$ rpki-client -vvf repo-rpki.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/FA5F6CC99BAC829D4DE7BECEE823199657D018CD.mft File: FA5F6CC99BAC829D4DE7BECEE823199657D018CD.mft (raw, json) Hash identifier: GpOmOBmENeOeXFjhvR3VOh3iFH6uWar00ylcw2nm1z8= Subject key identifier: 20:CF:8E:7D:87:CD:C3:42:AD:2D:F4:5B:E3:34:37:BE:6C:63:ED:54 Authority key identifier: FA:5F:6C:C9:9B:AC:82:9D:4D:E7:BE:CE:E8:23:19:96:57:D0:18:CD Certificate issuer: /CN=FA5F6CC99BAC829D4DE7BECEE823199657D018CD Certificate serial: 4AE5823BF1AE6D906A191EEB30233E2C18DBD7F0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA5F6CC99BAC829D4DE7BECEE823199657D018CD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/FA5F6CC99BAC829D4DE7BECEE823199657D018CD.mft Manifest number: EA Signing time: Sat 07 Jun 2025 13:01:14 +0000 Manifest this update: Sat 07 Jun 2025 12:56:14 +0000 Manifest next update: Tue 10 Jun 2025 15:54:14 +0000 Files and hashes: 1: FA5F6CC99BAC829D4DE7BECEE823199657D018CD.crl (hash: ohDMx29tIRBvvpXD+pS3X9Vaqu5iffOAREKe/aNXmd0=) 2: 3138302e39342e382e302f32342d3234203d3e20313532303430.roa (hash: c2NPfXxSOck24WuWyT1N3C7BCQbBB0F0oXAud+7dRiM=) 3: 3138302e39342e392e302f32342d3234203d3e20313532303430.roa (hash: qufNb3/LUFwbrIvm8YtRzGBfloSV6jK/5s6hJyz0aXI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/FA5F6CC99BAC829D4DE7BECEE823199657D018CD.crl rsync://repo-rpki.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/FA5F6CC99BAC829D4DE7BECEE823199657D018CD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA5F6CC99BAC829D4DE7BECEE823199657D018CD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 15:54:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:e5:82:3b:f1:ae:6d:90:6a:19:1e:eb:30:23:3e:2c:18:db:d7:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA5F6CC99BAC829D4DE7BECEE823199657D018CD Validity Not Before: Jun 7 12:56:14 2025 GMT Not After : Jun 10 15:54:14 2025 GMT Subject: CN=20CF8E7D87CDC342AD2DF45BE33437BE6C63ED54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:1c:97:b1:a4:59:f4:9d:e4:59:9d:53:2d:c8: db:66:0a:32:0a:3d:67:00:b1:1a:b2:d9:d5:97:1b: 64:f6:87:cf:64:e3:d9:f0:ce:c6:0b:42:d8:65:3f: 4d:b1:7f:0a:7e:5b:2a:e6:bd:c2:5a:25:c4:99:74: 21:c0:19:a3:31:9a:68:56:ba:01:95:dd:ed:7e:0c: 78:85:63:04:f8:33:65:16:84:27:14:ea:1b:6f:88: 91:9e:61:6d:79:61:a5:b6:cf:a0:b7:a0:22:db:1f: 90:42:59:ec:24:55:79:9d:60:1e:0d:75:89:c3:b6: cc:ab:4f:ae:4f:2c:0c:f4:10:d5:53:7f:6b:34:98: 1c:f9:22:be:6f:8d:10:0a:82:a3:4d:0b:7e:88:27: ad:e3:ad:c1:fc:f9:ea:b6:df:52:3d:3f:1a:1a:5b: a7:17:f7:fb:90:a5:8b:77:4b:ca:ad:50:5a:aa:a9: 1a:04:e4:47:5a:ea:50:1f:46:68:c1:26:bb:f4:28: 6d:c9:1b:db:69:db:82:7f:a7:8b:73:34:a4:c1:08: 1b:74:31:29:2d:3a:82:d6:29:20:25:f6:65:f1:b7: 38:01:56:b5:f5:54:1e:09:05:1d:c0:ec:9c:36:5e: 6a:ea:93:9e:33:bb:32:f9:5c:69:01:e2:31:cc:89: bd:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:CF:8E:7D:87:CD:C3:42:AD:2D:F4:5B:E3:34:37:BE:6C:63:ED:54 X509v3 Authority