$ rpki-client -vvf repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.mft File: FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.mft (raw, json) Hash identifier: P+pHjh3T7KkYPjC7p4etafKvgg2U4E4p5wJcDCqcn9U= Subject key identifier: 52:52:6C:E1:9A:1F:8D:27:51:B2:95:EA:09:D9:33:A4:38:DE:C8:E3 Authority key identifier: FB:1D:4F:91:39:A6:1D:F4:B9:1E:31:27:0F:3D:2A:1C:07:B3:5C:E1 Certificate issuer: /CN=FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1 Certificate serial: 3D50A6F780452B9C2854960ADEB84C19086A4314 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.mft Manifest number: 015D Signing time: Fri 04 Apr 2025 10:02:03 +0000 Manifest this update: Fri 04 Apr 2025 09:57:03 +0000 Manifest next update: Mon 07 Apr 2025 16:25:03 +0000 Files and hashes: 1: 3130332e3134392e3131382e302f32332d3234203d3e20313431303535.roa (hash: u22TiDBqhxRDgDXVHX7pAHC7nu8jAukDNtzJmORzlts=) 2: FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.crl (hash: g3ojOErjCeRSq121tY0OKrXPmjNpK8oGdfr9gcsnr1w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.crl rsync://repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 16:25:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:50:a6:f7:80:45:2b:9c:28:54:96:0a:de:b8:4c:19:08:6a:43:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1 Validity Not Before: Apr 4 09:57:03 2025 GMT Not After : Apr 7 16:25:03 2025 GMT Subject: CN=52526CE19A1F8D2751B295EA09D933A438DEC8E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:27:f5:f6:b2:4a:6f:b1:d9:8e:a1:87:5e:5e: ca:2c:76:7e:38:a9:b0:02:86:1f:5c:62:aa:3b:68: 02:96:e0:97:3a:60:70:44:4b:b8:32:e0:62:3f:8d: 09:24:8f:2d:9a:37:61:dc:22:ab:9c:25:0c:c0:d6: 47:b9:83:c6:2a:52:09:6e:19:3e:de:52:d5:9c:c4: 80:ac:c5:35:8c:df:14:3f:12:a3:13:80:82:85:b6: 63:27:75:7c:32:4d:4e:5a:f2:c6:26:59:30:51:31: e5:8b:91:bc:91:12:0b:d8:df:2a:c7:fb:3b:bd:ba: b6:ca:6a:12:80:11:1b:be:e1:b7:28:8e:07:ea:60: af:3b:57:c2:1b:15:91:cc:db:3e:7b:8b:48:7d:09: 1b:6f:97:64:2f:3c:4f:a0:93:69:9a:69:1b:fa:9e: b3:a8:52:05:39:e4:6f:f1:e3:0d:0f:e8:b8:eb:1f: 24:07:2a:c7:1b:1e:ec:ab:06:fc:c6:c4:03:12:da: ae:2c:29:9d:47:7b:c0:80:49:c7:84:19:7e:c3:32: bb:5c:f1:91:46:91:f1:2d:df:96:5f:40:6b:57:33: e2:7b:26:2c:48:4b:ea:48:42:8a:4d:f0:40:98:d8: 53:09:a2:5f:a7:ae:14:f8:82:3b:b7:46:0e:7a:49: d9:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:52:6C:E1:9A:1F:8D:27:51:B2:95:EA:09:D9:33:A4:38:DE:C8:E3 X509v3 Authority Key Identifier: keyid:FB:1D:4F:91:39:A6:1D:F4:B9:1E:31:27:0F:3D:2A:1C:07:B3:5C:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:f8:f2:81:44:5c:80:0a:c5:88:6f:28:95:f9:6d:ee:64:3a: 