$ rpki-client -vvf repo-rpki.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.mft File: FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.mft (raw, json) Hash identifier: xr2P12ApFkmNJn9appZecznJ/ZZQ1EBlteSd63jI4y4= Subject key identifier: 01:8B:57:71:D2:B2:24:19:DD:24:92:7F:5D:32:C3:91:16:63:E0:6A Authority key identifier: FB:3F:CC:1A:69:B1:BD:92:D6:A3:19:D7:FD:82:0E:EE:CE:67:42:45 Certificate issuer: /CN=FB3FCC1A69B1BD92D6A319D7FD820EEECE674245 Certificate serial: 7F0757416A52BE7168F47B8057324284AAEC90B8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.mft Manifest number: 0348 Signing time: Sat 26 Apr 2025 01:51:23 +0000 Manifest this update: Sat 26 Apr 2025 01:46:23 +0000 Manifest next update: Tue 29 Apr 2025 09:35:23 +0000 Files and hashes: 1: 3130332e3136342e3137302e302f32332d3234203d3e203137393935.roa (hash: MpHOToxaZFJCjw2k5H3oUXqKj/fG2hglRtV60kyYteg=) 2: FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.crl (hash: 2jsNMG9Xaoetbf8vfFElbK8iKHfwuZdp8CMh/Jwswk8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.crl rsync://repo-rpki.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 09:35:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:07:57:41:6a:52:be:71:68:f4:7b:80:57:32:42:84:aa:ec:90:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB3FCC1A69B1BD92D6A319D7FD820EEECE674245 Validity Not Before: Apr 26 01:46:23 2025 GMT Not After : Apr 29 09:35:23 2025 GMT Subject: CN=018B5771D2B22419DD24927F5D32C3911663E06A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d7:a3:e2:fd:d9:d6:a8:3b:7d:8b:d3:a5:c5: 26:ea:37:f5:43:ba:08:5c:12:ce:ba:8d:67:42:7a: 1b:c1:eb:1c:a8:ed:f7:a4:13:85:71:c8:65:b9:70: 0b:ad:c7:44:88:4f:ca:03:fc:93:42:64:ba:13:74: 8c:64:0d:f6:27:78:ca:7e:59:c3:ce:ad:eb:77:22: ab:d9:71:f9:37:4a:84:84:25:c7:1b:7c:e8:e7:70: c7:87:7b:85:f3:e4:38:ca:29:fc:cb:5d:d5:85:87: 20:65:74:7b:b9:9f:d3:ca:99:a7:ad:d5:23:e3:e9: 53:34:86:30:4d:a9:d8:7d:b1:92:10:3e:ec:8d:b8: 15:91:c3:23:c1:3f:33:7c:ba:20:4d:b3:58:4d:a3: 82:9c:ab:6b:30:60:61:78:a5:65:35:f6:5e:ad:bf: 3c:23:2d:4a:5e:db:f4:9f:34:8a:e9:92:91:17:63: 96:1c:9a:24:ef:9c:05:60:fc:1d:aa:d2:09:83:4f: 3f:02:b7:3b:da:3e:94:85:cb:1f:c5:e6:61:4c:37: 86:fb:d0:60:ba:ca:08:ea:da:cf:59:e4:f5:4e:b6: d8:2c:1a:1b:a3:38:37:4b:09:9f:e2:c5:9e:a5:f5: 49:a9:60:48:c4:41:af:00:ee:5f:79:45:00:b4:5b: 26:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:8B:57:71:D2:B2:24:19:DD:24:92:7F:5D:32:C3:91:16:63:E0:6A X509v3 Authority Key Identifier: keyid:FB:3F:CC:1A:69:B1:BD:92:D6:A3:19:D7:FD:82:0E:EE:CE:67:42:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:07:6f:29:5a:31:a8:6a:ad:f5:d3:1f:17:30:9e:f7:c2:3b: 96:30:dd:38:ae:f0:f5:7a:d5:7c:0c:b6:91:a6:07:f2:e1:96: 65:bb:16:5c:87:77:1d:46:5a:99:7f:64:b5:ea:22:7c:96:bc: fe:3d:a4:03:fe:32:a5:89:cf:7a:3b:4d:10:35:c7:84:41:b2: 9e:1b:d8:d8:50:e3:07:67:ee:36:ad:ba:38:5d:dc:28:62:33: 50:f2:60:f0:f7:8e:14:82:22:06:a4:d9:fb:48:3f:20:5b:1d: 20:a9:aa:e3:dc:7c:0c:58:51:67:40:9c:eb:e4:c6:9c:d5:64: 11:ea:0a:f4:43:26:73:52:b3:48:2c:0f:5c:e7:ce:1f:cf:90: 8d:a3:83:ab:27:8c:32:e7:08:f5:cf:16:2a:09:ce:8a:4e:a8: 24:c0:e3:07:a5:db:f9:46:07:74:c0:43:4f:b8:bb:b4:65:fc: 01:2a:a6:b7:9c:d3:1e:68:7d:4f:04:42:79:8f:50:b9:c3:a4: ca:37:8f:d5:c9:d7:5e:46:9c:80:f2:2e:64:ee:24:f9:af:4f: b9:93:e0:00:cd:27:61:dd:16:3c:fb:db:ae:7e:c0:8e:58:26: d7:81:9f:14:87:16:b2:76:d0:99:2c:cb:40:83:85:32:7c:47: a0:d8:1c:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfwdXQWpSvnFo9HuAVzJChKrskLgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkIzRkNDMUE2OUIxQkQ5MkQ2QTMxOUQ3RkQ4MjBFRUVD RTY3NDI0NTAeFw0yNTA0MjYwMTQ2MjNaFw0yNTA0MjkwOTM1MjNaMDMxMTAvBgNV BAMTKDAxOEI1NzcxRDJCMjI0MTlERDI0OTI3RjVEMzJDMzkxMTY2M0UwNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz16Pi/dnWqDt9i9OlxSbqN/VD ughcEs66jWdCehvB6xyo7fekE4VxyGW5cAutx0SIT8oD/JNCZLoTdIxkDfYneMp+ WcPOret3IqvZcfk3SoSEJccbfOjncMeHe4Xz5DjKKfzLXdWFhyBldHu5n9PKmaet 1SPj6VM0hjBNqdh9sZIQPuyNuBWRwyPBPzN8uiBNs1hNo4Kcq2swYGF4pWU19l6t vzwjLUpe2/SfNIrpkpEXY5YcmiTvnAVg/B2q0gmDTz8CtzvaPpSFyx/F5mFMN4b7 0GC6ygjq2s9Z5PVOttgsGhujODdLCZ/ixZ6l9UmpYEjEQa8A7l95RQC0WyYDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAYtXcdKyJBndJJJ/XTLDkRZj4GowHwYDVR0j BBgwFoAU+z/MGmmxvZLWoxnX/YIO7s5nQkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZDg3YmVlZC02MzMwLTRmMzMtOTEwNS04NzcyMmNkZjJkZDAvMC9GQjNGQ0MxQTY5 QjFCRDkyRDZBMzE5RDdGRDgyMEVFRUNFNjc0MjQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkIzRkNDMUE2OUIxQkQ5MkQ2QTMxOUQ3RkQ4MjBFRUVDRTY3 NDI0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWQ4N2JlZWQtNjMzMC00ZjMzLTkx MDUtODc3MjJjZGYyZGQwLzAvRkIzRkNDMUE2OUIxQkQ5MkQ2QTMxOUQ3RkQ4MjBF RUVDRTY3NDI0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGoHbylaMahqrfXTHxcwnvfCO5Yw3Tiu8PV6 1XwMtpGmB/LhlmW7FlyHdx1GWpl/ZLXqInyWvP49pAP+MqWJz3o7TRA1x4RBsp4b 2NhQ4wdn7jatujhd3ChiM1DyYPD3jhSCIgak2ftIPyBbHSCpquPcfAxYUWdAnOvk xpzVZBHqCvRDJnNSs0gsD1znzh/PkI2jg6snjDLnCPXPFioJzopOqCTA4wel2/lG B3TAQ0+4u7Rl/AEqprec0x5ofU8EQnmPULnDpMo3j9XJ115GnIDyLmTuJPmvT7mT 4ADNJ2HdFjz7265+wI5YJteBnxSHFrJ20Jksy0CDhTJ8R6DYHGk= -----END CERTIFICATE-----Generated at Sun Apr 27 04:19:30 2025 by rpki-client