$ rpki-client -vvf repo-rpki.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.mft File: FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.mft (raw, json) Hash identifier: QD9JtMmY23GfniBfVjdX9r24EwRrZ4jS8TgTG4BZ7oM= Subject key identifier: 3E:07:35:C8:9B:F5:72:DD:FB:04:B3:E8:AC:C9:4E:5D:39:1F:51:C0 Authority key identifier: FA:62:D8:28:54:4F:70:BE:AD:8B:3C:04:A8:61:75:E4:FB:07:C4:B6 Certificate issuer: /CN=FA62D828544F70BEAD8B3C04A86175E4FB07C4B6 Certificate serial: 567FD3499AD16541C8E5CD8FDFEF608FC68E919C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.mft Manifest number: 8E Signing time: Thu 08 May 2025 21:00:42 +0000 Manifest this update: Thu 08 May 2025 20:55:42 +0000 Manifest next update: Mon 12 May 2025 06:00:42 +0000 Files and hashes: 1: 3135372e36362e33372e302f32342d3234203d3e20313338383034.roa (hash: Qz1Kg1HQXiKB/AScS9V+bE6Z+oOPaOLRSzeXmFVh+Jk=) 2: FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.crl (hash: PboDebbqkXWbfZeeAjZIVEYym9lPGN4tQISrn3+oRJQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.crl rsync://repo-rpki.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 06:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:7f:d3:49:9a:d1:65:41:c8:e5:cd:8f:df:ef:60:8f:c6:8e:91:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA62D828544F70BEAD8B3C04A86175E4FB07C4B6 Validity Not Before: May 8 20:55:42 2025 GMT Not After : May 12 06:00:42 2025 GMT Subject: CN=3E0735C89BF572DDFB04B3E8ACC94E5D391F51C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e6:dc:24:89:99:11:18:03:ef:59:fc:94:24: 99:f0:2d:2c:86:d5:3c:08:21:5d:c5:85:51:0a:12: 0c:f4:7a:34:60:3e:3e:d3:68:6a:45:33:dd:75:6a: 5b:34:82:a9:17:5d:f0:06:d2:64:da:8e:a0:68:df: 33:dc:4e:97:8d:1e:0b:c8:e7:3d:bb:c0:ac:2d:a8: bb:aa:94:72:ee:56:6e:31:ea:2f:62:17:94:09:73: 82:9c:13:2b:bc:04:c3:7a:ea:b9:c3:7f:9c:4b:c6: 4d:cd:ec:f2:8e:d4:b1:e8:a9:c3:32:c3:39:87:73: db:90:e4:7b:57:b0:41:ca:8e:95:53:28:45:c4:19: 37:3f:0a:a1:8d:eb:ab:1a:a0:1a:62:fe:4e:78:62: a4:d2:1a:a8:e1:5c:00:98:b0:69:5f:84:5c:bc:67: b2:21:4d:90:b4:39:64:99:d3:6e:7e:75:42:42:63: 4c:a5:b8:8e:de:a1:6e:1e:55:0f:b4:8e:1f:6d:5d: 96:f5:8e:8a:c3:ee:41:ee:72:11:67:32:54:e5:b0: b6:8a:58:e6:1d:98:f6:67:33:93:dc:7a:a4:5e:30: a8:85:b0:b8:68:60:7f:72:ee:b5:7a:7a:5b:eb:04: e9:a8:a4:58:2d:03:aa:20:41:6c:22:d3:1e:02:f8: 17:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:07:35:C8:9B:F5:72:DD:FB:04:B3:E8:AC:C9:4E:5D:39:1F:51:C0 X509v3 Authority Key Identifier: keyid:FA:62:D8:28:54:4F:70:BE:AD:8B:3C:04:A8:61:75:E4:FB:07:C4:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:84:18:ba:57:85:1e:ad:56:d6:a1:d1:70:9b:8f:1f:7c:5b: b0:3f:6a:f6:19:28:8b:71:4e:5a:f7:31:20:5c:ac:b1:4b:f2: 3b:e2:4f:f1:c5:1c:ae:a1:53:c4:69:fd:1d:78:ca:bd:ad:aa: fc:08:7f:3b:6a:93:06:68:c6:2e:d5:83:c5:44:01:9f:ec:34: 6d:23:5b:61:c2:7e:a1:b6:2b:c5:b9:c6:1a:e1:ba:3d:7e:76: 65:e6:c0:68:3c:5e:58:30:06:88:5b:82:0c:82:58:8f:86:06: d3:5a:3a:27:27:14:20:2e:96:06:e2:c3:9a:8f:e0:25:63:2d: 77:6c:0c:10:2a:17:d0:97:33:f6:da:05:b2:f5:6f:f4:9c:11: 60:da:f3:41:4d:15:be:bf:c2:7d:12:c2:6c:e4:a4:a3:8b:7a: ee:66:4d:bc:98:bd:26:1f:2e:3b:4f:72:d7:bc:87:ad:c3:c6: a4:2c:b1:a2:6a:2e:ad:ff:20:61:ff:28:75:bb:76:f9:f6:72: fb:89:22:2d:94:c5:8c:66:59:50:e8:02:64:fa:30:0a:c6:35: 26:1f:fb:ef:12:fc:36:2a:83:cd:21:47:b5:17:4a:7c:37:bb: 0e:af:f8:51:ff:82:8d:5f:1b:e5:31:28:0a:94:98:98:9d:ab: 4b:f0:7a:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVn/TSZrRZUHI5c2P3+9gj8aOkZwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE2MkQ4Mjg1NDRGNzBCRUFEOEIzQzA0QTg2MTc1RTRG QjA3QzRCNjAeFw0yNTA1MDgyMDU1NDJaFw0yNTA1MTIwNjAwNDJaMDMxMTAvBgNV BAMTKDNFMDczNUM4OUJGNTcyRERGQjA0QjNFOEFDQzk0RTVEMzkxRjUxQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc5twkiZkRGAPvWfyUJJnwLSyG 1TwIIV3FhVEKEgz0ejRgPj7TaGpFM911als0gqkXXfAG0mTajqBo3zPcTpeNHgvI 5z27wKwtqLuqlHLuVm4x6i9iF5QJc4KcEyu8BMN66rnDf5xLxk3N7PKO1LHoqcMy wzmHc9uQ5HtXsEHKjpVTKEXEGTc/CqGN66saoBpi/k54YqTSGqjhXACYsGlfhFy8 Z7IhTZC0OWSZ025+dUJCY0yluI7eoW4eVQ+0jh9tXZb1jorD7kHuchFnMlTlsLaK WOYdmPZnM5PceqReMKiFsLhoYH9y7rV6elvrBOmopFgtA6ogQWwi0x4C+BdDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPgc1yJv1ct37BLPorMlOXTkfUcAwHwYDVR0j BBgwFoAU+mLYKFRPcL6tizwEqGF15PsHxLYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YzA0ZGVkOC1iMGY1LTQ1OTQtOGUwZS05MTFlY2I3N2VlNzMvMC9GQTYyRDgyODU0 NEY3MEJFQUQ4QjNDMDRBODYxNzVFNEZCMDdDNEI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkE2MkQ4Mjg1NDRGNzBCRUFEOEIzQzA0QTg2MTc1RTRGQjA3 QzRCNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWMwNGRlZDgtYjBmNS00NTk0LThl MGUtOTExZWNiNzdlZTczLzAvRkE2MkQ4Mjg1NDRGNzBCRUFEOEIzQzA0QTg2MTc1 RTRGQjA3QzRCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIuEGLpXhR6tVtah0XCbjx98W7A/avYZKItx Tlr3MSBcrLFL8jviT/HFHK6hU8Rp/R14yr2tqvwIfztqkwZoxi7Vg8VEAZ/sNG0j W2HCfqG2K8W5xhrhuj1+dmXmwGg8XlgwBohbggyCWI+GBtNaOicnFCAulgbiw5qP 4CVjLXdsDBAqF9CXM/baBbL1b/ScEWDa80FNFb6/wn0SwmzkpKOLeu5mTbyYvSYf LjtPcte8h63DxqQssaJqLq3/IGH/KHW7dvn2cvuJIi2UxYxmWVDoAmT6MArGNSYf ++8S/DYqg80hR7UXSnw3uw6v+FH/go1fG+UxKAqUmJidq0vwes0= -----END CERTIFICATE-----Generated at Sat May 10 16:38:09 2025 by rpki-client