$ rpki-client -vvf repo-rpki.idnic.net/repo/ede4719a-ace4-41f2-a070-8de3192b7f49/0/FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.mft File: FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.mft (raw, json) Hash identifier: MmsorI2yxGfvz2KkHYNdwJc6qYmfiJCGPGKbrcevehQ= Subject key identifier: 4A:68:D7:4C:BD:58:07:4B:EA:5A:68:88:48:A6:15:6F:A9:89:8B:9E Authority key identifier: FC:31:DB:70:F7:B2:F1:7F:13:E9:2A:2E:7B:AE:55:54:79:2E:FB:BF Certificate issuer: /CN=FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF Certificate serial: 074FE772AE78B2FF7ACB0758B8DE893BC43668A9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ede4719a-ace4-41f2-a070-8de3192b7f49/0/FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.mft Manifest number: 04E2 Signing time: Sun 29 Jun 2025 03:40:42 +0000 Manifest this update: Sun 29 Jun 2025 03:35:42 +0000 Manifest next update: Wed 02 Jul 2025 05:15:42 +0000 Files and hashes: 1: 3230322e36312e39382e302f32332d3234203d3e203234353337.roa (hash: 7v+UWewpBXKuzE8AR/fYejkKyBNOrEBvR5vrqtJwA4s=) 2: FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.crl (hash: dvG06WB9B3tpY7oF3pIxrTkNksMiCodOOgPhaGsOhec=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ede4719a-ace4-41f2-a070-8de3192b7f49/0/FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.crl rsync://repo-rpki.idnic.net/repo/ede4719a-ace4-41f2-a070-8de3192b7f49/0/FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 05:15:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:4f:e7:72:ae:78:b2:ff:7a:cb:07:58:b8:de:89:3b:c4:36:68:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF Validity Not Before: Jun 29 03:35:42 2025 GMT Not After : Jul 2 05:15:42 2025 GMT Subject: CN=4A68D74CBD58074BEA5A688848A6156FA9898B9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:88:dd:85:8c:aa:f4:70:0a:9c:29:70:d5:5e: 7e:37:fa:5e:6f:3d:1f:60:71:2e:d9:cb:c9:61:3b: 05:c6:a3:a0:d4:42:49:f6:24:74:b3:f2:24:06:65: 54:e8:c0:29:bc:52:ca:00:f1:9f:d5:5f:3a:0b:87: ff:81:b1:04:9d:e0:b7:ec:ca:5b:89:80:5d:de:ee: 9e:7a:ca:05:ec:a6:82:51:c6:29:7b:5b:ee:9b:18: b4:59:5f:e3:c8:b1:a6:cf:5a:71:f0:4f:21:62:90: 6c:94:7e:a4:c2:f9:5b:4e:87:fe:5f:5e:42:0b:92: ed:3d:4f:83:09:2e:6b:31:78:99:12:67:9b:83:b3: df:fa:98:94:80:bc:01:c8:af:26:e5:69:76:ba:b5: 18:c7:25:8b:36:67:37:71:bd:d2:cd:73:b6:68:01: 75:9f:86:9c:20:64:79:80:2a:40:cd:15:40:6b:2b: 62:0e:7a:79:e9:4b:11:0f:6b:0e:a3:f3:8f:d9:27: ae:d1:fd:04:17:42:4b:9d:cb:1a:49:e8:ac:83:63: b0:c0:74:36:d0:3c:82:f5:e5:77:15:54:a0:de:27: ec:4f:e8:3c:b2:f3:f2:59:43:1d:8d:c1:b3:c5:b1: dd:80:c5:b2:95:1b:d2:8c:8a:6e:eb:5f:a8:27:87: b4:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:68:D7:4C:BD:58:07:4B:EA:5A:68:88:48:A6:15:6F:A9:89:8B:9E X509v3 Authority Key Identifier: