$ rpki-client -vvf repo-rpki.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/FE47963FB6E13EFC318606E3CA31013421827343.mft File: FE47963FB6E13EFC318606E3CA31013421827343.mft (raw, json) Hash identifier: pv0rB2vPN2Htz1qU/iH6N/8U9fScch/cVoJKTfoB/Rg= Subject key identifier: 20:3E:51:73:0D:B7:27:73:99:54:B7:32:52:74:87:D1:08:D9:8E:68 Authority key identifier: FE:47:96:3F:B6:E1:3E:FC:31:86:06:E3:CA:31:01:34:21:82:73:43 Certificate issuer: /CN=FE47963FB6E13EFC318606E3CA31013421827343 Certificate serial: 57951BE939493D5216B7D3BD044F5CDFEC9FEF14 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE47963FB6E13EFC318606E3CA31013421827343.cer Subject info access: rsync://repo-rpki.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/FE47963FB6E13EFC318606E3CA31013421827343.mft Manifest number: F7 Signing time: Tue 01 Jul 2025 12:11:23 +0000 Manifest this update: Tue 01 Jul 2025 12:06:23 +0000 Manifest next update: Fri 04 Jul 2025 17:57:23 +0000 Files and hashes: 1: FE47963FB6E13EFC318606E3CA31013421827343.crl (hash: EGD3FG9ioPI5Y1OkRdpwciaGrFjCPc8L3aGYF5WJ0WY=) 2: 3130332e36372e34392e302f32342d3234203d3e20313431363732.roa (hash: SqLVtRzYDgsE8xtvHEkXfWSJ3eq3r1xvCOHzgU8XSVA=) 3: 3130332e3136322e3235322e302f32342d3234203d3e20313431363732.roa (hash: F/PrgRQWyjl54TnGtCvaw2IbmQgpyQyxqaaKjq7WP0U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/FE47963FB6E13EFC318606E3CA31013421827343.crl rsync://repo-rpki.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/FE47963FB6E13EFC318606E3CA31013421827343.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE47963FB6E13EFC318606E3CA31013421827343.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 17:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:95:1b:e9:39:49:3d:52:16:b7:d3:bd:04:4f:5c:df:ec:9f:ef:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FE47963FB6E13EFC318606E3CA31013421827343 Validity Not Before: Jul 1 12:06:23 2025 GMT Not After : Jul 4 17:57:23 2025 GMT Subject: CN=203E51730DB727739954B732527487D108D98E68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:23:f2:dd:5b:56:ca:0b:1a:27:90:ce:fe:dd: b6:c6:62:77:2d:a2:81:93:ae:19:4d:dc:77:96:6d: dd:e8:97:90:5c:c7:36:86:a3:ac:c7:52:47:c0:1d: 30:99:1d:44:ea:60:db:ea:e9:a9:b1:38:c7:5e:70: 8e:28:6b:12:d6:bc:04:b4:5d:1a:b9:9b:f9:9e:c3: 26:9a:ef:0d:32:38:49:ed:b4:f0:be:43:6b:5a:4a: 9f:78:c2:49:f2:09:1d:ab:20:07:37:73:9c:15:4e: 4b:77:be:19:30:a2:0f:9a:fe:bd:e5:da:91:d3:0e: 7d:f1:9d:ff:ac:79:e7:4e:8f:9e:b3:33:9d:f9:4a: fd:90:8e:da:b8:ab:b8:1b:91:be:9e:66:02:63:83: 9f:09:81:e9:f7:a5:a3:33:83:c4:f5:ec:55:ad:b7: c9:d8:15:60:b6:72:e7:f8:cc:3f:e4:a7:5d:6c:27: 17:23:e9:66:26:3e:33:8f:e6:ba:dd:c7:12:08:98: cb:24:ab:3f:85:98:be:b8:a6:e0:5d:31:e6:b9:32: c7:ce:43:bc:fc:c2:fe:18:f5:35:60:2d:ef:17:a9: 09:59:b5:52:53:05:b3:1a:fd:e8:42:20:9b:40:d0: ab:7d:99:15:c4:2d:11:9e:dd:59:90:ee:f6:05:c8: 3f:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:3E:51:73:0D:B7:27:73:99:54:B7:32:52:74:87:D1:08:D9:8E:68 X509v3 Authority Key Identifier: keyid:FE:47:96:3F:B6:E1:3E:FC:31:86:06:E3:CA:31:01:34:21:82:73:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/FE47963FB6E13EFC318606E3CA31013421827343.