$ rpki-client -vvf repo-rpki.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/FED49ABCDA1C9D097F52AD26D8001C0C36632C89.mft File: FED49ABCDA1C9D097F52AD26D8001C0C36632C89.mft (raw, json) Hash identifier: ZOwDYtZW4MykI+XvN0HcBaqcdaucIIuBrvvxS0xjmFY= Subject key identifier: C9:69:89:2F:C3:B6:EE:92:B3:70:98:A1:51:8F:7F:75:FD:E9:78:5B Authority key identifier: FE:D4:9A:BC:DA:1C:9D:09:7F:52:AD:26:D8:00:1C:0C:36:63:2C:89 Certificate issuer: /CN=FED49ABCDA1C9D097F52AD26D8001C0C36632C89 Certificate serial: 46D20935B692405A9DCD868D4FB3A08484AF6106 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FED49ABCDA1C9D097F52AD26D8001C0C36632C89.cer Subject info access: rsync://repo-rpki.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/FED49ABCDA1C9D097F52AD26D8001C0C36632C89.mft Manifest number: 0235 Signing time: Fri 27 Jun 2025 19:30:47 +0000 Manifest this update: Fri 27 Jun 2025 19:25:47 +0000 Manifest next update: Mon 30 Jun 2025 21:14:47 +0000 Files and hashes: 1: 3130332e3138302e3139352e302f32342d3234203d3e2039333431.roa (hash: jasipL9tt5lF7HvMmB9WMDxphox1aLuH+uQXtrmFRL8=) 2: FED49ABCDA1C9D097F52AD26D8001C0C36632C89.crl (hash: 50jbixZlJINqTIANqKbTgIoW3iZP5LBBII1ZCnpl+7k=) 3: 3130332e3138302e3139342e302f32332d3233203d3e2039333431.roa (hash: T5Fz3OXAuav/iqbItkD85kgf8QFMTkSpBn4rOH0yfRc=) 4: 3130332e3138302e3139342e302f32342d3234203d3e2039333431.roa (hash: E01mZ15UIJ+QTIPPcGks35isU/hOcW6+FEQB5HchAFc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/FED49ABCDA1C9D097F52AD26D8001C0C36632C89.crl rsync://repo-rpki.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/FED49ABCDA1C9D097F52AD26D8001C0C36632C89.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FED49ABCDA1C9D097F52AD26D8001C0C36632C89.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 30 Jun 2025 21:14:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:d2:09:35:b6:92:40:5a:9d:cd:86:8d:4f:b3:a0:84:84:af:61:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FED49ABCDA1C9D097F52AD26D8001C0C36632C89 Validity Not Before: Jun 27 19:25:47 2025 GMT Not After : Jun 30 21:14:47 2025 GMT Subject: CN=C969892FC3B6EE92B37098A1518F7F75FDE9785B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:38:94:f0:17:2b:59:5a:8a:bd:33:e1:f9:30: c0:f8:64:0d:c6:7d:41:f1:38:7c:3e:6a:ec:e0:37: c6:a4:b3:97:17:ca:1f:88:6e:6e:c7:e7:1f:73:af: 88:04:9f:7a:36:fb:ad:ee:1d:91:d7:63:7c:e0:b8: 8f:01:b7:d1:b3:94:77:f9:b6:18:7c:1e:34:19:be: 8a:ea:b3:a0:60:64:c5:69:b8:2a:ef:8c:b8:1a:b6: b8:4e:cd:f1:f0:7a:cb:d9:08:81:55:16:15:44:a6: af:fa:03:8f:0b:38:f6:6c:45:98:eb:8b:2d:2b:b8: 02:6d:69:b3:d1:83:c1:3e:56:73:23:85:3f:16:5b: 82:05:09:00:29:37:80:54:7a:0d:17:c0:a4:b5:5e: 22:4c:2b:27:62:f4:0f:8c:f1:bf:5a:14:c0:81:5d: c6:3b:e2:46:4e:ed:26:37:a0:24:1e:7a:2e:73:ed: a0:8e:5a:ea:24:ef:54:ae:4c:d6:c7:fb:cf:59:5f: e0:bb:e0:e2:10:5a:c2:37:45:f4:7f:89:3a:7c:65: b5:e5:cf:0e:d5:41:e6:d5:06:d8:96:c2:54:b7:52: 0f:62:20:0b:2c:80:18:69:a6:0b:bb:2e:a8:05:e5: 9b:0d:e9:5e:a7:24:8b:9c:e4:0d:da:f3:5a:a3:fd: 65:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:69:89:2F:C3:B6:EE:92:B3:70:98:A1:51:8F:7F:75:FD:E9:78:5B X509v3 Authority Key Identifier: keyid:FE:D4:9A:BC:DA:1C:9D:09:7F:52:AD:26:D8:00:1C:0C:36:63:2C:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/FED49ABCDA1C9D097F52AD26D8001C0C36632C89.