keyid:FC:31:DB:70:F7:B2:F1:7F:13:E9:2A:2E:7B:AE:55:54:79:2E:FB:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ede4719a-ace4-41f2-a070-8de3192b7f49/0/FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ede4719a-ace4-41f2-a070-8de3192b7f49/0/FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:16:9a:ff:2b:87:fc:6e:cc:d5:07:7f:ee:e1:ad:8d:c7:17: 72:0f:21:9f:b2:1d:36:69:88:df:db:20:d4:6f:bb:ea:84:34: b2:2d:82:6d:0d:5d:b7:a7:46:7d:25:1e:9e:24:c2:82:ec:12: 81:8b:99:75:58:77:8d:81:36:0f:ca:a5:2c:40:98:ff:fc:10: 51:28:97:11:aa:8b:6a:15:52:4e:fd:a7:2d:15:42:e2:f4:8f: 0d:89:1a:f7:9f:27:c0:f8:9e:9e:af:cf:c0:6f:d6:c5:bb:7c: 59:49:21:d8:29:11:71:9a:d3:76:85:2d:c2:01:b8:b1:94:0d: 99:b2:39:45:d0:7d:c2:e7:cc:66:62:69:f8:1e:da:2a:a4:a2: 74:36:e1:af:f6:79:9c:92:be:78:86:2c:ca:e2:c9:cb:03:4c: 16:b7:c9:24:f0:eb:92:4a:0f:44:fb:f8:20:2d:27:c1:f5:6c: 67:38:83:79:76:2b:b3:ee:b3:c3:7c:19:eb:cd:10:f5:ff:01: 28:b5:a7:c0:fc:6f:d7:d0:09:8f:95:75:1b:8d:1b:0a:8e:23: cd:77:28:1e:33:6d:d1:48:0e:b3:1c:66:4d:1b:d6:dd:36:b3: 94:4c:a4:63:d9:c8:07:cb:26:fd:f8:04:30:13:ec:4a:30:29: d0:cb:04:c6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB0/ncq54sv96ywdYuN6JO8Q2aKkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkMzMURCNzBGN0IyRjE3RjEzRTkyQTJFN0JBRTU1NTQ3 OTJFRkJCRjAeFw0yNTA2MjkwMzM1NDJaFw0yNTA3MDIwNTE1NDJaMDMxMTAvBgNV BAMTKDRBNjhENzRDQkQ1ODA3NEJFQTVBNjg4ODQ4QTYxNTZGQTk4OThCOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEiN2FjKr0cAqcKXDVXn43+l5v PR9gcS7Zy8lhOwXGo6DUQkn2JHSz8iQGZVTowCm8UsoA8Z/VXzoLh/+BsQSd4Lfs yluJgF3e7p56ygXspoJRxil7W+6bGLRZX+PIsabPWnHwTyFikGyUfqTC+VtOh/5f XkILku09T4MJLmsxeJkSZ5uDs9/6mJSAvAHIryblaXa6tRjHJYs2ZzdxvdLNc7Zo AXWfhpwgZHmAKkDNFUBrK2IOennpSxEPaw6j84/ZJ67R/QQXQkudyxpJ6KyDY7DA dDbQPIL15XcVVKDeJ+xP6Dyy8/JZQx2NwbPFsd2AxbKVG9KMim7rX6gnh7QZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSmjXTL1YB0vqWmiISKYVb6mJi54wHwYDVR0j BBgwFoAU/DHbcPey8X8T6Soue65VVHku+78wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZGU0NzE5YS1hY2U0LTQxZjItYTA3MC04ZGUzMTkyYjdmNDkvMC9GQzMxREI3MEY3 QjJGMTdGMTNFOTJBMkU3QkFFNTU1NDc5MkVGQkJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkMzMURCNzBGN0IyRjE3RjEzRTkyQTJFN0JBRTU1NTQ3OTJF RkJCRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWRlNDcxOWEtYWNlNC00MWYyLWEw NzAtOGRlMzE5MmI3ZjQ5LzAvRkMzMURCNzBGN0IyRjE3RjEzRTkyQTJFN0JBRTU1 NTQ3OTJFRkJCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALoWmv8rh/xuzNUHf+7hrY3HF3IPIZ+yHTZp iN/bINRvu+qENLItgm0NXbenRn0lHp4kwoLsEoGLmXVYd42BNg/KpSxAmP/8EFEo lxGqi2oVUk79py0VQuL0jw2JGvefJ8D4np6vz8Bv1sW7fFlJIdgpEXGa03aFLcIB uLGUDZmyOUXQfcLnzGZiafge2iqkonQ24a/2eZySvniGLMriycsDTBa3ySTw65JK D0T7+CAtJ8H1bGc4g3l2K7Pus8N8GevNEPX/ASi1p8D8b9fQCY+VdRuNGwqOI813 KB4zbdFIDrMcZk0b1t02s5RMpGPZyAfLJv34BDAT7EowKdDLBMY= -----END CERTIFICATE-----Generated at Sun Jun 29 22:08:36 2025 by rpki-client