$ rpki-client -vvf repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/FED855DD505D24B6FE25BD8656297329F7EF4785.mft File: FED855DD505D24B6FE25BD8656297329F7EF4785.mft (raw, json) Hash identifier: uPAkVmeLE7GM/xE7n7vlR4yimR06Rmdz7jKkceTqb+s= Subject key identifier: A7:E9:14:D4:0E:BE:4F:9A:6F:CF:13:A8:4B:6C:31:9B:CC:EE:54:81 Authority key identifier: FE:D8:55:DD:50:5D:24:B6:FE:25:BD:86:56:29:73:29:F7:EF:47:85 Certificate issuer: /CN=FED855DD505D24B6FE25BD8656297329F7EF4785 Certificate serial: 2EC97DB262D7FCBCBA51BF03E9749B038D8CD3BC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FED855DD505D24B6FE25BD8656297329F7EF4785.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/FED855DD505D24B6FE25BD8656297329F7EF4785.mft Manifest number: 0455 Signing time: Sat 07 Jun 2025 17:21:24 +0000 Manifest this update: Sat 07 Jun 2025 17:16:24 +0000 Manifest next update: Tue 10 Jun 2025 22:34:24 +0000 Files and hashes: 1: FED855DD505D24B6FE25BD8656297329F7EF4785.crl (hash: VyMVBREeaNqVrGchgiqA5E/wFxkbUaWLiCt/sVzMI6U=) 2: 3130332e3130352e3132382e302f32322d3232203d3e203137373237.roa (hash: bF3yNWnrobMt6M6WVmO7fz+aU3HM2Cfravonu1UTCBk=) 3: 3130332e3130352e3132382e302f32342d3234203d3e203137373237.roa (hash: M4514PXfJTPhQt4OlK6IndpXXY1NhEUELHDBA5WVyuc=) 4: 3130332e3130352e3133312e302f32342d3234203d3e203137373237.roa (hash: 7zla6i/CdhAJ+rkrr0QnJT3TEbat42oScFtFbp306GQ=) 5: 3130332e3130352e3133302e302f32342d3234203d3e203137373237.roa (hash: XaJkhpMWFfQiHoigSzAOeB9OLJw8Q/0siNpjbvDEMi4=) 6: 3130332e3130352e3132392e302f32342d3234203d3e203137373237.roa (hash: lJMQNYucnJrPY3dSbvBo/L6VOBHJNLkr/8+rBT1rHAo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/FED855DD505D24B6FE25BD8656297329F7EF4785.crl rsync://repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/FED855DD505D24B6FE25BD8656297329F7EF4785.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FED855DD505D24B6FE25BD8656297329F7EF4785.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 22:34:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:c9:7d:b2:62:d7:fc:bc:ba:51:bf:03:e9:74:9b:03:8d:8c:d3:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FED855DD505D24B6FE25BD8656297329F7EF4785 Validity Not Before: Jun 7 17:16:24 2025 GMT Not After : Jun 10 22:34:24 2025 GMT Subject: CN=A7E914D40EBE4F9A6FCF13A84B6C319BCCEE5481 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:87:1c:c0:dc:37:93:97:3f:6b:1e:13:f1:48: a2:e8:7b:c3:fd:a3:b4:5b:bb:6d:52:d6:e7:53:17: 2f:9e:04:35:86:1d:7f:70:d1:24:df:e9:20:71:52: ac:a6:29:26:7c:b9:03:c9:6a:7f:9b:9c:2b:ce:41: 45:5e:56:4c:54:83:a8:1e:1d:b3:cf:c3:4f:d8:70: 43:07:8d:37:07:5e:9e:94:d9:07:80:b1:22:fc:50: 73:d8:54:cc:db:d6:2b:e8:1c:91:d8:24:df:7c:83: 15:c1:0b:04:4a:38:7c:8c:ec:99:df:54:05:b7:7b: 03:cb:6d:7d:cf:74:e2:dd:3e:a0:e1:6a:37:8e:5e: c8:5f:6a:78:f9:0d:53:ca:bb:c2:6a:6d:83:3c:16: 43:13:27:e4:a6:44:0f:29:4e:25:93:16:57:82:c0: 77:86:85:3e:3d:87:3b:26:17:04:3b:76:03:40:1c: cd:4f:bb:ef:a6:4f:3f:fc:3f:99:39:0b:5a:93:48: 07:79:5c:b7:0c:e0:28:04:2e:24:3d:69:85:b0:18: c1:9d:ad:93:0e:21:b0:16:f7:7b:4f:9d:2e:aa:7e: f8:94:6d:af:94:dd:06:d1:b6:8d:99:7d:23:c5:62: 53:26:3d:94:cd:66:61:e0:35:8e:4e:c6:a7:ed:74: 0d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:E9:14:D4:0E:BE:4F:9A:6F:CF:13:A8:4B:6C:31:9B:CC:EE:54:81 X509v3 Authority Key Identifier: keyid:FE:D8:55:DD:50:5D:24:B6:FE:25:BD:86:56:29:73:29:F7:EF:47:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/FED855DD505D24B6FE25BD8656297329F7EF4785.