$ rpki-client -vvf repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.mft File: FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.mft (raw, json) Hash identifier: 7nMXWBqTrnnx1kSuogSQNHRGua2xocENvm0uKqokees= Subject key identifier: B0:9D:FD:B6:37:BC:11:44:E8:0B:73:7A:37:76:1F:54:73:63:CE:8A Authority key identifier: FB:1D:4F:91:39:A6:1D:F4:B9:1E:31:27:0F:3D:2A:1C:07:B3:5C:E1 Certificate issuer: /CN=FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1 Certificate serial: 739AE4DD399BD7EA2978688290AD12C2320B7588 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.mft Manifest number: 016E Signing time: Mon 12 May 2025 18:52:03 +0000 Manifest this update: Mon 12 May 2025 18:47:03 +0000 Manifest next update: Thu 15 May 2025 19:48:03 +0000 Files and hashes: 1: FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.crl (hash: TqcsVRbtolIJtuwnxT/2qqQhFBQ7MEYd5oeQvEQi9i4=) 2: 3130332e3134392e3131382e302f32332d3234203d3e20313431303535.roa (hash: u22TiDBqhxRDgDXVHX7pAHC7nu8jAukDNtzJmORzlts=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.crl rsync://repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 19:48:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:9a:e4:dd:39:9b:d7:ea:29:78:68:82:90:ad:12:c2:32:0b:75:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1 Validity Not Before: May 12 18:47:03 2025 GMT Not After : May 15 19:48:03 2025 GMT Subject: CN=B09DFDB637BC1144E80B737A37761F547363CE8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a7:51:e1:9c:9c:9e:1b:af:08:23:8f:52:03: 7a:f3:0b:75:48:7d:7e:e3:9a:ff:02:0e:ae:74:8a: ef:a0:b6:bc:19:b5:31:04:bb:d8:33:82:ea:d3:ab: f0:3b:96:24:98:97:6b:2f:fe:98:e6:87:21:74:39: 74:52:42:59:7b:f2:f4:15:91:3b:c6:10:90:5b:98: c3:6d:60:58:40:62:a2:c8:15:8b:77:a9:b9:e3:5d: 34:32:11:cd:0b:6e:1f:b6:a0:fa:21:93:3c:b5:07: da:40:ea:41:e9:f9:f9:4a:a5:b2:b2:f8:eb:e9:6d: e3:3e:9e:16:0f:be:70:0b:5e:86:ca:42:24:92:cd: 75:ad:0d:a1:fb:01:08:62:3e:e8:84:9f:f3:de:c9: a0:0c:82:00:70:d2:ca:59:25:c5:29:7f:25:4e:7f: 93:e2:8a:26:b0:71:52:de:4a:9f:07:87:8a:38:7c: a2:9f:ef:22:7f:df:49:e9:de:82:cf:23:43:eb:1e: 2b:31:6c:f5:bc:ed:68:1b:e3:a4:60:ea:9c:57:ab: 4a:d5:87:0b:21:cd:b4:c4:df:e6:24:ec:c8:b6:02: 02:76:e6:ab:3d:b9:02:7d:55:1a:c9:b7:0e:5b:c9: cf:02:8b:57:be:2c:dd:80:05:fe:dd:81:fe:55:a3: 53:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:9D:FD:B6:37:BC:11:44:E8:0B:73:7A:37:76:1F:54:73:63:CE:8A X509v3 Authority Key Identifier: keyid:FB:1D:4F:91:39:A6:1D:F4:B9:1E:31:27:0F:3D:2A:1C:07:B3:5C:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:15:7e:a2:81:54:cb:12:a1:20:fe:e5:b5:65:83:d9:ed:35: e8:7d:5a:80:6e:3c:17:b8:93:eb:6c:97:3d:3b:7f:02:5b:47: 5e:42:c7:9b:42:39:7c:87:c8:1b:26:8c:e4:b7:c3:48:db:2c: 96:f9:8d:bd:0c:f5:d7:bf:60:a9:b9:39:e7:fd:17:80:51:b1: 34:9d:cc:4b:84:4e:96:23:ec:ff:5f:ba:d4:e7:2f:fc:6c:4f: 5f:e6:e9:df:1f:ef:49:56:96:66:55:8c:7e:de:94:41:db:96: b6:81:2f:55:15:1b:9d:02:65:9e:0d:96:31:12:c3:4d:d3:45: 7b:38:a6:be:10:a4:e3:27:7b:eb:60:75:84:46:cb:08:56:ee: 9b:a4:91:0e:66:db:37:3b:59:be:f4:d2:ec:17:84:86:ac:62: 4f:28:c9:68:75:c0:73:23:d4:cb:dd:a9:46:5c:b9:8a:9e:21: 38:1f:56:36:bf:5f:84:c0:2c:36:f4:a3:c8:33:4f:fb:39:ba: 3f:25:a6:4b:44:89:b8:d4:f9:e8:54:d8:d6:57:42:84:82:1c: 52:b8:f5:22:bd:3b:a6:be:91:f5:4f:8b:cc:bc:d6:ad:13:13: 38:f5:6c:87:dc:ee:16:be:0d:47:c7:66:ff:62:4f:fc:c6:52: 2e:59:4c:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc5rk3Tmb1+opeGiCkK0SwjILdYgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkIxRDRGOTEzOUE2MURGNEI5MUUzMTI3MEYzRDJBMUMw N0IzNUNFMTAeFw0yNTA1MTIxODQ3MDNaFw0yNTA1MTUxOTQ4MDNaMDMxMTAvBgNV BAMTKEIwOURGREI2MzdCQzExNDRFODBCNzM3QTM3NzYxRjU0NzM2M0NFOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtp1HhnJyeG68II49SA3rzC3VI fX7jmv8CDq50iu+gtrwZtTEEu9gzgurTq/A7liSYl2sv/pjmhyF0OXRSQll78vQV kTvGEJBbmMNtYFhAYqLIFYt3qbnjXTQyEc0Lbh+2oPohkzy1B9pA6kHp+flKpbKy +OvpbeM+nhYPvnALXobKQiSSzXWtDaH7AQhiPuiEn/PeyaAMggBw0spZJcUpfyVO f5PiiiawcVLeSp8Hh4o4fKKf7yJ/30np3oLPI0PrHisxbPW87Wgb46Rg6pxXq0rV hwshzbTE3+Yk7Mi2AgJ25qs9uQJ9VRrJtw5byc8Ci1e+LN2ABf7dgf5Vo1NJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsJ39tje8EUToC3N6N3YfVHNjzoowHwYDVR0j BBgwFoAU+x1PkTmmHfS5HjEnDz0qHAezXOEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Y2M3MGY3ZC0zM2ZlLTRkZjItODFlNS1kYzBkNTVhYzUxNzAvMC9GQjFENEY5MTM5 QTYxREY0QjkxRTMxMjcwRjNEMkExQzA3QjM1Q0UxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkIxRDRGOTEzOUE2MURGNEI5MUUzMTI3MEYzRDJBMUMwN0Iz NUNFMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWNjNzBmN2QtMzNmZS00ZGYyLTgx ZTUtZGMwZDU1YWM1MTcwLzAvRkIxRDRGOTEzOUE2MURGNEI5MUUzMTI3MEYzRDJB MUMwN0IzNUNFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIoVfqKBVMsSoSD+5bVlg9ntNeh9WoBuPBe4 k+tslz07fwJbR15Cx5tCOXyHyBsmjOS3w0jbLJb5jb0M9de/YKm5Oef9F4BRsTSd zEuETpYj7P9futTnL/xsT1/m6d8f70lWlmZVjH7elEHblraBL1UVG50CZZ4NljES w03TRXs4pr4QpOMne+tgdYRGywhW7pukkQ5m2zc7Wb700uwXhIasYk8oyWh1wHMj 1MvdqUZcuYqeITgfVja/X4TALDb0o8gzT/s5uj8lpktEibjU+ehU2NZXQoSCHFK4 9SK9O6a+kfVPi8y81q0TEzj1bIfc7ha+DUfHZv9iT/zGUi5ZTHE= -----END CERTIFICATE-----Generated at Mon May 12 23:47:34 2025 by rpki-client