$ rpki-client -vvf repo-rpki.idnic.net/repo/1653247a-a56e-424a-a07b-36a2511d7caa/0/FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.mft File: FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.mft (raw, json) Hash identifier: xw9zMzhURMe6q+RDfbHjvSrItA2NQOU2M/hT2mN9dWY= Subject key identifier: F4:3E:1E:0E:6A:0F:87:E4:AF:AB:04:30:CA:ED:B1:0E:93:FD:86:2D Authority key identifier: FE:88:0C:C9:3B:62:84:E6:83:31:06:A5:BE:B7:1A:0C:DD:E5:7C:0B Certificate issuer: /CN=FE880CC93B6284E6833106A5BEB71A0CDDE57C0B Certificate serial: 4FFEF3167DC33417D611A582513D6E263C87BC9F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1653247a-a56e-424a-a07b-36a2511d7caa/0/FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.mft Manifest number: 01C7 Signing time: Fri 06 Jun 2025 10:52:00 +0000 Manifest this update: Fri 06 Jun 2025 10:47:00 +0000 Manifest next update: Mon 09 Jun 2025 11:49:00 +0000 Files and hashes: 1: 3130332e31332e3133382e302f32342d3234203d3e20313530323135.roa (hash: JE8HUdHVJ0U83Tps7TYgDUX+YT7M9iS8rOn13rFfngc=) 2: FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.crl (hash: yoI8EYVvZkme6mGrrvqCNVRHEjtglA6AqQOt19ofbdM=) 3: 3130332e31332e3133392e302f32342d3234203d3e20313530323135.roa (hash: qP3Hd0jYELSgERJemItwOkIGwYts7IZIuX5SZqeDBqU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1653247a-a56e-424a-a07b-36a2511d7caa/0/FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.crl rsync://repo-rpki.idnic.net/repo/1653247a-a56e-424a-a07b-36a2511d7caa/0/FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 11:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:fe:f3:16:7d:c3:34:17:d6:11:a5:82:51:3d:6e:26:3c:87:bc:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FE880CC93B6284E6833106A5BEB71A0CDDE57C0B Validity Not Before: Jun 6 10:47:00 2025 GMT Not After : Jun 9 11:49:00 2025 GMT Subject: CN=F43E1E0E6A0F87E4AFAB0430CAEDB10E93FD862D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:42:c8:cb:fe:b8:97:b2:c4:d3:c2:52:24:1e: 73:6a:4b:01:58:29:76:59:48:7b:d8:e8:90:cc:6f: 7b:f7:d0:bb:0a:c0:04:b4:ae:f1:e0:0d:f8:88:2c: 52:6b:dd:aa:52:d5:a3:a0:ea:77:a0:2b:e2:73:28: fe:fe:71:34:a6:27:b2:5c:7c:c4:b1:c6:f0:bf:67: da:bb:22:c7:78:48:1e:90:6d:5b:37:4a:00:a1:61: 68:0d:33:10:b3:b6:ed:ab:d7:f6:e4:d3:94:78:74: fb:5c:a6:97:58:72:24:fc:24:23:67:75:28:80:29: 18:ea:1d:9f:23:8d:98:67:93:54:67:5d:80:05:c0: 29:b9:c3:93:7b:f2:25:c8:9d:d3:e6:80:52:3e:01: f6:25:64:80:f6:99:38:2a:e9:c9:67:1a:cb:af:ca: ad:ae:76:cb:7d:91:38:bb:71:d0:7c:eb:42:03:55: 4c:6b:fa:bd:20:7c:4c:63:e2:17:f2:56:5a:2c:ef: c0:3a:c5:6b:e7:75:ff:1a:48:78:bb:b2:0e:2a:89: 7c:5c:67:39:64:8c:64:ec:03:11:2f:71:c1:aa:4d: 56:07:1e:ef:af:9a:6f:9b:d0:6b:04:b4:77:1e:df: 22:82:5a:cb:01:40:9e:80:27:a8:3e:c4:03:80:5f: 35:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:3E:1E:0E:6A:0F:87:E4:AF:AB:04:30:CA:ED:B1:0E:93:FD:86:2D X509v3 