$ rpki-client -vvf repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/FBACFC63658425B36399C4B9D0322622B8C5B7F0.mft File: FBACFC63658425B36399C4B9D0322622B8C5B7F0.mft (raw, json) Hash identifier: xX4TjaAjm8cm/Kw/4j9QN3mVx1G3pLwpqJMRQ3/gdcI= Subject key identifier: 4A:AC:5D:89:85:E1:19:6F:FF:84:32:4C:CB:4C:0D:9A:86:F4:9F:57 Authority key identifier: FB:AC:FC:63:65:84:25:B3:63:99:C4:B9:D0:32:26:22:B8:C5:B7:F0 Certificate issuer: /CN=FBACFC63658425B36399C4B9D0322622B8C5B7F0 Certificate serial: 4343281218971A02D018A876314951FCE7D16239 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBACFC63658425B36399C4B9D0322622B8C5B7F0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/FBACFC63658425B36399C4B9D0322622B8C5B7F0.mft Manifest number: 04D7 Signing time: Thu 08 May 2025 03:11:56 +0000 Manifest this update: Thu 08 May 2025 03:06:56 +0000 Manifest next update: Sun 11 May 2025 08:27:56 +0000 Files and hashes: 1: 323430373a336538303a3a2f33322d3438203d3e203338373638.roa (hash: 6jBV+YbQK26iBcOQ7S5zsMw9nUVxGEuIbJ7fF7HfYs0=) 2: 3130332e3233342e3231382e302f32342d3234203d3e203338373638.roa (hash: h2g3sIbdso4gRFxWGiYO/f5Y9InbwTXbbshwWzTUD+Q=) 3: 323430373a336538303a363a3a2f34382d3438203d3e203338343936.roa (hash: 4k+7oiIZgf8A+xoNtWkGh4r/bBNQQHgBlobDBAPY3jY=) 4: FBACFC63658425B36399C4B9D0322622B8C5B7F0.crl (hash: pBqWXnAnwdI3Pjy5a+AZM22cTxwibBPdZQ7mSRjp2bk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/FBACFC63658425B36399C4B9D0322622B8C5B7F0.crl rsync://repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/FBACFC63658425B36399C4B9D0322622B8C5B7F0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBACFC63658425B36399C4B9D0322622B8C5B7F0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 08:27:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:43:28:12:18:97:1a:02:d0:18:a8:76:31:49:51:fc:e7:d1:62:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FBACFC63658425B36399C4B9D0322622B8C5B7F0 Validity Not Before: May 8 03:06:56 2025 GMT Not After : May 11 08:27:56 2025 GMT Subject: CN=4AAC5D8985E1196FFF84324CCB4C0D9A86F49F57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:a8:cf:b7:19:d5:8f:5e:34:ff:74:13:d6:15: a8:c4:ad:fd:5f:e3:4a:03:c9:96:51:ea:69:79:fc: 67:57:75:b2:c1:e9:e3:c2:2f:96:42:89:04:e9:6f: 00:38:26:9f:36:5d:6e:63:e5:1f:3c:5d:b5:37:b8: 9f:e7:3d:c8:be:19:d7:9e:18:93:f2:19:e6:5f:23: f2:52:26:19:ce:59:10:51:6a:aa:db:30:71:ef:18: ee:7e:5b:39:c9:5c:31:90:f1:19:49:52:1d:04:1a: c8:68:fb:5b:f0:a2:8b:b7:70:20:ac:4c:d1:7d:10: b1:80:8b:6a:b6:ef:b9:af:10:ba:30:61:39:27:11: 3f:3b:77:e7:2c:2a:8f:13:25:b2:ac:21:d3:3c:4e: 4e:18:fc:92:47:bb:de:52:5b:af:98:ac:29:90:49: 9e:f8:26:42:d4:6a:26:9c:f0:be:4f:f7:51:1c:23: f4:94:ed:df:ab:08:0f:74:99:92:9d:84:20:cc:ab: 76:4f:0e:b3:28:61:fe:de:85:69:9b:2d:a5:8e:85: aa:d9:ae:20:16:b5:c2:67:be:8c:38:a8:28:cc:6b: 90:03:6e:1f:61:03:0a:d3:a2:00:48:7f:9d:5b:72: a5:74:a2:bb:6a:00:24:57:28:7f:0c:92:46:56:cc: 24:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:AC:5D:89:85:E1:19:6F:FF:84:32:4C:CB:4C:0D:9A:86:F4:9F:57 