$ rpki-client -vvf repo-rpki.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/FC2E85BE9AC0A6BE53B792A489D50609F924187F.mft File: FC2E85BE9AC0A6BE53B792A489D50609F924187F.mft (raw, json) Hash identifier: lSX1W14hSJlcv/QzgsvHE8aCh9jCNdi51W4rsoxJ3Fg= Subject key identifier: 89:03:DC:55:B5:1D:CA:97:BD:2F:65:9B:0E:8F:E7:07:FC:42:EE:85 Authority key identifier: FC:2E:85:BE:9A:C0:A6:BE:53:B7:92:A4:89:D5:06:09:F9:24:18:7F Certificate issuer: /CN=FC2E85BE9AC0A6BE53B792A489D50609F924187F Certificate serial: 2FE3F1DDD74F05F859A41F4180B0D54B03E5E471 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC2E85BE9AC0A6BE53B792A489D50609F924187F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/FC2E85BE9AC0A6BE53B792A489D50609F924187F.mft Manifest number: 04AB Signing time: Wed 19 Feb 2025 07:01:03 +0000 Manifest this update: Wed 19 Feb 2025 06:56:03 +0000 Manifest next update: Sat 22 Feb 2025 17:37:03 +0000 Files and hashes: 1: 3130332e3131322e3138392e302f32342d3234203d3e20313337333332.roa (hash: LqlSb/utpUN3HVslP3/Zp5BxoyJnBFer5qWv03qLFmY=) 2: FC2E85BE9AC0A6BE53B792A489D50609F924187F.crl (hash: NyQobuUydRK/8mKA5Ivdze9GH4corcbnkVQ5+DuR47Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/FC2E85BE9AC0A6BE53B792A489D50609F924187F.crl rsync://repo-rpki.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/FC2E85BE9AC0A6BE53B792A489D50609F924187F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC2E85BE9AC0A6BE53B792A489D50609F924187F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Feb 2025 17:37:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:e3:f1:dd:d7:4f:05:f8:59:a4:1f:41:80:b0:d5:4b:03:e5:e4:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC2E85BE9AC0A6BE53B792A489D50609F924187F Validity Not Before: Feb 19 06:56:03 2025 GMT Not After : Feb 22 17:37:03 2025 GMT Subject: CN=8903DC55B51DCA97BD2F659B0E8FE707FC42EE85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:d4:3f:e6:95:3c:ff:09:b6:b4:e2:ed:77:08: 09:3a:db:b9:ee:4f:87:1a:4b:17:58:9c:72:a9:73: d8:0c:cc:e7:31:00:59:44:ad:0e:6d:de:f5:99:5e: 52:41:b2:9d:56:1c:b8:f9:5d:6d:89:a9:35:90:bd: 92:a3:d9:15:39:4e:ea:e4:8f:c2:9b:0d:02:6d:c4: f2:04:cd:32:58:5d:85:cd:73:10:86:ee:82:70:1f: 89:20:43:c8:86:c7:d6:52:95:38:e0:ef:9a:07:d9: e7:8e:de:e0:81:0b:02:03:75:42:15:15:c5:1d:9f: e5:d5:31:00:06:e4:67:fa:76:54:4b:02:ea:a7:e4: d6:f8:37:75:56:40:66:a5:52:70:47:92:cb:87:27: 55:09:cb:4a:e1:70:f4:7a:12:45:07:63:c1:cd:ff: 9d:c5:69:24:97:e7:ff:7d:e4:eb:0c:36:d5:43:cb: 71:93:1b:51:52:7f:2f:65:8c:f2:07:82:e4:14:8f: 59:9f:a7:38:4c:01:b7:ef:e6:a7:45:ce:9c:2a:52: b4:ad:5b:e3:f1:06:e1:f2:f2:af:76:cd:1a:06:ce: 54:fb:51:16:61:1f:55:a3:87:83:a2:6f:02:83:93: 1a:8d:96:37:32:c2:61:5d:f1:1e:9b:29:d9:52:7f: 61:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:03:DC:55:B5:1D:CA:97:BD:2F:65:9B:0E:8F:E7:07:FC:42:EE:85 X509v3 Authority Key Identifier: