$ rpki-client -vvf repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.mft File: FC646066A689B77054AF95653FA324395357E6A3.mft (raw, json) Hash identifier: 1z3lffSte1hs9i401xKJhAcL4Ug2oGAYhJiebbeVdUI= Subject key identifier: 30:28:03:CD:18:1D:D2:3E:2F:53:45:E5:10:3D:17:86:4B:5E:14:88 Authority key identifier: FC:64:60:66:A6:89:B7:70:54:AF:95:65:3F:A3:24:39:53:57:E6:A3 Certificate issuer: /CN=FC646066A689B77054AF95653FA324395357E6A3 Certificate serial: 2D6FF4B23DA8C5ED4A99A5FF10733EC698767607 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC646066A689B77054AF95653FA324395357E6A3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.mft Manifest number: 04DC Signing time: Wed 04 Jun 2025 10:12:11 +0000 Manifest this update: Wed 04 Jun 2025 10:07:10 +0000 Manifest next update: Sat 07 Jun 2025 18:54:10 +0000 Files and hashes: 1: 31342e3130322e3135322e302f32322d3234203d3e203535363533.roa (hash: tcAOfelZsfvkpX9bUklTUsOMqUIe7iMnYq8XrY6rniM=) 2: 34332e3234392e3134302e302f32322d3234203d3e203535363533.roa (hash: VXuEsrUjBUraWB5GeM4W6dfuMEU9X+IXajG+jXJX29c=) 3: 3230322e35322e31322e302f32322d3234203d3e203535363533.roa (hash: r4N7YVGjSR/vf/OS/81YrBx8jNMdTo+vkJbDS2Aeqlg=) 4: FC646066A689B77054AF95653FA324395357E6A3.crl (hash: WBHxq2MNpB6WLwuoZJqk5Brq397S495cVOT4WXS/Nj0=) 5: 3130332e3235342e3132362e302f32332d3234203d3e203535363533.roa (hash: NPccw/uPbjU6Ng0Kv+MnSicLOTD8CXxnBeD+TitCSK4=) 6: 3230322e31302e36332e302f32342d3234203d3e203535363533.roa (hash: 3x/TagzWw9AEnitF9/BKz1IoUShxY7ix8DtkXTWs+vs=) 7: 3130332e31312e39362e302f32322d3234203d3e203535363533.roa (hash: PVQdneK9Q2r+2YuMkyuS3S7JvDEOimiQ6kS5G4qY3D8=) 8: 323430323a633330303a3a2f33322d3438203d3e203535363533.roa (hash: bGPK4/XEobq1bk7eW0IqEOt5RrHUWnGxVvGe+M2MWVI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.crl rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC646066A689B77054AF95653FA324395357E6A3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 18:54:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:6f:f4:b2:3d:a8:c5:ed:4a:99:a5:ff:10:73:3e:c6:98:76:76:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC646066A689B77054AF95653FA324395357E6A3 Validity Not Before: Jun 4 10:07:10 2025 GMT Not After : Jun 7 18:54:10 2025 GMT Subject: CN=302803CD181DD23E2F5345E5103D17864B5E1488 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e7:8e:0a:cc:63:17:d0:de:6c:d6:c6:f4:09: 90:01:81:81:6a:4a:cb:51:29:3d:a9:68:71:3a:24: cd:cd:0b:6c:93:c6:09:1c:22:40:82:ae:40:4f:43: 4b:56:5a:a6:67:23:39:a4:f0:6a:d0:0b:ba:e6:14: 40:03:c5:32:61:be:d2:b2:f8:3d:11:98:6a:64:7b: a1:89:77:50:8c:c6:83:24:1e:00:ba:8a:1c:c3:56: 0e:a9:74:57:9c:44:4f:b2:09:d5:32:5e:83:4b:5a: 30:17:5f:6a:0d:f3:b3:55:66:a1:0b:5a:85:22:40: 91:76:42:4e:df:ba:93:0d:4c:b9:42:85:01:8e:d4: 5c:40:7e:8b:10:3d:c4:55:b1:a9:d1:91:77:ca:a0: f2:49:f1:55:7d:24:30:46:37:22:fd:5e:f1:61:a3: 8b:de:d0:38:b7:1f:8a:54:b3:d8:0d:10:41:6a:15: f9:ca:21:cc:b9:a9:47:55:48:d7:fa:67:d2:43:59: 87:c8:ec:ae:03:22:a1:87:28:1f:c5:46:40:34:3d: 