$ rpki-client -vvf repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.mft File: FC2DAAA409BA60DE33EC91F3A861D1A00719D426.mft (raw, json) Hash identifier: re0XDb9KebocC85TVwcSv8WIOIyqmnAfIBkyuZOIG6w= Subject key identifier: 5A:3B:AF:3D:0B:CE:23:8C:13:92:17:A7:35:09:3F:CA:95:19:B3:11 Authority key identifier: FC:2D:AA:A4:09:BA:60:DE:33:EC:91:F3:A8:61:D1:A0:07:19:D4:26 Certificate issuer: /CN=FC2DAAA409BA60DE33EC91F3A861D1A00719D426 Certificate serial: 7FAE4810AB2774D58BDB64766B990D2C43BCE813 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.mft Manifest number: 79 Signing time: Sat 15 Feb 2025 18:40:49 +0000 Manifest this update: Sat 15 Feb 2025 18:35:49 +0000 Manifest next update: Tue 18 Feb 2025 23:16:49 +0000 Files and hashes: 1: FC2DAAA409BA60DE33EC91F3A861D1A00719D426.crl (hash: P2UnrnGM0g1OJcNVenmGqQlOUSkoc38KnyIzwZWR/mc=) 2: 3135372e36362e322e302f32332d3234203d3e20313532343430.roa (hash: k1ABqECpixq2cAGwylGOS1bNZF6AWmXzRRrM23inilg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.crl rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 18 Feb 2025 23:16:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:ae:48:10:ab:27:74:d5:8b:db:64:76:6b:99:0d:2c:43:bc:e8:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC2DAAA409BA60DE33EC91F3A861D1A00719D426 Validity Not Before: Feb 15 18:35:49 2025 GMT Not After : Feb 18 23:16:49 2025 GMT Subject: CN=5A3BAF3D0BCE238C139217A735093FCA9519B311 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:fc:8e:6b:b8:b5:e2:39:65:66:79:04:e9:4a: 28:84:9e:4e:67:2b:e5:a5:18:f0:f6:76:9c:2c:d8: 6b:a3:c2:ab:a8:fe:18:bf:7d:44:af:20:40:bc:86: b0:a5:f5:40:8f:9b:cd:1c:d7:c7:48:e8:f4:05:91: 5d:1f:25:3e:0f:f8:f4:47:1d:e3:2f:82:10:2d:7e: e6:3b:3b:92:d7:c2:ba:c9:1a:db:32:41:d5:67:fb: 78:96:e3:eb:30:44:0d:b6:a7:c3:83:95:dd:bc:5f: 9d:87:05:ec:3b:b4:f9:0b:91:c9:7d:03:d7:00:09: 77:fe:e3:72:a8:8d:d9:dd:92:c2:94:a5:1d:44:0b: bd:d1:98:1c:6e:89:64:c3:46:31:f7:6c:2b:85:36: 61:49:2f:e6:ce:3d:34:3f:d1:df:cb:9a:ec:f9:68: ea:6f:f0:41:73:59:8e:4f:5f:c2:ce:50:3e:0c:b9: 79:7c:f9:c5:b1:ef:99:60:8b:10:15:be:b2:1f:89: bd:df:4a:68:b4:44:cf:3f:52:2d:01:7a:de:a5:ed: 35:d0:ed:63:a5:2a:4d:45:4c:d9:1d:a2:10:e7:63: c7:aa:2e:d9:a0:f8:2d:4e:32:01:c8:19:40:22:a2: 57:34:44:cf:83:ea:b2:48:6c:bc:28:2c:7d:8c:05: 6f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:3B:AF:3D:0B:CE:23:8C:13:92:17:A7:35:09:3F:CA:95:19:B3:11 X509v3 Authority Key Identifier: keyid:FC:2D:AA:A4:09:BA:60:DE:33:EC:91:F3:A8:61:D1:A0:07:19:D4:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:14:78:74:f0:d3:dc:f0:99:83:b8:f8:b7:84:a8:44:3b:84: 