$ rpki-client -vvf repo-rpki.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/FA5F6CC99BAC829D4DE7BECEE823199657D018CD.mft File: FA5F6CC99BAC829D4DE7BECEE823199657D018CD.mft (raw, json) Hash identifier: bbtxga/E6Hls+UIt2va/KFA2RIffNYELlOssBzDwIYI= Subject key identifier: 2F:EC:1E:7B:CA:A8:8E:B1:10:86:D3:25:AE:C3:83:51:F9:75:10:EB Authority key identifier: FA:5F:6C:C9:9B:AC:82:9D:4D:E7:BE:CE:E8:23:19:96:57:D0:18:CD Certificate issuer: /CN=FA5F6CC99BAC829D4DE7BECEE823199657D018CD Certificate serial: 6BA65A857740EED901673EE7061E42F08640EE43 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA5F6CC99BAC829D4DE7BECEE823199657D018CD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/FA5F6CC99BAC829D4DE7BECEE823199657D018CD.mft Manifest number: F3 Signing time: Fri 27 Jun 2025 23:51:14 +0000 Manifest this update: Fri 27 Jun 2025 23:46:14 +0000 Manifest next update: Tue 01 Jul 2025 04:00:14 +0000 Files and hashes: 1: 3138302e39342e382e302f32342d3234203d3e20313532303430.roa (hash: c2NPfXxSOck24WuWyT1N3C7BCQbBB0F0oXAud+7dRiM=) 2: FA5F6CC99BAC829D4DE7BECEE823199657D018CD.crl (hash: wQYAeqUZk1zJ/jqI2CTJRIQMXtWs7k9/MzIDOc+VaCw=) 3: 3138302e39342e392e302f32342d3234203d3e20313532303430.roa (hash: qufNb3/LUFwbrIvm8YtRzGBfloSV6jK/5s6hJyz0aXI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/FA5F6CC99BAC829D4DE7BECEE823199657D018CD.crl rsync://repo-rpki.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/FA5F6CC99BAC829D4DE7BECEE823199657D018CD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA5F6CC99BAC829D4DE7BECEE823199657D018CD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 04:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:a6:5a:85:77:40:ee:d9:01:67:3e:e7:06:1e:42:f0:86:40:ee:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA5F6CC99BAC829D4DE7BECEE823199657D018CD Validity Not Before: Jun 27 23:46:14 2025 GMT Not After : Jul 1 04:00:14 2025 GMT Subject: CN=2FEC1E7BCAA88EB11086D325AEC38351F97510EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b2:56:b6:1a:b2:8b:20:e1:07:d6:4d:dc:32: 8f:30:55:33:de:df:8a:b3:4b:69:80:da:c4:8c:63: dd:95:42:95:0f:ec:95:5b:8a:f2:ab:c7:7a:29:0d: 0d:20:b0:65:01:c1:e2:9b:f9:18:11:f9:86:cb:3e: c8:1e:9a:4e:81:07:0e:49:14:8f:6a:82:ad:b4:56: b6:7d:85:d2:b9:e6:16:22:05:13:ce:9f:58:a2:8f: 4c:75:96:78:ba:75:a8:00:b3:7f:e2:9f:fb:e2:8d: bd:9d:1a:04:08:70:5d:c2:72:44:aa:83:14:de:9b: c2:b9:8e:a7:1e:7f:0a:74:85:99:82:6c:91:73:c0: 94:b1:9b:e2:22:fb:30:41:2f:16:a9:7c:87:99:6f: 9c:9d:dc:fb:95:38:53:cd:ae:d6:51:1d:c2:c4:d0: 91:9a:4e:69:cb:65:9e:7d:95:bc:2d:24:6a:d2:f5: 46:2a:d4:10:9b:62:30:16:be:2e:65:97:3a:00:88: fb:54:aa:c2:67:5c:1c:cf:38:89:f0:0b:89:b5:e6: 99:58:78:26:15:e6:73:f6:62:54:6e:94:dc:74:b5: f2:06:b1:f9:9c:df:dd:46:cf:74:34:4e:da:9c:fc: cc:03:f7:55:35:86:5f:d5:a8:f4:58:ea:21:e3:ee: dc:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:EC:1E:7B:CA:A8:8E:B1:10:86:D3:25:AE:C3:83:51:F9:75:10:EB X509v3 Authority Key