$ rpki-client -vvf repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/FA479894B4849679EBB9029580F04B8BD74CE048.mft File: FA479894B4849679EBB9029580F04B8BD74CE048.mft (raw, json) Hash identifier: YIY6UPCplebWCy4U8mbHnycF3eZTwHwknnAPyekHz1I= Subject key identifier: DC:69:79:DB:95:FB:08:5B:96:44:DA:26:31:53:24:C2:95:D2:F8:49 Authority key identifier: FA:47:98:94:B4:84:96:79:EB:B9:02:95:80:F0:4B:8B:D7:4C:E0:48 Certificate issuer: /CN=FA479894B4849679EBB9029580F04B8BD74CE048 Certificate serial: 3429E90FFAAD6B887E06DFED08CF8C2EF982ECF8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA479894B4849679EBB9029580F04B8BD74CE048.cer Subject info access: rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/FA479894B4849679EBB9029580F04B8BD74CE048.mft Manifest number: 71 Signing time: Sun 01 Jun 2025 23:41:29 +0000 Manifest this update: Sun 01 Jun 2025 23:36:29 +0000 Manifest next update: Thu 05 Jun 2025 07:52:29 +0000 Files and hashes: 1: FA479894B4849679EBB9029580F04B8BD74CE048.crl (hash: V/araTCrC/QzDI4uDv2iB7qLVEotWMHn1yZxAz1l/GI=) 2: 323030313a6466343a343463303a3a2f34382d3438203d3e20313533313137.roa (hash: 713xk7V5/TbDWlUXCIZDu0PtZguq6d4Z3/NB3BJnuQA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/FA479894B4849679EBB9029580F04B8BD74CE048.crl rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/FA479894B4849679EBB9029580F04B8BD74CE048.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA479894B4849679EBB9029580F04B8BD74CE048.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 07:52:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:29:e9:0f:fa:ad:6b:88:7e:06:df:ed:08:cf:8c:2e:f9:82:ec:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA479894B4849679EBB9029580F04B8BD74CE048 Validity Not Before: Jun 1 23:36:29 2025 GMT Not After : Jun 5 07:52:29 2025 GMT Subject: CN=DC6979DB95FB085B9644DA26315324C295D2F849 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b0:4b:d9:68:4c:1b:6d:8b:ec:2c:c1:44:dc: ae:b4:85:64:0f:72:88:a4:4b:e0:9f:28:17:85:ac: 77:c6:ab:8a:96:b6:12:81:68:b8:a6:93:23:a4:3e: 84:83:08:fb:8f:d4:d4:f3:26:31:54:21:0b:5a:62: 11:ca:5f:d7:f0:57:16:a7:cb:8c:f8:0c:b6:86:39: 8f:fe:b5:01:8d:c7:f8:eb:dc:06:54:8c:e9:e4:a0: ba:e8:0b:49:42:f1:50:44:bb:6f:b0:35:55:39:19: bc:51:2b:f6:bd:80:17:03:89:4c:c5:71:38:85:5b: b4:86:84:47:22:a9:bd:88:2e:64:89:59:70:59:d1: 50:85:ab:ad:22:0e:9f:02:b3:7a:36:bc:e0:0a:90: 47:73:cb:0d:65:8d:46:5d:35:d9:05:1d:2b:9d:59: ee:c5:c7:ff:bd:67:92:89:31:75:ab:88:18:6b:f8: 65:4b:7f:60:02:53:5b:87:24:74:17:5b:7e:8c:39: 61:e3:b0:1e:31:80:6a:10:51:1b:ce:05:94:15:99: 1b:20:52:35:71:7d:73:f0:7e:3c:dc:92:ee:17:b5: 21:40:e4:ca:1f:12:3a:f8:72:ed:79:f1:96:9f:d0: 55:21:28:8f:89:4e:ef:0a:33:d3:00:87:0b:3f:2b: a7:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:69:79:DB:95:FB:08:5B:96:44:DA:26:31:53:24:C2:95:D2:F8:49 X509v3 Authority Key Identifier: keyid:FA:47:98:94:B4:84:96:79:EB:B9:02:95:80:F0:4B:8B:D7:4C:E0:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/FA479894B4849679EBB9029580F04B8BD74CE048.