$ rpki-client -vvf repo-rpki.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.mft File: FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.mft (raw, json) Hash identifier: 1Rc2NqSPWnyiXWd37Bxwz8Uwz/O2VcUQZwn+vpT0oWI= Subject key identifier: 00:C9:FE:7C:77:9E:0B:E2:2C:32:D5:57:57:6C:31:D8:2D:0E:D6:EF Authority key identifier: FC:9D:A1:A7:62:5B:27:FD:B4:66:B1:D8:A6:90:37:7E:4C:7B:CE:72 Certificate issuer: /CN=FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72 Certificate serial: 075DD903210D3F80DDFEB025CCC0833714F0B33C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.mft Manifest number: 04CE Signing time: Thu 08 May 2025 16:41:06 +0000 Manifest this update: Thu 08 May 2025 16:36:06 +0000 Manifest next update: Mon 12 May 2025 03:33:06 +0000 Files and hashes: 1: 3130332e33312e3130392e302f32342d3234203d3e20313339343430.roa (hash: iRZXCDlLv0igia0Lk/WxM1oJP6cq9J+UPskJIy0xfv8=) 2: FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.crl (hash: 1IaYBaN1G45iM94J4qdYH0CriE1VYQrjmRlUJfZL9Z4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.crl rsync://repo-rpki.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 03:33:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:5d:d9:03:21:0d:3f:80:dd:fe:b0:25:cc:c0:83:37:14:f0:b3:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72 Validity Not Before: May 8 16:36:06 2025 GMT Not After : May 12 03:33:06 2025 GMT Subject: CN=00C9FE7C779E0BE22C32D557576C31D82D0ED6EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c2:ef:83:49:90:17:7c:da:b2:4d:84:60:b4: cf:77:38:68:dc:8a:cf:f2:97:bd:16:66:cb:11:17: bc:82:97:0f:18:5c:cf:e6:f5:61:58:38:35:86:51: 5c:0c:57:9d:e0:68:af:f0:90:e2:a6:49:fc:be:06: f6:73:15:2a:c3:ff:6c:b9:d6:dc:05:a7:cc:48:54: 02:59:b3:5b:02:40:c6:37:b3:4f:57:91:a0:8b:f4: fa:c9:0e:aa:36:7d:1f:7a:7b:08:e6:13:80:ff:68: ff:e0:50:34:d0:59:d2:c0:3d:d2:53:91:bb:37:00: 93:22:0b:cf:6e:2e:71:06:41:2c:cf:fb:2d:b3:9e: 17:27:7b:e7:e9:8c:26:cb:a8:3e:5a:9c:4c:05:55: 44:7a:8c:ed:c8:14:d3:67:5a:0e:04:65:66:2a:9b: 4f:27:25:ab:c8:ce:8b:5e:56:a3:50:ab:e1:81:a3: b5:f6:7b:13:62:e5:ce:6c:c1:1e:fa:42:d1:f1:1a: 68:7f:66:e2:df:9b:66:ea:87:15:de:68:41:cb:e3: 32:74:28:82:22:28:99:a8:f3:79:b0:1e:c5:eb:41: f3:46:88:e6:9b:f5:41:b8:c7:1a:ff:b6:73:38:f1: e7:82:48:a2:83:bb:ab:76:e6:4d:93:e7:1f:c6:ba: 5d:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:C9:FE:7C:77:9E:0B:E2:2C:32:D5:57:57:6C:31:D8:2D:0E:D6:EF X509v3 Authority Key Identifier: keyid:FC:9D:A1:A7:62:5B:27:FD:B4:66:B1:D8:A6:90:37:7E:4C:7B:CE:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:92:c8:c0:66:40:ce:f7:47:71:2c:fa:11:cc:49:89:f5:f6: 