keyid:FC:2E:85:BE:9A:C0:A6:BE:53:B7:92:A4:89:D5:06:09:F9:24:18:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/FC2E85BE9AC0A6BE53B792A489D50609F924187F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC2E85BE9AC0A6BE53B792A489D50609F924187F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/FC2E85BE9AC0A6BE53B792A489D50609F924187F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:5a:48:2a:1c:31:56:5c:b1:f6:ad:35:fb:ad:f4:ae:19:d6: 3c:27:5e:90:2f:1f:9c:87:ef:8d:1e:73:7e:be:39:1b:db:d7: ec:0f:6e:d7:7c:2b:df:c1:6f:eb:21:03:67:aa:4c:b7:55:c5: a8:4e:a5:80:e9:af:88:b6:b2:ee:bf:8a:f5:08:13:9b:b4:d0: a8:13:ea:5e:e3:37:ac:38:bc:a5:f4:5b:e9:e7:96:70:99:a2: 9e:f5:ac:96:e9:aa:da:2d:72:e9:09:f1:b1:6a:22:71:2f:38: 0b:72:63:1f:78:ce:87:4d:eb:b9:de:bf:29:52:e6:39:88:08: e4:be:9e:07:fc:83:0e:a3:b4:7d:40:1f:99:53:cf:91:a2:97: 73:e3:6e:f9:87:0f:07:20:fd:92:3c:93:11:12:22:9f:51:99: 97:e7:f2:59:fe:58:14:7b:83:6f:c2:d1:ac:8a:3c:6a:e7:c4: 25:92:da:d5:b5:a2:bc:d5:59:fe:d6:f3:92:03:17:a4:ed:e1: 2d:0d:7a:a4:6a:dd:28:e8:a9:98:76:55:cf:57:f6:d7:ab:71: 84:80:b5:cd:b2:2c:6b:39:18:43:0d:e0:3d:8e:5a:6e:46:0a: 56:f4:4b:26:2c:3b:6e:d4:9b:e1:11:ac:b6:4c:24:53:6c:f3: d2:2f:28:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL+Px3ddPBfhZpB9BgLDVSwPl5HEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkMyRTg1QkU5QUMwQTZCRTUzQjc5MkE0ODlENTA2MDlG OTI0MTg3RjAeFw0yNTAyMTkwNjU2MDNaFw0yNTAyMjIxNzM3MDNaMDMxMTAvBgNV BAMTKDg5MDNEQzU1QjUxRENBOTdCRDJGNjU5QjBFOEZFNzA3RkM0MkVFODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg1D/mlTz/Cba04u13CAk627nu T4caSxdYnHKpc9gMzOcxAFlErQ5t3vWZXlJBsp1WHLj5XW2JqTWQvZKj2RU5Turk j8KbDQJtxPIEzTJYXYXNcxCG7oJwH4kgQ8iGx9ZSlTjg75oH2eeO3uCBCwIDdUIV FcUdn+XVMQAG5Gf6dlRLAuqn5Nb4N3VWQGalUnBHksuHJ1UJy0rhcPR6EkUHY8HN /53FaSSX5/995OsMNtVDy3GTG1FSfy9ljPIHguQUj1mfpzhMAbfv5qdFzpwqUrSt W+PxBuHy8q92zRoGzlT7URZhH1Wjh4OibwKDkxqNljcywmFd8R6bKdlSf2ElAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiQPcVbUdype9L2WbDo/nB/xC7oUwHwYDVR0j BBgwFoAU/C6FvprApr5Tt5KkidUGCfkkGH8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZjVjZmJhMy1lMDE3LTRlOGEtOWFjNS1mMmQzMDQzMTczNjUvMC9GQzJFODVCRTlB QzBBNkJFNTNCNzkyQTQ4OUQ1MDYwOUY5MjQxODdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkMyRTg1QkU5QUMwQTZCRTUzQjc5MkE0ODlENTA2MDlGOTI0 MTg3Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWY1Y2ZiYTMtZTAxNy00ZThhLTlh YzUtZjJkMzA0MzE3MzY1LzAvRkMyRTg1QkU5QUMwQTZCRTUzQjc5MkE0ODlENTA2 MDlGOTI0MTg3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE1aSCocMVZcsfatNfut9K4Z1jwnXpAvH5yH 740ec36+ORvb1+wPbtd8K9/Bb+shA2eqTLdVxahOpYDpr4i2su6/ivUIE5u00KgT 6l7jN6w4vKX0W+nnlnCZop71rJbpqtotcukJ8bFqInEvOAtyYx94zodN67nevylS 5jmICOS+ngf8gw6jtH1AH5lTz5Gil3PjbvmHDwcg/ZI8kxESIp9RmZfn8ln+WBR7 g2/C0ayKPGrnxCWS2tW1orzVWf7W85IDF6Tt4S0NeqRq3SjoqZh2Vc9X9tercYSA tc2yLGs5GEMN4D2OWm5GClb0SyYsO27Um+ERrLZMJFNs89IvKFE= -----END CERTIFICATE-----Generated at Wed Feb 19 22:13:47 2025 by rpki-client