$ rpki-client -vvf repo-rpki.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.mft File: FC4F8762524C3EBF98126E5F579CCB30C37EEF63.mft (raw, json) Hash identifier: vRXKO7W0UvtR64ODsF9yMjpsO327tlpMG0sOz4puyUE= Subject key identifier: 7B:D6:3B:C5:6B:74:14:88:9C:22:2B:4C:B6:1A:71:87:21:14:E3:6B Authority key identifier: FC:4F:87:62:52:4C:3E:BF:98:12:6E:5F:57:9C:CB:30:C3:7E:EF:63 Certificate issuer: /CN=FC4F8762524C3EBF98126E5F579CCB30C37EEF63 Certificate serial: 318FE9D40A0FED686023C38644BA3BADE091393C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.cer Subject info access: rsync://repo-rpki.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.mft Manifest number: E3 Signing time: Tue 03 Jun 2025 12:31:01 +0000 Manifest this update: Tue 03 Jun 2025 12:26:01 +0000 Manifest next update: Fri 06 Jun 2025 13:07:01 +0000 Files and hashes: 1: 3130332e3133342e31362e302f32342d3234203d3e20313338313432.roa (hash: 8FJnKt5CgklUKcuR3KEOgR9pFXHp2pdnQAzYXqQX2Ag=) 2: FC4F8762524C3EBF98126E5F579CCB30C37EEF63.crl (hash: zNrCBSiJHnjSh2Q7W+PVW4aVjpJ4Id3E/xCSkpyvbXU=) 3: 323030313a6466373a616630303a3a2f34382d3438203d3e20313338313432.roa (hash: +DXbNG3+5DIfVUdd5cKU3zcHabiuNmOrVbbKp3YlrN4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.crl rsync://repo-rpki.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 13:07:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:8f:e9:d4:0a:0f:ed:68:60:23:c3:86:44:ba:3b:ad:e0:91:39:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC4F8762524C3EBF98126E5F579CCB30C37EEF63 Validity Not Before: Jun 3 12:26:01 2025 GMT Not After : Jun 6 13:07:01 2025 GMT Subject: CN=7BD63BC56B7414889C222B4CB61A71872114E36B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d9:24:70:19:44:3b:90:9a:25:59:ab:0f:77: e3:64:86:66:09:ee:fd:f4:f6:2d:8b:f1:3d:5e:6d: a2:df:42:35:3a:b4:09:cd:60:c2:34:3b:3b:e9:d3: ae:2f:b6:94:7a:47:54:16:f4:69:32:86:9d:3d:da: 3d:47:01:3e:3f:97:13:f9:d1:34:59:df:4c:47:58: a3:06:d5:ec:4a:44:df:20:ad:18:8f:c2:f3:5e:7a: a3:1b:e6:b8:fe:e1:e8:22:23:09:f0:85:30:a1:7b: aa:c0:11:71:88:0a:5a:fa:39:d1:e3:c7:93:fc:cf: b2:ee:2b:17:fa:71:1f:34:3d:b8:a3:05:1a:28:0b: e0:ea:58:00:01:c7:04:f0:4a:1b:1b:ec:3f:66:7b: 3a:99:00:43:e1:b7:89:f6:a1:e7:57:54:e6:70:bc: 68:bd:d6:cb:66:de:f4:e6:54:0e:27:38:e9:85:ea: be:b2:ab:94:47:a8:50:e1:81:f0:3d:dd:d1:e5:e5: 0c:66:2e:d6:d9:ec:9b:5a:24:48:4f:5a:5d:e2:a3: 8c:af:ca:64:5e:d2:b1:60:56:11:d6:f2:ff:50:f2: 36:eb:87:7a:96:4e:be:68:59:ec:91:27:71:84:b8: 35:02:33:d7:4a:05:27:19:37:7a:61:17:56:00:37: b0:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:D6:3B:C5:6B:74:14:88:9C:22:2B:4C:B6:1A:71:87:21:14:E3:6B X509v3 Authority Key