$ rpki-client -vvf repo-rpki.idnic.net/repo/0546183c-d9ef-4c33-be99-e84bedb10b68/0/FC4A38DAAF15E8284373FD82AE59B27383D4A68F.mft File: FC4A38DAAF15E8284373FD82AE59B27383D4A68F.mft (raw, json) Hash identifier: bmN0gHItTUslcfXh+dm0PIzi2APMk5jTr7rcMPgY98U= Subject key identifier: 71:12:07:14:2D:E9:EA:C7:90:B2:95:A3:94:34:22:21:12:A8:0E:F5 Authority key identifier: FC:4A:38:DA:AF:15:E8:28:43:73:FD:82:AE:59:B2:73:83:D4:A6:8F Certificate issuer: /CN=FC4A38DAAF15E8284373FD82AE59B27383D4A68F Certificate serial: 7F5E5340743A88AB1AA83B2596A75B024D8F66DC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC4A38DAAF15E8284373FD82AE59B27383D4A68F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0546183c-d9ef-4c33-be99-e84bedb10b68/0/FC4A38DAAF15E8284373FD82AE59B27383D4A68F.mft Manifest number: 04CE Signing time: Tue 06 May 2025 12:01:16 +0000 Manifest this update: Tue 06 May 2025 11:56:16 +0000 Manifest next update: Fri 09 May 2025 16:07:16 +0000 Files and hashes: 1: FC4A38DAAF15E8284373FD82AE59B27383D4A68F.crl (hash: 3FcDYrxVGgS6uw7WnszrNSJupywG2IcQyK3BfZ796oU=) 2: 3130332e3133372e3134342e302f32332d3234203d3e20313338383439.roa (hash: +/gEu2QMKYb7XuWKuWysnxgqlIQgDLaK15195REh8qc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0546183c-d9ef-4c33-be99-e84bedb10b68/0/FC4A38DAAF15E8284373FD82AE59B27383D4A68F.crl rsync://repo-rpki.idnic.net/repo/0546183c-d9ef-4c33-be99-e84bedb10b68/0/FC4A38DAAF15E8284373FD82AE59B27383D4A68F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC4A38DAAF15E8284373FD82AE59B27383D4A68F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 May 2025 16:07:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:5e:53:40:74:3a:88:ab:1a:a8:3b:25:96:a7:5b:02:4d:8f:66:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC4A38DAAF15E8284373FD82AE59B27383D4A68F Validity Not Before: May 6 11:56:16 2025 GMT Not After : May 9 16:07:16 2025 GMT Subject: CN=711207142DE9EAC790B295A39434222112A80EF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:7b:81:70:f8:a6:d7:26:a2:4a:d6:22:98:57: e8:7c:77:11:d7:d1:c0:af:95:3a:5a:99:e8:b8:94: b9:e8:3f:ad:1c:03:f3:57:66:4f:5d:09:ed:63:9a: 7c:d3:00:f8:c6:44:8c:5a:fe:e3:5f:f4:a4:21:fd: 72:c7:d8:6d:71:44:2e:f3:25:5d:44:65:da:68:a5: 0c:e2:76:74:e1:72:b5:a8:18:14:7e:11:ee:79:37: 3f:e0:01:00:2a:b3:70:0d:0e:60:61:86:44:79:7e: 9f:a6:66:7f:e9:f2:75:47:08:71:e7:04:f7:eb:77: 15:bf:c8:b3:ea:55:f6:3f:c7:30:d2:8d:a3:45:b2: 19:73:9d:6a:7e:89:7e:5d:e8:4d:e2:6b:cb:02:b3: 7b:7e:2d:76:a0:59:14:22:20:e8:09:58:c1:c4:68: 31:ed:e9:64:c0:96:01:d6:6f:91:96:77:d2:e3:2f: d1:b4:da:66:de:66:bf:6b:de:2b:1b:f8:3b:10:a5: df:4c:0f:1b:6c:6b:db:fb:82:a3:66:f3:3c:4b:52: 04:ad:c2:2b:4a:48:6a:09:dd:58:0a:8a:dc:b8:2b: 2b:d7:42:f4:59:3b:15:03:4e:c1:c0:1c:3b:30:7e: 54:12:25:2a:28:f3:0d:19:26:3d:45:3c:e6:69:43: 5a:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:12:07:14:2D:E9:EA:C7:90:B2:95:A3:94:34:22:21:12:A8:0E:F5 X509v3 Authority Key Identifier: keyid:FC:4A:38:DA:AF:15:E8:28:43:73:FD:82:AE:59:B2:73:83:D4:A6:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0546183c-d9ef-4c33-be99-e84bedb10b68/0/FC4A38DAAF15E8284373FD82AE59B27383D4A68F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC4A38DAAF15E8284373FD82AE59B27383D4A68F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0546183c-d9ef-4c33-be99-e84bedb10b68/0/FC4A38DAAF15E8284373FD82AE59B27383D4A68F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:d8:20:71:6c:46:a0:d6:c1:f9:b2:30:03:9a:ee:5d:dc:b1: 57:98:3e:13:4f:23:db:8c:ec:a2:47:82:19:15:11:26:36:fc: b5:3d:13:b1:76:78:c8:20:ce:81:93:e1:57:53:88:3b:25:c8: fe:68:44:37:de:cd:3c:14:d1:9b:f4:e4:75:98:00:83:b0:7e: e9:da:19:a6:db:8b:58:22:f1:fc:40:0e:1f:5d:66:40:f7:d6: f2:1b:d1:a5:0c:0d:ec:2c:d7:09:15:aa:3c:82:d5:c0:25:44: 8d:32:24:29:53:11:47:9e:fe:58:4a:bc:15:36:2d:31:92:ab: 73:b2:c9:20:54:84:c5:6b:a4:ed:24:2e:e6:00:33:5d:f6:39: 0d:f8:c8:1f:06:23:d0:d0:4e:40:44:e0:0f:55:fc:d3:66:40: 84:42:cf:f3:76:43:d4:ba:6a:04:0f:fe:8e:f7:63:95:37:37: 1e:87:32:a2:f1:06:7d:67:5d:3b:7f:b1:d6:c5:7f:e0:78:42: 8c:61:c2:c5:f7:50:ad:e8:cc:e3:1b:84:1c:50:42:02:c0:cd: ef:9f:cf:38:87:e5:16:54:84:e0:93:5a:b6:86:8e:0d:62:fe: e2:b5:9d:a8:fe:e7:fd:f5:ee:d9:49:8d:10:fd:55:37:42:07: db:45:86:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf15TQHQ6iKsaqDsllqdbAk2PZtwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkM0QTM4REFBRjE1RTgyODQzNzNGRDgyQUU1OUIyNzM4 M0Q0QTY4RjAeFw0yNTA1MDYxMTU2MTZaFw0yNTA1MDkxNjA3MTZaMDMxMTAvBgNV BAMTKDcxMTIwNzE0MkRFOUVBQzc5MEIyOTVBMzk0MzQyMjIxMTJBODBFRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCde4Fw+KbXJqJK1iKYV+h8dxHX 0cCvlTpamei4lLnoP60cA/NXZk9dCe1jmnzTAPjGRIxa/uNf9KQh/XLH2G1xRC7z JV1EZdpopQzidnThcrWoGBR+Ee55Nz/gAQAqs3ANDmBhhkR5fp+mZn/p8nVHCHHn BPfrdxW/yLPqVfY/xzDSjaNFshlznWp+iX5d6E3ia8sCs3t+LXagWRQiIOgJWMHE aDHt6WTAlgHWb5GWd9LjL9G02mbeZr9r3isb+DsQpd9MDxtsa9v7gqNm8zxLUgSt witKSGoJ3VgKity4KyvXQvRZOxUDTsHAHDswflQSJSoo8w0ZJj1FPOZpQ1oVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcRIHFC3p6seQspWjlDQiIRKoDvUwHwYDVR0j BBgwFoAU/Eo42q8V6ChDc/2Crlmyc4PUpo8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NTQ2MTgzYy1kOWVmLTRjMzMtYmU5OS1lODRiZWRiMTBiNjgvMC9GQzRBMzhEQUFG MTVFODI4NDM3M0ZEODJBRTU5QjI3MzgzRDRBNjhGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkM0QTM4REFBRjE1RTgyODQzNzNGRDgyQUU1OUIyNzM4M0Q0 QTY4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDU0NjE4M2MtZDllZi00YzMzLWJl OTktZTg0YmVkYjEwYjY4LzAvRkM0QTM4REFBRjE1RTgyODQzNzNGRDgyQUU1OUIy NzM4M0Q0QTY4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMTYIHFsRqDWwfmyMAOa7l3csVeYPhNPI9uM 7KJHghkVESY2/LU9E7F2eMggzoGT4VdTiDslyP5oRDfezTwU0Zv05HWYAIOwfuna Gabbi1gi8fxADh9dZkD31vIb0aUMDews1wkVqjyC1cAlRI0yJClTEUee/lhKvBU2 LTGSq3OyySBUhMVrpO0kLuYAM132OQ34yB8GI9DQTkBE4A9V/NNmQIRCz/N2Q9S6 agQP/o73Y5U3Nx6HMqLxBn1nXTt/sdbFf+B4QoxhwsX3UK3ozOMbhBxQQgLAze+f zziH5RZUhOCTWraGjg1i/uK1naj+5/317tlJjRD9VTdCB9tFhlA= -----END CERTIFICATE-----Generated at Thu May 8 05:46:36 2025 by rpki-client