$ rpki-client -vvf repo-rpki.idnic.net/repo/8165e481-5a79-4868-a4e4-facfd922d813/0/FB3AAFE074610C85854BE75082EC16E60A126879.mft File: FB3AAFE074610C85854BE75082EC16E60A126879.mft (raw, json) Hash identifier: VcVN2s5tvgYAWyMgjipOFv2UgbVYj8B+ze9qwQuf/vw= Subject key identifier: 5C:63:25:0A:FF:95:B5:FE:CC:46:BD:CE:17:D8:AF:EB:5D:CB:33:96 Authority key identifier: FB:3A:AF:E0:74:61:0C:85:85:4B:E7:50:82:EC:16:E6:0A:12:68:79 Certificate issuer: /CN=FB3AAFE074610C85854BE75082EC16E60A126879 Certificate serial: 4895BF82F709CC369F2FDF106D518B1194E9E4EC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB3AAFE074610C85854BE75082EC16E60A126879.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8165e481-5a79-4868-a4e4-facfd922d813/0/FB3AAFE074610C85854BE75082EC16E60A126879.mft Manifest number: A8 Signing time: Fri 11 Apr 2025 18:40:41 +0000 Manifest this update: Fri 11 Apr 2025 18:35:41 +0000 Manifest next update: Tue 15 Apr 2025 02:01:41 +0000 Files and hashes: 1: 3130332e3135302e3135392e302f32342d3234203d3e20313430343331.roa (hash: e3s751+uHuq2vHbykLAhhBQ6L17VHuRd5Etg83ChrxA=) 2: FB3AAFE074610C85854BE75082EC16E60A126879.crl (hash: VqVFBD/E2v0G1sFGRpuP8EjBWPD2MRUT2gg0F/mKGcI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8165e481-5a79-4868-a4e4-facfd922d813/0/FB3AAFE074610C85854BE75082EC16E60A126879.crl rsync://repo-rpki.idnic.net/repo/8165e481-5a79-4868-a4e4-facfd922d813/0/FB3AAFE074610C85854BE75082EC16E60A126879.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB3AAFE074610C85854BE75082EC16E60A126879.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Apr 2025 02:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:95:bf:82:f7:09:cc:36:9f:2f:df:10:6d:51:8b:11:94:e9:e4:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB3AAFE074610C85854BE75082EC16E60A126879 Validity Not Before: Apr 11 18:35:41 2025 GMT Not After : Apr 15 02:01:41 2025 GMT Subject: CN=5C63250AFF95B5FECC46BDCE17D8AFEB5DCB3396 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:89:74:be:99:fd:76:57:72:09:0b:39:0a:94: fd:bf:85:15:d7:5d:a5:8c:82:93:64:8a:f6:db:33: 7f:e1:67:42:95:e4:f0:1a:f3:0d:f6:0f:c7:9d:d4: 33:7e:4b:a9:b9:23:51:74:e1:36:8f:3a:3f:cf:a9: 59:e3:ae:d8:bb:e2:ba:40:5d:27:f6:4e:b1:bd:70: 04:84:36:9b:f4:5d:89:f8:be:54:7f:36:54:17:41: 90:c5:e5:34:fd:44:45:58:71:ad:55:31:33:43:18: 8f:df:0b:12:24:4e:a5:5d:3f:84:12:f2:10:2d:ba: cd:24:fd:ce:6e:95:d3:01:e2:bf:4c:cd:0c:84:e6: c2:65:8e:28:99:72:44:ae:ea:8b:32:18:8e:b6:c3: 9c:95:3d:f3:82:e5:1d:0b:cb:64:42:2f:b7:97:f6: 73:48:69:49:22:ab:de:4f:59:ce:34:36:cc:44:19: 85:e6:38:04:e4:ff:0f:0a:a5:44:52:59:7a:7e:86: cf:8c:75:51:4a:cb:63:dd:82:4d:ce:82:12:d0:b6: f7:ce:90:f0:7b:65:6b:c2:67:64:af:96:db:1b:8b: f5:9f:57:cd:76:da:6c:7b:34:29:97:6b:a7:e3:27: fd:69:a5:78:b9:61:93:51:53:01:f8:54:09:3f:ce: 11:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:63:25:0A:FF:95:B5:FE:CC:46:BD:CE:17:D8:AF:EB:5D:CB:33:96 X509v3 Authority Key Identifier: keyid:FB:3A:AF:E0:74:61:0C:85:85:4B:E7:50:82:EC:16:E6:0A:12:68:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8165e481-5a79-4868-a4e4-facfd922d813/0/FB3AAFE074610C85854BE75082EC16E60A126879.