$ rpki-client -vvf repo-rpki.idnic.net/repo/b32d7627-47d7-4fd0-ae0f-63b873fe2c88/0/FBF979FD5B6D1AF690338C406BB657208D98F3DE.mft File: FBF979FD5B6D1AF690338C406BB657208D98F3DE.mft (raw, json) Hash identifier: JzMby+bBAuQWvR84arxjsQUHQzsKDiOUoudbQrpmCik= Subject key identifier: 7A:D1:D2:49:23:7C:42:D0:B2:41:6E:91:14:01:E2:EF:C0:37:CC:CF Authority key identifier: FB:F9:79:FD:5B:6D:1A:F6:90:33:8C:40:6B:B6:57:20:8D:98:F3:DE Certificate issuer: /CN=FBF979FD5B6D1AF690338C406BB657208D98F3DE Certificate serial: 28911D65320CB45520720E17E59706D5576EDF45 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBF979FD5B6D1AF690338C406BB657208D98F3DE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b32d7627-47d7-4fd0-ae0f-63b873fe2c88/0/FBF979FD5B6D1AF690338C406BB657208D98F3DE.mft Manifest number: 04E8 Signing time: Tue 01 Jul 2025 23:32:11 +0000 Manifest this update: Tue 01 Jul 2025 23:27:11 +0000 Manifest next update: Sat 05 Jul 2025 03:38:11 +0000 Files and hashes: 1: FBF979FD5B6D1AF690338C406BB657208D98F3DE.crl (hash: JmU5AXk+fA7jngS3ICk6L445Ep5Buvw4SVrW2qO277g=) 2: 3130332e3134392e3131362e302f32342d3234203d3e20313430303139.roa (hash: VXJZTzf1N9bLnOE34wm7TG6tn0+JbHJPrkKyWsVcPXk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b32d7627-47d7-4fd0-ae0f-63b873fe2c88/0/FBF979FD5B6D1AF690338C406BB657208D98F3DE.crl rsync://repo-rpki.idnic.net/repo/b32d7627-47d7-4fd0-ae0f-63b873fe2c88/0/FBF979FD5B6D1AF690338C406BB657208D98F3DE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBF979FD5B6D1AF690338C406BB657208D98F3DE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 03:38:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:91:1d:65:32:0c:b4:55:20:72:0e:17:e5:97:06:d5:57:6e:df:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FBF979FD5B6D1AF690338C406BB657208D98F3DE Validity Not Before: Jul 1 23:27:11 2025 GMT Not After : Jul 5 03:38:11 2025 GMT Subject: CN=7AD1D249237C42D0B2416E911401E2EFC037CCCF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:58:eb:31:a9:37:0f:94:34:25:8d:61:c6:7f: fe:36:40:26:c9:11:e7:cc:d5:77:40:b2:a2:6d:5b: 4d:c4:9f:8f:9c:41:5f:8a:d5:e2:8b:7c:fe:63:fb: 9e:fb:f5:32:8f:6e:aa:a5:c1:54:e4:29:c7:04:70: 43:73:44:0d:1b:50:4d:47:42:54:0b:8c:6e:15:ca: 3b:7e:67:b7:23:01:3f:e9:c3:5e:94:d2:ce:95:ee: 4a:66:b3:00:d1:de:74:8e:24:84:fd:5a:ae:b7:e7: 83:10:81:f2:21:dc:06:c5:75:33:39:f9:e4:61:db: 26:3c:7c:ec:10:39:46:4f:6c:aa:f7:dd:9e:f8:c1: ad:16:ee:0c:82:80:3b:7b:9a:57:01:3e:f6:2f:24: 8c:0c:53:2e:ac:44:b6:cf:4b:37:78:e3:95:28:8a: 88:e2:83:dd:f1:45:9c:0c:d5:0c:a5:15:a3:ed:24: 2b:d7:b2:0c:67:5e:b2:7f:8b:da:05:bc:a4:7a:ca: b9:2d:57:f7:1e:00:be:22:84:94:1d:c1:f4:9e:ce: c7:c5:22:e9:1f:3c:85:14:6e:f2:9d:9e:f8:f0:c5: 67:43:4c:99:9e:44:ed:54:23:9f:9d:e6:0a:0c:ce: 61:2e:36:0f:0f:c8:11:d6:5a:b6:9f:5e:cb:91:7f: 36:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:D1:D2:49:23:7C:42:D0:B2:41:6E:91:14:01:E2:EF:C0:37:CC:CF X509v3 Authority Key Identifier: keyid:FB:F9:79:FD:5B:6D:1A:F6:90:33:8C:40:6B:B6:57:20:8D:98:F3:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b32d7627-47d7-4fd0-ae0f-63b873fe2c88/0/FBF979FD5B6D1AF690338C406BB657208D98F3DE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBF979FD5B6D1AF690338C406BB657208D98F3DE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b32d7627-47d7-4fd0-ae0f-63b873fe2c88/0/FBF979FD5B6D1AF690338C406BB657208D98F3DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:64:bf:0b:9f:d5:9b:14:85:21:04:cd:40:2d:f9:39:e9:d8: f1:f7:30:76:20:21:b8:3d:9d:91:55:f7:b5:86:26:a9:ed:1b: 0d:a4:9e:34:80:59:98:14:66:bb:7c:4a:12:fd:ce:a2:84:32: 5d:f8:81:2d:c5:4e:27:98:a5:a6:21:f7:a1:9d:eb:a6:b9:fc: 9e:1d:bb:fe:c9:c9:09:2d:77:19:2c:e0:e7:b6:91:7b:4f:57: 21:bd:08:6e:a2:ce:78:33:f8:9e:87:2f:db:5d:b2:8e:bc:da: f2:bc:d4:d2:b6:03:e6:00:71:1a:a7:d5:d1:16:b4:c1:6e:e3: 26:1e:cc:bb:8c:a8:13:72:59:97:ff:67:b0:34:87:97:3a:fe: 41:06:b8:fe:ca:d6:22:4d:19:f4:94:32:ea:41:f0:66:7e:30: 17:a8:2b:44:1a:9c:8d:d5:33:71:03:78:18:84:e5:9c:42:67: 5f:a1:ac:43:b9:41:0a:03:41:fc:6b:1f:ce:d6:d3:8e:2f:cd: e6:6d:d5:6e:18:6a:d2:84:9e:18:6b:16:17:80:f9:d3:cb:25: 17:63:f4:70:f6:fb:48:8d:ab:07:c1:09:d4:f7:cc:5f:03:8d: 16:ef:dc:7a:ee:a5:a3:b1:24:01:f1:eb:5a:b4:11:41:ae:94: 59:15:2e:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKJEdZTIMtFUgcg4X5ZcG1Vdu30UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkJGOTc5RkQ1QjZEMUFGNjkwMzM4QzQwNkJCNjU3MjA4 RDk4RjNERTAeFw0yNTA3MDEyMzI3MTFaFw0yNTA3MDUwMzM4MTFaMDMxMTAvBgNV BAMTKDdBRDFEMjQ5MjM3QzQyRDBCMjQxNkU5MTE0MDFFMkVGQzAzN0NDQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEWOsxqTcPlDQljWHGf/42QCbJ EefM1XdAsqJtW03En4+cQV+K1eKLfP5j+5779TKPbqqlwVTkKccEcENzRA0bUE1H QlQLjG4Vyjt+Z7cjAT/pw16U0s6V7kpmswDR3nSOJIT9Wq6354MQgfIh3AbFdTM5 +eRh2yY8fOwQOUZPbKr33Z74wa0W7gyCgDt7mlcBPvYvJIwMUy6sRLbPSzd445Uo iojig93xRZwM1QylFaPtJCvXsgxnXrJ/i9oFvKR6yrktV/ceAL4ihJQdwfSezsfF IukfPIUUbvKdnvjwxWdDTJmeRO1UI5+d5goMzmEuNg8PyBHWWrafXsuRfzZFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUetHSSSN8QtCyQW6RFAHi78A3zM8wHwYDVR0j BBgwFoAU+/l5/VttGvaQM4xAa7ZXII2Y894wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MzJkNzYyNy00N2Q3LTRmZDAtYWUwZi02M2I4NzNmZTJjODgvMC9GQkY5NzlGRDVC NkQxQUY2OTAzMzhDNDA2QkI2NTcyMDhEOThGM0RFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkJGOTc5RkQ1QjZEMUFGNjkwMzM4QzQwNkJCNjU3MjA4RDk4 RjNERS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjMyZDc2MjctNDdkNy00ZmQwLWFl MGYtNjNiODczZmUyYzg4LzAvRkJGOTc5RkQ1QjZEMUFGNjkwMzM4QzQwNkJCNjU3 MjA4RDk4RjNERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJVkvwuf1ZsUhSEEzUAt+Tnp2PH3MHYgIbg9 nZFV97WGJqntGw2knjSAWZgUZrt8ShL9zqKEMl34gS3FTieYpaYh96Gd66a5/J4d u/7JyQktdxks4Oe2kXtPVyG9CG6izngz+J6HL9tdso682vK81NK2A+YAcRqn1dEW tMFu4yYezLuMqBNyWZf/Z7A0h5c6/kEGuP7K1iJNGfSUMupB8GZ+MBeoK0QanI3V M3EDeBiE5ZxCZ1+hrEO5QQoDQfxrH87W044vzeZt1W4YatKEnhhrFheA+dPLJRdj 9HD2+0iNqwfBCdT3zF8DjRbv3HrupaOxJAHx61q0EUGulFkVLso= -----END CERTIFICATE-----Generated at Wed Jul 2 14:24:53 2025 by rpki-client