89:6a:8a:da:0a:6c:fe:37:1a:39:9c:78:be:26:75:d2:0e:95: 58:0b:7f:44:61:f9:16:46:f6:ee:2e:49:db:21:d6:47:ac:38: 25:82:7e:36:e1:30:35:8f:1f:04:e2:4a:91:2c:e5:8e:00:b6: 9a:72:21:88:48:56:4f:68:99:07:d8:32:8e:f6:4c:20:ea:8f: 5d:c4:b8:56:6f:e5:8e:c5:f2:b8:a6:26:95:89:05:da:fd:6a: 21:f5:76:f0:b1:26:fa:cb:98:5d:ca:3f:87:68:23:be:13:09: af:eb:38:a3:2c:70:bd:66:b7:e0:b4:99:f2:4b:8b:9d:4c:34: 6e:c4:ff:9f:b3:1f:ee:69:f9:4b:8a:df:50:90:1f:0b:91:d0: bc:28:b6:ed:b2:a9:38:a3:01:29:43:48:3f:2f:3c:3b:ee:68: 2c:01:9f:50:dd:d7:14:11:ce:1e:e1:1f:4f:72:de:0d:bb:9c: fb:bf:d3:af:f2:be:b0:2f:45:2a:83:4e:5e:9d:09:5f:ea:d2: 08:89:00:29:80:af:c9:49:eb:55:0b:e8:46:40:77:32:5c:39: 0e:29:f7:5b:85:72:ba:0c:f3:26:c3:2c:cb:2b:9c:0d:c1:4b: ec:da:2f:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB13ZAyENP4Dd/rAlzMCDNxTwszwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkM5REExQTc2MjVCMjdGREI0NjZCMUQ4QTY5MDM3N0U0 QzdCQ0U3MjAeFw0yNTA1MDgxNjM2MDZaFw0yNTA1MTIwMzMzMDZaMDMxMTAvBgNV BAMTKDAwQzlGRTdDNzc5RTBCRTIyQzMyRDU1NzU3NkMzMUQ4MkQwRUQ2RUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNwu+DSZAXfNqyTYRgtM93OGjc is/yl70WZssRF7yClw8YXM/m9WFYODWGUVwMV53gaK/wkOKmSfy+BvZzFSrD/2y5 1twFp8xIVAJZs1sCQMY3s09XkaCL9PrJDqo2fR96ewjmE4D/aP/gUDTQWdLAPdJT kbs3AJMiC89uLnEGQSzP+y2znhcne+fpjCbLqD5anEwFVUR6jO3IFNNnWg4EZWYq m08nJavIzoteVqNQq+GBo7X2exNi5c5swR76QtHxGmh/ZuLfm2bqhxXeaEHL4zJ0 KIIiKJmo83mwHsXrQfNGiOab9UG4xxr/tnM48eeCSKKDu6t25k2T5x/Gul0nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAMn+fHeeC+IsMtVXV2wx2C0O1u8wHwYDVR0j BBgwFoAU/J2hp2JbJ/20ZrHYppA3fkx7znIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZjZhYTMxYS1kZDBkLTRjMTAtYjVkZC1iMWE4M2ZhNTc3NjMvMC9GQzlEQTFBNzYy NUIyN0ZEQjQ2NkIxRDhBNjkwMzc3RTRDN0JDRTcyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkM5REExQTc2MjVCMjdGREI0NjZCMUQ4QTY5MDM3N0U0QzdC Q0U3Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGY2YWEzMWEtZGQwZC00YzEwLWI1 ZGQtYjFhODNmYTU3NzYzLzAvRkM5REExQTc2MjVCMjdGREI0NjZCMUQ4QTY5MDM3 N0U0QzdCQ0U3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIqSyMBmQM73R3Es+hHMSYn19olqitoKbP43 GjmceL4mddIOlVgLf0Rh+RZG9u4uSdsh1kesOCWCfjbhMDWPHwTiSpEs5Y4Atppy IYhIVk9omQfYMo72TCDqj13EuFZv5Y7F8rimJpWJBdr9aiH1dvCxJvrLmF3KP4do I74TCa/rOKMscL1mt+C0mfJLi51MNG7E/5+zH+5p+UuK31CQHwuR0Lwotu2yqTij ASlDSD8vPDvuaCwBn1Dd1xQRzh7hH09y3g27nPu/06/yvrAvRSqDTl6dCV/q0giJ ACmAr8lJ61UL6EZAdzJcOQ4p91uFcroM8ybDLMsrnA3BS+zaLwk= -----END CERTIFICATE-----Generated at Sat May 10 08:55:27 2025 by rpki-client