$ rpki-client -vvf repo-rpki.idnic.net/repo/1653247a-a56e-424a-a07b-36a2511d7caa/0/FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.mft File: FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.mft (raw, json) Hash identifier: tDsZVAvl+j+G6CMgLNCaMhBq5DRtcO86Oi83iaE71Dg= Subject key identifier: 78:5D:59:EA:ED:46:82:08:DC:D6:A7:D0:70:E3:43:C7:CD:F1:BC:B0 Authority key identifier: FE:88:0C:C9:3B:62:84:E6:83:31:06:A5:BE:B7:1A:0C:DD:E5:7C:0B Certificate issuer: /CN=FE880CC93B6284E6833106A5BEB71A0CDDE57C0B Certificate serial: 093945C1581A350028D82AA3258C832326B6A6FC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1653247a-a56e-424a-a07b-36a2511d7caa/0/FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.mft Manifest number: 01BB Signing time: Sat 10 May 2025 08:41:59 +0000 Manifest this update: Sat 10 May 2025 08:36:59 +0000 Manifest next update: Tue 13 May 2025 16:34:59 +0000 Files and hashes: 1: FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.crl (hash: IJ2Vom0YUdXxggyb0SvnO1bXW+qxR0ANuM3BXF1tsNE=) 2: 3130332e31332e3133382e302f32342d3234203d3e20313530323135.roa (hash: JE8HUdHVJ0U83Tps7TYgDUX+YT7M9iS8rOn13rFfngc=) 3: 3130332e31332e3133392e302f32342d3234203d3e20313530323135.roa (hash: qP3Hd0jYELSgERJemItwOkIGwYts7IZIuX5SZqeDBqU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1653247a-a56e-424a-a07b-36a2511d7caa/0/FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.crl rsync://repo-rpki.idnic.net/repo/1653247a-a56e-424a-a07b-36a2511d7caa/0/FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 16:34:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:39:45:c1:58:1a:35:00:28:d8:2a:a3:25:8c:83:23:26:b6:a6:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FE880CC93B6284E6833106A5BEB71A0CDDE57C0B Validity Not Before: May 10 08:36:59 2025 GMT Not After : May 13 16:34:59 2025 GMT Subject: CN=785D59EAED468208DCD6A7D070E343C7CDF1BCB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b0:31:39:d5:f1:b3:ff:94:d4:ea:36:25:d8: dc:47:7e:3c:e6:47:81:88:1b:39:48:12:fe:87:72: ab:5f:4a:4e:0b:e1:61:41:f6:84:f0:8c:91:a0:ee: 30:df:90:26:b6:aa:36:09:fa:cf:09:e0:97:b7:0f: 4c:14:9e:1f:8d:80:75:6f:7a:6c:13:2d:5d:a3:24: 51:e0:e7:7b:81:6f:9e:3a:98:1b:62:37:a0:dc:bb: 3c:77:a6:a5:17:a5:1b:f9:7c:20:f4:63:14:4b:7f: 40:25:74:d1:27:59:47:bf:f3:0f:d8:91:39:77:2c: f6:b9:73:f9:84:dd:c5:b5:22:e8:be:07:26:21:28: ba:d4:39:2e:1d:27:bd:75:e8:50:50:58:e9:c8:50: a8:12:51:d6:d0:70:16:64:ce:f5:99:8b:05:03:3d: ff:56:97:a7:8a:ee:45:4f:79:69:b9:f9:3d:2a:8e: 13:23:8c:ff:e1:a6:f6:73:ed:97:5e:72:ef:24:6b: 7d:92:33:39:86:49:d9:e3:73:21:2c:be:23:b1:95: 20:6c:21:8e:6c:96:8b:6b:1d:4c:a2:11:d5:88:51: d6:5b:52:7b:14:11:8e:f7:11:90:53:5a:aa:6b:00: 58:86:89:ca:3c:e9:4a:93:17:4c:7b:45:4d:fe:42: ab:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:5D:59:EA:ED:46:82:08:DC:D6:A7:D0:70:E3:43:C7:CD:F1:BC:B0 X509v3 