$ rpki-client -vvf repo-rpki.idnic.net/repo/8165e481-5a79-4868-a4e4-facfd922d813/0/FB3AAFE074610C85854BE75082EC16E60A126879.mft File: FB3AAFE074610C85854BE75082EC16E60A126879.mft (raw, json) Hash identifier: tB9gdECeBIX1+qyjW3YMr3oPx/l1yPVOJOh2e2rj76A= Subject key identifier: 2B:22:EC:06:EF:97:34:87:CC:E2:16:4B:3D:DA:4E:0F:AD:01:24:DA Authority key identifier: FB:3A:AF:E0:74:61:0C:85:85:4B:E7:50:82:EC:16:E6:0A:12:68:79 Certificate issuer: /CN=FB3AAFE074610C85854BE75082EC16E60A126879 Certificate serial: 54199150BF0D3163364315B0E97D1BBA27E2BE9A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB3AAFE074610C85854BE75082EC16E60A126879.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8165e481-5a79-4868-a4e4-facfd922d813/0/FB3AAFE074610C85854BE75082EC16E60A126879.mft Manifest number: C0 Signing time: Wed 04 Jun 2025 19:00:46 +0000 Manifest this update: Wed 04 Jun 2025 18:55:46 +0000 Manifest next update: Sat 07 Jun 2025 20:28:46 +0000 Files and hashes: 1: FB3AAFE074610C85854BE75082EC16E60A126879.crl (hash: LS4pnGENt1ZG0HXYATSHAffcoUCWNqT23Bie1BHxA7s=) 2: 3130332e3135302e3135392e302f32342d3234203d3e20313430343331.roa (hash: e3s751+uHuq2vHbykLAhhBQ6L17VHuRd5Etg83ChrxA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8165e481-5a79-4868-a4e4-facfd922d813/0/FB3AAFE074610C85854BE75082EC16E60A126879.crl rsync://repo-rpki.idnic.net/repo/8165e481-5a79-4868-a4e4-facfd922d813/0/FB3AAFE074610C85854BE75082EC16E60A126879.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB3AAFE074610C85854BE75082EC16E60A126879.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:28:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:19:91:50:bf:0d:31:63:36:43:15:b0:e9:7d:1b:ba:27:e2:be:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB3AAFE074610C85854BE75082EC16E60A126879 Validity Not Before: Jun 4 18:55:46 2025 GMT Not After : Jun 7 20:28:46 2025 GMT Subject: CN=2B22EC06EF973487CCE2164B3DDA4E0FAD0124DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:b6:dc:8e:0f:ae:1d:ca:a0:61:13:58:ca:4b: 37:b8:4d:85:66:74:31:06:44:50:89:5e:a1:8c:5f: 0e:69:24:b3:f7:f5:03:da:40:7b:74:11:f7:f5:a5: ed:7d:e3:49:cc:55:75:2c:6a:c6:12:3a:2c:70:d6: 3e:22:3b:e4:74:1f:3b:0b:a4:65:23:9b:26:35:72: f7:af:ba:19:92:f1:3f:92:4f:46:a8:0e:a2:25:69: 96:05:7e:bc:13:e2:2d:e2:a0:ab:e8:92:ad:d2:f0: dc:85:73:3a:27:44:35:2a:6a:e8:6f:55:dc:03:5a: 72:21:ca:88:4f:81:f9:5e:70:46:19:29:90:e0:e6: 20:4c:2d:13:fb:e3:24:45:f5:f4:1f:aa:f5:ca:bd: 90:87:dd:fc:9f:e4:b5:e4:2c:d7:65:cc:52:6c:9c: 1c:ee:91:de:4f:9b:36:23:e5:de:be:ad:7b:59:07: 81:ec:39:19:07:18:c2:3b:76:cc:6c:c5:00:4e:8c: 83:b2:43:2d:81:a2:b7:4c:d5:4b:4f:72:a3:f4:fa: a7:d5:0f:c8:e0:62:cd:d9:1c:d3:33:42:e6:8b:69: 65:7f:c9:4c:b0:86:2e:74:c2:f3:b7:8b:2b:c8:16: ba:fd:c1:e2:51:92:58:4d:b1:0f:19:fb:43:e0:4e: db:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:22:EC:06:EF:97:34:87:CC:E2:16:4B:3D:DA:4E:0F:AD:01:24:DA X509v3 Authority Key Identifier: keyid:FB:3A:AF:E0:74:61:0C:85:85:4B:E7:50:82:EC:16:E6:0A:12:68:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8165e481-5a79-4868-a4e4-facfd922d813/0/FB3AAFE074610C85854BE75082EC16E60A126879.