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FED49ABCDA1C9D097F52AD26D8001C0C36632C89.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/FED49ABCDA1C9D097F52AD26D8001C0C36632C89.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:3a:da:2a:28:5e:48:89:96:42:8b:ad:94:b0:f5:19:eb:21: 98:c1:7a:14:02:cc:a5:fe:23:e9:41:a5:55:69:1e:60:64:9f: 03:d3:c9:f7:71:05:13:86:ab:10:d3:64:7d:83:5d:ae:09:96: b0:10:87:9b:cf:d6:50:3d:16:76:19:a6:66:cb:75:81:88:bc: ea:23:88:4c:8f:43:f2:31:e0:10:1f:52:b4:aa:ae:90:48:23: 21:0c:05:6b:c0:27:36:b5:b5:39:cf:9b:ac:08:21:09:15:c9: cd:71:14:64:cd:3d:23:55:f0:18:36:43:17:f8:72:89:cd:97: b0:6a:6c:9a:62:58:9b:7d:94:5b:67:d4:e8:c6:e7:32:7f:9f: 54:db:6d:ac:4c:9a:a8:17:74:4a:49:48:17:d2:e9:86:a5:f1: 8a:64:fd:9b:e1:af:94:d0:1f:da:db:b0:bd:b7:e8:b4:92:00: 0a:f8:73:f5:31:ac:9f:30:37:27:35:f8:e1:1b:60:18:d1:97: e9:d2:e9:46:ea:71:1c:8c:67:d6:8d:d5:48:dd:1e:f6:db:d6: 91:58:23:a9:83:d6:93:5e:26:86:ed:bb:a9:9a:30:a7:e9:07: 30:6d:93:b4:2d:16:da:33:9a:58:d4:82:32:31:bc:fd:9f:33: 42:d4:d4:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURtIJNbaSQFqdzYaNT7OghISvYQYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkVENDlBQkNEQTFDOUQwOTdGNTJBRDI2RDgwMDFDMEMz NjYzMkM4OTAeFw0yNTA2MjcxOTI1NDdaFw0yNTA2MzAyMTE0NDdaMDMxMTAvBgNV BAMTKEM5Njk4OTJGQzNCNkVFOTJCMzcwOThBMTUxOEY3Rjc1RkRFOTc4NUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1OJTwFytZWoq9M+H5MMD4ZA3G fUHxOHw+auzgN8aks5cXyh+Ibm7H5x9zr4gEn3o2+63uHZHXY3zguI8Bt9GzlHf5 thh8HjQZvorqs6BgZMVpuCrvjLgatrhOzfHwesvZCIFVFhVEpq/6A48LOPZsRZjr iy0ruAJtabPRg8E+VnMjhT8WW4IFCQApN4BUeg0XwKS1XiJMKydi9A+M8b9aFMCB XcY74kZO7SY3oCQeei5z7aCOWuok71SuTNbH+89ZX+C74OIQWsI3RfR/iTp8ZbXl zw7VQebVBtiWwlS3Ug9iIAssgBhppgu7LqgF5ZsN6V6nJIuc5A3a81qj/WU/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyWmJL8O27pKzcJihUY9/df3peFswHwYDVR0j BBgwFoAU/tSavNocnQl/Uq0m2AAcDDZjLIkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 M2Y3NTA4OC0wODhlLTQxYzAtYmZjZS1lZGM2OWJlYWZkNGEvMC9GRUQ0OUFCQ0RB MUM5RDA5N0Y1MkFEMjZEODAwMUMwQzM2NjMyQzg5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkVENDlBQkNEQTFDOUQwOTdGNTJBRDI2RDgwMDFDMEMzNjYz MkM4OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzNmNzUwODgtMDg4ZS00MWMwLWJm Y2UtZWRjNjliZWFmZDRhLzAvRkVENDlBQkNEQTFDOUQwOTdGNTJBRDI2RDgwMDFD MEMzNjYzMkM4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEI62iooXkiJlkKLrZSw9RnrIZjBehQCzKX+ I+lBpVVpHmBknwPTyfdxBROGqxDTZH2DXa4JlrAQh5vP1lA9FnYZpmbLdYGIvOoj iEyPQ/Ix4BAfUrSqrpBIIyEMBWvAJza1tTnPm6wIIQkVyc1xFGTNPSNV8Bg2Qxf4 conNl7BqbJpiWJt9lFtn1OjG5zJ/n1TbbaxMmqgXdEpJSBfS6Yal8Ypk/Zvhr5TQ H9rbsL236LSSAAr4c/UxrJ8wNyc1+OEbYBjRl+nS6UbqcRyMZ9aN1UjdHvbb1pFY I6mD1pNeJobtu6maMKfpBzBtk7QtFtozmljUgjIxvP2fM0LU1I4= -----END CERTIFICATE-----Generated at Sun Jun 29 18:52:44 2025 by rpki-client