$ rpki-client -vvf repo-rpki.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.mft File: FCA55FE68BF147AE20F00C45DADCDF960C120CF8.mft (raw, json) Hash identifier: F57vKNHvm/2lwcVGfBdUglY4NQEGTQlULRUSvvXSnEo= Subject key identifier: 98:59:D4:B0:77:E7:71:E1:EF:34:29:F1:CC:E8:1F:F4:D9:09:88:FC Authority key identifier: FC:A5:5F:E6:8B:F1:47:AE:20:F0:0C:45:DA:DC:DF:96:0C:12:0C:F8 Certificate issuer: /CN=FCA55FE68BF147AE20F00C45DADCDF960C120CF8 Certificate serial: 6AB3699A7142D668B26FA1C6E9C9087ACFD42CAF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.mft Manifest number: 0174 Signing time: Wed 07 May 2025 19:52:08 +0000 Manifest this update: Wed 07 May 2025 19:47:08 +0000 Manifest next update: Sun 11 May 2025 04:00:08 +0000 Files and hashes: 1: 3130332e3132312e3234362e302f32332d3234203d3e20313335343738.roa (hash: Fa70W79FWJwGU7udTAwUgPXNTPP4kX8Q9MJvZfIXGU4=) 2: 3130332e3132312e3234342e302f32332d3234203d3e20313335343738.roa (hash: mb2pM5mXThua6WdA1EeTpxCUj69c6y3IginfkESyKCw=) 3: FCA55FE68BF147AE20F00C45DADCDF960C120CF8.crl (hash: PqE8l3u46eh2LtlrjrjwSCfY8Um8wThr+jh9s2hlBsM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.crl rsync://repo-rpki.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 03:37:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:b3:69:9a:71:42:d6:68:b2:6f:a1:c6:e9:c9:08:7a:cf:d4:2c:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FCA55FE68BF147AE20F00C45DADCDF960C120CF8 Validity Not Before: May 7 19:47:08 2025 GMT Not After : May 11 04:00:08 2025 GMT Subject: CN=9859D4B077E771E1EF3429F1CCE81FF4D90988FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:7b:5b:b2:bd:4c:d5:70:5c:a6:be:f8:49:9d: 33:70:1b:7a:c0:1b:3c:8e:58:92:cc:a4:13:ec:c1: fe:00:04:2b:bf:09:0e:06:00:b0:5e:bc:33:2b:ca: ea:ec:75:a7:b6:4d:8b:80:ce:0c:9c:1a:02:75:e4: 27:b8:42:58:9d:7c:2b:a1:b8:3f:ed:1f:f5:8b:2e: 68:65:44:c1:02:9d:06:02:a4:3c:f7:51:0f:dc:50: d6:c2:d7:92:8a:22:ad:7b:d4:44:fe:0a:da:d2:40: d7:fe:09:3a:1f:66:28:2a:c9:cd:ff:e2:f1:12:64: 36:44:0b:57:f4:51:89:08:3f:c8:a9:72:00:9f:b3: 09:67:db:a0:37:8e:a2:04:e0:10:81:05:33:f4:6f: 4c:2c:18:6c:52:6a:f1:e3:54:b1:be:33:13:b6:70: 5d:0e:d0:9c:03:de:1f:ef:e0:26:6d:fb:58:7c:74: 73:1c:03:6b:ac:1b:4f:3c:f8:9a:f1:66:5b:ff:2c: 6a:d0:97:d4:7a:52:e0:b3:b7:43:8a:55:a2:67:25: 07:dc:61:43:77:06:41:6a:89:38:e0:ad:fe:1f:99: 6b:c1:a4:c4:3e:0e:08:f2:14:31:b8:40:e7:af:e2: 64:37:7e:d8:41:47:76:69:bb:70:2e:1f:16:43:92: c1:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:59:D4:B0:77:E7:71:E1:EF:34:29:F1:CC:E8:1F:F4:D9:09:88:FC X509v3 Authority Key Identifier: keyid:FC:A5:5F:E6:8B:F1:47:AE:20:F0:0C:45:DA:DC:DF:96:0C:12:0C:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:10:ad:8e:fa:fb:a3:42:c3:76:a7:f6:5c:fc:59:2d:d3:a9: 2f:b5:91:30:4a:74:2d:25:23:4f:83:07:91:bc:7e:39:1a:0c: 4d:aa:6a:82:a3:1f:d7:a7:a4:03:f2:d3:f0:79:47:a1:5d:50: d8:7a:3b:fc:0f:fb:c2:31:1e:bc:04:b2:71:ee:4d:b5:28:ef: e5:30:74:91:53:5c:e6:e6:76:e4:ab:6c:73:ac:62:84:3c:e2: bf:e8:f4:49:d7:c4:d6:db:35:2e:94:45:fd:68:53:ba:b6:7a: 93:b6:4b:ce:a5:c9:c6:8a:97:6b:13:e0:5b:9d:b8:e1:7e:5e: 2b:de:99:00:e3:49:84:93:96:ac:c8:87:4c:cc:38:91:07:17: 5e:aa:2c:98:45:a3:ef:bd:54:f7:0e:11:00:98:5b:f1:86:1b: 93:43:9f:32:2b:e1:6c:5d:d9:97:ea:c3:48:1c:ab:af:d5:8f: 1a:1f:c1:52:ea:b6:da:8f:f0:d2:a8:64:a8:13:69:2a:1f:38: f8:cb:bb:89:c2:75:f3:3e:98:43:85:d3:b5:bd:e1:79:f7:1c: 4d:54:88:8f:c2:3b:43:6b:93:5c:5a:b1:ff:af:66:af:ac:96: 42:0a:33:c5:5d:8e:62:e5:02:22:24:ca:f4:14:ba:e5:18:ba: 84:69:20:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUarNpmnFC1miyb6HG6ckIes/ULK8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkNBNTVGRTY4QkYxNDdBRTIwRjAwQzQ1REFEQ0RGOTYw QzEyMENGODAeFw0yNTA1MDcxOTQ3MDhaFw0yNTA1MTEwNDAwMDhaMDMxMTAvBgNV BAMTKDk4NTlENEIwNzdFNzcxRTFFRjM0MjlGMUNDRTgxRkY0RDkwOTg4RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhe1uyvUzVcFymvvhJnTNwG3rA GzyOWJLMpBPswf4ABCu/CQ4GALBevDMryursdae2TYuAzgycGgJ15Ce4QlidfCuh uD/tH/WLLmhlRMECnQYCpDz3UQ/cUNbC15KKIq171ET+CtrSQNf+CTofZigqyc3/ 4vESZDZEC1f0UYkIP8ipcgCfswln26A3jqIE4BCBBTP0b0wsGGxSavHjVLG+MxO2 cF0O0JwD3h/v4CZt+1h8dHMcA2usG088+JrxZlv/LGrQl9R6UuCzt0OKVaJnJQfc YUN3BkFqiTjgrf4fmWvBpMQ+DgjyFDG4QOev4mQ3fthBR3Zpu3AuHxZDksG/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmFnUsHfnceHvNCnxzOgf9NkJiPwwHwYDVR0j BBgwFoAU/KVf5ovxR64g8AxF2tzflgwSDPgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OTVlZThmYy02ZWZlLTQxNWQtYjZjMS0wZjBjY2NmMjYxNDQvMC9GQ0E1NUZFNjhC RjE0N0FFMjBGMDBDNDVEQURDREY5NjBDMTIwQ0Y4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkNBNTVGRTY4QkYxNDdBRTIwRjAwQzQ1REFEQ0RGOTYwQzEy MENGOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzk1ZWU4ZmMtNmVmZS00MTVkLWI2 YzEtMGYwY2NjZjI2MTQ0LzAvRkNBNTVGRTY4QkYxNDdBRTIwRjAwQzQ1REFEQ0RG OTYwQzEyMENGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALEQrY76+6NCw3an9lz8WS3TqS+1kTBKdC0l I0+DB5G8fjkaDE2qaoKjH9enpAPy0/B5R6FdUNh6O/wP+8IxHrwEsnHuTbUo7+Uw dJFTXObmduSrbHOsYoQ84r/o9EnXxNbbNS6URf1oU7q2epO2S86lycaKl2sT4Fud uOF+XivemQDjSYSTlqzIh0zMOJEHF16qLJhFo++9VPcOEQCYW/GGG5NDnzIr4Wxd 2Zfqw0gcq6/VjxofwVLqttqP8NKoZKgTaSofOPjLu4nCdfM+mEOF07W94Xn3HE1U iI/CO0Nrk1xasf+vZq+slkIKM8VdjmLlAiIkyvQUuuUYuoRpIIE= -----END CERTIFICATE-----Generated at Thu May 8 02:04:39 2025 by rpki-client