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FED855DD505D24B6FE25BD8656297329F7EF4785.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/FED855DD505D24B6FE25BD8656297329F7EF4785.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:aa:3e:46:dd:13:aa:89:c6:05:71:c2:29:4a:04:af:c3:10: 36:28:9f:e8:21:f3:e8:52:b4:4a:b9:f6:f5:19:e0:e5:68:89: 59:e2:0a:03:b2:88:08:cf:d6:62:e4:44:d2:5d:86:ec:13:a4: 34:0c:2e:27:2e:5f:4a:e2:21:76:84:ba:19:16:07:e2:40:3f: a9:6b:08:45:32:5b:3f:94:f9:fb:0a:78:bf:75:56:a7:bc:ab: 3f:fb:f9:5a:46:01:e6:66:e5:eb:06:4f:b5:9c:97:e7:d1:33: 93:ce:fe:0d:08:d3:e7:5e:21:20:26:63:0c:9e:31:4f:57:be: ca:ed:5f:ae:9e:15:3b:8f:bc:8e:26:da:7f:de:70:8b:ff:1f: 5a:5b:be:fe:a9:bb:8c:1f:6c:61:4c:5b:fb:56:98:b8:eb:fd: 23:58:fc:91:5c:ac:91:bd:f1:7f:aa:d8:78:00:f9:89:6a:33: 35:44:3a:4a:c3:3b:07:dd:bc:f5:79:45:31:82:64:dc:6c:57: 86:df:f0:c7:ea:96:65:8f:e6:01:68:0b:1a:f6:18:43:59:5c: 6c:21:de:c6:a2:a2:db:d6:37:11:9d:99:57:5a:7b:d5:98:91: 2e:f1:03:49:70:b9:2f:bc:37:be:c7:d7:0c:1b:e7:7c:8a:f1: 44:4b:e2:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULsl9smLX/Ly6Ub8D6XSbA42M07wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkVEODU1REQ1MDVEMjRCNkZFMjVCRDg2NTYyOTczMjlG N0VGNDc4NTAeFw0yNTA2MDcxNzE2MjRaFw0yNTA2MTAyMjM0MjRaMDMxMTAvBgNV BAMTKEE3RTkxNEQ0MEVCRTRGOUE2RkNGMTNBODRCNkMzMTlCQ0NFRTU0ODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCihxzA3DeTlz9rHhPxSKLoe8P9 o7Rbu21S1udTFy+eBDWGHX9w0STf6SBxUqymKSZ8uQPJan+bnCvOQUVeVkxUg6ge HbPPw0/YcEMHjTcHXp6U2QeAsSL8UHPYVMzb1ivoHJHYJN98gxXBCwRKOHyM7Jnf VAW3ewPLbX3PdOLdPqDhajeOXshfanj5DVPKu8JqbYM8FkMTJ+SmRA8pTiWTFleC wHeGhT49hzsmFwQ7dgNAHM1Pu++mTz/8P5k5C1qTSAd5XLcM4CgELiQ9aYWwGMGd rZMOIbAW93tPnS6qfviUba+U3QbRto2ZfSPFYlMmPZTNZmHgNY5OxqftdA1LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUp+kU1A6+T5pvzxOoS2wxm8zuVIEwHwYDVR0j BBgwFoAU/thV3VBdJLb+Jb2GVilzKffvR4UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDYxZDdhNy1hMTFlLTQwMGItOTE3MC1jNzk3ZWQ4OGQ3MDIvMC9GRUQ4NTVERDUw NUQyNEI2RkUyNUJEODY1NjI5NzMyOUY3RUY0Nzg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkVEODU1REQ1MDVEMjRCNkZFMjVCRDg2NTYyOTczMjlGN0VG NDc4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQ2MWQ3YTctYTExZS00MDBiLTkx NzAtYzc5N2VkODhkNzAyLzAvRkVEODU1REQ1MDVEMjRCNkZFMjVCRDg2NTYyOTcz MjlGN0VGNDc4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGWqPkbdE6qJxgVxwilKBK/DEDYon+gh8+hS tEq59vUZ4OVoiVniCgOyiAjP1mLkRNJdhuwTpDQMLicuX0riIXaEuhkWB+JAP6lr CEUyWz+U+fsKeL91Vqe8qz/7+VpGAeZm5esGT7Wcl+fRM5PO/g0I0+deISAmYwye MU9XvsrtX66eFTuPvI4m2n/ecIv/H1pbvv6pu4wfbGFMW/tWmLjr/SNY/JFcrJG9 8X+q2HgA+YlqMzVEOkrDOwfdvPV5RTGCZNxsV4bf8MfqlmWP5gFoCxr2GENZXGwh 3saiotvWNxGdmVdae9WYkS7xA0lwuS+8N77H1wwb53yK8URL4os= -----END CERTIFICATE-----Generated at Sat Jun 7 21:09:15 2025 by rpki-client