X509v3 Authority Key Identifier: keyid:FB:AC:FC:63:65:84:25:B3:63:99:C4:B9:D0:32:26:22:B8:C5:B7:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/FBACFC63658425B36399C4B9D0322622B8C5B7F0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBACFC63658425B36399C4B9D0322622B8C5B7F0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/FBACFC63658425B36399C4B9D0322622B8C5B7F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:98:55:63:57:03:e4:f8:dd:84:04:20:1d:c9:7f:76:a7:d9: a7:8b:30:04:67:fd:38:e6:dc:86:e0:0a:75:32:00:8c:7c:78: 40:81:90:18:4e:e5:e3:68:b9:fb:65:02:d5:7f:be:a7:2a:fa: 2e:0e:b9:1a:23:a0:dd:0e:b2:27:81:ba:16:b8:8a:93:2c:6f: 11:b8:21:24:1f:96:29:49:b5:71:d7:9c:49:77:c6:57:3d:8b: 1b:e7:54:6a:d7:70:96:ee:af:15:f1:29:35:a1:37:9f:76:53: 3c:66:6a:a6:00:6f:ef:f6:86:f7:86:2c:80:ab:1c:9e:ba:27: 36:64:65:65:19:d5:93:e7:a6:b9:69:c3:f6:90:e7:bb:80:46: 96:e3:88:56:af:55:4e:aa:46:be:0f:37:9a:2f:a7:26:48:91: 0c:1f:ee:6f:e9:b8:45:9d:37:ed:b0:7c:8a:ae:fc:1d:d0:31: f6:d1:0b:db:62:06:65:3e:79:68:fc:87:42:78:1a:c4:5e:0f: b6:50:eb:da:47:45:62:51:06:09:1a:58:31:a7:e9:77:6e:10: e0:1f:a0:b0:f5:45:fc:38:01:b4:a9:4c:59:b4:0e:ca:ad:41: 48:27:3d:56:66:71:7b:7f:e3:92:1e:94:73:03:04:b4:8c:c5: 20:39:2d:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ0MoEhiXGgLQGKh2MUlR/OfRYjkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkJBQ0ZDNjM2NTg0MjVCMzYzOTlDNEI5RDAzMjI2MjJC OEM1QjdGMDAeFw0yNTA1MDgwMzA2NTZaFw0yNTA1MTEwODI3NTZaMDMxMTAvBgNV BAMTKDRBQUM1RDg5ODVFMTE5NkZGRjg0MzI0Q0NCNEMwRDlBODZGNDlGNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfqM+3GdWPXjT/dBPWFajErf1f 40oDyZZR6ml5/GdXdbLB6ePCL5ZCiQTpbwA4Jp82XW5j5R88XbU3uJ/nPci+Gdee GJPyGeZfI/JSJhnOWRBRaqrbMHHvGO5+WznJXDGQ8RlJUh0EGsho+1vwoou3cCCs TNF9ELGAi2q277mvELowYTknET87d+csKo8TJbKsIdM8Tk4Y/JJHu95SW6+YrCmQ SZ74JkLUaiac8L5P91EcI/SU7d+rCA90mZKdhCDMq3ZPDrMoYf7ehWmbLaWOharZ riAWtcJnvow4qCjMa5ADbh9hAwrTogBIf51bcqV0ortqACRXKH8MkkZWzCTxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSqxdiYXhGW//hDJMy0wNmob0n1cwHwYDVR0j BBgwFoAU+6z8Y2WEJbNjmcS50DImIrjFt/AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MWU5NDI0My04N2YwLTQyNmYtYTljYS00YzE5ZWRiMDZiNDIvMC9GQkFDRkM2MzY1 ODQyNUIzNjM5OUM0QjlEMDMyMjYyMkI4QzVCN0YwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkJBQ0ZDNjM2NTg0MjVCMzYzOTlDNEI5RDAzMjI2MjJCOEM1 QjdGMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTFlOTQyNDMtODdmMC00MjZmLWE5 Y2EtNGMxOWVkYjA2YjQyLzAvRkJBQ0ZDNjM2NTg0MjVCMzYzOTlDNEI5RDAzMjI2 MjJCOEM1QjdGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADSYVWNXA+T43YQEIB3Jf3an2aeLMARn/Tjm 3IbgCnUyAIx8eECBkBhO5eNouftlAtV/vqcq+i4OuRojoN0OsieBuha4ipMsbxG4 ISQflilJtXHXnEl3xlc9ixvnVGrXcJburxXxKTWhN592UzxmaqYAb+/2hveGLICr HJ66JzZkZWUZ1ZPnprlpw/aQ57uARpbjiFavVU6qRr4PN5ovpyZIkQwf7m/puEWd N+2wfIqu/B3QMfbRC9tiBmU+eWj8h0J4GsReD7ZQ69pHRWJRBgkaWDGn6XduEOAf oLD1Rfw4AbSpTFm0DsqtQUgnPVZmcXt/45IelHMDBLSMxSA5LWo= -----END CERTIFICATE-----Generated at Fri May 9 15:57:25 2025 by rpki-client