$ rpki-client -vvf repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.mft File: FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.mft (raw, json) Hash identifier: RxTrZgtbLJBrnAEh8FjwhmzkH5fBTcYWPKMH5sdWIy0= Subject key identifier: 57:6B:8C:0D:38:44:EB:2E:A6:C4:48:93:77:BB:5E:3D:40:87:62:5B Authority key identifier: FB:D3:B2:8C:90:75:52:9D:EE:81:51:C4:E4:4B:0C:BC:13:FF:DA:91 Certificate issuer: /CN=FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91 Certificate serial: 2C144035A57F651F0A39F5B2D5706E87A72454A1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.cer Subject info access: rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.mft Manifest number: 04C1 Signing time: Thu 03 Apr 2025 19:41:11 +0000 Manifest this update: Thu 03 Apr 2025 19:36:11 +0000 Manifest next update: Mon 07 Apr 2025 06:30:11 +0000 Files and hashes: 1: FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.crl (hash: HtlX4PlF76idtUene2P1CN7TXS4NQJqy8JksWmdvrHg=) 2: 3130332e3139382e3132302e302f32332d3234203d3e203436303535.roa (hash: lBk+MLisEIo2PZv6+uPNgR6V2FGWrogLPB8MGeJ08Wk=) 3: 3230322e35322e34382e302f32332d3234203d3e203436303535.roa (hash: RObXqV2h2Y7B94Dk0WIVsNRj4cjkiSDSsAdqCU52AWM=) 4: 323430333a313838303a3a2f33322d3332203d3e203436303535.roa (hash: eTKlxr7RgLcyLUitqv8ngcrRv7CLJWNxdWI/HpMYSL4=) 5: 3130332e3139382e3132322e302f32332d3234203d3e203436303535.roa (hash: 1ijvclpULPgdCfBDissNP0l83v/riKHy/8gjcp65S8Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.crl rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 06:30:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:14:40:35:a5:7f:65:1f:0a:39:f5:b2:d5:70:6e:87:a7:24:54:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91 Validity Not Before: Apr 3 19:36:11 2025 GMT Not After : Apr 7 06:30:11 2025 GMT Subject: CN=576B8C0D3844EB2EA6C4489377BB5E3D4087625B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:b2:99:ab:79:8b:a8:0f:dd:da:b1:49:9f:a3: 35:fa:97:ce:20:99:70:1b:05:bd:3a:f0:4b:e6:0e: 39:6f:1a:88:e5:fe:f9:83:ae:81:36:ba:df:7c:79: e4:0e:86:cb:1e:21:f1:08:ab:5f:52:fe:ab:12:29: dc:d5:cd:ad:bf:9c:bb:cc:b6:90:ef:a8:41:a4:af: 1c:f7:e8:83:2b:8e:b7:42:52:be:fa:dc:a2:2d:11: e8:ff:19:d5:0a:a4:42:8b:b1:1d:af:6d:ea:73:8f: b9:4a:04:06:59:bb:53:9e:18:9f:01:ca:81:1d:4f: 8c:ce:10:c6:8a:d2:30:28:6f:bc:4b:52:8a:a8:be: 6d:64:b5:be:22:37:b9:4d:ed:c3:b6:c1:33:82:5d: 88:0c:2e:67:d4:f6:53:38:95:de:5c:b4:eb:58:5c: 62:9b:0d:2d:59:12:db:8a:49:f2:10:a2:70:6a:99: 36:20:94:5c:ec:a7:a5:03:8b:37:aa:9d:46:d0:03: 89:38:5f:3b:89:57:21:76:a7:d3:4a:92:19:a8:88: 2a:76:61:f2:f6:6a:b9:e6:26:be:ff:7b:73:78:64: d2:16:4d:4b:85:42:73:5c:aa:7e:58:02:cd:3d:f5: ef:0d:da:3f:d0:17:62:9e:8c:0a:8f:03:a7:9e:3e: 61:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:6B:8C:0D:38:44:EB:2E:A6:C4:48:93:77:BB:5E:3D:40:87:62:5B X509v3 Authority Key Identifier: keyid:FB:D3:B2:8C:90:75:52:9D:EE:81:51:C4:E4:4B:0C:BC:13:FF:DA:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:57:d9:d1:68:d8:12:aa:1d:f3:5c:1d:40:f9:8b:40:d0:35: 1e:57:0f:ce:07:c8:0c:ad:d1:c5:4a:5a:de:5f:a4:f6:a6:bf: d8:df:a6:c5:bb:ce:14:da:70:82:f4:c8:04:76:4f:94:48:99: a4:c8:9c:8c:f2:df:ed:56:de:b0:ff:1f:7a:47:e3:62:9c:91: e6:16:ca:01:06:22:e3:67:a3:2c:3c:5f:13:4a:f1:73:0a:b7: 9c:7f:d9:c8:7a:6e:4e:86:89:47:3c:1e:a1:a1:fb:48:8c:f9: 4e:54:e7:bb:15:b4:6f:c3:2f:4d:9d:19:2b:81:66:14:f7:db: 49:0a:29:14:24:94:75:e5:40:37:40:4f:6b:db:38:ea:25:ab: ba:0d:a1:5b:4e:15:91:72:1e:39:8c:c4:d5:d1:6b:6c:af:1f: 36:55:2d:b2:5e:14:ab:79:90:ec:27:61:05:83:ae:64:c4:bd: 75:d6:63:ed:a7:fa:9b:06:a3:31:b9:b8:72:7b:25:f9:0d:60: 93:68:85:52:2b:46:56:70:8f:a5:13:fe:7e:71:08:f7:14:e3: bf:9f:7d:95:12:87:ef:ae:de:e7:84:e1:05:a7:12:41:67:3c: 25:d3:44:c3:21:d7:78:1c:9d:0d:f9:b2:9c:6c:6b:cc:85:e0: e1:c4:c8:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULBRANaV/ZR8KOfWy1XBuh6ckVKEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkJEM0IyOEM5MDc1NTI5REVFODE1MUM0RTQ0QjBDQkMx M0ZGREE5MTAeFw0yNTA0MDMxOTM2MTFaFw0yNTA0MDcwNjMwMTFaMDMxMTAvBgNV BAMTKDU3NkI4QzBEMzg0NEVCMkVBNkM0NDg5Mzc3QkI1RTNENDA4NzYyNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmspmreYuoD93asUmfozX6l84g mXAbBb068EvmDjlvGojl/vmDroE2ut98eeQOhsseIfEIq19S/qsSKdzVza2/nLvM tpDvqEGkrxz36IMrjrdCUr763KItEej/GdUKpEKLsR2vbepzj7lKBAZZu1OeGJ8B yoEdT4zOEMaK0jAob7xLUoqovm1ktb4iN7lN7cO2wTOCXYgMLmfU9lM4ld5ctOtY XGKbDS1ZEtuKSfIQonBqmTYglFzsp6UDizeqnUbQA4k4XzuJVyF2p9NKkhmoiCp2 YfL2arnmJr7/e3N4ZNIWTUuFQnNcqn5YAs099e8N2j/QF2KejAqPA6eePmHpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUV2uMDThE6y6mxEiTd7tePUCHYlswHwYDVR0j BBgwFoAU+9OyjJB1Up3ugVHE5EsMvBP/2pEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ODM5NzdmNC04YzJkLTRlYjEtYjRjZC0zNWI0OTIxNmUwNzMvMC9GQkQzQjI4Qzkw NzU1MjlERUU4MTUxQzRFNDRCMENCQzEzRkZEQTkxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkJEM0IyOEM5MDc1NTI5REVFODE1MUM0RTQ0QjBDQkMxM0ZG REE5MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDgzOTc3ZjQtOGMyZC00ZWIxLWI0 Y2QtMzViNDkyMTZlMDczLzAvRkJEM0IyOEM5MDc1NTI5REVFODE1MUM0RTQ0QjBD QkMxM0ZGREE5MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADdX2dFo2BKqHfNcHUD5i0DQNR5XD84HyAyt 0cVKWt5fpPamv9jfpsW7zhTacIL0yAR2T5RImaTInIzy3+1W3rD/H3pH42KckeYW ygEGIuNnoyw8XxNK8XMKt5x/2ch6bk6GiUc8HqGh+0iM+U5U57sVtG/DL02dGSuB ZhT320kKKRQklHXlQDdAT2vbOOolq7oNoVtOFZFyHjmMxNXRa2yvHzZVLbJeFKt5 kOwnYQWDrmTEvXXWY+2n+psGozG5uHJ7JfkNYJNohVIrRlZwj6UT/n5xCPcU47+f fZUSh++u3ueE4QWnEkFnPCXTRMMh13gcnQ35spxsa8yF4OHEyL8= -----END CERTIFICATE-----Generated at Sat Apr 5 17:52:19 2025 by rpki-client