$ rpki-client -vvf repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.mft File: FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.mft (raw, json) Hash identifier: L/yrpzCm6ucR1RrH64hSmBzEVwSlHhea/3kJQ4q8Loc= Subject key identifier: 3C:74:31:BB:B3:A6:D0:16:07:A2:47:B6:41:12:C4:CE:52:58:D1:EE Authority key identifier: FB:1D:4F:91:39:A6:1D:F4:B9:1E:31:27:0F:3D:2A:1C:07:B3:5C:E1 Certificate issuer: /CN=FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1 Certificate serial: 5AC4F9FEEE59A5BCF21266CE880423FAAFE23B1E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.mft Manifest number: 0179 Signing time: Fri 06 Jun 2025 04:12:06 +0000 Manifest this update: Fri 06 Jun 2025 04:07:06 +0000 Manifest next update: Mon 09 Jun 2025 13:13:06 +0000 Files and hashes: 1: 3130332e3134392e3131382e302f32332d3234203d3e20313431303535.roa (hash: u22TiDBqhxRDgDXVHX7pAHC7nu8jAukDNtzJmORzlts=) 2: FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.crl (hash: dau+URlKZ0U9BBC2VAeuCy4yq+jHxc7qvsdmSuf2MRo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.crl rsync://repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 13:13:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:c4:f9:fe:ee:59:a5:bc:f2:12:66:ce:88:04:23:fa:af:e2:3b:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1 Validity Not Before: Jun 6 04:07:06 2025 GMT Not After : Jun 9 13:13:06 2025 GMT Subject: CN=3C7431BBB3A6D01607A247B64112C4CE5258D1EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:34:7e:d8:02:9c:9a:04:4a:2b:d0:0e:54:22: 9f:ca:91:5f:44:f6:3f:db:6d:49:05:ea:cc:23:ca: b8:78:ee:a5:68:94:9d:19:c6:15:82:ef:80:7d:21: b4:ce:88:55:0d:8b:2a:c2:54:e9:45:85:68:1e:5e: 1c:09:72:1b:d5:78:eb:2a:d0:8c:40:25:3b:0e:f0: 5b:49:e3:ec:cc:c5:3d:9e:e3:ba:64:36:44:a9:2c: 5b:46:3e:f2:f4:e6:04:32:d1:65:1e:62:0a:e8:ee: 0c:d1:3c:fb:9b:48:d9:5b:f8:5b:2e:21:de:cc:e7: f9:d8:b9:64:7e:7d:ef:54:1f:41:4f:49:a5:2f:af: 57:50:a5:f6:24:16:2a:de:76:e5:35:69:1d:af:bc: 2e:5b:76:a9:4f:b2:8f:ed:cb:a7:c6:d5:7f:3a:3f: f4:0a:59:49:ec:9d:2a:6e:7a:2e:22:89:b2:ec:ec: e3:1d:90:4d:7d:13:84:50:32:56:99:6d:e2:71:2e: 99:2d:4d:7e:2c:85:c4:ef:af:18:89:25:81:80:32: 19:62:94:34:a5:ad:c4:a6:4f:4b:c0:15:f0:ae:9a: 2d:44:2d:69:cc:af:fe:d0:8b:d7:74:76:ff:a3:23: ab:8d:88:2e:6c:41:77:94:bf:73:d1:7f:ea:bb:5f: f0:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:74:31:BB:B3:A6:D0:16:07:A2:47:B6:41:12:C4:CE:52:58:D1:EE X509v3 Authority Key Identifier: keyid:FB:1D:4F:91:39:A6:1D:F4:B9:1E:31:27:0F:3D:2A:1C:07:B3:5C:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:c1:50:9a:1b:07:6c:8e:ef:df:0e:59:66:0c:32:7d:f4:c4: 