$ rpki-client -vvf repo-rpki.idnic.net/repo/ede4719a-ace4-41f2-a070-8de3192b7f49/0/FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.mft File: FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.mft (raw, json) Hash identifier: XvUe8Sd2XG4hpUeJk1qV97t6tM8bjtgtaTzClxYLZBU= Subject key identifier: 38:AD:09:E6:E2:52:15:F9:44:FB:D6:CA:7A:CE:C8:86:B5:B3:0C:82 Authority key identifier: FC:31:DB:70:F7:B2:F1:7F:13:E9:2A:2E:7B:AE:55:54:79:2E:FB:BF Certificate issuer: /CN=FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF Certificate serial: 7D8FADC4B5131F4DC9B1F41DD688585C147C571D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ede4719a-ace4-41f2-a070-8de3192b7f49/0/FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.mft Manifest number: 04C8 Signing time: Thu 01 May 2025 00:10:41 +0000 Manifest this update: Thu 01 May 2025 00:05:41 +0000 Manifest next update: Sun 04 May 2025 08:29:41 +0000 Files and hashes: 1: FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.crl (hash: gWhHsh6qAm968QM8jcIUyqACow6XOhidUFSKgL5I4UI=) 2: 3230322e36312e39382e302f32332d3234203d3e203234353337.roa (hash: /nXnTx+PH1mmJBLJUGLAh8pq0gGH5PYVBAq3i1pXMS8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ede4719a-ace4-41f2-a070-8de3192b7f49/0/FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.crl rsync://repo-rpki.idnic.net/repo/ede4719a-ace4-41f2-a070-8de3192b7f49/0/FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 08:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:8f:ad:c4:b5:13:1f:4d:c9:b1:f4:1d:d6:88:58:5c:14:7c:57:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF Validity Not Before: May 1 00:05:41 2025 GMT Not After : May 4 08:29:41 2025 GMT Subject: CN=38AD09E6E25215F944FBD6CA7ACEC886B5B30C82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:67:1b:6b:03:61:42:b8:70:8d:5f:90:a6:99: 09:46:b1:47:3f:19:22:02:76:81:23:d0:fe:18:63: 01:64:9e:3c:bb:eb:26:d2:ac:0e:1c:24:b0:88:d9: 78:60:1c:22:a3:58:09:68:47:cd:1f:b3:20:61:88: 8a:82:aa:61:04:f1:c6:58:c3:bb:b5:96:a1:7c:57: 0f:1f:dc:76:3b:72:b6:8c:9c:68:27:ca:c5:87:01: 14:e7:a7:eb:0c:ea:81:75:d9:15:ff:bf:a5:81:cb: f6:31:1d:95:58:43:cb:64:be:18:ff:f2:15:09:4b: 8d:f6:62:56:9a:e8:4b:5f:cd:76:39:0d:8a:2b:28: c4:8b:45:19:16:97:a9:3d:66:d2:f1:2f:80:c2:93: 4a:e2:8a:dc:c5:12:a9:c4:0f:d2:7f:04:37:b6:7a: 20:8c:b1:8f:3a:f1:2f:53:ae:e2:d0:61:cc:92:90: 88:9d:57:9b:33:b1:b4:8c:18:38:f0:be:87:87:fa: ae:86:d3:1b:3f:69:de:03:c5:7a:e7:8f:1f:66:95: 1a:55:1d:08:24:6e:e4:77:70:54:be:05:6c:5b:d8: bb:b3:7c:49:c5:da:f7:23:6c:39:ee:27:80:02:39: 1b:5a:ca:44:0d:2a:12:5d:14:b7:4d:36:7b:dd:b8: 91:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:AD:09:E6:E2:52:15:F9:44:FB:D6:CA:7A:CE:C8:86:B5:B3:0C:82 X509v3 Authority Key Identifier: keyid:FC:31:DB:70:F7:B2:F1:7F:13:E9:2A:2E:7B:AE:55:54:79:2E:FB:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ede4719a-ace4-41f2-a070-8de3192b7f49/0/FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ede4719a-ace4-41f2-a070-8de3192b7f49/0/FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:61:77:c5:3d:41:72:23:4d:05:5e:6b:80:8b:7c:10:09:ca: d3:49:23:d2:77:de:9f:88:74:a2:f2:9d:c3:8e:9c:61:d3:81: a6:ea:65:cb:e6:51:0b:4a:ff:70:1e:5f:6c:fb:fe:d5:62:e0: 9a:5f:78:0d:b9:1f:62:c9:19:b3:2d:ac:b0:2b:5e:1d:b1:b8: 39:6a:52:29:42:72:57:e3:24:f7:27:33:29:54:97:89:75:9f: 34:20:34:84:7e:20:0d:51:7a:33:18:fc:f2:5a:23:01:7a:9c: 52:5e:cd:4c:84:1c:48:af:8f:27:f8:e4:5e:7f:7d:78:b1:13: 68:3a:20:cb:b4:d0:9e:7e:29:60:4b:b1:76:76:47:d1:18:b5: bc:4a:74:30:33:46:12:2e:71:0c:12:b2:af:65:dc:ce:e1:32: cf:58:27:50:2c:50:ed:e0:13:0f:26:56:8d:08:9c:8e:b1:22: bb:bc:f2:21:75:71:5a:d5:e6:7e:eb:f9:de:96:90:0c:5f:04: 1f:05:3d:2d:0d:b0:08:4e:af:7f:d8:b8:74:69:81:85:ca:bc: 58:19:eb:69:db:3d:31:95:32:bc:c3:51:ef:6a:c4:58:ab:7c: 0d:a1:8f:5c:7d:51:d5:86:3a:ee:52:c6:6b:b6:66:3e:9d:e5: e6:f3:57:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfY+txLUTH03JsfQd1ohYXBR8Vx0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkMzMURCNzBGN0IyRjE3RjEzRTkyQTJFN0JBRTU1NTQ3 OTJFRkJCRjAeFw0yNTA1MDEwMDA1NDFaFw0yNTA1MDQwODI5NDFaMDMxMTAvBgNV BAMTKDM4QUQwOUU2RTI1MjE1Rjk0NEZCRDZDQTdBQ0VDODg2QjVCMzBDODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0ZxtrA2FCuHCNX5CmmQlGsUc/ GSICdoEj0P4YYwFknjy76ybSrA4cJLCI2XhgHCKjWAloR80fsyBhiIqCqmEE8cZY w7u1lqF8Vw8f3HY7craMnGgnysWHARTnp+sM6oF12RX/v6WBy/YxHZVYQ8tkvhj/ 8hUJS432Ylaa6EtfzXY5DYorKMSLRRkWl6k9ZtLxL4DCk0riitzFEqnED9J/BDe2 eiCMsY868S9TruLQYcySkIidV5szsbSMGDjwvoeH+q6G0xs/ad4DxXrnjx9mlRpV HQgkbuR3cFS+BWxb2LuzfEnF2vcjbDnuJ4ACORtaykQNKhJdFLdNNnvduJG1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOK0J5uJSFflE+9bKes7IhrWzDIIwHwYDVR0j BBgwFoAU/DHbcPey8X8T6Soue65VVHku+78wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZGU0NzE5YS1hY2U0LTQxZjItYTA3MC04ZGUzMTkyYjdmNDkvMC9GQzMxREI3MEY3 QjJGMTdGMTNFOTJBMkU3QkFFNTU1NDc5MkVGQkJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkMzMURCNzBGN0IyRjE3RjEzRTkyQTJFN0JBRTU1NTQ3OTJF RkJCRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWRlNDcxOWEtYWNlNC00MWYyLWEw NzAtOGRlMzE5MmI3ZjQ5LzAvRkMzMURCNzBGN0IyRjE3RjEzRTkyQTJFN0JBRTU1 NTQ3OTJFRkJCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAANhd8U9QXIjTQVea4CLfBAJytNJI9J33p+I dKLyncOOnGHTgabqZcvmUQtK/3AeX2z7/tVi4JpfeA25H2LJGbMtrLArXh2xuDlq UilCclfjJPcnMylUl4l1nzQgNIR+IA1RejMY/PJaIwF6nFJezUyEHEivjyf45F5/ fXixE2g6IMu00J5+KWBLsXZ2R9EYtbxKdDAzRhIucQwSsq9l3M7hMs9YJ1AsUO3g Ew8mVo0InI6xIru88iF1cVrV5n7r+d6WkAxfBB8FPS0NsAhOr3/YuHRpgYXKvFgZ 62nbPTGVMrzDUe9qxFirfA2hj1x9UdWGOu5Sxmu2Zj6d5ebzV/8= -----END CERTIFICATE-----Generated at Fri May 2 14:59:43 2025 by rpki-client