$ rpki-client -vvf repo-rpki.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.mft File: FC4F8762524C3EBF98126E5F579CCB30C37EEF63.mft (raw, json) Hash identifier: w8lx122ZMpHzm6/ms1GchOeICSneemNTwVwKvc3MHtI= Subject key identifier: A3:18:B9:CC:9B:05:7F:14:D0:82:53:AF:3D:1E:62:51:81:82:96:E4 Authority key identifier: FC:4F:87:62:52:4C:3E:BF:98:12:6E:5F:57:9C:CB:30:C3:7E:EF:63 Certificate issuer: /CN=FC4F8762524C3EBF98126E5F579CCB30C37EEF63 Certificate serial: 1AFC258653B3E6A7DAC4F04964EE7A5F4854840F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.cer Subject info access: rsync://repo-rpki.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.mft Manifest number: D3 Signing time: Mon 28 Apr 2025 21:20:38 +0000 Manifest this update: Mon 28 Apr 2025 21:15:38 +0000 Manifest next update: Fri 02 May 2025 08:28:38 +0000 Files and hashes: 1: 3130332e3133342e31362e302f32342d3234203d3e20313338313432.roa (hash: 8FJnKt5CgklUKcuR3KEOgR9pFXHp2pdnQAzYXqQX2Ag=) 2: 323030313a6466373a616630303a3a2f34382d3438203d3e20313338313432.roa (hash: +DXbNG3+5DIfVUdd5cKU3zcHabiuNmOrVbbKp3YlrN4=) 3: FC4F8762524C3EBF98126E5F579CCB30C37EEF63.crl (hash: 9mVqcAey00GiXtQSSNo/7f0NWjGmEHY7rY+rGjk+M0w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.crl rsync://repo-rpki.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 08:28:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:fc:25:86:53:b3:e6:a7:da:c4:f0:49:64:ee:7a:5f:48:54:84:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC4F8762524C3EBF98126E5F579CCB30C37EEF63 Validity Not Before: Apr 28 21:15:38 2025 GMT Not After : May 2 08:28:38 2025 GMT Subject: CN=A318B9CC9B057F14D08253AF3D1E6251818296E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:55:ad:96:8b:2f:c7:be:f9:10:a0:2d:31:7d: a2:0f:75:e9:d5:66:b8:0c:37:07:95:0f:eb:a9:a6: 6b:65:3b:1e:e5:d1:5d:18:ef:d2:7d:f1:76:09:3b: 01:ec:35:5b:dd:7c:c4:7e:fe:3b:f7:b2:64:e4:b3: c5:3a:d4:0d:b9:88:61:1f:d5:cd:b9:c4:c8:22:9e: ab:12:f1:03:a2:71:a7:38:cb:b0:8e:5e:11:3e:64: c2:0a:d5:74:29:49:6b:25:27:90:5b:15:df:0a:25: 73:4d:0b:61:f5:95:1f:55:b5:73:93:4a:86:6a:90: b1:38:1e:38:7c:a7:55:cb:ae:0b:b8:5b:ea:a0:23: 40:fe:7d:c8:5f:9e:c4:05:a0:d4:d1:4f:6c:5e:b4: 86:fa:8e:48:8e:e5:f9:58:92:3a:28:e2:ad:23:6f: 85:d3:de:9d:c4:f4:1e:47:62:12:a5:4c:e4:4b:00: 84:9d:d2:9f:38:0d:c1:a4:fc:82:f9:d7:47:b3:29: d1:aa:e1:33:b8:41:40:51:9e:80:0b:01:ad:d6:af: ea:6b:c1:8d:ac:a5:02:db:63:1d:6e:13:05:75:b9: 6d:b7:21:b7:95:62:db:46:eb:97:fd:db:33:76:de: 84:6e:a8:aa:4e:1f:a6:61:17:ab:6a:92:be:85:83: e9:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:18:B9:CC:9B:05:7F:14:D0:82:53:AF:3D:1E:62:51:81:82:96:E4 X509v3 Authority Key