$ rpki-client -vvf repo-rpki.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.mft File: FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.mft (raw, json) Hash identifier: IG98xIPn/y7osZaFGOMI/SiqRf2VPMqGvlF0/QpuKc8= Subject key identifier: B4:C8:E0:4C:5C:74:4E:0A:64:0E:17:2B:64:D0:61:74:DC:2A:DD:63 Authority key identifier: FA:B0:81:FC:D8:6A:B0:F8:1D:41:C9:E5:FB:9C:3D:32:22:0F:48:CD Certificate issuer: /CN=FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD Certificate serial: 27BAC3EB0E5C6A7C1A6E96E00BC667A2CA629C0B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.mft Manifest number: C6 Signing time: Fri 09 May 2025 10:11:18 +0000 Manifest this update: Fri 09 May 2025 10:06:18 +0000 Manifest next update: Mon 12 May 2025 11:12:18 +0000 Files and hashes: 1: FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.crl (hash: ay1GzKmIIxN4xntuOeElyzmEflpEahWKI9RHBu7tkOM=) 2: 3135372e31302e302e302f32332d3233203d3e20313532303739.roa (hash: LI/HMaoSlImx3bWiKBUR5SBmy9IHEOgEnYbWctfALp8=) 3: 3135372e31302e312e302f32342d3234203d3e20313532303739.roa (hash: 8mKHP2haWx9nDqWVpffr2HLwx0PW3MsCMnqlWHBgH8s=) 4: 3135372e31302e302e302f32342d3234203d3e20313532303739.roa (hash: /rLqhw2hFwRMsfI5zGP3QkMBxOWlLSkauOe3xFxChRo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.crl rsync://repo-rpki.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 11:12:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:ba:c3:eb:0e:5c:6a:7c:1a:6e:96:e0:0b:c6:67:a2:ca:62:9c:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD Validity Not Before: May 9 10:06:18 2025 GMT Not After : May 12 11:12:18 2025 GMT Subject: CN=B4C8E04C5C744E0A640E172B64D06174DC2ADD63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:73:e2:f0:92:ea:86:0f:3c:28:ab:3e:2c:5e: c6:69:7f:0d:6e:c8:30:4b:a1:89:d5:09:0e:23:1e: 1d:27:60:2e:5a:cf:49:7a:e2:20:ed:ac:8f:7c:06: da:d3:c3:57:46:30:c5:ea:0e:63:7c:8a:0c:f0:a9: 34:f0:b6:21:b7:b8:a2:ed:d7:c7:84:8d:22:45:3a: 63:06:26:82:75:7f:b9:9c:20:20:de:fd:8d:b0:5b: 4d:0c:0f:21:16:84:c2:97:04:cd:a6:b4:a8:31:60: 64:05:e7:ae:4d:9e:66:ba:c7:7c:99:53:60:c9:73: d7:91:34:44:1e:09:1e:7e:83:28:47:d5:5d:68:01: c4:60:fd:a6:2d:a0:09:e6:95:2f:e1:2a:0b:0e:ad: a7:c3:f8:d2:db:f3:f1:ab:63:b5:1c:86:b2:86:ed: 70:6a:df:91:18:30:22:31:70:51:a6:62:ae:fe:80: fd:17:b4:60:df:ce:df:cd:c6:5f:a7:3b:2b:f1:7d: 16:9c:27:e4:ac:32:a2:fa:d8:ae:09:c2:75:9c:2a: 5f:c1:9e:5a:56:ed:f8:b9:86:ca:a6:4b:67:c5:10: 02:5e:5f:e5:3b:29:42:a3:2e:bf:fa:98:54:12:51: 6e:e4:b5:b7:f7:c1:da:72:85:3c:34:be:6b:82:e3: 37:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:C8:E0:4C:5C:74:4E:0A:64:0E:17:2B:64:D0:61:74:DC:2A:DD:63 X509v3 Authority Key