Authority Key Identifier: keyid:FE:88:0C:C9:3B:62:84:E6:83:31:06:A5:BE:B7:1A:0C:DD:E5:7C:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1653247a-a56e-424a-a07b-36a2511d7caa/0/FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1653247a-a56e-424a-a07b-36a2511d7caa/0/FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:b1:19:a3:95:cd:b0:d1:03:55:e1:d3:b4:fb:55:31:70:66: 11:66:4d:53:8f:61:68:a7:1b:19:49:e2:6f:da:c6:c8:d3:34: a8:dc:24:3f:19:e2:35:51:6b:d6:bd:d8:8d:cb:b7:65:32:b3: ff:3d:41:97:93:66:a5:75:fa:ba:ae:b8:bc:76:92:05:95:f5: 6e:0a:f7:af:a6:79:f6:98:e0:63:ea:c2:86:0e:58:14:44:18: b7:18:94:21:4f:6d:4f:38:1c:7f:b3:68:80:f0:de:15:f8:6d: 64:b6:bc:31:b3:71:61:a7:59:b7:25:95:8c:5a:38:fd:c3:ba: 8d:76:54:6b:c6:a2:7b:68:82:54:f4:c5:dc:e8:7a:72:5a:b9: 6b:fd:ed:4a:7a:4d:cc:30:e6:ac:aa:52:f8:53:33:7c:58:67: 5c:ce:a7:1e:9f:81:7d:39:a6:d6:d8:e7:39:55:c0:5a:84:d4: f0:c0:1d:a1:ed:66:2c:ab:43:8c:2d:e9:22:39:7b:7d:d2:d7: 2d:d1:4c:a2:d7:64:31:2f:86:25:dc:c4:31:dd:7f:05:74:98: 66:99:ae:ca:d2:47:29:05:6a:c2:6e:31:a7:ff:13:f7:1b:9d: 8e:bf:61:9e:a7:ab:9f:59:84:e9:2c:d3:95:6f:be:e6:6c:47: 43:24:88:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCTlFwVgaNQAo2CqjJYyDIya2pvwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkU4ODBDQzkzQjYyODRFNjgzMzEwNkE1QkVCNzFBMENE REU1N0MwQjAeFw0yNTA1MTAwODM2NTlaFw0yNTA1MTMxNjM0NTlaMDMxMTAvBgNV BAMTKDc4NUQ1OUVBRUQ0NjgyMDhEQ0Q2QTdEMDcwRTM0M0M3Q0RGMUJDQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCisDE51fGz/5TU6jYl2NxHfjzm R4GIGzlIEv6HcqtfSk4L4WFB9oTwjJGg7jDfkCa2qjYJ+s8J4Je3D0wUnh+NgHVv emwTLV2jJFHg53uBb546mBtiN6Dcuzx3pqUXpRv5fCD0YxRLf0AldNEnWUe/8w/Y kTl3LPa5c/mE3cW1Iui+ByYhKLrUOS4dJ7116FBQWOnIUKgSUdbQcBZkzvWZiwUD Pf9Wl6eK7kVPeWm5+T0qjhMjjP/hpvZz7Zdecu8ka32SMzmGSdnjcyEsviOxlSBs IY5slotrHUyiEdWIUdZbUnsUEY73EZBTWqprAFiGico86UqTF0x7RU3+QqsXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeF1Z6u1Gggjc1qfQcONDx83xvLAwHwYDVR0j BBgwFoAU/ogMyTtihOaDMQalvrcaDN3lfAswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NjUzMjQ3YS1hNTZlLTQyNGEtYTA3Yi0zNmEyNTExZDdjYWEvMC9GRTg4MENDOTNC NjI4NEU2ODMzMTA2QTVCRUI3MUEwQ0RERTU3QzBCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkU4ODBDQzkzQjYyODRFNjgzMzEwNkE1QkVCNzFBMENEREU1 N0MwQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTY1MzI0N2EtYTU2ZS00MjRhLWEw N2ItMzZhMjUxMWQ3Y2FhLzAvRkU4ODBDQzkzQjYyODRFNjgzMzEwNkE1QkVCNzFB MENEREU1N0MwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD+xGaOVzbDRA1Xh07T7VTFwZhFmTVOPYWin GxlJ4m/axsjTNKjcJD8Z4jVRa9a92I3Lt2Uys/89QZeTZqV1+rquuLx2kgWV9W4K 96+mefaY4GPqwoYOWBREGLcYlCFPbU84HH+zaIDw3hX4bWS2vDGzcWGnWbcllYxa OP3Duo12VGvGontoglT0xdzoenJauWv97Up6Tcww5qyqUvhTM3xYZ1zOpx6fgX05 ptbY5zlVwFqE1PDAHaHtZiyrQ4wt6SI5e33S1y3RTKLXZDEvhiXcxDHdfwV0mGaZ rsrSRykFasJuMaf/E/cbnY6/YZ6nq59ZhOks05VvvuZsR0MkiL0= -----END CERTIFICATE-----Generated at Sun May 11 23:52:50 2025 by rpki-client