$ rpki-client -vvf repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.mft File: FC646066A689B77054AF95653FA324395357E6A3.mft (raw, json) Hash identifier: pxoiH4tckvmhXkvCg6fqPWx4K2WiXXyauNraxsFczf4= Subject key identifier: 50:E5:C1:CC:DD:25:92:7F:19:53:39:A2:B2:04:08:8E:1A:8F:85:A6 Authority key identifier: FC:64:60:66:A6:89:B7:70:54:AF:95:65:3F:A3:24:39:53:57:E6:A3 Certificate issuer: /CN=FC646066A689B77054AF95653FA324395357E6A3 Certificate serial: 076AAA7FB43E3F9C7B5D88F77C53D9152A81B9BE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC646066A689B77054AF95653FA324395357E6A3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.mft Manifest number: 04CB Signing time: Tue 29 Apr 2025 03:12:07 +0000 Manifest this update: Tue 29 Apr 2025 03:07:07 +0000 Manifest next update: Fri 02 May 2025 03:56:07 +0000 Files and hashes: 1: 3230322e35322e31322e302f32322d3234203d3e203535363533.roa (hash: zzu9Pa4aUrYBrkU/dzzrAVQ+KTnyVkmxoRDur+r4jp0=) 2: 323430323a633330303a3a2f33322d3438203d3e203535363533.roa (hash: Sjz+Mw4h9hDynPTU4wmbIFS9wojilMuVRHQLpoKIQ3U=) 3: FC646066A689B77054AF95653FA324395357E6A3.crl (hash: ze7eCMmlV5pLjSUB6dP61KS5VjAahTyyPfAcIxStc+c=) 4: 34332e3234392e3134302e302f32322d3234203d3e203535363533.roa (hash: RAbCLxobZi0sT1mrrSFIFMMt66YKWEiZkYMYeXBiifg=) 5: 3130332e31312e39362e302f32322d3234203d3e203535363533.roa (hash: i+PocK8SEp44TFX6dfSGcfLf+KIkgk/b4aqmIJNUvI4=) 6: 3130332e3235342e3132362e302f32332d3234203d3e203535363533.roa (hash: NPccw/uPbjU6Ng0Kv+MnSicLOTD8CXxnBeD+TitCSK4=) 7: 3230322e31302e36332e302f32342d3234203d3e203535363533.roa (hash: 3x/TagzWw9AEnitF9/BKz1IoUShxY7ix8DtkXTWs+vs=) 8: 31342e3130322e3135322e302f32322d3234203d3e203535363533.roa (hash: TM3GYewxHHLLEzakQI/e4lcxtVAjFWl7n3OxdIcy9do=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.crl rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC646066A689B77054AF95653FA324395357E6A3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:56:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:6a:aa:7f:b4:3e:3f:9c:7b:5d:88:f7:7c:53:d9:15:2a:81:b9:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC646066A689B77054AF95653FA324395357E6A3 Validity Not Before: Apr 29 03:07:07 2025 GMT Not After : May 2 03:56:07 2025 GMT Subject: CN=50E5C1CCDD25927F195339A2B204088E1A8F85A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:eb:54:39:a6:b6:bf:e7:87:46:04:6e:91:10: e5:40:04:a5:95:30:cc:81:fa:81:f6:98:37:d3:62: f0:49:7a:7f:8e:6b:ff:22:e5:24:57:1a:86:61:9a: 2a:51:2a:db:26:40:a7:b3:4b:98:b7:f3:ab:68:44: 29:ed:ec:0a:92:14:50:f9:88:ed:fe:78:5d:06:f6: 59:9a:a2:e3:ec:2b:ab:1d:eb:3f:3e:57:0f:b9:b9: ee:a1:c3:94:b8:66:70:46:51:6e:b1:5d:4d:a4:a6: 3c:42:cf:a6:69:bc:5d:ac:4e:54:dd:07:27:8e:3e: 77:0f:34:af:dc:61:3e:3a:c9:16:55:ad:7a:ec:c3: fb:8c:d5:1a:31:83:16:0a:4c:05:cf:e9:c9:26:13: e8:05:d4:91:18:a5:9f:9d:b1:60:76:d2:90:fe:7c: 5f:74:66:1b:4d:dc:eb:d9:39:28:41:16:0f:49:9d: 2f:73:46:f4:a1:0c:2b:96:82:9d:06:39:15:d3:0d: 03:29:97:01:13:ae:4f:24:2a:cc:23:ab:2b:1e:69: cb:10:f1:9b:b5:6c:d1:2b:6f:f9:26:d5:56:7e:c9: ff:24:1a:6b:f1:24:f1:32:c4:2b:a7:d9:4c:bc:7e: 43:6f:55:98:f9:c9:ff:75:75:9d:23:58:c5:7f:5c: ae:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:E5:C1:CC:DD:25:92:7F:19:53:39:A2:B2:04:08:8E:1A:8F:85:A6 X509v3 Authority Key Identifier: keyid:FC:64:60:66:A6:89:B7:70:54:AF:95:65:3F:A3:24:39:53:57:E6:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC646066A689B77054AF95653FA324395357E6A3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:fc:ae:76:84:fe:10:c8:cf:ea:a9:8b:b1:13:fe:1b:7d:2d: e2:e1:5c:1e:78:a5:45:22:4e:cf:c6:d3:89:7f:c3:4f:d9:23: db:41:ac:52:c1:93:f8:ea:3c:8e:8b:aa:aa:75:75:eb:dd:d1: 3c:f9:e6:c4:3d:fd:b0:85:5c:cf:3f:9c:89:cf:08:f0:c1:75: 03:cc:b8:9a:0d:29:c6:ee:8b:79:45:26:da:df:b7:5c:7d:11: fe:0d:02:d4:b2:23:85:e1:ed:04:55:bb:bc:eb:f7:32:50:e1: b0:b8:28:c0:bd:dd:5b:62:8e:6e:26:f9:c1:68:40:a7:6b:2f: b1:fa:ef:c5:87:2c:2c:ed:f3:4b:6d:b9:13:97:06:ec:06:49: 2c:4c:a7:f6:d7:15:6d:2e:04:88:c7:b9:36:b7:ee:ef:48:1d: 4b:33:2d:1e:be:af:e5:71:02:4b:74:f7:d5:4d:f8:be:6c:79: 81:21:35:e3:80:a2:7e:17:0a:a2:75:7c:5c:a5:0d:23:f0:50: 11:78:a0:ce:38:3c:7b:e5:1d:49:7a:dc:93:9b:60:e0:d2:8c: 4c:77:ba:6b:e0:3c:2a:af:aa:56:d8:bc:31:a7:77:da:21:29: 0d:f2:17:97:24:58:8a:42:ae:d3:11:54:11:73:f4:ca:44:b5: fb:dd:f8:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB2qqf7Q+P5x7XYj3fFPZFSqBub4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkM2NDYwNjZBNjg5Qjc3MDU0QUY5NTY1M0ZBMzI0Mzk1 MzU3RTZBMzAeFw0yNTA0MjkwMzA3MDdaFw0yNTA1MDIwMzU2MDdaMDMxMTAvBgNV BAMTKDUwRTVDMUNDREQyNTkyN0YxOTUzMzlBMkIyMDQwODhFMUE4Rjg1QTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDn61Q5pra/54dGBG6REOVABKWV MMyB+oH2mDfTYvBJen+Oa/8i5SRXGoZhmipRKtsmQKezS5i386toRCnt7AqSFFD5 iO3+eF0G9lmaouPsK6sd6z8+Vw+5ue6hw5S4ZnBGUW6xXU2kpjxCz6ZpvF2sTlTd ByeOPncPNK/cYT46yRZVrXrsw/uM1RoxgxYKTAXP6ckmE+gF1JEYpZ+dsWB20pD+ fF90ZhtN3OvZOShBFg9JnS9zRvShDCuWgp0GORXTDQMplwETrk8kKswjqyseacsQ 8Zu1bNErb/km1VZ+yf8kGmvxJPEyxCun2Uy8fkNvVZj5yf91dZ0jWMV/XK59AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUOXBzN0lkn8ZUzmisgQIjhqPhaYwHwYDVR0j BBgwFoAU/GRgZqaJt3BUr5VlP6MkOVNX5qMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OTc0NjVlMy03OGEwLTQ5NjUtYWUxNC1lNGNiNGQwZmMxODUvMC9GQzY0NjA2NkE2 ODlCNzcwNTRBRjk1NjUzRkEzMjQzOTUzNTdFNkEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkM2NDYwNjZBNjg5Qjc3MDU0QUY5NTY1M0ZBMzI0Mzk1MzU3 RTZBMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzk3NDY1ZTMtNzhhMC00OTY1LWFl MTQtZTRjYjRkMGZjMTg1LzAvRkM2NDYwNjZBNjg5Qjc3MDU0QUY5NTY1M0ZBMzI0 Mzk1MzU3RTZBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABH8rnaE/hDIz+qpi7ET/ht9LeLhXB54pUUi Ts/G04l/w0/ZI9tBrFLBk/jqPI6Lqqp1devd0Tz55sQ9/bCFXM8/nInPCPDBdQPM uJoNKcbui3lFJtrft1x9Ef4NAtSyI4Xh7QRVu7zr9zJQ4bC4KMC93Vtijm4m+cFo QKdrL7H678WHLCzt80ttuROXBuwGSSxMp/bXFW0uBIjHuTa37u9IHUszLR6+r+Vx Akt099VN+L5seYEhNeOAon4XCqJ1fFylDSPwUBF4oM44PHvlHUl63JObYODSjEx3 umvgPCqvqlbYvDGnd9ohKQ3yF5ckWIpCrtMRVBFz9MpEtfvd+Gk= -----END CERTIFICATE-----Generated at Wed Apr 30 08:30:59 2025 by rpki-client