$ rpki-client -vvf repo-rpki.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.mft File: FC4F8762524C3EBF98126E5F579CCB30C37EEF63.mft (raw, json) Hash identifier: HK2M0QrdeWDVqc7e0BskJMqdq+xIxR6R/SMxz6E75do= Subject key identifier: 1C:56:64:39:5F:22:06:13:8B:58:6B:C5:4C:86:03:CE:C8:86:52:82 Authority key identifier: FC:4F:87:62:52:4C:3E:BF:98:12:6E:5F:57:9C:CB:30:C3:7E:EF:63 Certificate issuer: /CN=FC4F8762524C3EBF98126E5F579CCB30C37EEF63 Certificate serial: 0BBE83D3A5D9DB73E4238F2404DCF11A7EF52BD2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.cer Subject info access: rsync://repo-rpki.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.mft Manifest number: C8 Signing time: Thu 03 Apr 2025 18:30:37 +0000 Manifest this update: Thu 03 Apr 2025 18:25:37 +0000 Manifest next update: Mon 07 Apr 2025 01:03:37 +0000 Files and hashes: 1: 323030313a6466373a616630303a3a2f34382d3438203d3e20313338313432.roa (hash: +DXbNG3+5DIfVUdd5cKU3zcHabiuNmOrVbbKp3YlrN4=) 2: FC4F8762524C3EBF98126E5F579CCB30C37EEF63.crl (hash: po20tP07fsr21rNOYtMJCMjc1W5BIJ8+bRSEsG8T1Bo=) 3: 3130332e3133342e31362e302f32342d3234203d3e20313338313432.roa (hash: 8FJnKt5CgklUKcuR3KEOgR9pFXHp2pdnQAzYXqQX2Ag=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.crl rsync://repo-rpki.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 01:03:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:be:83:d3:a5:d9:db:73:e4:23:8f:24:04:dc:f1:1a:7e:f5:2b:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC4F8762524C3EBF98126E5F579CCB30C37EEF63 Validity Not Before: Apr 3 18:25:37 2025 GMT Not After : Apr 7 01:03:37 2025 GMT Subject: CN=1C5664395F2206138B586BC54C8603CEC8865282 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:58:78:20:e6:08:55:d6:d3:46:8e:1a:aa:ef: 0e:b9:bb:cc:17:d5:de:b0:9a:82:3a:17:58:1b:7c: ea:6e:2b:bd:1d:90:ac:31:26:9a:7f:c1:67:8d:56: 07:96:a0:00:c4:73:8d:82:59:46:f5:b4:cf:2c:8f: fb:65:4a:2f:c9:1d:38:e9:9b:47:8b:5e:0b:60:c4: d1:e4:aa:77:78:3f:b4:63:89:8a:e1:7a:e8:01:1e: 3e:a7:d0:47:51:c9:2e:5c:86:cc:b7:5c:0d:cb:82: 3e:6f:d1:e5:dc:60:a6:4b:26:5b:0b:6c:06:b6:e8: fa:a4:5c:a5:ff:23:87:46:17:05:b3:43:27:70:f0: da:f1:04:5a:88:cf:66:e9:d9:a3:20:54:9d:ed:70: 55:59:c5:d5:a6:85:fd:49:e9:90:2d:31:19:5f:f0: 91:ce:3f:c1:d7:d8:02:53:4e:d3:d3:d1:15:c7:ca: 45:a3:d9:97:dc:30:43:d1:88:95:cf:75:e7:d1:11: 9f:cf:16:5a:43:e5:a8:97:1b:df:aa:ba:90:97:84: 9f:e1:23:88:df:3a:6c:76:14:f4:de:12:4d:75:57: 34:95:f2:f9:8b:74:ea:fd:d4:a7:63:b1:8f:06:68: b5:5f:c0:ce:8b:25:c6:38:b3:19:cf:01:d3:d6:27: 0b:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:56:64:39:5F:22:06:13:8B:58:6B:C5:4C:86:03:CE:C8:86:52:82 X509v3 Authority Key