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB3AAFE074610C85854BE75082EC16E60A126879.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8165e481-5a79-4868-a4e4-facfd922d813/0/FB3AAFE074610C85854BE75082EC16E60A126879.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:f3:dd:37:6e:d8:d4:c2:a6:5e:00:b3:c7:8e:b8:87:ec:c5: 09:da:07:ea:cf:d8:53:52:0b:02:7c:4d:b7:dd:0e:8f:f1:bd: 26:4d:ad:34:cf:ab:8a:b1:9d:76:88:3c:66:07:eb:f0:be:18: 5a:f1:f1:7c:94:6a:13:6e:ee:af:6a:18:7f:5f:1b:84:85:27: ae:83:bb:bd:2a:cc:c7:35:20:8d:f4:80:6f:44:31:af:ad:b7: 5d:c0:f7:58:51:94:c2:10:fe:47:92:28:aa:6b:94:56:46:2b: 18:a5:94:bb:31:04:61:ae:d9:43:78:c9:8d:0a:ff:4d:88:c0: fb:74:d2:2a:c6:dd:6b:55:0b:1f:d4:5c:1f:67:24:52:81:3c: 6a:bc:90:42:ef:2b:2c:f4:39:2c:62:ee:76:f7:a2:20:49:ee: 7e:38:22:4c:00:61:16:72:6e:89:0e:11:ad:a4:39:9d:c5:16: 7f:2f:64:71:cd:e7:23:10:e7:ad:c6:dc:d2:71:d2:2b:94:0b: 9d:b2:6e:66:4d:97:38:2e:4b:82:96:4e:cf:81:d8:fc:2e:09: 5b:e2:e3:0e:a5:80:8f:bd:a0:f5:e8:86:ce:ae:0f:0d:d9:60: 94:11:90:a0:b1:a9:78:52:25:1c:78:3f:a8:28:e5:15:53:ab: f7:f4:95:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVBmRUL8NMWM2QxWw6X0buifivpowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkIzQUFGRTA3NDYxMEM4NTg1NEJFNzUwODJFQzE2RTYw QTEyNjg3OTAeFw0yNTA2MDQxODU1NDZaFw0yNTA2MDcyMDI4NDZaMDMxMTAvBgNV BAMTKDJCMjJFQzA2RUY5NzM0ODdDQ0UyMTY0QjNEREE0RTBGQUQwMTI0REEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqttyOD64dyqBhE1jKSze4TYVm dDEGRFCJXqGMXw5pJLP39QPaQHt0Eff1pe1940nMVXUsasYSOixw1j4iO+R0HzsL pGUjmyY1cvevuhmS8T+ST0aoDqIlaZYFfrwT4i3ioKvokq3S8NyFczonRDUqauhv VdwDWnIhyohPgflecEYZKZDg5iBMLRP74yRF9fQfqvXKvZCH3fyf5LXkLNdlzFJs nBzukd5PmzYj5d6+rXtZB4HsORkHGMI7dsxsxQBOjIOyQy2BordM1UtPcqP0+qfV D8jgYs3ZHNMzQuaLaWV/yUywhi50wvO3iyvIFrr9weJRklhNsQ8Z+0PgTtt1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKyLsBu+XNIfM4hZLPdpOD60BJNowHwYDVR0j BBgwFoAU+zqv4HRhDIWFS+dQguwW5goSaHkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MTY1ZTQ4MS01YTc5LTQ4NjgtYTRlNC1mYWNmZDkyMmQ4MTMvMC9GQjNBQUZFMDc0 NjEwQzg1ODU0QkU3NTA4MkVDMTZFNjBBMTI2ODc5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkIzQUFGRTA3NDYxMEM4NTg1NEJFNzUwODJFQzE2RTYwQTEy Njg3OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODE2NWU0ODEtNWE3OS00ODY4LWE0 ZTQtZmFjZmQ5MjJkODEzLzAvRkIzQUFGRTA3NDYxMEM4NTg1NEJFNzUwODJFQzE2 RTYwQTEyNjg3OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD/z3Tdu2NTCpl4As8eOuIfsxQnaB+rP2FNS CwJ8TbfdDo/xvSZNrTTPq4qxnXaIPGYH6/C+GFrx8XyUahNu7q9qGH9fG4SFJ66D u70qzMc1II30gG9EMa+tt13A91hRlMIQ/keSKKprlFZGKxillLsxBGGu2UN4yY0K /02IwPt00irG3WtVCx/UXB9nJFKBPGq8kELvKyz0OSxi7nb3oiBJ7n44IkwAYRZy bokOEa2kOZ3FFn8vZHHN5yMQ563G3NJx0iuUC52ybmZNlzguS4KWTs+B2PwuCVvi 4w6lgI+9oPXohs6uDw3ZYJQRkKCxqXhSJRx4P6go5RVTq/f0lco= -----END CERTIFICATE-----Generated at Thu Jun 5 18:42:35 2025 by rpki-client