$ rpki-client -vvf repo-rpki.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.mft File: FC4F8762524C3EBF98126E5F579CCB30C37EEF63.mft (raw, json) Hash identifier: Op3V7Th3IQNMsRs+S11NjD/PNkteMD55w6szNnFrH8U= Subject key identifier: D6:46:CC:40:ED:90:C3:B1:A4:1F:78:00:D2:F9:A0:00:A5:4F:4B:E3 Authority key identifier: FC:4F:87:62:52:4C:3E:BF:98:12:6E:5F:57:9C:CB:30:C3:7E:EF:63 Certificate issuer: /CN=FC4F8762524C3EBF98126E5F579CCB30C37EEF63 Certificate serial: 5F34897B3D82DA550946A5104D304236FD0CA26D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.cer Subject info access: rsync://repo-rpki.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.mft Manifest number: EF Signing time: Mon 30 Jun 2025 01:40:39 +0000 Manifest this update: Mon 30 Jun 2025 01:35:39 +0000 Manifest next update: Thu 03 Jul 2025 02:43:39 +0000 Files and hashes: 1: 323030313a6466373a616630303a3a2f34382d3438203d3e20313338313432.roa (hash: +DXbNG3+5DIfVUdd5cKU3zcHabiuNmOrVbbKp3YlrN4=) 2: 3130332e3133342e31362e302f32342d3234203d3e20313338313432.roa (hash: 8FJnKt5CgklUKcuR3KEOgR9pFXHp2pdnQAzYXqQX2Ag=) 3: FC4F8762524C3EBF98126E5F579CCB30C37EEF63.crl (hash: lsmTgy3KRerQDYdQeL8/8oGraettW5Xn8lagVfppxUI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.crl rsync://repo-rpki.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 02:43:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:34:89:7b:3d:82:da:55:09:46:a5:10:4d:30:42:36:fd:0c:a2:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC4F8762524C3EBF98126E5F579CCB30C37EEF63 Validity Not Before: Jun 30 01:35:39 2025 GMT Not After : Jul 3 02:43:39 2025 GMT Subject: CN=D646CC40ED90C3B1A41F7800D2F9A000A54F4BE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:db:b6:01:21:df:d1:9f:dd:3d:cb:67:d2:c7: dd:cc:a0:af:ee:4b:e6:53:76:cc:0e:b8:2b:37:45: d6:d0:ac:72:2b:e6:d5:be:64:da:1a:14:f7:14:5d: eb:4f:cc:07:ec:ff:23:11:59:af:5f:ce:b0:cf:a4: fd:a0:46:e2:5d:3e:10:52:59:ae:1b:1f:70:bd:25: c7:03:de:50:a1:3a:1d:3e:a6:3f:01:61:e9:c0:9f: 6c:42:c4:17:03:0f:ef:c9:de:b3:bf:81:ea:60:67: fe:44:15:7d:a9:a4:13:36:56:0a:b5:d6:b8:63:87: e1:b6:6d:ac:ed:e0:2e:8f:1c:2e:6c:e6:5d:73:cf: df:59:0e:f7:e1:8f:91:79:f4:3a:6d:3a:fe:d9:97: 53:33:9f:64:da:81:65:7e:66:8b:92:f3:83:e7:a9: 1b:f7:c4:4c:f6:f6:86:dc:e2:9f:6f:47:06:eb:1d: 4a:ae:b4:ae:43:bf:65:c8:b6:cd:0b:a7:91:74:01: 66:2a:2f:d4:3a:69:e9:8f:8b:9f:33:d3:29:8a:c6: bb:9b:20:59:10:43:88:6a:7e:5a:75:4a:77:e0:54: 59:0d:93:bf:c8:9e:b0:77:6b:66:3e:79:b8:c3:fc: e9:52:c2:fc:77:e1:44:e5:af:c8:8b:0e:5e:19:e5: 41:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:46:CC:40:ED:90:C3:B1:A4:1F:78:00:D2:F9:A0:00:A5:4F:4B:E3 X509v3 Authority Key