0e:57:7f:ec:9c:ad:b3:f2:78:58:a3:d6:ca:76:6f: 1b:14:fa:a9:7c:ff:2f:26:56:a9:f8:fe:2e:e6:df: b8:64:f8:7f:bb:9e:11:7a:38:9b:3d:c4:b5:e4:7e: 71:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:28:03:CD:18:1D:D2:3E:2F:53:45:E5:10:3D:17:86:4B:5E:14:88 X509v3 Authority Key Identifier: keyid:FC:64:60:66:A6:89:B7:70:54:AF:95:65:3F:A3:24:39:53:57:E6:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC646066A689B77054AF95653FA324395357E6A3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:60:56:f5:2f:5e:8b:27:fc:8b:ce:90:e6:1f:8d:bf:f4:cd: 86:2c:5d:41:96:2b:ac:f9:9a:12:3e:2c:ba:03:b9:98:6e:04: 6a:8c:a5:2f:af:67:df:5a:29:27:74:54:07:9f:e4:4e:f9:5c: 24:67:c1:2e:57:20:d1:a0:12:97:60:d2:c5:83:6f:24:d2:f0: e6:a9:e3:84:16:f9:30:09:3d:39:79:aa:14:0c:1c:a1:00:99: cc:04:1b:4e:1f:e3:64:56:5a:d7:c2:98:45:67:a7:f3:18:ae: 87:f6:1b:2f:dc:6c:b8:89:25:1e:38:bf:b5:29:54:2b:00:c3: 99:7a:8c:ff:35:79:f8:57:f3:52:d8:0e:fc:1c:76:7e:ac:f8: 61:88:ee:a6:14:31:b2:c6:f5:60:09:c9:09:89:92:4a:90:af: 1d:00:2e:1a:d9:56:bb:c8:14:d0:3c:19:d1:66:61:99:70:1a: 87:b0:74:bb:66:3e:f4:4a:6d:93:f0:ee:ec:6b:53:59:27:e8: 64:3c:95:7b:7d:40:b6:69:2b:99:92:99:ac:67:88:3b:0d:a0: 46:c2:e6:04:1d:61:c1:c7:41:80:57:7e:f8:da:8d:d3:d5:1d: a3:e7:e6:32:ec:fa:0c:ca:c3:d4:77:e8:85:ac:e6:fa:38:48: 55:77:dc:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULW/0sj2oxe1KmaX/EHM+xph2dgcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkM2NDYwNjZBNjg5Qjc3MDU0QUY5NTY1M0ZBMzI0Mzk1 MzU3RTZBMzAeFw0yNTA2MDQxMDA3MTBaFw0yNTA2MDcxODU0MTBaMDMxMTAvBgNV BAMTKDMwMjgwM0NEMTgxREQyM0UyRjUzNDVFNTEwM0QxNzg2NEI1RTE0ODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO544KzGMX0N5s1sb0CZABgYFq SstRKT2paHE6JM3NC2yTxgkcIkCCrkBPQ0tWWqZnIzmk8GrQC7rmFEADxTJhvtKy +D0RmGpke6GJd1CMxoMkHgC6ihzDVg6pdFecRE+yCdUyXoNLWjAXX2oN87NVZqEL WoUiQJF2Qk7fupMNTLlChQGO1FxAfosQPcRVsanRkXfKoPJJ8VV9JDBGNyL9XvFh o4ve0Di3H4pUs9gNEEFqFfnKIcy5qUdVSNf6Z9JDWYfI7K4DIqGHKB/FRkA0PQ5X f+ycrbPyeFij1sp2bxsU+ql8/y8mVqn4/i7m37hk+H+7nhF6OJs9xLXkfnFlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMCgDzRgd0j4vU0XlED0XhkteFIgwHwYDVR0j BBgwFoAU/GRgZqaJt3BUr5VlP6MkOVNX5qMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OTc0NjVlMy03OGEwLTQ5NjUtYWUxNC1lNGNiNGQwZmMxODUvMC9GQzY0NjA2NkE2 ODlCNzcwNTRBRjk1NjUzRkEzMjQzOTUzNTdFNkEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkM2NDYwNjZBNjg5Qjc3MDU0QUY5NTY1M0ZBMzI0Mzk1MzU3 RTZBMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzk3NDY1ZTMtNzhhMC00OTY1LWFl MTQtZTRjYjRkMGZjMTg1LzAvRkM2NDYwNjZBNjg5Qjc3MDU0QUY5NTY1M0ZBMzI0 Mzk1MzU3RTZBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJxgVvUvXosn/IvOkOYfjb/0zYYsXUGWK6z5 mhI+LLoDuZhuBGqMpS+vZ99aKSd0VAef5E75XCRnwS5XINGgEpdg0sWDbyTS8Oap 44QW+TAJPTl5qhQMHKEAmcwEG04f42RWWtfCmEVnp/MYrof2Gy/cbLiJJR44v7Up VCsAw5l6jP81efhX81LYDvwcdn6s+GGI7qYUMbLG9WAJyQmJkkqQrx0ALhrZVrvI FNA8GdFmYZlwGoewdLtmPvRKbZPw7uxrU1kn6GQ8lXt9QLZpK5mSmaxniDsNoEbC 5gQdYcHHQYBXfvjajdPVHaPn5jLs+gzKw9R36IWs5vo4SFV33AE= -----END CERTIFICATE-----Generated at Fri Jun 6 16:49:11 2025 by rpki-client