Authority Key Identifier: keyid:FE:88:0C:C9:3B:62:84:E6:83:31:06:A5:BE:B7:1A:0C:DD:E5:7C:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1653247a-a56e-424a-a07b-36a2511d7caa/0/FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1653247a-a56e-424a-a07b-36a2511d7caa/0/FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:86:b5:f1:2a:28:49:85:4e:0d:a0:a3:d8:d5:26:55:34:40: 1b:dd:09:04:a3:38:88:a8:61:91:15:b8:d8:4e:b8:bd:fa:f1: ff:bc:4e:da:ac:eb:e2:ae:fa:38:c3:91:80:e2:99:be:4e:0c: aa:09:8a:2c:78:a4:6a:bc:8a:6e:71:16:65:d2:9e:04:c8:6b: 21:3e:c5:65:03:74:1d:27:d9:09:c9:da:69:ac:c3:96:b1:22: 21:12:6a:d5:96:e4:9d:09:bd:db:bf:04:4f:dc:86:d0:ac:86: 63:53:d5:9d:97:9c:25:33:dd:3d:89:f2:42:6a:10:a1:7e:44: 50:f1:3f:cf:ba:dc:b4:b9:95:4b:94:3f:d6:b6:fc:30:79:f7: f6:33:35:ab:31:e4:62:02:bd:df:1e:be:bc:af:b0:d2:69:fd: d8:59:7b:f8:9b:2f:30:34:c7:52:cf:9b:94:26:93:bd:df:4c: 50:33:81:3c:f8:61:c5:09:62:87:98:e9:4e:4d:d2:98:68:60: d9:3a:52:c8:77:38:e7:b9:85:24:51:7a:1b:19:bd:6d:7d:e2: 45:6f:e3:f7:62:38:33:77:cb:a2:b5:97:e8:86:1e:80:eb:e7: 2c:3b:9b:00:0e:9b:0f:e4:3f:15:4d:34:d9:13:d7:66:38:43: d2:3b:20:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT/7zFn3DNBfWEaWCUT1uJjyHvJ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkU4ODBDQzkzQjYyODRFNjgzMzEwNkE1QkVCNzFBMENE REU1N0MwQjAeFw0yNTA2MDYxMDQ3MDBaFw0yNTA2MDkxMTQ5MDBaMDMxMTAvBgNV BAMTKEY0M0UxRTBFNkEwRjg3RTRBRkFCMDQzMENBRURCMTBFOTNGRDg2MkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdQsjL/riXssTTwlIkHnNqSwFY KXZZSHvY6JDMb3v30LsKwAS0rvHgDfiILFJr3apS1aOg6negK+JzKP7+cTSmJ7Jc fMSxxvC/Z9q7Isd4SB6QbVs3SgChYWgNMxCztu2r1/bk05R4dPtcppdYciT8JCNn dSiAKRjqHZ8jjZhnk1RnXYAFwCm5w5N78iXIndPmgFI+AfYlZID2mTgq6clnGsuv yq2udst9kTi7cdB860IDVUxr+r0gfExj4hfyVlos78A6xWvndf8aSHi7sg4qiXxc ZzlkjGTsAxEvccGqTVYHHu+vmm+b0GsEtHce3yKCWssBQJ6AJ6g+xAOAXzVRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9D4eDmoPh+SvqwQwyu2xDpP9hi0wHwYDVR0j BBgwFoAU/ogMyTtihOaDMQalvrcaDN3lfAswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NjUzMjQ3YS1hNTZlLTQyNGEtYTA3Yi0zNmEyNTExZDdjYWEvMC9GRTg4MENDOTNC NjI4NEU2ODMzMTA2QTVCRUI3MUEwQ0RERTU3QzBCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkU4ODBDQzkzQjYyODRFNjgzMzEwNkE1QkVCNzFBMENEREU1 N0MwQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTY1MzI0N2EtYTU2ZS00MjRhLWEw N2ItMzZhMjUxMWQ3Y2FhLzAvRkU4ODBDQzkzQjYyODRFNjgzMzEwNkE1QkVCNzFB MENEREU1N0MwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALqGtfEqKEmFTg2go9jVJlU0QBvdCQSjOIio YZEVuNhOuL368f+8Ttqs6+Ku+jjDkYDimb5ODKoJiix4pGq8im5xFmXSngTIayE+ xWUDdB0n2QnJ2mmsw5axIiESatWW5J0Jvdu/BE/chtCshmNT1Z2XnCUz3T2J8kJq EKF+RFDxP8+63LS5lUuUP9a2/DB59/YzNasx5GICvd8evryvsNJp/dhZe/ibLzA0 x1LPm5Qmk73fTFAzgTz4YcUJYoeY6U5N0phoYNk6Ush3OOe5hSRRehsZvW194kVv 4/diODN3y6K1l+iGHoDr5yw7mwAOmw/kPxVNNNkT12Y4Q9I7IIs= -----END CERTIFICATE-----Generated at Sat Jun 7 17:06:29 2025 by rpki-client