Identifier: keyid:FA:B0:81:FC:D8:6A:B0:F8:1D:41:C9:E5:FB:9C:3D:32:22:0F:48:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:9a:3f:48:f7:a5:ad:ae:a9:53:db:e6:eb:61:33:b8:45:12: 11:fb:ef:42:1a:a7:a2:62:23:3d:c4:d9:8e:74:e7:90:d8:a2: 82:8c:dc:2c:4e:05:a2:ee:a9:08:20:a2:0c:aa:f2:1a:2a:29: 14:2a:59:64:2e:be:ab:c4:46:b4:33:30:09:db:e8:f1:23:2e: 6c:15:93:c9:d9:55:2d:d2:11:68:ca:60:fa:be:ce:50:f0:16: e8:1a:e5:1f:9b:ad:a3:c2:27:2b:47:7f:f3:1d:a7:a4:f1:7f: 92:eb:46:cd:e4:ce:8e:68:a1:87:d2:82:9f:01:d2:9c:31:3e: 4b:91:29:4a:4b:40:63:97:fd:20:bc:51:69:db:30:62:af:c1: 38:1f:c6:19:b3:41:9d:a6:24:6a:9f:36:84:5c:d1:59:85:ea: 1a:8a:91:8d:42:11:27:3d:8d:d1:dd:e9:0d:1b:99:90:bb:41: b6:99:e6:f5:23:aa:97:cf:c5:6b:a2:78:7b:9c:22:f1:46:7c: 21:95:a3:9d:5f:7b:1c:fe:8d:f1:fb:5c:13:d1:67:00:d3:33: d8:78:04:ca:e7:ae:6c:bb:82:8c:db:a0:77:5a:de:77:24:c9: 01:f5:ce:75:45:90:82:18:b5:43:ed:28:d7:9d:ce:1c:5a:29: 12:f7:23:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ7rD6w5canwabpbgC8ZnospinAswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkFCMDgxRkNEODZBQjBGODFENDFDOUU1RkI5QzNEMzIy MjBGNDhDRDAeFw0yNTA1MDkxMDA2MThaFw0yNTA1MTIxMTEyMThaMDMxMTAvBgNV BAMTKEI0QzhFMDRDNUM3NDRFMEE2NDBFMTcyQjY0RDA2MTc0REMyQURENjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5c+LwkuqGDzwoqz4sXsZpfw1u yDBLoYnVCQ4jHh0nYC5az0l64iDtrI98BtrTw1dGMMXqDmN8igzwqTTwtiG3uKLt 18eEjSJFOmMGJoJ1f7mcICDe/Y2wW00MDyEWhMKXBM2mtKgxYGQF565Nnma6x3yZ U2DJc9eRNEQeCR5+gyhH1V1oAcRg/aYtoAnmlS/hKgsOrafD+NLb8/GrY7UchrKG 7XBq35EYMCIxcFGmYq7+gP0XtGDfzt/Nxl+nOyvxfRacJ+SsMqL62K4JwnWcKl/B nlpW7fi5hsqmS2fFEAJeX+U7KUKjLr/6mFQSUW7ktbf3wdpyhTw0vmuC4zd1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtMjgTFx0TgpkDhcrZNBhdNwq3WMwHwYDVR0j BBgwFoAU+rCB/NhqsPgdQcnl+5w9MiIPSM0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OTRkMWY2Mi04NDg4LTQwODYtOGQ0Yy1mMmRlNWM3NmRhM2QvMC9GQUIwODFGQ0Q4 NkFCMEY4MUQ0MUM5RTVGQjlDM0QzMjIyMEY0OENELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkFCMDgxRkNEODZBQjBGODFENDFDOUU1RkI5QzNEMzIyMjBG NDhDRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTk0ZDFmNjItODQ4OC00MDg2LThk NGMtZjJkZTVjNzZkYTNkLzAvRkFCMDgxRkNEODZBQjBGODFENDFDOUU1RkI5QzNE MzIyMjBGNDhDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEiaP0j3pa2uqVPb5uthM7hFEhH770Iap6Ji Iz3E2Y5055DYooKM3CxOBaLuqQggogyq8hoqKRQqWWQuvqvERrQzMAnb6PEjLmwV k8nZVS3SEWjKYPq+zlDwFuga5R+braPCJytHf/Mdp6Txf5LrRs3kzo5ooYfSgp8B 0pwxPkuRKUpLQGOX/SC8UWnbMGKvwTgfxhmzQZ2mJGqfNoRc0VmF6hqKkY1CESc9 jdHd6Q0bmZC7QbaZ5vUjqpfPxWuieHucIvFGfCGVo51fexz+jfH7XBPRZwDTM9h4 BMrnrmy7gozboHda3nckyQH1znVFkIIYtUPtKNedzhxaKRL3IyY= -----END CERTIFICATE-----Generated at Sat May 10 11:32:06 2025 by rpki-client