$ rpki-client -vvf repo-rpki.idnic.net/repo/3cf0a77c-3928-4130-a098-b437572d722c/0/FC4AE05C1547B778063F91C4687D12E8D6978309.mft File: FC4AE05C1547B778063F91C4687D12E8D6978309.mft (raw, json) Hash identifier: NEc2BV1Xpk7wVlWEFb0a5zfnfSj59PXjmJwne2I8EHs= Subject key identifier: 88:BF:85:A1:2C:50:DF:4F:0F:D1:D1:9E:F5:F0:5A:83:29:5E:27:E3 Authority key identifier: FC:4A:E0:5C:15:47:B7:78:06:3F:91:C4:68:7D:12:E8:D6:97:83:09 Certificate issuer: /CN=FC4AE05C1547B778063F91C4687D12E8D6978309 Certificate serial: 3BA81A734CCF983345029C10E95AC8497FD688A2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FC4AE05C1547B778063F91C4687D12E8D6978309.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3cf0a77c-3928-4130-a098-b437572d722c/0/FC4AE05C1547B778063F91C4687D12E8D6978309.mft Manifest number: BF Signing time: Mon 30 Jun 2025 11:51:43 +0000 Manifest this update: Mon 30 Jun 2025 11:46:43 +0000 Manifest next update: Thu 03 Jul 2025 21:51:43 +0000 Files and hashes: 1: 3135372e32302e3233302e302f32332d3234203d3e20313532343331.roa (hash: zEX2zvBjt157yqeJ3lViczjWUiYCUWpG52AxWV4xz8k=) 2: FC4AE05C1547B778063F91C4687D12E8D6978309.crl (hash: syvEZAUx7htyVSk8UKH5eXlR15nJcryBSZSxZ/Qs2xg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3cf0a77c-3928-4130-a098-b437572d722c/0/FC4AE05C1547B778063F91C4687D12E8D6978309.crl rsync://repo-rpki.idnic.net/repo/3cf0a77c-3928-4130-a098-b437572d722c/0/FC4AE05C1547B778063F91C4687D12E8D6978309.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FC4AE05C1547B778063F91C4687D12E8D6978309.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 12:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:a8:1a:73:4c:cf:98:33:45:02:9c:10:e9:5a:c8:49:7f:d6:88:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC4AE05C1547B778063F91C4687D12E8D6978309 Validity Not Before: Jun 30 11:46:43 2025 GMT Not After : Jul 3 21:51:43 2025 GMT Subject: CN=88BF85A12C50DF4F0FD1D19EF5F05A83295E27E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:39:0e:ba:f2:be:ca:40:6a:96:82:f5:da:e6: 0d:9f:32:7a:0b:f5:aa:df:e3:48:49:c5:58:37:81: 3d:df:71:aa:81:f4:1f:52:82:98:a7:49:de:5b:6e: 13:19:b6:d9:4c:83:43:64:1c:30:12:13:57:31:3a: 01:98:04:b7:d3:1f:b1:30:f8:41:02:64:d0:e8:5b: c3:b2:fc:0e:5b:6c:6a:30:0c:35:f3:48:fc:13:dd: ee:55:df:80:e2:02:cd:49:79:ce:c9:ea:10:21:59: 47:7f:b0:6d:e6:85:4e:22:99:d9:6e:f0:cd:30:a9: 10:2f:df:46:92:1d:ad:6a:46:e9:bf:63:a5:36:ab: d4:c7:d1:d5:ff:dc:2d:00:23:c4:e1:69:3f:1b:fe: 12:85:30:6a:1f:32:69:be:2f:e3:6b:7d:bf:7a:4b: cb:ca:d8:58:c6:37:50:89:14:cb:ca:e9:b0:c6:53: a2:34:0c:26:76:64:d8:ce:d4:be:59:86:87:65:47: 87:ec:1e:a1:67:16:32:56:1a:21:a4:24:4b:1f:2e: fa:b2:4c:9f:5e:eb:62:f7:56:08:1a:e2:c4:c5:16: 33:1a:8c:0f:74:64:57:d5:71:40:88:12:e3:1d:2c: fa:a4:9a:50:4c:9a:18:32:b7:ff:07:69:2f:bd:78: 6c:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:BF:85:A1:2C:50:DF:4F:0F:D1:D1:9E:F5:F0:5A:83:29:5E:27:E3 X509v3 Authority Key Identifier: keyid:FC:4A:E0:5C:15:47:B7:78:06:3F:91:C4:68:7D:12:E8:D6:97:83:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3cf0a77c-3928-4130-a098-b437572d722c/0/FC4AE05C1547B778063F91C4687D12E8D6978309.