$ rpki-client -vvf repo-rpki.idnic.net/repo/7d68500c-49f8-4f01-8774-f7c3164a0a58/0/FD0F38979237143A0D44165912E79E2FACD5A3BA.mft File: FD0F38979237143A0D44165912E79E2FACD5A3BA.mft (raw, json) Hash identifier: ZS7tRtv+WMLj13VEgohgToqp4Ft5e114KeqozoNGZuo= Subject key identifier: 29:AF:B1:59:E0:EA:52:95:EB:AE:97:B8:CD:27:4C:D3:F3:88:E6:31 Authority key identifier: FD:0F:38:97:92:37:14:3A:0D:44:16:59:12:E7:9E:2F:AC:D5:A3:BA Certificate issuer: /CN=FD0F38979237143A0D44165912E79E2FACD5A3BA Certificate serial: 36FE6F070CCE557134868837F017643C335F1547 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FD0F38979237143A0D44165912E79E2FACD5A3BA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d68500c-49f8-4f01-8774-f7c3164a0a58/0/FD0F38979237143A0D44165912E79E2FACD5A3BA.mft Manifest number: 049F Signing time: Tue 03 Jun 2025 10:30:48 +0000 Manifest this update: Tue 03 Jun 2025 10:25:47 +0000 Manifest next update: Fri 06 Jun 2025 15:30:47 +0000 Files and hashes: 1: FD0F38979237143A0D44165912E79E2FACD5A3BA.crl (hash: ++692FnYa4XovigtBL+uPcgLo976EHmAbHQj3qR5EqI=) 2: 3130332e3135382e39382e302f32332d3234203d3e20313431313235.roa (hash: i9P3BUfAWtkH95rW98va5S26/GuOy0kNU/0qkQxgQNw=) 3: 323430363a623734303a3a2f33322d3332203d3e20313431313235.roa (hash: w+5ApYB+ZFE/moVpWBy1FYzv1VFtUnIoAwsXfI3kLUk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d68500c-49f8-4f01-8774-f7c3164a0a58/0/FD0F38979237143A0D44165912E79E2FACD5A3BA.crl rsync://repo-rpki.idnic.net/repo/7d68500c-49f8-4f01-8774-f7c3164a0a58/0/FD0F38979237143A0D44165912E79E2FACD5A3BA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FD0F38979237143A0D44165912E79E2FACD5A3BA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 15:30:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:fe:6f:07:0c:ce:55:71:34:86:88:37:f0:17:64:3c:33:5f:15:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FD0F38979237143A0D44165912E79E2FACD5A3BA Validity Not Before: Jun 3 10:25:47 2025 GMT Not After : Jun 6 15:30:47 2025 GMT Subject: CN=29AFB159E0EA5295EBAE97B8CD274CD3F388E631 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:6f:bd:b8:5b:b4:46:4b:e4:f2:dc:14:bf:e7: 6f:4b:80:38:21:4e:a0:7f:04:f4:f4:9f:04:05:80: 5b:fc:04:1e:6b:77:5d:84:62:f3:99:6d:ff:15:9f: 91:79:e7:1f:3b:23:cd:b1:c7:0c:f3:76:9b:4f:a8: 9e:7d:e0:82:34:4e:b0:59:1d:6b:3a:d5:0e:b8:ae: bd:8c:9f:f5:c9:f6:8d:e1:70:01:bc:16:99:53:06: 66:dc:63:2a:80:d6:ae:ec:39:cf:1c:2f:cd:d2:5a: 7f:12:75:e5:ca:c3:e7:71:03:2c:6f:8e:c1:2d:de: 4b:96:b7:66:23:3a:51:93:e9:c6:25:47:17:26:9b: 33:d0:83:b8:24:03:1b:22:75:fc:d8:66:a3:47:8a: 47:59:80:45:80:37:db:6a:8a:e2:6f:d4:d6:65:d8: 6a:fd:79:0a:2a:0d:98:8d:36:a9:11:cf:ee:b7:37: 61:a0:1e:4d:8d:d7:98:7c:b0:a3:e3:5e:1c:05:ff: b6:03:44:52:68:9c:62:8c:fd:bf:de:6d:b1:82:9d: f7:6d:49:57:4c:e8:2e:28:29:fe:ca:dc:98:31:07: f2:2f:1d:4d:84:42:c6:8c:36:19:de:ea:b1:c2:e5: 78:ec:fa:46:59:80:1a:00:08:7c:de:a4:8b:cb:df: 70:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:AF:B1:59:E0:EA:52:95:EB:AE:97:B8:CD:27:4C:D3:F3:88:E6:31 X509v3 