Key Identifier: keyid:FA:5F:6C:C9:9B:AC:82:9D:4D:E7:BE:CE:E8:23:19:96:57:D0:18:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/FA5F6CC99BAC829D4DE7BECEE823199657D018CD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA5F6CC99BAC829D4DE7BECEE823199657D018CD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/FA5F6CC99BAC829D4DE7BECEE823199657D018CD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:6c:b5:02:51:45:e2:a9:f2:cf:9c:38:e5:3c:de:27:a2:5a: 5c:77:0f:1b:a0:5d:d6:eb:15:57:69:79:7b:04:8a:3d:7d:fa: 7c:31:5a:a0:0d:e8:1c:0c:26:ba:33:da:34:7a:d7:2a:15:c5: f5:78:9f:e4:07:40:06:3b:59:78:ec:04:1c:f2:4a:09:07:c7: 12:72:99:65:a6:e7:6d:b5:ff:a0:10:e9:51:38:a0:43:71:6a: 15:59:3a:f8:6e:0a:dd:0f:42:16:28:87:a6:b0:63:bf:e9:64: 62:dd:ea:dd:f7:43:e0:47:3b:b3:ca:ec:14:17:58:a0:a4:bd: d7:28:54:23:21:f7:06:e5:cf:e8:f7:11:90:7c:7c:18:1d:c3: c1:b2:b6:b2:b8:db:b7:88:4e:50:ba:ee:da:0b:de:f2:e3:e9: 69:3e:47:df:c4:bd:9d:e9:ea:91:bc:cb:11:3c:f5:af:14:cd: 9a:75:83:8e:a8:71:bf:20:86:e9:18:cc:f4:aa:89:42:e0:f1: af:fa:a4:f4:4d:3f:43:fa:b1:e4:d1:9f:19:07:57:85:6f:98: 76:2e:67:fc:7d:a4:60:aa:0f:89:fb:d5:78:2c:ff:5c:01:4a: 24:55:0a:a8:f0:f4:12:42:7b:91:77:5e:78:3a:d5:62:85:1b: 9d:29:d8:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSuWCO/GubZBqGR7rMCM+LBjb1/AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE1RjZDQzk5QkFDODI5RDRERTdCRUNFRTgyMzE5OTY1 N0QwMThDRDAeFw0yNTA2MDcxMjU2MTRaFw0yNTA2MTAxNTU0MTRaMDMxMTAvBgNV BAMTKDIwQ0Y4RTdEODdDREMzNDJBRDJERjQ1QkUzMzQzN0JFNkM2M0VENTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtHJexpFn0neRZnVMtyNtmCjIK PWcAsRqy2dWXG2T2h89k49nwzsYLQthlP02xfwp+WyrmvcJaJcSZdCHAGaMxmmhW ugGV3e1+DHiFYwT4M2UWhCcU6htviJGeYW15YaW2z6C3oCLbH5BCWewkVXmdYB4N dYnDtsyrT65PLAz0ENVTf2s0mBz5Ir5vjRAKgqNNC36IJ63jrcH8+eq231I9Pxoa W6cX9/uQpYt3S8qtUFqqqRoE5Eda6lAfRmjBJrv0KG3JG9tp24J/p4tzNKTBCBt0 MSktOoLWKSAl9mXxtzgBVrX1VB4JBR3A7Jw2Xmrqk54zuzL5XGkB4jHMib3XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIM+OfYfNw0KtLfRb4zQ3vmxj7VQwHwYDVR0j BBgwFoAU+l9syZusgp1N577O6CMZllfQGM0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NmYxZWI0Yi00OGRjLTRlZWEtOTE4MS0xMjhjYjI4YjNkYmEvMC9GQTVGNkNDOTlC QUM4MjlENERFN0JFQ0VFODIzMTk5NjU3RDAxOENELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkE1RjZDQzk5QkFDODI5RDRERTdCRUNFRTgyMzE5OTY1N0Qw MThDRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTZmMWViNGItNDhkYy00ZWVhLTkx ODEtMTI4Y2IyOGIzZGJhLzAvRkE1RjZDQzk5QkFDODI5RDRERTdCRUNFRTgyMzE5 OTY1N0QwMThDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL1stQJRReKp8s+cOOU83ieiWlx3DxugXdbr FVdpeXsEij19+nwxWqAN6BwMJroz2jR61yoVxfV4n+QHQAY7WXjsBBzySgkHxxJy mWWm5221/6AQ6VE4oENxahVZOvhuCt0PQhYoh6awY7/pZGLd6t33Q+BHO7PK7BQX WKCkvdcoVCMh9wblz+j3EZB8fBgdw8GytrK427eITlC67toL3vLj6Wk+R9/EvZ3p 6pG8yxE89a8UzZp1g46ocb8ghukYzPSqiULg8a/6pPRNP0P6seTRnxkHV4VvmHYu Z/x9pGCqD4n71Xgs/1wBSiRVCqjw9BJCe5F3Xng61WKFG50p2ME= -----END CERTIFICATE-----Generated at Sun Jun 8 01:42:43 2025 by rpki-client