$ rpki-client -vvf repo-rpki.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.mft File: FC4F8762524C3EBF98126E5F579CCB30C37EEF63.mft (raw, json) Hash identifier: 9HFMCV0ziMbySDiETwvegjDW2Y2uEg/09cF3X3Iv9H0= Subject key identifier: E4:5E:AA:20:C5:79:F6:C7:F0:72:A5:F5:38:16:6C:24:B4:21:FD:0F Authority key identifier: FC:4F:87:62:52:4C:3E:BF:98:12:6E:5F:57:9C:CB:30:C3:7E:EF:63 Certificate issuer: /CN=FC4F8762524C3EBF98126E5F579CCB30C37EEF63 Certificate serial: 6BC46A2E831BA57647D795194AAC7627B8A06837 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.cer Subject info access: rsync://repo-rpki.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.mft Manifest number: D7 Signing time: Wed 07 May 2025 22:00:37 +0000 Manifest this update: Wed 07 May 2025 21:55:37 +0000 Manifest next update: Sun 11 May 2025 05:35:37 +0000 Files and hashes: 1: FC4F8762524C3EBF98126E5F579CCB30C37EEF63.crl (hash: jWvYeATFEyy43+/eOHJfszmJABr3q17PPKzrvhiL6xc=) 2: 323030313a6466373a616630303a3a2f34382d3438203d3e20313338313432.roa (hash: +DXbNG3+5DIfVUdd5cKU3zcHabiuNmOrVbbKp3YlrN4=) 3: 3130332e3133342e31362e302f32342d3234203d3e20313338313432.roa (hash: 8FJnKt5CgklUKcuR3KEOgR9pFXHp2pdnQAzYXqQX2Ag=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.crl rsync://repo-rpki.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 05:35:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:c4:6a:2e:83:1b:a5:76:47:d7:95:19:4a:ac:76:27:b8:a0:68:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC4F8762524C3EBF98126E5F579CCB30C37EEF63 Validity Not Before: May 7 21:55:37 2025 GMT Not After : May 11 05:35:37 2025 GMT Subject: CN=E45EAA20C579F6C7F072A5F538166C24B421FD0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:24:f5:67:ad:6d:f4:83:16:a4:ee:3f:24:c0: 5a:d5:46:9a:96:72:4d:ee:ba:6d:85:2b:7e:c7:39: 53:b7:ba:05:0a:8e:68:e5:45:f7:f0:75:6b:f6:e3: 9e:af:87:17:6b:c1:a1:3c:6d:ce:0d:c4:c1:71:f1: 3d:ed:47:83:ed:27:58:59:6c:ee:62:7b:d7:86:5f: 1f:a9:88:7a:d8:3c:0c:f8:b8:e8:af:79:a0:d8:de: 87:c6:18:8c:3e:fd:61:12:7e:8c:78:f6:10:af:7f: 58:37:49:71:a9:f2:6e:b5:4a:2c:fa:ab:a7:02:ec: 4e:e7:e3:44:d0:2b:fc:cd:f6:1f:10:05:03:ac:59: 44:f9:0e:60:cd:38:64:a8:78:17:18:1a:dd:13:de: 85:d5:b4:2b:a0:61:fd:55:1c:d9:7f:66:92:33:d7: 1c:a9:6a:3f:aa:9b:d2:77:be:c0:0a:b4:3f:53:f3: b7:5b:98:80:4f:ba:f5:c5:71:96:dc:26:ab:52:cc: bb:37:d2:38:f2:48:1e:c0:44:77:ae:b9:8e:f6:06: ae:f3:dd:f0:91:69:0c:dd:4f:38:07:f4:ab:57:e7: 39:fe:c2:01:28:d5:95:e0:a8:1e:38:0b:24:c4:d3: e8:df:db:45:4d:bc:50:f0:b9:ab:e9:f6:ab:76:0d: 8f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:5E:AA:20:C5:79:F6:C7:F0:72:A5:F5:38:16:6C:24:B4:21:FD:0F X509v3 Authority Key