Identifier: keyid:FC:4F:87:62:52:4C:3E:BF:98:12:6E:5F:57:9C:CB:30:C3:7E:EF:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:6b:61:8d:59:ff:b2:73:e4:d3:f4:a2:41:87:ab:f4:5a:7a: cf:08:7a:90:72:1d:cb:f6:27:7f:40:15:9c:8c:61:1e:9e:98: 9e:36:f5:ce:38:1f:65:f1:76:99:22:e8:88:c8:37:70:d2:23: 3e:e8:60:4c:91:f9:64:90:37:4d:c5:50:cd:26:c2:56:df:ca: 38:a3:2d:60:26:a6:77:29:1f:be:f9:9c:24:98:d2:ae:92:11: b6:59:9f:b2:de:42:4b:93:dd:c8:52:68:b8:7c:20:ef:2f:36: 2f:ff:8e:ae:f6:ec:fe:9f:a9:d8:12:f8:c4:59:ef:b3:34:98: fb:7e:21:90:11:e6:84:93:05:e9:e5:11:68:20:70:f0:7b:10: 42:2e:b2:77:27:a2:29:ca:20:69:4b:fc:46:33:dc:6d:6d:e2: 14:43:76:67:c2:cc:cb:96:3f:15:94:e8:75:08:ad:e0:42:37: 3a:16:b6:eb:26:4a:5c:3d:fa:a6:53:19:4a:9d:da:b5:7a:1b: 69:c7:4a:21:1a:20:6a:a1:36:ff:db:22:1f:a2:63:d5:20:c6: 68:9b:ad:ee:34:ce:df:19:e3:8d:52:c3:e4:b9:8f:4c:2b:84: 18:9c:d4:69:c4:2c:5a:cb:b3:2c:74:54:3a:68:68:06:b8:38: 40:3a:4c:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC76D06XZ23PkI48kBNzxGn71K9IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkM0Rjg3NjI1MjRDM0VCRjk4MTI2RTVGNTc5Q0NCMzBD MzdFRUY2MzAeFw0yNTA0MDMxODI1MzdaFw0yNTA0MDcwMTAzMzdaMDMxMTAvBgNV BAMTKDFDNTY2NDM5NUYyMjA2MTM4QjU4NkJDNTRDODYwM0NFQzg4NjUyODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQWHgg5ghV1tNGjhqq7w65u8wX 1d6wmoI6F1gbfOpuK70dkKwxJpp/wWeNVgeWoADEc42CWUb1tM8sj/tlSi/JHTjp m0eLXgtgxNHkqnd4P7RjiYrheugBHj6n0EdRyS5chsy3XA3Lgj5v0eXcYKZLJlsL bAa26PqkXKX/I4dGFwWzQydw8NrxBFqIz2bp2aMgVJ3tcFVZxdWmhf1J6ZAtMRlf 8JHOP8HX2AJTTtPT0RXHykWj2ZfcMEPRiJXPdefREZ/PFlpD5aiXG9+qupCXhJ/h I4jfOmx2FPTeEk11VzSV8vmLdOr91KdjsY8GaLVfwM6LJcY4sxnPAdPWJwtFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHFZkOV8iBhOLWGvFTIYDzsiGUoIwHwYDVR0j BBgwFoAU/E+HYlJMPr+YEm5fV5zLMMN+72MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZTVhYTkzZC03ODdiLTRhMTctODdkMC03ZWY0MWIwZjJkZWYvMC9GQzRGODc2MjUy NEMzRUJGOTgxMjZFNUY1NzlDQ0IzMEMzN0VFRjYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkM0Rjg3NjI1MjRDM0VCRjk4MTI2RTVGNTc5Q0NCMzBDMzdF RUY2My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmU1YWE5M2QtNzg3Yi00YTE3LTg3 ZDAtN2VmNDFiMGYyZGVmLzAvRkM0Rjg3NjI1MjRDM0VCRjk4MTI2RTVGNTc5Q0NC MzBDMzdFRUY2My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABZrYY1Z/7Jz5NP0okGHq/Raes8IepByHcv2 J39AFZyMYR6emJ429c44H2Xxdpki6IjIN3DSIz7oYEyR+WSQN03FUM0mwlbfyjij LWAmpncpH775nCSY0q6SEbZZn7LeQkuT3chSaLh8IO8vNi//jq727P6fqdgS+MRZ 77M0mPt+IZAR5oSTBenlEWggcPB7EEIusncnoinKIGlL/EYz3G1t4hRDdmfCzMuW PxWU6HUIreBCNzoWtusmSlw9+qZTGUqd2rV6G2nHSiEaIGqhNv/bIh+iY9Ugxmib re40zt8Z441Sw+S5j0wrhBic1GnELFrLsyx0VDpoaAa4OEA6TDE= -----END CERTIFICATE-----Generated at Sat Apr 5 16:42:18 2025 by rpki-client