$ rpki-client -vvf repo-rpki.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.mft File: FC4F8762524C3EBF98126E5F579CCB30C37EEF63.mft (raw, json) Hash identifier: E4SeWJ3V4i+/6BpAJQYzIq4BBpYfQrmjpUtNMpqHolI= Subject key identifier: 6A:EB:8B:66:F3:9B:01:A1:1B:54:C9:6E:CD:B2:50:24:E8:DF:79:C3 Authority key identifier: FC:4F:87:62:52:4C:3E:BF:98:12:6E:5F:57:9C:CB:30:C3:7E:EF:63 Certificate issuer: /CN=FC4F8762524C3EBF98126E5F579CCB30C37EEF63 Certificate serial: 79C499033C48E3C774B2F1B622C6DB9878DCD3E0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.cer Subject info access: rsync://repo-rpki.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.mft Manifest number: E9 Signing time: Mon 16 Jun 2025 10:20:38 +0000 Manifest this update: Mon 16 Jun 2025 10:15:38 +0000 Manifest next update: Thu 19 Jun 2025 22:04:38 +0000 Files and hashes: 1: 3130332e3133342e31362e302f32342d3234203d3e20313338313432.roa (hash: 8FJnKt5CgklUKcuR3KEOgR9pFXHp2pdnQAzYXqQX2Ag=) 2: 323030313a6466373a616630303a3a2f34382d3438203d3e20313338313432.roa (hash: +DXbNG3+5DIfVUdd5cKU3zcHabiuNmOrVbbKp3YlrN4=) 3: FC4F8762524C3EBF98126E5F579CCB30C37EEF63.crl (hash: xI/ElglydOops7cC6p7oh3M8oYvcpJpEkT7/sOTeXIY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.crl rsync://repo-rpki.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 22:04:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:c4:99:03:3c:48:e3:c7:74:b2:f1:b6:22:c6:db:98:78:dc:d3:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC4F8762524C3EBF98126E5F579CCB30C37EEF63 Validity Not Before: Jun 16 10:15:38 2025 GMT Not After : Jun 19 22:04:38 2025 GMT Subject: CN=6AEB8B66F39B01A11B54C96ECDB25024E8DF79C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:56:7a:94:f8:72:b5:d3:54:f7:40:1b:56:48: 89:7c:76:40:31:df:7e:81:07:2a:fa:27:6a:34:df: c1:51:e0:41:a9:38:22:a4:df:4a:bb:8c:c5:af:59: 03:f5:96:19:78:22:1f:0d:d0:83:e1:32:2f:7a:64: f6:e0:7d:bf:c4:21:88:7f:08:03:25:7c:92:d1:67: dc:6e:a2:1e:32:d9:a8:5e:89:0d:07:e5:b2:42:89: 9d:88:63:13:89:48:ca:74:5e:d4:3c:ac:31:26:3b: e0:98:af:99:79:0c:ab:f1:c2:b8:f5:59:bc:98:96: c3:0c:22:30:1a:c1:be:0b:d1:59:92:76:45:bf:03: a7:0a:a1:f8:2e:a3:62:5f:38:fe:90:cf:f0:e4:69: 9d:b6:d0:27:03:c3:47:1f:be:1a:b1:31:2a:fa:2e: 11:aa:1c:3b:e3:61:cb:68:69:a2:23:31:b9:4e:5e: 74:f6:7e:14:9e:bb:97:c2:77:6b:2f:4d:3f:39:53: fe:90:90:3a:ad:0b:0a:ce:03:e4:f8:5f:09:e7:4c: fa:a8:97:32:b8:5d:e3:d6:5e:9f:04:a4:3d:f0:4f: 3b:bf:d2:85:26:e3:ac:c3:21:aa:ce:04:bb:9d:cc: 47:6f:1b:79:6b:10:28:32:56:2a:3c:38:b3:12:c6: 2d:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:EB:8B:66:F3:9B:01:A1:1B:54:C9:6E:CD:B2:50:24:E8:DF:79:C3 X509v3 Authority Key