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB3AAFE074610C85854BE75082EC16E60A126879.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8165e481-5a79-4868-a4e4-facfd922d813/0/FB3AAFE074610C85854BE75082EC16E60A126879.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:53:00:fd:5a:f9:ab:2a:d6:59:74:54:63:d9:8f:17:ab:d7: 7f:5a:8b:16:a6:a0:b1:ae:86:89:bb:db:dd:91:84:fa:aa:f3: 5a:b6:6c:a2:bd:b3:d5:fc:0f:b2:34:b3:bf:9a:a5:e4:ae:82: 9e:6e:85:d7:30:f8:37:ab:b8:a3:8b:a8:e3:a8:80:d2:07:59: 9d:2e:09:16:3a:73:53:69:ed:89:bd:19:5d:5f:b0:7b:ea:9c: ef:79:35:5d:19:5f:3d:80:ab:27:5d:0d:a6:10:bd:81:96:67: 13:c7:e6:f4:d4:46:71:04:8e:1d:e0:08:cc:54:b3:96:11:f1: 8b:4b:93:48:cd:53:ea:aa:01:0f:73:be:f2:8b:ae:8f:23:7e: 69:84:cb:13:02:bf:59:ad:5f:36:20:ca:17:98:ca:2b:f3:49: 3c:93:56:97:37:be:62:b0:7a:b3:b4:b2:5d:59:00:10:e6:8b: e5:91:55:81:f5:7a:87:30:3c:01:12:a0:ab:df:6a:3b:41:8a: 59:6f:b6:ac:8c:a1:73:9b:d5:36:31:e3:f7:87:af:a6:ed:47: c6:a1:ea:98:8e:04:a0:75:b2:95:ce:6f:d0:1f:76:9d:b3:b4: 0e:eb:65:dd:c7:6e:03:c1:a9:84:7a:f5:10:38:04:6b:bf:01: 9e:9b:94:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSJW/gvcJzDafL98QbVGLEZTp5OwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkIzQUFGRTA3NDYxMEM4NTg1NEJFNzUwODJFQzE2RTYw QTEyNjg3OTAeFw0yNTA0MTExODM1NDFaFw0yNTA0MTUwMjAxNDFaMDMxMTAvBgNV BAMTKDVDNjMyNTBBRkY5NUI1RkVDQzQ2QkRDRTE3RDhBRkVCNURDQjMzOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFiXS+mf12V3IJCzkKlP2/hRXX XaWMgpNkivbbM3/hZ0KV5PAa8w32D8ed1DN+S6m5I1F04TaPOj/PqVnjrti74rpA XSf2TrG9cASENpv0XYn4vlR/NlQXQZDF5TT9REVYca1VMTNDGI/fCxIkTqVdP4QS 8hAtus0k/c5uldMB4r9MzQyE5sJljiiZckSu6osyGI62w5yVPfOC5R0Ly2RCL7eX 9nNIaUkiq95PWc40NsxEGYXmOATk/w8KpURSWXp+hs+MdVFKy2Pdgk3OghLQtvfO kPB7ZWvCZ2Svltsbi/WfV8122mx7NCmXa6fjJ/1ppXi5YZNRUwH4VAk/zhGBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXGMlCv+Vtf7MRr3OF9iv613LM5YwHwYDVR0j BBgwFoAU+zqv4HRhDIWFS+dQguwW5goSaHkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MTY1ZTQ4MS01YTc5LTQ4NjgtYTRlNC1mYWNmZDkyMmQ4MTMvMC9GQjNBQUZFMDc0 NjEwQzg1ODU0QkU3NTA4MkVDMTZFNjBBMTI2ODc5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkIzQUFGRTA3NDYxMEM4NTg1NEJFNzUwODJFQzE2RTYwQTEy Njg3OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODE2NWU0ODEtNWE3OS00ODY4LWE0 ZTQtZmFjZmQ5MjJkODEzLzAvRkIzQUFGRTA3NDYxMEM4NTg1NEJFNzUwODJFQzE2 RTYwQTEyNjg3OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACxTAP1a+asq1ll0VGPZjxer139aixamoLGu hom7292RhPqq81q2bKK9s9X8D7I0s7+apeSugp5uhdcw+DeruKOLqOOogNIHWZ0u CRY6c1Np7Ym9GV1fsHvqnO95NV0ZXz2AqyddDaYQvYGWZxPH5vTURnEEjh3gCMxU s5YR8YtLk0jNU+qqAQ9zvvKLro8jfmmEyxMCv1mtXzYgyheYyivzSTyTVpc3vmKw erO0sl1ZABDmi+WRVYH1eocwPAESoKvfajtBillvtqyMoXOb1TYx4/eHr6btR8ah 6piOBKB1spXOb9Afdp2ztA7rZd3HbgPBqYR69RA4BGu/AZ6blLs= -----END CERTIFICATE-----Generated at Sat Apr 12 17:06:51 2025 by rpki-client