$ rpki-client -vvf repo-rpki.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.mft File: FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.mft (raw, json) Hash identifier: SlaZbgkEsP0a1T6PHz9u7fxBN0JIkgBR3rkreHdYyns= Subject key identifier: 8D:E4:2C:5F:F5:29:1F:3E:B2:90:41:7A:2F:BC:87:69:32:C8:DB:0B Authority key identifier: FC:D5:B5:62:FA:ED:9B:9D:67:F9:DE:5D:B7:05:78:BF:DB:00:57:B3 Certificate issuer: /CN=FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3 Certificate serial: 41203650469F627625C6D79C63B0936CEDAEE167 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.mft Manifest number: 02FB Signing time: Sun 11 May 2025 10:31:09 +0000 Manifest this update: Sun 11 May 2025 10:26:09 +0000 Manifest next update: Wed 14 May 2025 20:48:09 +0000 Files and hashes: 1: FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.crl (hash: 3CX27kFggdSRNpr/V4/d++flOvFdp7PJUTQmBmmJtks=) 2: 3130332e3135312e3134302e302f32332d3234203d3e20313430343137.roa (hash: NqnaoUff0mb/PaAApaFd35D+2QLuh2rweUqESvnuR9w=) 3: 3130332e3135312e3134302e302f32332d3233203d3e20313430343137.roa (hash: 8NA8ztqKmdQKSo6VJIi8+Ky4DaNAGzE3fau0y6GTEzI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.crl rsync://repo-rpki.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 20:48:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:20:36:50:46:9f:62:76:25:c6:d7:9c:63:b0:93:6c:ed:ae:e1:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3 Validity Not Before: May 11 10:26:09 2025 GMT Not After : May 14 20:48:09 2025 GMT Subject: CN=8DE42C5FF5291F3EB290417A2FBC876932C8DB0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:f4:36:1e:51:14:90:ff:0f:50:c1:97:dd:46: 9f:da:62:a0:98:8e:c8:bf:0b:83:cc:2f:63:8e:70: fc:53:0f:17:4c:52:05:3f:6f:bb:96:26:aa:2c:5e: e0:b4:ec:b0:c9:36:34:b9:47:7b:56:ec:f9:43:73: 35:14:14:cd:1d:c9:24:41:5f:d8:c7:35:78:25:70: ce:db:2a:2a:43:94:e0:01:8d:f0:d6:26:dd:ad:2e: 35:92:12:fc:d5:9d:fd:b1:4c:50:a3:49:a6:af:fe: f1:ac:b6:37:55:2a:0c:d4:a4:01:47:d4:77:11:77: e7:50:35:0b:b3:69:d7:4a:bb:70:3e:3c:7a:a0:6c: f4:03:78:84:55:b5:a3:c5:dd:d5:87:17:59:65:94: a5:2c:0d:b5:40:f4:c8:c4:43:97:33:5f:59:1b:dd: 82:6e:a0:f6:5b:49:23:6d:c1:69:2c:40:7c:cd:4b: ca:6f:32:8c:c0:6e:4b:14:91:dc:4f:25:80:67:e9: 09:ff:04:fe:53:5a:d1:3f:c4:de:b9:8f:b0:d9:3e: 49:1d:08:74:4c:d6:04:38:05:ed:fb:f2:9c:78:4b: 59:28:b0:7b:7c:08:e8:27:03:bd:7b:36:29:59:93: af:5b:2e:77:af:70:19:02:ec:a0:97:88:cc:01:5b: 61:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:E4:2C:5F:F5:29:1F:3E:B2:90:41:7A:2F:BC:87:69:32:C8:DB:0B X509v3 Authority Key Identifier: keyid:FC:D5:B5:62:FA:ED:9B:9D:67:F9:DE:5D:B7:05:78:BF:DB:00:57:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:97:66:2d:42:83:81:52:74:30:44:dc:0b:38:85:fd:f1:55: 40:40:fa:56:4c:46:86:6c:f3:f4:e3:87:8b:71:34:55:fe:87: 95:90:fd:92:29:c5:3e:34:13:65:27:12:a0:ef:f3:b5:96:27: b2:a7:e8:27:46:de:69:31:e3:e6:24:23:70:55:fd:bc:15:88: 3e:95:01:36:27:3d:f3:91:a4:f2:8d:44:cc:3f:db:37:60:75: 95:d0:46:d6:5d:46:a1:7f:47:e4:d8:55:6d:81:40:a4:85:22: 44:20:ec:b1:c2:c9:b9:30:ec:b8:a6:08:be:0a:a4:8d:8f:73: 91:80:e7:fd:d7:49:28:57:dd:51:b7:ff:ad:aa:66:68:11:ab: fa:d0:9f:6b:7a:32:14:2b:55:1d:80:59:00:16:67:49:26:c8: 96:cc:9d:e3:a6:8b:e7:48:93:49:ed:94:2d:2f:bf:be:48:d2: 12:cb:43:af:a9:fb:16:6f:96:b4:12:c2:5d:79:c4:4c:90:7d: e7:1d:d8:01:7d:72:b6:a1:ed:cc:b2:9f:85:71:a1:ce:3e:65: f8:bd:21:e6:8e:6e:ab:a4:1c:46:05:83:d9:37:4c:c4:63:0e: 7a:1b:00:a4:49:36:26:57:7a:a5:78:d7:40:66:0e:6d:19:ab: ff:91:01:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQSA2UEafYnYlxtecY7CTbO2u4WcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkNENUI1NjJGQUVEOUI5RDY3RjlERTVEQjcwNTc4QkZE QjAwNTdCMzAeFw0yNTA1MTExMDI2MDlaFw0yNTA1MTQyMDQ4MDlaMDMxMTAvBgNV BAMTKDhERTQyQzVGRjUyOTFGM0VCMjkwNDE3QTJGQkM4NzY5MzJDOERCMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc9DYeURSQ/w9QwZfdRp/aYqCY jsi/C4PML2OOcPxTDxdMUgU/b7uWJqosXuC07LDJNjS5R3tW7PlDczUUFM0dySRB X9jHNXglcM7bKipDlOABjfDWJt2tLjWSEvzVnf2xTFCjSaav/vGstjdVKgzUpAFH 1HcRd+dQNQuzaddKu3A+PHqgbPQDeIRVtaPF3dWHF1lllKUsDbVA9MjEQ5czX1kb 3YJuoPZbSSNtwWksQHzNS8pvMozAbksUkdxPJYBn6Qn/BP5TWtE/xN65j7DZPkkd CHRM1gQ4Be378px4S1kosHt8COgnA717NilZk69bLnevcBkC7KCXiMwBW2FFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjeQsX/UpHz6ykEF6L7yHaTLI2wswHwYDVR0j BBgwFoAU/NW1Yvrtm51n+d5dtwV4v9sAV7MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NDcwMjZhOS0wYzlhLTRkNzktYWQ2Ny0yYzlkYmQzNjZkMGIvMC9GQ0Q1QjU2MkZB RUQ5QjlENjdGOURFNURCNzA1NzhCRkRCMDA1N0IzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkNENUI1NjJGQUVEOUI5RDY3RjlERTVEQjcwNTc4QkZEQjAw NTdCMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDQ3MDI2YTktMGM5YS00ZDc5LWFk NjctMmM5ZGJkMzY2ZDBiLzAvRkNENUI1NjJGQUVEOUI5RDY3RjlERTVEQjcwNTc4 QkZEQjAwNTdCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB6XZi1Cg4FSdDBE3As4hf3xVUBA+lZMRoZs 8/Tjh4txNFX+h5WQ/ZIpxT40E2UnEqDv87WWJ7Kn6CdG3mkx4+YkI3BV/bwViD6V ATYnPfORpPKNRMw/2zdgdZXQRtZdRqF/R+TYVW2BQKSFIkQg7LHCybkw7LimCL4K pI2Pc5GA5/3XSShX3VG3/62qZmgRq/rQn2t6MhQrVR2AWQAWZ0kmyJbMneOmi+dI k0ntlC0vv75I0hLLQ6+p+xZvlrQSwl15xEyQfecd2AF9crah7cyyn4Vxoc4+Zfi9 IeaObqukHEYFg9k3TMRjDnobAKRJNiZXeqV410BmDm0Zq/+RAQ8= -----END CERTIFICATE-----Generated at Mon May 12 17:09:40 2025 by rpki-client