Identifier: keyid:FC:4F:87:62:52:4C:3E:BF:98:12:6E:5F:57:9C:CB:30:C3:7E:EF:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:8e:ed:7f:1e:43:93:26:85:6b:04:c7:9a:0f:86:f0:19:92: 02:c2:9f:df:f9:5f:38:ac:db:be:1f:81:ad:c2:46:e6:d8:f7: 6d:10:d2:44:df:9a:67:c4:5c:f5:fa:8a:66:ab:d8:0a:e4:b6: 44:c6:61:d4:58:97:e7:4e:13:08:6d:60:57:17:d9:3b:60:db: 59:fd:e7:2b:04:87:9f:b9:e2:65:e8:5f:54:32:34:3b:1b:df: be:07:ad:95:02:0e:f9:5c:f5:bc:a7:1c:c9:18:91:47:73:83: 5a:34:73:cd:63:4f:ec:e3:5d:42:e4:8b:8a:d6:fa:f1:e8:7f: 76:2e:a0:08:01:4d:0f:95:6a:11:af:52:2a:cd:03:55:47:49: 3f:e2:88:48:7d:f7:42:6d:00:a8:59:51:6b:0b:93:32:73:62: 1f:cd:37:25:35:da:69:9d:fe:6e:66:40:d1:aa:a6:68:93:99: d0:35:4a:cb:68:89:e5:fb:84:07:f9:39:4b:45:aa:ca:9f:3c: dd:3f:d0:99:4c:d7:c3:db:f5:f6:84:b8:ff:ae:4d:b6:ee:65: ba:d8:07:0e:4a:7d:9b:59:f6:68:d4:48:c0:c9:c1:ce:89:e6: 9b:da:13:0b:a6:1f:fd:cd:7f:dc:d3:4a:6e:d7:f5:e8:bd:36: 39:24:45:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXzSJez2C2lUJRqUQTTBCNv0Mom0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkM0Rjg3NjI1MjRDM0VCRjk4MTI2RTVGNTc5Q0NCMzBD MzdFRUY2MzAeFw0yNTA2MzAwMTM1MzlaFw0yNTA3MDMwMjQzMzlaMDMxMTAvBgNV BAMTKEQ2NDZDQzQwRUQ5MEMzQjFBNDFGNzgwMEQyRjlBMDAwQTU0RjRCRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC227YBId/Rn909y2fSx93MoK/u S+ZTdswOuCs3RdbQrHIr5tW+ZNoaFPcUXetPzAfs/yMRWa9fzrDPpP2gRuJdPhBS Wa4bH3C9JccD3lChOh0+pj8BYenAn2xCxBcDD+/J3rO/gepgZ/5EFX2ppBM2Vgq1 1rhjh+G2bazt4C6PHC5s5l1zz99ZDvfhj5F59DptOv7Zl1Mzn2TagWV+ZouS84Pn qRv3xEz29obc4p9vRwbrHUqutK5Dv2XIts0Lp5F0AWYqL9Q6aemPi58z0ymKxrub IFkQQ4hqflp1SnfgVFkNk7/InrB3a2Y+ebjD/OlSwvx34UTlr8iLDl4Z5UE/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1kbMQO2Qw7GkH3gA0vmgAKVPS+MwHwYDVR0j BBgwFoAU/E+HYlJMPr+YEm5fV5zLMMN+72MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZTVhYTkzZC03ODdiLTRhMTctODdkMC03ZWY0MWIwZjJkZWYvMC9GQzRGODc2MjUy NEMzRUJGOTgxMjZFNUY1NzlDQ0IzMEMzN0VFRjYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkM0Rjg3NjI1MjRDM0VCRjk4MTI2RTVGNTc5Q0NCMzBDMzdF RUY2My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmU1YWE5M2QtNzg3Yi00YTE3LTg3 ZDAtN2VmNDFiMGYyZGVmLzAvRkM0Rjg3NjI1MjRDM0VCRjk4MTI2RTVGNTc5Q0NC MzBDMzdFRUY2My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJGO7X8eQ5MmhWsEx5oPhvAZkgLCn9/5Xzis 274fga3CRubY920Q0kTfmmfEXPX6imar2ArktkTGYdRYl+dOEwhtYFcX2Ttg21n9 5ysEh5+54mXoX1QyNDsb374HrZUCDvlc9bynHMkYkUdzg1o0c81jT+zjXULki4rW +vHof3YuoAgBTQ+VahGvUirNA1VHST/iiEh990JtAKhZUWsLkzJzYh/NNyU12mmd /m5mQNGqpmiTmdA1SstoieX7hAf5OUtFqsqfPN0/0JlM18Pb9faEuP+uTbbuZbrY Bw5KfZtZ9mjUSMDJwc6J5pvaEwumH/3Nf9zTSm7X9ei9NjkkRXI= -----END CERTIFICATE-----Generated at Mon Jun 30 14:00:29 2025 by rpki-client