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE47963FB6E13EFC318606E3CA31013421827343.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/FE47963FB6E13EFC318606E3CA31013421827343.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:ec:cf:70:a4:3c:12:94:94:f3:f5:d2:f5:13:28:4f:1c:86: ff:cb:20:cf:66:05:c8:11:7c:a9:c5:b8:92:01:e9:7d:a2:db: 88:f6:6d:54:75:d3:a0:2d:fe:2d:64:80:26:0c:63:c3:63:43: db:ed:6b:a7:d7:01:00:34:70:0a:52:d0:18:8e:b1:f8:66:d1: a3:13:9e:c6:42:ef:3e:9a:d3:64:91:10:60:c0:89:35:bf:05: 80:f6:0d:86:60:de:24:65:fd:4f:15:70:6c:c9:3d:05:b0:81: b6:7d:e4:c3:a7:bc:3a:ba:9b:0c:3f:2a:56:26:e3:a8:78:c8: 72:e5:1c:c9:d8:d2:af:28:01:65:9c:83:20:21:e6:84:88:d9: 69:8b:1b:39:68:48:94:95:4e:61:a1:99:ef:9a:f3:1f:a9:41: e6:5d:d7:9b:11:c4:5c:2e:25:b4:31:3c:ea:4e:6c:84:16:57: 09:74:dd:a1:5e:ff:4c:9c:59:2a:44:02:91:aa:79:49:38:63: 64:43:53:df:ba:11:76:99:22:5b:c3:b4:15:f5:74:87:89:9d: f0:5c:44:08:99:2c:2d:17:a7:e4:5c:f2:4d:49:ca:e8:d7:b2: 16:30:ac:f9:a7:65:57:55:c9:3b:d1:9c:bb:ce:ad:ea:b4:da: 66:f7:f7:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV5Ub6TlJPVIWt9O9BE9c3+yf7xQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkU0Nzk2M0ZCNkUxM0VGQzMxODYwNkUzQ0EzMTAxMzQy MTgyNzM0MzAeFw0yNTA3MDExMjA2MjNaFw0yNTA3MDQxNzU3MjNaMDMxMTAvBgNV BAMTKDIwM0U1MTczMERCNzI3NzM5OTU0QjczMjUyNzQ4N0QxMDhEOThFNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLI/LdW1bKCxonkM7+3bbGYnct ooGTrhlN3HeWbd3ol5BcxzaGo6zHUkfAHTCZHUTqYNvq6amxOMdecI4oaxLWvAS0 XRq5m/mewyaa7w0yOEnttPC+Q2taSp94wknyCR2rIAc3c5wVTkt3vhkwog+a/r3l 2pHTDn3xnf+seedOj56zM535Sv2Qjtq4q7gbkb6eZgJjg58Jgen3paMzg8T17FWt t8nYFWC2cuf4zD/kp11sJxcj6WYmPjOP5rrdxxIImMskqz+FmL64puBdMea5MsfO Q7z8wv4Y9TVgLe8XqQlZtVJTBbMa/ehCIJtA0Kt9mRXELRGe3VmQ7vYFyD8JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUID5Rcw23J3OZVLcyUnSH0QjZjmgwHwYDVR0j BBgwFoAU/keWP7bhPvwxhgbjyjEBNCGCc0MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ODQ2Njg4OS1jMWVmLTQ0MTAtYWQ5Yy0zMDZjMDllMWJlMDYvMC9GRTQ3OTYzRkI2 RTEzRUZDMzE4NjA2RTNDQTMxMDEzNDIxODI3MzQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkU0Nzk2M0ZCNkUxM0VGQzMxODYwNkUzQ0EzMTAxMzQyMTgy NzM0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjg0NjY4ODktYzFlZi00NDEwLWFk OWMtMzA2YzA5ZTFiZTA2LzAvRkU0Nzk2M0ZCNkUxM0VGQzMxODYwNkUzQ0EzMTAx MzQyMTgyNzM0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAELsz3CkPBKUlPP10vUTKE8chv/LIM9mBcgR fKnFuJIB6X2i24j2bVR106At/i1kgCYMY8NjQ9vta6fXAQA0cApS0BiOsfhm0aMT nsZC7z6a02SREGDAiTW/BYD2DYZg3iRl/U8VcGzJPQWwgbZ95MOnvDq6mww/KlYm 46h4yHLlHMnY0q8oAWWcgyAh5oSI2WmLGzloSJSVTmGhme+a8x+pQeZd15sRxFwu JbQxPOpObIQWVwl03aFe/0ycWSpEApGqeUk4Y2RDU9+6EXaZIlvDtBX1dIeJnfBc RAiZLC0Xp+Rc8k1JyujXshYwrPmnZVdVyTvRnLvOreq02mb392k= -----END CERTIFICATE-----Generated at Thu Jul 3 06:50:37 2025 by rpki-client