Identifier: keyid:FA:5F:6C:C9:9B:AC:82:9D:4D:E7:BE:CE:E8:23:19:96:57:D0:18:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/FA5F6CC99BAC829D4DE7BECEE823199657D018CD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA5F6CC99BAC829D4DE7BECEE823199657D018CD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/FA5F6CC99BAC829D4DE7BECEE823199657D018CD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:d3:0f:b0:4f:37:24:2c:35:58:7b:ba:4d:be:11:d9:8c:c2: fe:c6:df:f8:a5:cb:b4:93:53:bc:96:c0:1c:0b:4e:48:3f:ce: 9d:5c:86:d9:fe:cc:93:c7:38:fc:34:63:86:ad:ba:f7:8e:34: b6:db:1b:63:6c:ba:d7:9d:f4:18:5c:9b:b4:73:73:97:a6:43: 9d:00:ea:cb:91:b2:6e:51:c2:55:26:95:5b:2a:34:ae:09:26: 3c:8b:a8:9f:55:e3:33:31:06:fa:55:b2:96:39:84:e8:7c:cb: 62:8f:19:bd:01:32:15:ef:5b:9c:a4:98:34:e0:39:c6:e6:76: 81:a8:99:7f:20:90:84:a3:81:60:18:a2:6e:09:db:05:13:66: 29:12:f2:57:5c:a7:6e:61:ea:f1:ac:a2:a7:3b:64:32:66:82: 71:ef:49:61:2d:88:d1:48:13:ac:90:04:97:e9:b0:4a:7b:23: 1a:e7:8d:b9:a0:85:4b:09:2b:18:8b:f6:e3:9d:11:1c:d7:08: 96:62:ee:9a:de:70:8a:cb:4c:57:5b:0b:df:79:53:5f:18:7b: e5:7c:99:db:78:41:3c:c7:17:de:ec:44:41:e1:59:05:d6:b5: 3b:77:9d:1a:b9:08:87:6c:2e:46:91:e0:f1:bb:e3:77:20:0d: 54:7f:37:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa6ZahXdA7tkBZz7nBh5C8IZA7kMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE1RjZDQzk5QkFDODI5RDRERTdCRUNFRTgyMzE5OTY1 N0QwMThDRDAeFw0yNTA2MjcyMzQ2MTRaFw0yNTA3MDEwNDAwMTRaMDMxMTAvBgNV BAMTKDJGRUMxRTdCQ0FBODhFQjExMDg2RDMyNUFFQzM4MzUxRjk3NTEwRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXsla2GrKLIOEH1k3cMo8wVTPe 34qzS2mA2sSMY92VQpUP7JVbivKrx3opDQ0gsGUBweKb+RgR+YbLPsgemk6BBw5J FI9qgq20VrZ9hdK55hYiBRPOn1iij0x1lni6dagAs3/in/vijb2dGgQIcF3CckSq gxTem8K5jqcefwp0hZmCbJFzwJSxm+Ii+zBBLxapfIeZb5yd3PuVOFPNrtZRHcLE 0JGaTmnLZZ59lbwtJGrS9UYq1BCbYjAWvi5llzoAiPtUqsJnXBzPOInwC4m15plY eCYV5nP2YlRulNx0tfIGsfmc391Gz3Q0Ttqc/MwD91U1hl/VqPRY6iHj7tzjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUL+wee8qojrEQhtMlrsODUfl1EOswHwYDVR0j BBgwFoAU+l9syZusgp1N577O6CMZllfQGM0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NmYxZWI0Yi00OGRjLTRlZWEtOTE4MS0xMjhjYjI4YjNkYmEvMC9GQTVGNkNDOTlC QUM4MjlENERFN0JFQ0VFODIzMTk5NjU3RDAxOENELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkE1RjZDQzk5QkFDODI5RDRERTdCRUNFRTgyMzE5OTY1N0Qw MThDRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTZmMWViNGItNDhkYy00ZWVhLTkx ODEtMTI4Y2IyOGIzZGJhLzAvRkE1RjZDQzk5QkFDODI5RDRERTdCRUNFRTgyMzE5 OTY1N0QwMThDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD7TD7BPNyQsNVh7uk2+EdmMwv7G3/ily7ST U7yWwBwLTkg/zp1chtn+zJPHOPw0Y4atuveONLbbG2Nsuted9Bhcm7Rzc5emQ50A 6suRsm5RwlUmlVsqNK4JJjyLqJ9V4zMxBvpVspY5hOh8y2KPGb0BMhXvW5ykmDTg OcbmdoGomX8gkISjgWAYom4J2wUTZikS8ldcp25h6vGsoqc7ZDJmgnHvSWEtiNFI E6yQBJfpsEp7IxrnjbmghUsJKxiL9uOdERzXCJZi7precIrLTFdbC995U18Ye+V8 mdt4QTzHF97sREHhWQXWtTt3nRq5CIdsLkaR4PG743cgDVR/Nyc= -----END CERTIFICATE-----Generated at Sun Jun 29 18:31:08 2025 by rpki-client