$ rpki-client -vvf repo-rpki.idnic.net/repo/5b9752f6-6066-4b38-87cc-9ba63d19e22c/0/FC1C6395AD65E53AB9BC4BBD451AE79234BF63D7.mft File: FC1C6395AD65E53AB9BC4BBD451AE79234BF63D7.mft (raw, json) Hash identifier: /ekBYw0pLPRW+ndxee4NySeOQKctSoLcW7TPik3urgo= Subject key identifier: 58:5A:D1:50:03:3F:46:4F:31:85:B5:C6:88:46:90:A9:4D:81:E3:CE Authority key identifier: FC:1C:63:95:AD:65:E5:3A:B9:BC:4B:BD:45:1A:E7:92:34:BF:63:D7 Certificate issuer: /CN=FC1C6395AD65E53AB9BC4BBD451AE79234BF63D7 Certificate serial: 110F8E5AB5459874C3D99F6C90660F290B7F52D3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC1C6395AD65E53AB9BC4BBD451AE79234BF63D7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5b9752f6-6066-4b38-87cc-9ba63d19e22c/0/FC1C6395AD65E53AB9BC4BBD451AE79234BF63D7.mft Manifest number: 046A Signing time: Tue 18 Feb 2025 01:31:58 +0000 Manifest this update: Tue 18 Feb 2025 01:26:58 +0000 Manifest next update: Fri 21 Feb 2025 04:30:58 +0000 Files and hashes: 1: FC1C6395AD65E53AB9BC4BBD451AE79234BF63D7.crl (hash: Ll+rM0aw4cgWwhOTDSt1LZZckXBAFrKaeElnKlvx+ps=) 2: 3130332e33392e35322e302f32342d3234203d3e203633353033.roa (hash: 3ASwGKKLFiuIeG9xRQkogcwHGli4D0F1rvwWgrzKzow=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5b9752f6-6066-4b38-87cc-9ba63d19e22c/0/FC1C6395AD65E53AB9BC4BBD451AE79234BF63D7.crl rsync://repo-rpki.idnic.net/repo/5b9752f6-6066-4b38-87cc-9ba63d19e22c/0/FC1C6395AD65E53AB9BC4BBD451AE79234BF63D7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC1C6395AD65E53AB9BC4BBD451AE79234BF63D7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 04:30:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:0f:8e:5a:b5:45:98:74:c3:d9:9f:6c:90:66:0f:29:0b:7f:52:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC1C6395AD65E53AB9BC4BBD451AE79234BF63D7 Validity Not Before: Feb 18 01:26:58 2025 GMT Not After : Feb 21 04:30:58 2025 GMT Subject: CN=585AD150033F464F3185B5C6884690A94D81E3CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:00:fe:08:1b:2f:6b:ef:ea:5b:91:ae:10:84: b3:42:2d:e4:59:4f:07:04:40:b3:22:4a:97:b1:ac: 9a:84:ae:f6:9e:53:74:0b:af:13:60:12:ae:06:c7: 5d:fe:54:5b:a9:dd:70:71:ad:1d:5a:69:dd:c8:68: 50:3f:45:c7:51:60:71:61:46:4a:f8:8c:bf:d7:e2: f8:bc:e7:10:9d:22:c8:a9:28:ae:62:e2:da:ec:7a: fd:a3:75:f5:b4:a1:5f:ae:a8:20:6b:48:9b:ca:19: 8d:04:2e:6a:c5:0a:62:e9:0f:8c:91:40:35:88:0e: 8a:79:cc:a5:4e:50:2b:73:31:de:f8:cd:f8:80:6e: ea:9a:8d:fd:4e:97:5e:f1:b5:c8:a3:05:08:b9:e8: eb:47:bb:49:e2:7c:59:70:77:6d:4a:46:d0:0a:99: ca:6a:ec:50:41:4f:81:57:af:58:d6:de:b2:12:17: f6:93:b3:3c:42:09:4a:f8:9f:08:1d:91:81:88:10: ea:9d:96:71:4b:58:c9:b9:53:2d:65:77:81:82:ce: df:45:be:21:72:ec:17:ce:af:2c:5d:f4:e4:2e:55: d0:dd:ee:34:ab:18:21:7e:67:04:42:88:07:5c:a2: b9:d6:b4:7a:50:35:a2:af:56:bc:5e:b3:58:75:b6: 3b:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:5A:D1:50:03:3F:46:4F:31:85:B5:C6:88:46:90:A9:4D:81:E3:CE X509v3 Authority Key Identifier: keyid:FC:1C:63:95:AD:65:E5:3A:B9:BC:4B:BD:45:1A:E7:92:34:BF:63:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5b9752f6-6066-4b38-87cc-9ba63d19e22c/0/FC1C6395AD65E53AB9BC4BBD451AE79234BF63D7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC1C6395AD65E53AB9BC4BBD451AE79234BF63D7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5b9752f6-6066-4b38-87cc-9ba63d19e22c/0/FC1C6395AD65E53AB9BC4BBD451AE79234BF63D7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:99:8c:1e:fa:fe:21:9f:aa:36:de:d1:73:2e:c6:c2:99:03: de:38:54:25:83:42:a9:b3:3f:2b:d6:51:91:6d:12:e4:fe:89: 2b:08:c7:41:fb:c8:8c:21:0c:cd:09:9f:75:b6:82:50:a4:f5: 14:64:e8:e5:3f:ad:90:93:b9:7d:8b:84:d3:64:db:f2:de:4c: d4:cb:83:1e:64:69:9e:be:ba:84:e0:21:80:3d:27:6f:e3:eb: c9:90:34:6d:59:ea:a4:64:0d:88:ce:cb:77:18:ab:2d:51:5c: f8:b7:9a:98:90:a3:a4:b3:ba:1b:4b:83:6e:3b:19:e1:1c:1f: bb:10:04:8d:92:bd:05:08:ff:84:45:bd:6f:2f:c5:57:a8:b0: 0c:c0:44:59:2d:c8:5f:dc:2e:d0:d7:85:9c:e4:d3:e0:2d:46: 2c:7e:af:79:2a:61:4a:f3:f6:ff:d3:28:6f:cf:59:bb:e9:21: bf:f8:be:a6:57:3a:b3:8d:b9:21:b9:d6:99:f1:a5:3f:f6:e6: 97:7a:b3:a9:be:a6:f3:f5:5e:88:d3:6f:5a:49:1b:a1:52:88: 4f:4b:5d:c5:c7:fe:a1:cd:26:e4:d9:c1:7d:cd:e9:16:3b:1b: 12:5b:75:f8:9f:60:b0:cf:ee:3f:f7:0a:f8:da:15:03:06:d1: c3:0d:75:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEQ+OWrVFmHTD2Z9skGYPKQt/UtMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkMxQzYzOTVBRDY1RTUzQUI5QkM0QkJENDUxQUU3OTIz NEJGNjNENzAeFw0yNTAyMTgwMTI2NThaFw0yNTAyMjEwNDMwNThaMDMxMTAvBgNV BAMTKDU4NUFEMTUwMDMzRjQ2NEYzMTg1QjVDNjg4NDY5MEE5NEQ4MUUzQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsAP4IGy9r7+pbka4QhLNCLeRZ TwcEQLMiSpexrJqErvaeU3QLrxNgEq4Gx13+VFup3XBxrR1aad3IaFA/RcdRYHFh Rkr4jL/X4vi85xCdIsipKK5i4trsev2jdfW0oV+uqCBrSJvKGY0ELmrFCmLpD4yR QDWIDop5zKVOUCtzMd74zfiAbuqajf1Ol17xtcijBQi56OtHu0nifFlwd21KRtAK mcpq7FBBT4FXr1jW3rISF/aTszxCCUr4nwgdkYGIEOqdlnFLWMm5Uy1ld4GCzt9F viFy7BfOryxd9OQuVdDd7jSrGCF+ZwRCiAdcornWtHpQNaKvVrxes1h1tjslAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWFrRUAM/Rk8xhbXGiEaQqU2B484wHwYDVR0j BBgwFoAU/Bxjla1l5Tq5vEu9RRrnkjS/Y9cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Yjk3NTJmNi02MDY2LTRiMzgtODdjYy05YmE2M2QxOWUyMmMvMC9GQzFDNjM5NUFE NjVFNTNBQjlCQzRCQkQ0NTFBRTc5MjM0QkY2M0Q3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkMxQzYzOTVBRDY1RTUzQUI5QkM0QkJENDUxQUU3OTIzNEJG NjNENy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWI5NzUyZjYtNjA2Ni00YjM4LTg3 Y2MtOWJhNjNkMTllMjJjLzAvRkMxQzYzOTVBRDY1RTUzQUI5QkM0QkJENDUxQUU3 OTIzNEJGNjNENy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHOZjB76/iGfqjbe0XMuxsKZA944VCWDQqmz PyvWUZFtEuT+iSsIx0H7yIwhDM0Jn3W2glCk9RRk6OU/rZCTuX2LhNNk2/LeTNTL gx5kaZ6+uoTgIYA9J2/j68mQNG1Z6qRkDYjOy3cYqy1RXPi3mpiQo6SzuhtLg247 GeEcH7sQBI2SvQUI/4RFvW8vxVeosAzARFktyF/cLtDXhZzk0+AtRix+r3kqYUrz 9v/TKG/PWbvpIb/4vqZXOrONuSG51pnxpT/25pd6s6m+pvP1XojTb1pJG6FSiE9L XcXH/qHNJuTZwX3N6RY7GxJbdfifYLDP7j/3CvjaFQMG0cMNdbE= -----END CERTIFICATE-----Generated at Wed Feb 19 22:15:09 2025 by rpki-client