$ rpki-client -vvf repo-rpki.idnic.net/repo/5b9752f6-6066-4b38-87cc-9ba63d19e22c/0/FC1C6395AD65E53AB9BC4BBD451AE79234BF63D7.mft File: FC1C6395AD65E53AB9BC4BBD451AE79234BF63D7.mft (raw, json) Hash identifier: U2DJce2xwoWpXfHmrxqhubla/ep/M1RKBMZ/A5wjdic= Subject key identifier: 41:3C:07:10:C9:63:76:10:D7:55:ED:BD:51:9D:42:E0:37:48:AA:3F Authority key identifier: FC:1C:63:95:AD:65:E5:3A:B9:BC:4B:BD:45:1A:E7:92:34:BF:63:D7 Certificate issuer: /CN=FC1C6395AD65E53AB9BC4BBD451AE79234BF63D7 Certificate serial: 72CFFCA8B0A6F8355233637C1C4131B0A8EB436F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC1C6395AD65E53AB9BC4BBD451AE79234BF63D7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5b9752f6-6066-4b38-87cc-9ba63d19e22c/0/FC1C6395AD65E53AB9BC4BBD451AE79234BF63D7.mft Manifest number: 048E Signing time: Sat 10 May 2025 11:52:00 +0000 Manifest this update: Sat 10 May 2025 11:47:00 +0000 Manifest next update: Tue 13 May 2025 22:13:00 +0000 Files and hashes: 1: 3130332e33392e35322e302f32342d3234203d3e203633353033.roa (hash: 3ASwGKKLFiuIeG9xRQkogcwHGli4D0F1rvwWgrzKzow=) 2: FC1C6395AD65E53AB9BC4BBD451AE79234BF63D7.crl (hash: 9ZbbTl9b5Y2KHw7Zl9wzqSB+5KB0FXMP1elMi1iSAos=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5b9752f6-6066-4b38-87cc-9ba63d19e22c/0/FC1C6395AD65E53AB9BC4BBD451AE79234BF63D7.crl rsync://repo-rpki.idnic.net/repo/5b9752f6-6066-4b38-87cc-9ba63d19e22c/0/FC1C6395AD65E53AB9BC4BBD451AE79234BF63D7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC1C6395AD65E53AB9BC4BBD451AE79234BF63D7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 22:13:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:cf:fc:a8:b0:a6:f8:35:52:33:63:7c:1c:41:31:b0:a8:eb:43:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC1C6395AD65E53AB9BC4BBD451AE79234BF63D7 Validity Not Before: May 10 11:47:00 2025 GMT Not After : May 13 22:13:00 2025 GMT Subject: CN=413C0710C9637610D755EDBD519D42E03748AA3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:1e:0c:47:65:18:38:e8:67:cd:d9:1a:69:fc: 70:09:93:c2:00:05:3c:55:b9:5d:a7:44:f0:5a:87: 81:16:cc:fe:9f:d4:81:35:97:c4:18:e8:ac:d8:7c: 25:e5:00:c0:70:49:ba:f6:3d:15:10:4f:fb:06:85: f0:27:5d:43:ec:ba:02:a6:64:63:2f:ec:28:08:d6: f3:43:a9:ff:ec:af:3e:51:7e:19:bb:84:71:02:88: 3e:45:ed:cc:4d:b1:7f:07:bd:82:7b:5f:54:c1:a7: ec:99:4d:0d:b0:32:7c:8e:a3:0a:3a:c4:e0:4c:e3: ad:83:93:cb:32:c1:aa:36:8c:d3:7d:f0:e4:f3:e6: 80:6e:e7:60:43:7c:ee:2e:24:51:db:e7:e0:07:61: 27:7d:92:40:d6:e8:f7:f1:55:65:5f:45:0e:eb:11: 82:6e:64:ce:1b:6c:90:1a:c7:4a:a8:86:70:1f:80: 86:a5:08:8b:d3:23:64:a6:7d:7c:ba:a7:68:3f:2b: 63:23:5f:3b:ae:36:12:72:a4:06:c1:0f:9b:75:1b: 62:30:60:28:a9:6e:42:bb:a0:4f:ac:38:be:c6:a0: 56:eb:b3:16:d7:ed:b5:31:6f:f3:fe:13:ff:28:3a: ad:c8:c1:2c:b1:d2:37:d4:d9:27:90:ea:9d:dd:d0: 76:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:3C:07:10:C9:63:76:10:D7:55:ED:BD:51:9D:42:E0:37:48:AA:3F X509v3 Authority Key Identifier: keyid:FC:1C:63:95:AD:65:E5:3A:B9:BC:4B:BD:45:1A:E7:92:34:BF:63:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5b9752f6-6066-4b38-87cc-9ba63d19e22c/0/FC1C6395AD65E53AB9BC4BBD451AE79234BF63D7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC1C6395AD65E53AB9BC4BBD451AE79234BF63D7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5b9752f6-6066-4b38-87cc-9ba63d19e22c/0/FC1C6395AD65E53AB9BC4BBD451AE79234BF63D7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:c9:d5:33:90:31:7c:25:05:4b:e3:2a:86:99:32:9a:44:c2: 01:93:77:b8:53:95:44:ee:bb:83:cb:83:e1:02:b5:05:98:06: 53:e3:5e:3d:a2:be:05:ef:b3:7c:77:c9:59:66:51:66:35:78: ac:d8:95:e6:c1:84:a0:70:d3:e5:71:66:aa:c4:44:80:fd:31: ac:f3:ea:3d:92:cf:0e:29:44:e5:28:ff:82:0e:0d:6f:68:b3: 2d:25:89:22:e8:b8:ae:dc:0a:2c:3f:28:e2:68:6f:67:b9:c6: 86:a6:0e:29:9b:6c:2c:a3:a9:52:3b:4e:4b:9f:c6:50:2e:50: 5b:e4:6b:d2:9c:da:68:57:f8:19:4e:81:2c:3c:10:61:8e:b0: 54:98:72:50:4d:ce:fc:27:d7:98:7f:81:46:ac:92:bf:d3:53: 8f:6a:42:e9:44:ea:b8:f4:70:2b:e0:25:b7:18:22:1c:86:1b: 5c:6d:ea:35:34:d4:ff:b3:4c:0d:24:8b:c2:91:1d:07:76:6e: 71:9f:45:d4:7e:b9:0b:9d:59:e8:ae:43:0f:cb:e1:f7:b2:69: 70:68:a7:0b:e2:7c:0b:6b:20:73:9c:0a:19:04:77:64:bb:9c: 09:b4:86:f2:3c:a5:1f:21:da:9d:88:36:02:09:dd:f1:f1:84: a6:5f:d2:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcs/8qLCm+DVSM2N8HEExsKjrQ28wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkMxQzYzOTVBRDY1RTUzQUI5QkM0QkJENDUxQUU3OTIz NEJGNjNENzAeFw0yNTA1MTAxMTQ3MDBaFw0yNTA1MTMyMjEzMDBaMDMxMTAvBgNV BAMTKDQxM0MwNzEwQzk2Mzc2MTBENzU1RURCRDUxOUQ0MkUwMzc0OEFBM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeHgxHZRg46GfN2Rpp/HAJk8IA BTxVuV2nRPBah4EWzP6f1IE1l8QY6KzYfCXlAMBwSbr2PRUQT/sGhfAnXUPsugKm ZGMv7CgI1vNDqf/srz5Rfhm7hHECiD5F7cxNsX8HvYJ7X1TBp+yZTQ2wMnyOowo6 xOBM462Dk8sywao2jNN98OTz5oBu52BDfO4uJFHb5+AHYSd9kkDW6PfxVWVfRQ7r EYJuZM4bbJAax0qohnAfgIalCIvTI2SmfXy6p2g/K2MjXzuuNhJypAbBD5t1G2Iw YCipbkK7oE+sOL7GoFbrsxbX7bUxb/P+E/8oOq3IwSyx0jfU2SeQ6p3d0HbtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQTwHEMljdhDXVe29UZ1C4DdIqj8wHwYDVR0j BBgwFoAU/Bxjla1l5Tq5vEu9RRrnkjS/Y9cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Yjk3NTJmNi02MDY2LTRiMzgtODdjYy05YmE2M2QxOWUyMmMvMC9GQzFDNjM5NUFE NjVFNTNBQjlCQzRCQkQ0NTFBRTc5MjM0QkY2M0Q3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkMxQzYzOTVBRDY1RTUzQUI5QkM0QkJENDUxQUU3OTIzNEJG NjNENy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWI5NzUyZjYtNjA2Ni00YjM4LTg3 Y2MtOWJhNjNkMTllMjJjLzAvRkMxQzYzOTVBRDY1RTUzQUI5QkM0QkJENDUxQUU3 OTIzNEJGNjNENy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFfJ1TOQMXwlBUvjKoaZMppEwgGTd7hTlUTu u4PLg+ECtQWYBlPjXj2ivgXvs3x3yVlmUWY1eKzYlebBhKBw0+VxZqrERID9Mazz 6j2Szw4pROUo/4IODW9osy0liSLouK7cCiw/KOJob2e5xoamDimbbCyjqVI7Tkuf xlAuUFvka9Kc2mhX+BlOgSw8EGGOsFSYclBNzvwn15h/gUaskr/TU49qQulE6rj0 cCvgJbcYIhyGG1xt6jU01P+zTA0ki8KRHQd2bnGfRdR+uQudWeiuQw/L4feyaXBo pwvifAtrIHOcChkEd2S7nAm0hvI8pR8h2p2INgIJ3fHxhKZf0tM= -----END CERTIFICATE-----Generated at Mon May 12 10:45:25 2025 by rpki-client