7e:41:ce:1c:05:37:c8:c8:64:5d:ff:7e:a6:a5:91:42:7e:67: f6:cf:b5:b8:4e:b0:ee:ed:5d:4c:9b:04:df:7f:c4:69:98:97: de:da:15:b5:ac:4c:6f:35:84:d6:3c:ca:1f:74:89:4c:e1:a7: 3d:9c:60:0f:f5:97:e0:de:e8:d6:f6:b6:c0:39:de:74:0c:99: 19:79:b9:b5:70:a6:8a:34:1a:01:06:0b:41:ec:9e:71:b4:da: 79:16:38:96:e3:83:19:aa:b7:00:22:d4:9f:57:39:13:6c:ba: d5:f5:7b:ce:0c:23:d3:52:76:50:56:75:c8:da:ac:5d:78:4f: 0a:49:d7:43:96:e1:e4:23:85:5f:12:22:22:e8:ec:de:e6:39: 36:5d:63:9e:c4:fe:33:0d:4a:1f:2b:10:59:2d:52:91:74:99: 6e:7e:c9:6a:d2:cd:7a:3f:86:3d:7a:07:1c:54:06:99:ef:3c: 88:ba:2e:ca:a3:e3:2e:6f:f1:98:a0:92:40:3f:d6:1c:92:1c: 0a:ca:aa:a2:42:94:8b:92:3c:cb:d2:d2:50:07:64:6c:fa:19: b4:41:4f:a6:79:5f:1f:38:24:05:04:f2:8c:f9:18:3b:18:a1: 0a:34:fa:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf65IEKsndNWL22R2a5kNLEO86BMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkMyREFBQTQwOUJBNjBERTMzRUM5MUYzQTg2MUQxQTAw NzE5RDQyNjAeFw0yNTAyMTUxODM1NDlaFw0yNTAyMTgyMzE2NDlaMDMxMTAvBgNV BAMTKDVBM0JBRjNEMEJDRTIzOEMxMzkyMTdBNzM1MDkzRkNBOTUxOUIzMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4/I5ruLXiOWVmeQTpSiiEnk5n K+WlGPD2dpws2Gujwquo/hi/fUSvIEC8hrCl9UCPm80c18dI6PQFkV0fJT4P+PRH HeMvghAtfuY7O5LXwrrJGtsyQdVn+3iW4+swRA22p8ODld28X52HBew7tPkLkcl9 A9cACXf+43KojdndksKUpR1EC73RmBxuiWTDRjH3bCuFNmFJL+bOPTQ/0d/Lmuz5 aOpv8EFzWY5PX8LOUD4MuXl8+cWx75lgixAVvrIfib3fSmi0RM8/Ui0Bet6l7TXQ 7WOlKk1FTNkdohDnY8eqLtmg+C1OMgHIGUAiolc0RM+D6rJIbLwoLH2MBW97AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWjuvPQvOI4wTkhenNQk/ypUZsxEwHwYDVR0j BBgwFoAU/C2qpAm6YN4z7JHzqGHRoAcZ1CYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZmI4MDhlYi1jOThlLTQwMzYtYmU5YS0xOTNiYmNjNjQ4OTIvMC9GQzJEQUFBNDA5 QkE2MERFMzNFQzkxRjNBODYxRDFBMDA3MTlENDI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkMyREFBQTQwOUJBNjBERTMzRUM5MUYzQTg2MUQxQTAwNzE5 RDQyNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWZiODA4ZWItYzk4ZS00MDM2LWJl OWEtMTkzYmJjYzY0ODkyLzAvRkMyREFBQTQwOUJBNjBERTMzRUM5MUYzQTg2MUQx QTAwNzE5RDQyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJwUeHTw09zwmYO4+LeEqEQ7hH5BzhwFN8jI ZF3/fqalkUJ+Z/bPtbhOsO7tXUybBN9/xGmYl97aFbWsTG81hNY8yh90iUzhpz2c YA/1l+De6Nb2tsA53nQMmRl5ubVwpoo0GgEGC0HsnnG02nkWOJbjgxmqtwAi1J9X ORNsutX1e84MI9NSdlBWdcjarF14TwpJ10OW4eQjhV8SIiLo7N7mOTZdY57E/jMN Sh8rEFktUpF0mW5+yWrSzXo/hj16BxxUBpnvPIi6Lsqj4y5v8ZigkkA/1hySHArK qqJClIuSPMvS0lAHZGz6GbRBT6Z5Xx84JAUE8oz5GDsYoQo0+gc= -----END CERTIFICATE-----Generated at Sun Feb 16 20:58:48 2025 by rpki-client