$ rpki-client -vvf repo-rpki.idnic.net/repo/47ad0a3a-26b8-449a-88ec-bf0398ea53a6/0/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.mft File: FBC39A6E177F8DD7BA5E257D4489C57574C07E81.mft (raw, json) Hash identifier: EZpVxUqVX02LO5uFoOdUqpgODFjKzengvunYU/lK4DE= Subject key identifier: B0:01:46:A6:2D:D2:CD:3F:20:6D:9D:5F:69:1F:FA:26:3D:09:55:D7 Authority key identifier: FB:C3:9A:6E:17:7F:8D:D7:BA:5E:25:7D:44:89:C5:75:74:C0:7E:81 Certificate issuer: /CN=FBC39A6E177F8DD7BA5E257D4489C57574C07E81 Certificate serial: 5D904F785B34F5B22AB8191F0CC4E3EF3ACD7F41 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.cer Subject info access: rsync://repo-rpki.idnic.net/repo/47ad0a3a-26b8-449a-88ec-bf0398ea53a6/0/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.mft Manifest number: 87 Signing time: Sun 29 Jun 2025 02:01:44 +0000 Manifest this update: Sun 29 Jun 2025 01:56:44 +0000 Manifest next update: Wed 02 Jul 2025 02:02:44 +0000 Files and hashes: 1: 3136302e32352e3235312e302f32342d3234203d3e20313533303938.roa (hash: WOZ5xs9U4F3KLpRDLfcgz83XleKTMEe9VnWS6HdwLsw=) 2: 3136302e32352e3235302e302f32332d3233203d3e20313533303938.roa (hash: BMrrPV+uJV5vgYvMtf5iM7UH/3Kth/c7l8TCbVDuBNo=) 3: FBC39A6E177F8DD7BA5E257D4489C57574C07E81.crl (hash: xfMES99QeBJRrp9kq9lLOVE+ereh3qKVNnrOjyEmV+I=) 4: 3136302e32352e3235302e302f32342d3234203d3e20313533303938.roa (hash: FwGHsU9pvkCMW0hhE/47YL/pb6ELCWRvWw9egEH3Cj0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/47ad0a3a-26b8-449a-88ec-bf0398ea53a6/0/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.crl rsync://repo-rpki.idnic.net/repo/47ad0a3a-26b8-449a-88ec-bf0398ea53a6/0/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 02:02:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:90:4f:78:5b:34:f5:b2:2a:b8:19:1f:0c:c4:e3:ef:3a:cd:7f:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FBC39A6E177F8DD7BA5E257D4489C57574C07E81 Validity Not Before: Jun 29 01:56:44 2025 GMT Not After : Jul 2 02:02:44 2025 GMT Subject: CN=B00146A62DD2CD3F206D9D5F691FFA263D0955D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ed:55:24:35:12:77:c7:64:79:8f:cc:d4:39: 30:38:d7:89:b7:b8:54:1a:f2:1c:ba:23:ec:2a:00: df:e6:91:f2:92:c1:f9:65:3a:5f:c1:ba:67:b1:ee: e0:6d:5b:43:75:a0:d8:7e:ad:6a:a3:9b:2b:1b:6c: aa:d0:e3:c2:13:59:df:0c:4c:f3:42:e3:38:91:f2: a9:c7:d5:bb:85:7f:ce:ca:c3:0a:be:83:76:2c:56: f8:a3:25:3d:29:d3:91:b1:bc:33:63:b1:1c:c0:f2: 9f:c7:af:7a:37:d2:f4:3a:67:17:a6:92:a6:87:f4: a1:0f:92:97:18:07:ce:c0:4c:fa:3c:64:fa:0b:f8: c6:af:6c:1b:17:b2:e5:61:af:56:b0:cc:ad:b8:94: da:8d:a3:7d:74:ff:19:e7:43:4d:03:1c:ef:4f:18: b0:3d:05:17:16:11:42:dd:88:c7:e2:00:52:4c:22: 55:2f:c3:51:1d:ad:47:b1:b6:5b:bf:da:89:b9:7c: c1:c0:91:e6:e4:53:ba:6e:eb:c2:b7:fc:50:6c:57: 9d:e3:fb:24:3a:e9:47:7a:f8:8b:53:c2:0b:9c:d8: 35:f1:d3:ba:8f:eb:91:ce:c6:b5:b9:87:63:2b:a7: c0:aa:a9:58:ec:61:0b:2a:ed:db:af:35:92:95:d4: 