Identifier: keyid:FC:4F:87:62:52:4C:3E:BF:98:12:6E:5F:57:9C:CB:30:C3:7E:EF:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:0f:2c:98:6d:a6:2f:98:60:d3:33:c4:04:c3:2c:1d:76:34: 3e:0d:70:e5:82:05:f4:5c:61:d8:22:95:4b:9c:41:fd:fb:b0: 27:6e:25:d2:22:c8:75:9b:ca:15:9c:3f:e4:cb:7a:fb:d6:a4: 6b:0d:2e:88:00:83:b8:8a:0d:2d:c9:21:6b:f9:9b:a2:30:fe: 63:26:4d:97:23:d3:f6:96:72:24:b4:40:d7:9c:08:7d:9f:f2: fd:69:9d:2e:e2:ee:a0:6c:3d:45:14:3b:e3:79:ca:c9:09:3a: ce:e0:86:54:80:e8:44:7a:37:a1:82:ac:88:13:31:75:e5:ed: e4:53:69:99:2b:14:94:c6:23:ff:22:95:09:1f:72:c2:84:16: a8:d5:7d:b5:69:e1:6c:dd:0d:09:f0:e8:cc:58:27:d6:08:61: 63:dd:ca:f0:34:17:64:2b:38:c8:99:53:85:91:31:9e:46:fc: 99:42:03:1b:ad:29:ff:49:35:b0:da:8d:d3:69:91:54:9d:3b: a3:10:df:f6:97:d9:39:a7:51:82:96:eb:c9:93:d7:3e:25:24: a4:93:58:5f:de:9b:a9:16:15:c3:7e:ca:24:df:ab:a7:22:3d: 0f:30:c0:1c:d4:64:8d:eb:cc:9d:72:96:cb:a5:d2:b4:91:6a: 58:04:c7:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMY/p1AoP7WhgI8OGRLo7reCROTwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkM0Rjg3NjI1MjRDM0VCRjk4MTI2RTVGNTc5Q0NCMzBD MzdFRUY2MzAeFw0yNTA2MDMxMjI2MDFaFw0yNTA2MDYxMzA3MDFaMDMxMTAvBgNV BAMTKDdCRDYzQkM1NkI3NDE0ODg5QzIyMkI0Q0I2MUE3MTg3MjExNEUzNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv2SRwGUQ7kJolWasPd+NkhmYJ 7v309i2L8T1ebaLfQjU6tAnNYMI0Ozvp064vtpR6R1QW9Gkyhp092j1HAT4/lxP5 0TRZ30xHWKMG1exKRN8grRiPwvNeeqMb5rj+4egiIwnwhTChe6rAEXGIClr6OdHj x5P8z7LuKxf6cR80PbijBRooC+DqWAABxwTwShsb7D9mezqZAEPht4n2oedXVOZw vGi91stm3vTmVA4nOOmF6r6yq5RHqFDhgfA93dHl5QxmLtbZ7JtaJEhPWl3io4yv ymRe0rFgVhHW8v9Q8jbrh3qWTr5oWeyRJ3GEuDUCM9dKBScZN3phF1YAN7B/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUe9Y7xWt0FIicIitMthpxhyEU42swHwYDVR0j BBgwFoAU/E+HYlJMPr+YEm5fV5zLMMN+72MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZTVhYTkzZC03ODdiLTRhMTctODdkMC03ZWY0MWIwZjJkZWYvMC9GQzRGODc2MjUy NEMzRUJGOTgxMjZFNUY1NzlDQ0IzMEMzN0VFRjYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkM0Rjg3NjI1MjRDM0VCRjk4MTI2RTVGNTc5Q0NCMzBDMzdF RUY2My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmU1YWE5M2QtNzg3Yi00YTE3LTg3 ZDAtN2VmNDFiMGYyZGVmLzAvRkM0Rjg3NjI1MjRDM0VCRjk4MTI2RTVGNTc5Q0NC MzBDMzdFRUY2My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHoPLJhtpi+YYNMzxATDLB12ND4NcOWCBfRc YdgilUucQf37sCduJdIiyHWbyhWcP+TLevvWpGsNLogAg7iKDS3JIWv5m6Iw/mMm TZcj0/aWciS0QNecCH2f8v1pnS7i7qBsPUUUO+N5yskJOs7ghlSA6ER6N6GCrIgT MXXl7eRTaZkrFJTGI/8ilQkfcsKEFqjVfbVp4WzdDQnw6MxYJ9YIYWPdyvA0F2Qr OMiZU4WRMZ5G/JlCAxutKf9JNbDajdNpkVSdO6MQ3/aX2TmnUYKW68mT1z4lJKST WF/em6kWFcN+yiTfq6ciPQ8wwBzUZI3rzJ1ylsul0rSRalgEx38= -----END CERTIFICATE-----Generated at Tue Jun 3 23:37:28 2025 by rpki-client