48:84:bb:ae:5e:b0:2a:33:0e:70:e8:b9:b8:1a:58:e2:04:6e: af:fa:cd:57:93:5a:f4:a8:b7:7f:f2:11:aa:bc:6c:d1:ed:66: fb:94:8c:b5:d1:27:67:28:26:3d:37:db:6b:28:ee:ac:a9:9d: 27:66:52:53:a5:86:1f:4b:33:80:f6:9c:7e:af:a6:2e:ca:42: f6:55:92:4d:69:bb:96:29:8e:c2:0a:df:47:c9:ea:c5:10:1f: c4:89:59:9b:2c:11:82:f0:3a:50:8e:d4:a2:f8:0a:05:91:93: 50:53:cd:ac:4d:2b:28:ea:5b:6c:77:6a:e4:94:d7:92:6a:bd: fe:bf:39:87:6c:1b:41:54:93:f0:0d:e8:53:7c:45:8c:05:fc: 80:67:ce:e0:48:38:93:89:bd:59:93:cb:d8:07:0c:21:b2:ad: a3:5c:79:52:f5:5d:f5:7e:fc:91:11:e4:ab:f3:e7:f4:76:bf: 5a:ce:3e:80:8c:4a:47:0f:05:3e:d0:65:65:2f:fc:98:8d:15: 48:a4:6c:1d:08:81:b0:89:3c:27:2c:29:26:8d:bc:31:f9:19: 1f:ba:bf:ec:07:02:16:73:1a:7d:dc:7d:de:14:85:23:92:b2: 73:c7:b3:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWsT5/u5ZpbzyEmbOiAQj+q/iOx4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkIxRDRGOTEzOUE2MURGNEI5MUUzMTI3MEYzRDJBMUMw N0IzNUNFMTAeFw0yNTA2MDYwNDA3MDZaFw0yNTA2MDkxMzEzMDZaMDMxMTAvBgNV BAMTKDNDNzQzMUJCQjNBNkQwMTYwN0EyNDdCNjQxMTJDNENFNTI1OEQxRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSNH7YApyaBEor0A5UIp/KkV9E 9j/bbUkF6swjyrh47qVolJ0ZxhWC74B9IbTOiFUNiyrCVOlFhWgeXhwJchvVeOsq 0IxAJTsO8FtJ4+zMxT2e47pkNkSpLFtGPvL05gQy0WUeYgro7gzRPPubSNlb+Fsu Id7M5/nYuWR+fe9UH0FPSaUvr1dQpfYkFireduU1aR2vvC5bdqlPso/ty6fG1X86 P/QKWUnsnSpuei4iibLs7OMdkE19E4RQMlaZbeJxLpktTX4shcTvrxiJJYGAMhli lDSlrcSmT0vAFfCumi1ELWnMr/7Qi9d0dv+jI6uNiC5sQXeUv3PRf+q7X/C3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPHQxu7Om0BYHoke2QRLEzlJY0e4wHwYDVR0j BBgwFoAU+x1PkTmmHfS5HjEnDz0qHAezXOEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Y2M3MGY3ZC0zM2ZlLTRkZjItODFlNS1kYzBkNTVhYzUxNzAvMC9GQjFENEY5MTM5 QTYxREY0QjkxRTMxMjcwRjNEMkExQzA3QjM1Q0UxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkIxRDRGOTEzOUE2MURGNEI5MUUzMTI3MEYzRDJBMUMwN0Iz NUNFMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWNjNzBmN2QtMzNmZS00ZGYyLTgx ZTUtZGMwZDU1YWM1MTcwLzAvRkIxRDRGOTEzOUE2MURGNEI5MUUzMTI3MEYzRDJB MUMwN0IzNUNFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGbBUJobB2yO798OWWYMMn30xEiEu65esCoz DnDoubgaWOIEbq/6zVeTWvSot3/yEaq8bNHtZvuUjLXRJ2coJj0322so7qypnSdm UlOlhh9LM4D2nH6vpi7KQvZVkk1pu5YpjsIK30fJ6sUQH8SJWZssEYLwOlCO1KL4 CgWRk1BTzaxNKyjqW2x3auSU15Jqvf6/OYdsG0FUk/AN6FN8RYwF/IBnzuBIOJOJ vVmTy9gHDCGyraNceVL1XfV+/JER5Kvz5/R2v1rOPoCMSkcPBT7QZWUv/JiNFUik bB0IgbCJPCcsKSaNvDH5GR+6v+wHAhZzGn3cfd4UhSOSsnPHsxo= -----END CERTIFICATE-----Generated at Fri Jun 6 16:39:31 2025 by rpki-client