Identifier: keyid:FC:4F:87:62:52:4C:3E:BF:98:12:6E:5F:57:9C:CB:30:C3:7E:EF:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:71:0a:65:d8:38:ab:e7:0b:6d:b8:7b:53:d0:86:3c:d5:08: a6:7f:df:2c:35:fc:1d:f1:85:53:b8:e2:f6:20:f2:26:89:b0: b0:2a:42:06:9e:7c:20:71:1f:c6:64:a3:4f:95:95:66:34:79: 0e:81:5f:40:29:8d:83:3f:c3:04:e6:b2:21:d1:19:13:e4:86: 67:0d:50:47:3c:d4:57:91:61:87:af:cc:9a:8c:9a:ad:bd:22: d5:6e:0f:28:b4:65:e8:3c:e1:a1:27:6e:9c:17:05:07:a2:42: 40:b4:51:6f:ac:68:bb:b5:2d:f8:20:5a:36:ea:8c:e9:18:d5: d9:02:42:ad:4e:93:9c:f4:78:b8:41:8f:0f:38:36:ea:ce:40: 07:2a:22:4d:be:0b:33:84:83:82:a9:05:1b:89:fd:c4:6c:d4: 30:73:5c:98:fd:13:a1:00:a2:44:3f:11:ed:0e:9d:03:c8:0b: 69:32:7f:eb:3a:98:83:40:80:fa:b5:1d:49:3b:29:02:fd:4e: 03:74:92:7b:89:0d:f7:f4:09:f8:5a:4d:68:df:04:6f:2e:e1: d7:8d:34:6d:aa:d6:25:85:1b:14:8f:d4:00:97:2e:c8:c1:55: 5a:28:36:a0:7b:42:1e:29:52:49:15:d4:8a:88:be:fe:e7:88: 4f:28:ad:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGvwlhlOz5qfaxPBJZO56X0hUhA8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkM0Rjg3NjI1MjRDM0VCRjk4MTI2RTVGNTc5Q0NCMzBD MzdFRUY2MzAeFw0yNTA0MjgyMTE1MzhaFw0yNTA1MDIwODI4MzhaMDMxMTAvBgNV BAMTKEEzMThCOUNDOUIwNTdGMTREMDgyNTNBRjNEMUU2MjUxODE4Mjk2RTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdVa2Wiy/HvvkQoC0xfaIPdenV ZrgMNweVD+uppmtlOx7l0V0Y79J98XYJOwHsNVvdfMR+/jv3smTks8U61A25iGEf 1c25xMginqsS8QOicac4y7COXhE+ZMIK1XQpSWslJ5BbFd8KJXNNC2H1lR9VtXOT SoZqkLE4Hjh8p1XLrgu4W+qgI0D+fchfnsQFoNTRT2xetIb6jkiO5flYkjoo4q0j b4XT3p3E9B5HYhKlTORLAISd0p84DcGk/IL510ezKdGq4TO4QUBRnoALAa3Wr+pr wY2spQLbYx1uEwV1uW23IbeVYttG65f92zN23oRuqKpOH6ZhF6tqkr6Fg+khAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoxi5zJsFfxTQglOvPR5iUYGCluQwHwYDVR0j BBgwFoAU/E+HYlJMPr+YEm5fV5zLMMN+72MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZTVhYTkzZC03ODdiLTRhMTctODdkMC03ZWY0MWIwZjJkZWYvMC9GQzRGODc2MjUy NEMzRUJGOTgxMjZFNUY1NzlDQ0IzMEMzN0VFRjYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkM0Rjg3NjI1MjRDM0VCRjk4MTI2RTVGNTc5Q0NCMzBDMzdF RUY2My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmU1YWE5M2QtNzg3Yi00YTE3LTg3 ZDAtN2VmNDFiMGYyZGVmLzAvRkM0Rjg3NjI1MjRDM0VCRjk4MTI2RTVGNTc5Q0NC MzBDMzdFRUY2My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHhxCmXYOKvnC224e1PQhjzVCKZ/3yw1/B3x hVO44vYg8iaJsLAqQgaefCBxH8Zko0+VlWY0eQ6BX0ApjYM/wwTmsiHRGRPkhmcN UEc81FeRYYevzJqMmq29ItVuDyi0Zeg84aEnbpwXBQeiQkC0UW+saLu1LfggWjbq jOkY1dkCQq1Ok5z0eLhBjw84NurOQAcqIk2+CzOEg4KpBRuJ/cRs1DBzXJj9E6EA okQ/Ee0OnQPIC2kyf+s6mINAgPq1HUk7KQL9TgN0knuJDff0CfhaTWjfBG8u4deN NG2q1iWFGxSP1ACXLsjBVVooNqB7Qh4pUkkV1IqIvv7niE8orVo= -----END CERTIFICATE-----Generated at Wed Apr 30 06:28:15 2025 by rpki-client