Identifier: keyid:FC:4F:87:62:52:4C:3E:BF:98:12:6E:5F:57:9C:CB:30:C3:7E:EF:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:9d:13:1f:c1:61:84:a9:d6:b9:f7:db:4d:15:c7:9f:ea:b1: 85:f9:dd:4f:7b:92:22:85:78:c9:50:d8:70:ce:6d:40:5e:88: ae:4a:c7:69:d1:2b:2e:4e:6f:47:64:10:72:0a:d4:35:16:4c: e5:37:28:9b:d7:9a:2f:b6:0d:71:8d:ec:9b:86:fd:37:01:f4: 02:9b:29:fd:31:7c:b4:f3:60:3e:4a:9c:f5:88:8d:6b:af:bb: c5:b7:63:77:ff:5c:48:68:15:6f:1f:8b:ea:f3:48:31:7d:7e: 34:5e:c7:47:1c:61:77:23:52:85:0c:95:0e:a2:93:be:ce:83: d1:d1:f7:c4:9d:74:bb:19:13:84:2e:79:61:13:79:24:31:1b: cc:d2:2e:bc:8f:99:8c:45:e0:07:ec:03:50:be:3b:c1:87:a4: 3b:72:22:2d:a0:9c:fd:06:cf:1d:d0:a6:e8:12:26:28:34:66: 32:ab:85:7a:bb:91:b6:d1:b8:71:14:fe:91:94:b1:53:d1:32: 9f:e8:a5:e8:ea:32:c0:ae:1b:ff:d5:6e:ff:50:9c:7b:10:ce: 5b:74:60:60:b1:e6:a0:48:b1:3c:2b:c1:52:41:35:c5:94:05: 6e:c3:26:e1:20:3e:95:9d:6d:c8:5f:69:7d:af:7e:4c:7e:cc: b5:fe:37:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUecSZAzxI48d0svG2IsbbmHjc0+AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkM0Rjg3NjI1MjRDM0VCRjk4MTI2RTVGNTc5Q0NCMzBD MzdFRUY2MzAeFw0yNTA2MTYxMDE1MzhaFw0yNTA2MTkyMjA0MzhaMDMxMTAvBgNV BAMTKDZBRUI4QjY2RjM5QjAxQTExQjU0Qzk2RUNEQjI1MDI0RThERjc5QzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjVnqU+HK101T3QBtWSIl8dkAx 336BByr6J2o038FR4EGpOCKk30q7jMWvWQP1lhl4Ih8N0IPhMi96ZPbgfb/EIYh/ CAMlfJLRZ9xuoh4y2aheiQ0H5bJCiZ2IYxOJSMp0XtQ8rDEmO+CYr5l5DKvxwrj1 WbyYlsMMIjAawb4L0VmSdkW/A6cKofguo2JfOP6Qz/DkaZ220CcDw0cfvhqxMSr6 LhGqHDvjYctoaaIjMblOXnT2fhSeu5fCd2svTT85U/6QkDqtCwrOA+T4XwnnTPqo lzK4XePWXp8EpD3wTzu/0oUm46zDIarOBLudzEdvG3lrECgyVio8OLMSxi1vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUauuLZvObAaEbVMluzbJQJOjfecMwHwYDVR0j BBgwFoAU/E+HYlJMPr+YEm5fV5zLMMN+72MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZTVhYTkzZC03ODdiLTRhMTctODdkMC03ZWY0MWIwZjJkZWYvMC9GQzRGODc2MjUy NEMzRUJGOTgxMjZFNUY1NzlDQ0IzMEMzN0VFRjYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkM0Rjg3NjI1MjRDM0VCRjk4MTI2RTVGNTc5Q0NCMzBDMzdF RUY2My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmU1YWE5M2QtNzg3Yi00YTE3LTg3 ZDAtN2VmNDFiMGYyZGVmLzAvRkM0Rjg3NjI1MjRDM0VCRjk4MTI2RTVGNTc5Q0NC MzBDMzdFRUY2My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADadEx/BYYSp1rn3200Vx5/qsYX53U97kiKF eMlQ2HDObUBeiK5Kx2nRKy5Ob0dkEHIK1DUWTOU3KJvXmi+2DXGN7JuG/TcB9AKb Kf0xfLTzYD5KnPWIjWuvu8W3Y3f/XEhoFW8fi+rzSDF9fjRex0ccYXcjUoUMlQ6i k77Og9HR98SddLsZE4QueWETeSQxG8zSLryPmYxF4AfsA1C+O8GHpDtyIi2gnP0G zx3QpugSJig0ZjKrhXq7kbbRuHEU/pGUsVPRMp/opejqMsCuG//Vbv9QnHsQzlt0 YGCx5qBIsTwrwVJBNcWUBW7DJuEgPpWdbchfaX2vfkx+zLX+Nzw= -----END CERTIFICATE-----Generated at Wed Jun 18 05:31:25 2025 by rpki-client