Authority Key Identifier: keyid:FD:0F:38:97:92:37:14:3A:0D:44:16:59:12:E7:9E:2F:AC:D5:A3:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d68500c-49f8-4f01-8774-f7c3164a0a58/0/FD0F38979237143A0D44165912E79E2FACD5A3BA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FD0F38979237143A0D44165912E79E2FACD5A3BA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d68500c-49f8-4f01-8774-f7c3164a0a58/0/FD0F38979237143A0D44165912E79E2FACD5A3BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:ad:af:43:79:c3:ed:c6:9a:9e:00:6a:1f:68:ec:e7:ae:5c: bb:6f:b0:e4:f9:09:c2:45:ff:5a:7e:b4:1c:71:21:61:26:70: 6d:a7:c7:b2:d0:a7:26:86:01:f7:df:2e:05:91:90:ec:39:e1: 6c:1a:03:37:d3:c8:7a:46:05:88:c1:bb:1c:b9:d5:68:8a:8f: 74:35:70:84:d8:ca:f2:10:ab:f3:1f:b0:06:70:83:88:47:a8: 35:28:22:9d:d0:8d:fd:c2:4b:4b:37:cb:6f:7d:c4:0e:5f:df: db:ed:0d:1b:14:09:4a:1d:13:08:4e:69:7e:4e:eb:10:8e:90: 8e:95:78:28:4c:14:0c:b4:5e:4a:c1:a5:53:5b:84:c9:69:5d: da:bd:ea:19:42:64:61:57:0c:89:cb:e4:47:3e:f2:d5:8b:6e: 06:3b:24:72:07:8a:43:96:17:89:44:88:49:19:c6:5c:1f:be: e4:66:13:e5:4f:52:36:1a:33:fa:26:47:06:09:e8:1f:58:68: 56:9c:c2:ff:43:6d:5d:3e:56:64:2e:d0:71:9b:a5:6d:06:c1: 40:3d:76:f9:ab:b8:9e:78:bf:c1:c8:e4:ca:00:b1:c4:8d:58: 02:1b:7c:7d:03:7c:7d:83:69:88:89:96:bc:61:4c:92:48:41: 2b:f1:69:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNv5vBwzOVXE0hog38BdkPDNfFUcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkQwRjM4OTc5MjM3MTQzQTBENDQxNjU5MTJFNzlFMkZB Q0Q1QTNCQTAeFw0yNTA2MDMxMDI1NDdaFw0yNTA2MDYxNTMwNDdaMDMxMTAvBgNV BAMTKDI5QUZCMTU5RTBFQTUyOTVFQkFFOTdCOENEMjc0Q0QzRjM4OEU2MzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVb724W7RGS+Ty3BS/529LgDgh TqB/BPT0nwQFgFv8BB5rd12EYvOZbf8Vn5F55x87I82xxwzzdptPqJ594II0TrBZ HWs61Q64rr2Mn/XJ9o3hcAG8FplTBmbcYyqA1q7sOc8cL83SWn8SdeXKw+dxAyxv jsEt3kuWt2YjOlGT6cYlRxcmmzPQg7gkAxsidfzYZqNHikdZgEWAN9tqiuJv1NZl 2Gr9eQoqDZiNNqkRz+63N2GgHk2N15h8sKPjXhwF/7YDRFJonGKM/b/ebbGCnfdt SVdM6C4oKf7K3JgxB/IvHU2EQsaMNhne6rHC5Xjs+kZZgBoACHzepIvL33BvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKa+xWeDqUpXrrpe4zSdM0/OI5jEwHwYDVR0j BBgwFoAU/Q84l5I3FDoNRBZZEueeL6zVo7owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDY4NTAwYy00OWY4LTRmMDEtODc3NC1mN2MzMTY0YTBhNTgvMC9GRDBGMzg5Nzky MzcxNDNBMEQ0NDE2NTkxMkU3OUUyRkFDRDVBM0JBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkQwRjM4OTc5MjM3MTQzQTBENDQxNjU5MTJFNzlFMkZBQ0Q1 QTNCQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Q2ODUwMGMtNDlmOC00ZjAxLTg3 NzQtZjdjMzE2NGEwYTU4LzAvRkQwRjM4OTc5MjM3MTQzQTBENDQxNjU5MTJFNzlF MkZBQ0Q1QTNCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALWtr0N5w+3Gmp4Aah9o7OeuXLtvsOT5CcJF /1p+tBxxIWEmcG2nx7LQpyaGAfffLgWRkOw54WwaAzfTyHpGBYjBuxy51WiKj3Q1 cITYyvIQq/MfsAZwg4hHqDUoIp3Qjf3CS0s3y299xA5f39vtDRsUCUodEwhOaX5O 6xCOkI6VeChMFAy0XkrBpVNbhMlpXdq96hlCZGFXDInL5Ec+8tWLbgY7JHIHikOW F4lEiEkZxlwfvuRmE+VPUjYaM/omRwYJ6B9YaFacwv9DbV0+VmQu0HGbpW0GwUA9 dvmruJ54v8HI5MoAscSNWAIbfH0DfH2DaYiJlrxhTJJIQSvxaSs= -----END CERTIFICATE-----Generated at Tue Jun 3 23:33:12 2025 by rpki-client