5c:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:01:46:A6:2D:D2:CD:3F:20:6D:9D:5F:69:1F:FA:26:3D:09:55:D7 X509v3 Authority Key Identifier: keyid:FB:C3:9A:6E:17:7F:8D:D7:BA:5E:25:7D:44:89:C5:75:74:C0:7E:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/47ad0a3a-26b8-449a-88ec-bf0398ea53a6/0/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/47ad0a3a-26b8-449a-88ec-bf0398ea53a6/0/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:d8:65:94:a9:39:4b:80:2c:52:9d:98:75:20:55:94:18:12: cb:8d:7c:54:70:68:ea:eb:7b:77:b6:e3:57:d1:1c:9f:75:51: 6b:3a:b3:1f:04:00:bf:22:85:2a:05:0d:8e:8c:31:11:83:0a: 78:57:4b:20:50:83:dd:21:31:c8:9d:7e:e8:a1:41:10:f9:53: b1:90:cf:d8:29:db:b7:46:35:09:59:24:57:b9:91:95:f4:16: 01:73:9c:2d:ad:05:60:19:3b:7c:f1:c9:75:7c:a9:41:57:96: 27:29:23:94:cd:c8:09:6f:25:67:6e:03:e0:5e:d4:e6:f4:c9: a9:e9:1c:ce:86:54:6c:16:d9:f4:b8:2d:fe:f3:b7:e9:d1:13: 16:73:f8:8b:20:b9:ae:9c:47:5f:16:0c:23:4c:e4:ef:2c:dc: 07:0f:02:62:fa:38:d2:e9:9c:7e:3e:09:ff:ac:09:eb:2f:5f: ac:7a:a0:45:c5:d7:b8:f2:dd:e9:3e:68:41:c8:0b:c8:cc:e7: 45:b9:da:34:de:04:88:f3:1c:a4:9f:8f:e7:88:bb:32:e1:9a: 83:51:75:4e:63:80:9a:71:80:3c:27:15:62:29:31:ae:1c:15: 44:d0:32:0f:ce:f8:05:fa:fc:46:ab:9d:cf:8c:e7:8f:3d:81: 7c:ac:0f:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXZBPeFs09bIquBkfDMTj7zrNf0EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkJDMzlBNkUxNzdGOEREN0JBNUUyNTdENDQ4OUM1NzU3 NEMwN0U4MTAeFw0yNTA2MjkwMTU2NDRaFw0yNTA3MDIwMjAyNDRaMDMxMTAvBgNV BAMTKEIwMDE0NkE2MkREMkNEM0YyMDZEOUQ1RjY5MUZGQTI2M0QwOTU1RDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC27VUkNRJ3x2R5j8zUOTA414m3 uFQa8hy6I+wqAN/mkfKSwfllOl/Bumex7uBtW0N1oNh+rWqjmysbbKrQ48ITWd8M TPNC4ziR8qnH1buFf87Kwwq+g3YsVvijJT0p05GxvDNjsRzA8p/Hr3o30vQ6Zxem kqaH9KEPkpcYB87ATPo8ZPoL+MavbBsXsuVhr1awzK24lNqNo310/xnnQ00DHO9P GLA9BRcWEULdiMfiAFJMIlUvw1EdrUextlu/2om5fMHAkebkU7pu68K3/FBsV53j +yQ66Ud6+ItTwguc2DXx07qP65HOxrW5h2Mrp8CqqVjsYQsq7duvNZKV1FyfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsAFGpi3SzT8gbZ1faR/6Jj0JVdcwHwYDVR0j BBgwFoAU+8Oabhd/jde6XiV9RInFdXTAfoEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 N2FkMGEzYS0yNmI4LTQ0OWEtODhlYy1iZjAzOThlYTUzYTYvMC9GQkMzOUE2RTE3 N0Y4REQ3QkE1RTI1N0Q0NDg5QzU3NTc0QzA3RTgxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkJDMzlBNkUxNzdGOEREN0JBNUUyNTdENDQ4OUM1NzU3NEMw N0U4MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDdhZDBhM2EtMjZiOC00NDlhLTg4 ZWMtYmYwMzk4ZWE1M2E2LzAvRkJDMzlBNkUxNzdGOEREN0JBNUUyNTdENDQ4OUM1 NzU3NEMwN0U4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF7YZZSpOUuALFKdmHUgVZQYEsuNfFRwaOrr e3e241fRHJ91UWs6sx8EAL8ihSoFDY6MMRGDCnhXSyBQg90hMcidfuihQRD5U7GQ z9gp27dGNQlZJFe5kZX0FgFznC2tBWAZO3zxyXV8qUFXlicpI5TNyAlvJWduA+Be 1Ob0yanpHM6GVGwW2fS4Lf7zt+nRExZz+Isgua6cR18WDCNM5O8s3AcPAmL6ONLp nH4+Cf+sCesvX6x6oEXF17jy3ek+aEHIC8jM50W52jTeBIjzHKSfj+eIuzLhmoNR dU5jgJpxgDwnFWIpMa4cFUTQMg/O+AX6/Earnc+M5489gXysD0s= -----END CERTIFICATE-----Generated at Mon Jun 30 03:53:42 2025 by rpki-client