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA479894B4849679EBB9029580F04B8BD74CE048.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/FA479894B4849679EBB9029580F04B8BD74CE048.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:8f:6e:f5:6f:eb:1a:2d:22:57:60:db:6e:82:c0:9b:be:27: 70:44:61:53:bd:92:55:b3:3f:2a:43:54:b0:2a:b1:f2:3d:2c: 68:6f:de:75:60:c0:2f:36:40:02:ee:71:b2:32:f6:90:ff:c3: 36:1c:08:6c:35:73:aa:9c:ef:70:f5:b8:d0:af:8c:e4:2d:70: 74:5f:ae:5c:19:71:95:df:eb:79:6b:4f:94:9a:01:aa:44:e7: ce:34:a1:7b:9d:36:e1:91:bb:fa:61:05:58:3a:80:8d:06:b2: dc:00:7b:6f:a4:ee:fd:64:8a:48:5c:74:84:6d:b1:1d:93:18: 3b:6f:67:a5:97:0b:22:06:56:da:a1:c5:25:09:8e:80:75:0c: 0f:83:0b:8d:c7:1a:b5:e0:8d:30:39:cf:b0:12:97:e3:c2:bf: f8:2a:95:f1:0f:f3:b0:4c:63:c9:22:88:1f:38:76:9f:c1:5f: 95:ef:12:75:21:bf:c4:d7:ca:51:99:15:f8:5a:d4:ca:38:7b: 6e:cd:2a:94:5e:ac:ad:5c:c6:64:ea:a7:c7:20:73:2b:6f:b4: 65:c8:e3:82:33:e3:11:23:cc:29:4c:27:26:fb:ff:65:39:4e: 26:2b:e4:80:b5:da:92:49:12:06:56:34:4a:74:02:38:3b:cf: 22:67:5d:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNCnpD/qta4h+Bt/tCM+MLvmC7PgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE0Nzk4OTRCNDg0OTY3OUVCQjkwMjk1ODBGMDRCOEJE NzRDRTA0ODAeFw0yNTA2MDEyMzM2MjlaFw0yNTA2MDUwNzUyMjlaMDMxMTAvBgNV BAMTKERDNjk3OURCOTVGQjA4NUI5NjQ0REEyNjMxNTMyNEMyOTVEMkY4NDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPsEvZaEwbbYvsLMFE3K60hWQP coikS+CfKBeFrHfGq4qWthKBaLimkyOkPoSDCPuP1NTzJjFUIQtaYhHKX9fwVxan y4z4DLaGOY/+tQGNx/jr3AZUjOnkoLroC0lC8VBEu2+wNVU5GbxRK/a9gBcDiUzF cTiFW7SGhEciqb2ILmSJWXBZ0VCFq60iDp8Cs3o2vOAKkEdzyw1ljUZdNdkFHSud We7Fx/+9Z5KJMXWriBhr+GVLf2ACU1uHJHQXW36MOWHjsB4xgGoQURvOBZQVmRsg UjVxfXPwfjzcku4XtSFA5MofEjr4cu158Zaf0FUhKI+JTu8KM9MAhws/K6dFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3Gl525X7CFuWRNomMVMkwpXS+EkwHwYDVR0j BBgwFoAU+keYlLSElnnruQKVgPBLi9dM4EgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OWIwN2E5ZS02MmRmLTQ4MDgtOWQyYS1hNmU2ODg0YmNiYmIvMS9GQTQ3OTg5NEI0 ODQ5Njc5RUJCOTAyOTU4MEYwNEI4QkQ3NENFMDQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkE0Nzk4OTRCNDg0OTY3OUVCQjkwMjk1ODBGMDRCOEJENzRD RTA0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTliMDdhOWUtNjJkZi00ODA4LTlk MmEtYTZlNjg4NGJjYmJiLzEvRkE0Nzk4OTRCNDg0OTY3OUVCQjkwMjk1ODBGMDRC OEJENzRDRTA0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIqPbvVv6xotIldg226CwJu+J3BEYVO9klWz PypDVLAqsfI9LGhv3nVgwC82QALucbIy9pD/wzYcCGw1c6qc73D1uNCvjOQtcHRf rlwZcZXf63lrT5SaAapE5840oXudNuGRu/phBVg6gI0GstwAe2+k7v1kikhcdIRt sR2TGDtvZ6WXCyIGVtqhxSUJjoB1DA+DC43HGrXgjTA5z7ASl+PCv/gqlfEP87BM Y8kiiB84dp/BX5XvEnUhv8TXylGZFfha1Mo4e27NKpRerK1cxmTqp8cgcytvtGXI 44Iz4xEjzClMJyb7/2U5TiYr5IC12pJJEgZWNEp0Ajg7zyJnXao= -----END CERTIFICATE-----Generated at Tue Jun 3 23:30:15 2025 by rpki-client