Identifier: keyid:FC:4F:87:62:52:4C:3E:BF:98:12:6E:5F:57:9C:CB:30:C3:7E:EF:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:34:18:19:3c:a7:15:83:49:c5:23:cd:07:74:a6:15:b7:c8: c0:df:04:a0:08:aa:23:d1:b8:ba:6d:2e:07:12:5b:c1:01:0a: 42:cc:b1:5b:6f:49:0e:2b:48:fa:bb:a7:6f:c5:40:b9:3e:86: 62:95:0d:07:65:9f:4c:22:dc:3d:34:4c:19:8a:3c:ae:f4:e5: ac:87:d0:cd:4a:27:d8:ab:67:98:32:86:0c:37:90:dd:e2:13: 3b:3d:d2:76:43:20:82:fa:f8:b8:b0:df:1f:b9:65:1b:3d:dc: 21:64:68:98:14:0d:a1:01:40:1b:38:2f:bd:25:16:59:f1:7b: 72:b1:31:fd:63:13:cb:d6:77:16:8d:cd:34:eb:a3:47:d4:ac: 3b:5e:a3:d9:02:53:6d:8a:9b:f8:ef:27:8c:de:37:0e:ea:17: 41:82:41:d3:87:60:cc:a9:07:b5:34:cc:8f:0b:12:89:4a:57: 45:30:71:45:a1:bc:de:3d:b2:a9:10:3f:6e:08:cb:63:72:e4: c6:df:ff:36:f7:81:e2:f0:50:a2:b9:f6:24:49:05:3f:ec:29: 14:2e:97:f3:94:b1:5c:3b:6b:7e:9d:52:c8:e5:b8:71:d1:5f: e5:cb:e4:2c:c1:e3:ea:9e:53:3d:cf:2c:61:1b:8f:bf:2b:49: 21:20:22:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa8RqLoMbpXZH15UZSqx2J7igaDcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkM0Rjg3NjI1MjRDM0VCRjk4MTI2RTVGNTc5Q0NCMzBD MzdFRUY2MzAeFw0yNTA1MDcyMTU1MzdaFw0yNTA1MTEwNTM1MzdaMDMxMTAvBgNV BAMTKEU0NUVBQTIwQzU3OUY2QzdGMDcyQTVGNTM4MTY2QzI0QjQyMUZEMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUJPVnrW30gxak7j8kwFrVRpqW ck3uum2FK37HOVO3ugUKjmjlRffwdWv2456vhxdrwaE8bc4NxMFx8T3tR4PtJ1hZ bO5ie9eGXx+piHrYPAz4uOiveaDY3ofGGIw+/WESfox49hCvf1g3SXGp8m61Siz6 q6cC7E7n40TQK/zN9h8QBQOsWUT5DmDNOGSoeBcYGt0T3oXVtCugYf1VHNl/ZpIz 1xypaj+qm9J3vsAKtD9T87dbmIBPuvXFcZbcJqtSzLs30jjySB7ARHeuuY72Bq7z 3fCRaQzdTzgH9KtX5zn+wgEo1ZXgqB44CyTE0+jf20VNvFDwuavp9qt2DY99AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5F6qIMV59sfwcqX1OBZsJLQh/Q8wHwYDVR0j BBgwFoAU/E+HYlJMPr+YEm5fV5zLMMN+72MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZTVhYTkzZC03ODdiLTRhMTctODdkMC03ZWY0MWIwZjJkZWYvMC9GQzRGODc2MjUy NEMzRUJGOTgxMjZFNUY1NzlDQ0IzMEMzN0VFRjYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkM0Rjg3NjI1MjRDM0VCRjk4MTI2RTVGNTc5Q0NCMzBDMzdF RUY2My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmU1YWE5M2QtNzg3Yi00YTE3LTg3 ZDAtN2VmNDFiMGYyZGVmLzAvRkM0Rjg3NjI1MjRDM0VCRjk4MTI2RTVGNTc5Q0NC MzBDMzdFRUY2My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHM0GBk8pxWDScUjzQd0phW3yMDfBKAIqiPR uLptLgcSW8EBCkLMsVtvSQ4rSPq7p2/FQLk+hmKVDQdln0wi3D00TBmKPK705ayH 0M1KJ9irZ5gyhgw3kN3iEzs90nZDIIL6+Liw3x+5ZRs93CFkaJgUDaEBQBs4L70l Flnxe3KxMf1jE8vWdxaNzTTro0fUrDteo9kCU22Km/jvJ4zeNw7qF0GCQdOHYMyp B7U0zI8LEolKV0UwcUWhvN49sqkQP24Iy2Ny5Mbf/zb3geLwUKK59iRJBT/sKRQu l/OUsVw7a36dUsjluHHRX+XL5CzB4+qeUz3PLGEbj78rSSEgImo= -----END CERTIFICATE-----Generated at Fri May 9 04:51:29 2025 by rpki-client