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FC4AE05C1547B778063F91C4687D12E8D6978309.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3cf0a77c-3928-4130-a098-b437572d722c/0/FC4AE05C1547B778063F91C4687D12E8D6978309.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:75:b9:13:3b:c2:49:68:fd:37:b1:0b:86:52:1a:57:aa:6f: 95:f3:74:d0:ab:6d:66:b1:fc:02:74:db:b3:ae:87:a8:18:aa: b0:aa:2c:3c:31:18:3b:c1:77:30:cc:f5:20:13:28:75:5a:d9: 0e:8d:73:c7:ab:26:1f:28:d0:06:d6:e0:5c:ce:05:0e:aa:5e: e5:ee:36:60:b4:87:e0:51:41:88:63:c0:a3:36:2d:6e:5e:f4: d6:92:75:eb:2f:19:ef:23:50:f4:74:fd:a1:ac:95:d0:67:7c: 4f:fc:f3:ce:18:1b:0a:26:02:41:22:36:10:9f:89:18:4b:6f: 8d:82:17:f8:ba:12:56:b8:a3:f1:95:21:bc:72:a5:7e:2f:b7: 37:8c:8b:5a:52:04:09:3c:07:c0:b0:57:1b:44:58:68:e9:5e: dc:33:81:54:ae:25:db:d9:a7:87:dd:f6:be:80:fa:81:1c:05: 57:76:11:31:d4:d7:bc:bd:6b:8b:89:da:f6:33:02:c6:93:80: 86:8f:34:8a:17:af:9b:41:49:ef:f5:0b:24:af:e6:4b:04:af: 84:fa:56:fa:0b:95:03:bb:97:c4:6c:f5:6b:ce:e0:08:01:8b: 15:54:64:0c:10:ee:79:38:68:c8:04:79:d0:f0:26:f5:e5:b2: a3:76:b9:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO6gac0zPmDNFApwQ6VrISX/WiKIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkM0QUUwNUMxNTQ3Qjc3ODA2M0Y5MUM0Njg3RDEyRThE Njk3ODMwOTAeFw0yNTA2MzAxMTQ2NDNaFw0yNTA3MDMyMTUxNDNaMDMxMTAvBgNV BAMTKDg4QkY4NUExMkM1MERGNEYwRkQxRDE5RUY1RjA1QTgzMjk1RTI3RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4OQ668r7KQGqWgvXa5g2fMnoL 9arf40hJxVg3gT3fcaqB9B9SgpinSd5bbhMZttlMg0NkHDASE1cxOgGYBLfTH7Ew +EECZNDoW8Oy/A5bbGowDDXzSPwT3e5V34DiAs1Jec7J6hAhWUd/sG3mhU4imdlu 8M0wqRAv30aSHa1qRum/Y6U2q9TH0dX/3C0AI8ThaT8b/hKFMGofMmm+L+Nrfb96 S8vK2FjGN1CJFMvK6bDGU6I0DCZ2ZNjO1L5ZhodlR4fsHqFnFjJWGiGkJEsfLvqy TJ9e62L3Vgga4sTFFjMajA90ZFfVcUCIEuMdLPqkmlBMmhgyt/8HaS+9eGy7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiL+FoSxQ308P0dGe9fBagyleJ+MwHwYDVR0j BBgwFoAU/ErgXBVHt3gGP5HEaH0S6NaXgwkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Y2YwYTc3Yy0zOTI4LTQxMzAtYTA5OC1iNDM3NTcyZDcyMmMvMC9GQzRBRTA1QzE1 NDdCNzc4MDYzRjkxQzQ2ODdEMTJFOEQ2OTc4MzA5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkM0QUUwNUMxNTQ3Qjc3ODA2M0Y5MUM0Njg3RDEyRThENjk3 ODMwOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2NmMGE3N2MtMzkyOC00MTMwLWEw OTgtYjQzNzU3MmQ3MjJjLzAvRkM0QUUwNUMxNTQ3Qjc3ODA2M0Y5MUM0Njg3RDEy RThENjk3ODMwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIR1uRM7wklo/TexC4ZSGleqb5XzdNCrbWax /AJ027Ouh6gYqrCqLDwxGDvBdzDM9SATKHVa2Q6Nc8erJh8o0AbW4FzOBQ6qXuXu NmC0h+BRQYhjwKM2LW5e9NaSdesvGe8jUPR0/aGsldBnfE/8884YGwomAkEiNhCf iRhLb42CF/i6Ela4o/GVIbxypX4vtzeMi1pSBAk8B8CwVxtEWGjpXtwzgVSuJdvZ p4fd9r6A+oEcBVd2ETHU17y9a4uJ2vYzAsaTgIaPNIoXr5tBSe/1CySv5ksEr4T6 VvoLlQO7l8Rs9WvO4AgBixVUZAwQ7nk4aMgEedDwJvXlsqN2uWs= -----END CERTIFICATE-----Generated at Mon Jun 30 16:28:40 2025 by rpki-client