3e:6c:20:2c:53:87:b0:de:96:44:16:96:8a:bc:2b:5d:41:fb: 3d:5a:5d:7e:e2:c2:a4:8e:8a:bc:d4:03:1e:7b:07:7d:92:dc: b0:3c:33:3a:38:c9:4e:a3:a0:fd:0c:92:ef:74:47:37:07:c1: 59:31:6e:f2:f1:90:80:ee:f8:6d:2e:84:78:4c:c3:88:88:3d: cc:8d:4b:8e:99:b1:15:24:5b:17:bb:f6:aa:42:b8:7a:aa:d1: 80:cd:a6:06:06:58:a7:2f:c2:37:5f:71:73:9e:5a:66:92:80: 83:63:f8:08:87:f2:af:64:a8:af:92:a2:58:01:9e:b8:8c:40: 0f:ae:9d:49:0f:51:c7:51:2e:78:a9:b4:4c:3a:a2:fe:1e:ae: 0b:18:a9:3a:a7:1b:9a:38:46:f8:de:a3:84:7a:2a:5a:a0:42: 7b:a6:20:0a:3c:c0:6d:ce:2d:d6:64:49:dc:f2:95:ee:6b:cf: 12:e8:72:3b:1a:91:dd:c7:69:cb:40:30:b4:f3:c8:29:ea:b5: 25:9f:42:51:bf:64:96:d4:4b:6e:40:06:61:38:16:36:b9:2d: 9d:04:0a:22:df:5c:7b:02:4d:7f:59:d8:25:8d:0d:d5:f6:65: 11:c5:78:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPVCm94BFK5woVJYK3rhMGQhqQxQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkIxRDRGOTEzOUE2MURGNEI5MUUzMTI3MEYzRDJBMUMw N0IzNUNFMTAeFw0yNTA0MDQwOTU3MDNaFw0yNTA0MDcxNjI1MDNaMDMxMTAvBgNV BAMTKDUyNTI2Q0UxOUExRjhEMjc1MUIyOTVFQTA5RDkzM0E0MzhERUM4RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtJ/X2skpvsdmOoYdeXsosdn44 qbAChh9cYqo7aAKW4Jc6YHBES7gy4GI/jQkkjy2aN2HcIqucJQzA1ke5g8YqUglu GT7eUtWcxICsxTWM3xQ/EqMTgIKFtmMndXwyTU5a8sYmWTBRMeWLkbyREgvY3yrH +zu9urbKahKAERu+4bcojgfqYK87V8IbFZHM2z57i0h9CRtvl2QvPE+gk2maaRv6 nrOoUgU55G/x4w0P6LjrHyQHKscbHuyrBvzGxAMS2q4sKZ1He8CASceEGX7DMrtc 8ZFGkfEt35ZfQGtXM+J7JixIS+pIQopN8ECY2FMJol+nrhT4gju3Rg56SdlzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUlJs4ZofjSdRspXqCdkzpDjeyOMwHwYDVR0j BBgwFoAU+x1PkTmmHfS5HjEnDz0qHAezXOEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Y2M3MGY3ZC0zM2ZlLTRkZjItODFlNS1kYzBkNTVhYzUxNzAvMC9GQjFENEY5MTM5 QTYxREY0QjkxRTMxMjcwRjNEMkExQzA3QjM1Q0UxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkIxRDRGOTEzOUE2MURGNEI5MUUzMTI3MEYzRDJBMUMwN0Iz NUNFMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWNjNzBmN2QtMzNmZS00ZGYyLTgx ZTUtZGMwZDU1YWM1MTcwLzAvRkIxRDRGOTEzOUE2MURGNEI5MUUzMTI3MEYzRDJB MUMwN0IzNUNFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKz48oFEXIAKxYhvKJX5be5kOj5sICxTh7De lkQWloq8K11B+z1aXX7iwqSOirzUAx57B32S3LA8Mzo4yU6joP0Mku90RzcHwVkx bvLxkIDu+G0uhHhMw4iIPcyNS46ZsRUkWxe79qpCuHqq0YDNpgYGWKcvwjdfcXOe WmaSgINj+AiH8q9kqK+SolgBnriMQA+unUkPUcdRLniptEw6ov4ergsYqTqnG5o4 Rvjeo4R6KlqgQnumIAo8wG3OLdZkSdzyle5rzxLocjsakd3HactAMLTzyCnqtSWf QlG/ZJbUS25ABmE4Fja5LZ0ECiLfXHsCTX9Z2CWNDdX2ZRHFeCA= -----END CERTIFICATE-----Generated at Sat Apr 5 23:21:16 2025 by rpki-client