2:E6:23 Certificate issuer: /CN=FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623 Certificate serial: 73BAA50CB426030939C1285E465936295474A38B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.mft Manifest number: C8 Signing time: Sat 14 Jun 2025 13:02:14 +0000 Manifest this update: Sat 14 Jun 2025 12:57:14 +0000 Manifest next update: Tue 17 Jun 2025 22:26:14 +0000 Files and hashes: 1: FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.crl (hash: WwDgeLTGjB9u7ueZb+lPAn/QO4gl4HweUybE7pWIxYo=) 2: 3135372e32302e3132362e302f32332d3234203d3e20313532343130.roa (hash: mIAtzNrfjeKiFzHKpCt4+yI3FhKtEfckYghfutbPb44=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.crl rsync://repo-rpki.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 22:26:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:ba:a5:0c:b4:26:03:09:39:c1:28:5e:46:59:36:29:54:74:a3:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623 Validity Not Before: Jun 14 12:57:14 2025 GMT Not After : Jun 17 22:26:14 2025 GMT Subject: CN=F35515CCBE5E5B3DECABC04FA96B6B31437632F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:31:f3:a3:3b:3d:5e:1c:cd:b5:21:00:58:31: 54:d9:08:52:b1:c7:49:d1:17:ca:aa:34:9c:c5:56: ba:26:b4:a5:f2:0c:e7:41:88:8f:fa:6a:70:91:14: 35:df:34:fe:bb:2a:72:cc:cc:f1:54:3c:75:2c:3a: 4e:c6:68:00:d9:7c:06:a0:b8:15:57:5b:a6:cf:64: 59:f9:da:ac:07:fc:15:17:1a:ae:ae:8e:24:b1:ee: 71:26:bf:0d:3b:0c:d4:e4:a1:e6:2f:33:78:1f:ad: 65:45:4e:29:a4:10:5c:f0:d7:85:6c:90:f3:b1:44: ed:bd:32:c2:c4:ff:72:ea:13:e7:ac:6c:8c:2d:c3: 80:af:1d:91:67:bf:0e:cd:6a:d9:78:d1:86:e9:0b: 09:87:f9:52:1e:b1:68:80:ad:e7:67:24:8c:f8:02: 87:ae:de:d9:d6:0c:f3:38:4e:0b:22:c6:c9:0d:95: d6:41:72:cd:b4:eb:85:4c:15:6a:99:a6:8a:3a:14: a9:7b:c8:54:89:50:0a:58:b4:e9:41:a1:53:7e:d0: 59:c7:58:53:13:0c:b2:f5:d1:fd:31:43:25:78:ef: ff:82:f1:7e:41:28:1c:65:c4:12:68:59:00:f1:18: 1d:1d:fc:83:2a:b0:d5:ab:ce:06:75:90:76:ba:cc: d2:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:55:15:CC:BE:5E:5B:3D:EC:AB:C0:4F:A9:6B:6B:31:43:76:32:F5 X509v3 Authority Key Identifier: keyid:FD:7C:5A:44:A3:CA:AF:7C:D1:40:CF:D1:C6:16:22:BA:5E:A2:E6:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:07:b7:dc:26:91:b8:cb:ea:50:b7:2f:e7:33:b8:16:25:88: 3e:7e:df:c7:b6:23:a7:d6:f9:34:a9:e7:0c:8a:36:fe:a2:5c: 8f:9c:88:60:d0:b4:91:af:ea:b1:35:67:1b:f8:a4:cc:5f:8f: d5:7f:fa:e9:40:ca:7b:0a:90:a6:36:1d:3e:d5:90:fb:92:40: d0:43:09:f6:71:d9:3b:30:c7:d2:34:4e:00:11:0f:1d:23:97: 56:5f:e0:94:ab:b8:5c:8e:4b:6b:19:23:58:5a:54:cf:bd:de: 2a:3e:54:08:61:ec:65:8d:2e:38:3e:3d:e6:5c:34:75:dd:b8: b3:78:70:2e:a1:f6:34:bb:6a:bd:dc:11:8a:ba:34:11:06:a6: 6f:bd:90:63:02:59:7e:93:b4:16:23:42:80:91:06:81:79:91: 99:09:4f:14:ba:2d:dc:5a:a5:db:98:2a:60:ef:e1:94:59:f3: 76:92:6e:aa:42:65:39:7c:30:f8:a3:df:8d:50:be:52:3e:16: 84:38:55:f1:d6:cc:c4:e3:3b:08:db:11:1a:9d:f7:d5:d4:a8: c4:1d:77:2d:bc:bc:46:94:e3:b8:30:ae:99:b6:69:b0:32:7e: 43:b2:bf:d3:c3:ae:a9:0d:5c:bb:de:09:90:77:78:6c:64:d6: 6c:61:43:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc7qlDLQmAwk5wSheRlk2KVR0o4swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkQ3QzVBNDRBM0NBQUY3Q0QxNDBDRkQxQzYxNjIyQkE1 RUEyRTYyMzAeFw0yNTA2MTQxMjU3MTRaFw0yNTA2MTcyMjI2MTRaMDMxMTAvBgNV BAMTKEYzNTUxNUNDQkU1RTVCM0RFQ0FCQzA0RkE5NkI2QjMxNDM3NjMyRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsMfOjOz1eHM21IQBYMVTZCFKx x0nRF8qqNJzFVromtKXyDOdBiI/6anCRFDXfNP67KnLMzPFUPHUsOk7GaADZfAag uBVXW6bPZFn52qwH/BUXGq6ujiSx7nEmvw07DNTkoeYvM3gfrWVFTimkEFzw14Vs kPOxRO29MsLE/3LqE+esbIwtw4CvHZFnvw7Natl40YbpCwmH+VIesWiArednJIz4 Aoeu3tnWDPM4TgsixskNldZBcs2064VMFWqZpoo6FKl7yFSJUApYtOlBoVN+0FnH WFMTDLL10f0xQyV47/+C8X5BKBxlxBJoWQDxGB0d/IMqsNWrzgZ1kHa6zNIrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU81UVzL5eWz3sq8BPqWtrMUN2MvUwHwYDVR0j BBgwFoAU/XxaRKPKr3zRQM/RxhYiul6i5iMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MGY3OGJkNC1jMTliLTRkNDAtYWE1NC1lZDhkN2JjNzcyY2EvMC9GRDdDNUE0NEEz Q0FBRjdDRDE0MENGRDFDNjE2MjJCQTVFQTJFNjIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkQ3QzVBNDRBM0NBQUY3Q0QxNDBDRkQxQzYxNjIyQkE1RUEy RTYyMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTBmNzhiZDQtYzE5Yi00ZDQwLWFh NTQtZWQ4ZDdiYzc3MmNhLzAvRkQ3QzVBNDRBM0NBQUY3Q0QxNDBDRkQxQzYxNjIy QkE1RUEyRTYyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAcHt9wmkbjL6lC3L+czuBYliD5+38e2I6fW +TSp5wyKNv6iXI+ciGDQtJGv6rE1Zxv4pMxfj9V/+ulAynsKkKY2HT7VkPuSQNBD CfZx2Tswx9I0TgARDx0jl1Zf4JSruFyOS2sZI1haVM+93io+VAhh7GWNLjg+PeZc NHXduLN4cC6h9jS7ar3cEYq6NBEGpm+9kGMCWX6TtBYjQoCRBoF5kZkJTxS6Ldxa pduYKmDv4ZRZ83aSbqpCZTl8MPij341QvlI+FoQ4VfHWzMTjOwjbERqd99XUqMQd dy28vEaU47gwrpm2abAyfkOyv9PDrqkNXLveCZB3eGxk1mxhQ80= -----END CERTIFICATE-----Generated at Sun Jun 15 15:31:41 2025 by rpki-client