$ rpki-client -vvf repo-rpki.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.mft File: FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.mft (raw, json) Hash identifier: f0S5FPW3artYrATbUWFDAJK4StfUp7Giax/evhQ7Zfw= Subject key identifier: A7:50:9E:BB:31:7F:9E:9C:53:3C:62:1F:DD:98:D4:35:66:2E:B3:0F Authority key identifier: FC:D5:B5:62:FA:ED:9B:9D:67:F9:DE:5D:B7:05:78:BF:DB:00:57:B3 Certificate issuer: /CN=FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3 Certificate serial: 7CA76597CF80CAA400B9CB465254A46C763411F6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.mft Manifest number: 0306 Signing time: Tue 03 Jun 2025 08:12:07 +0000 Manifest this update: Tue 03 Jun 2025 08:07:07 +0000 Manifest next update: Fri 06 Jun 2025 20:06:07 +0000 Files and hashes: 1: 3130332e3135312e3134302e302f32332d3233203d3e20313430343137.roa (hash: 8NA8ztqKmdQKSo6VJIi8+Ky4DaNAGzE3fau0y6GTEzI=) 2: 3130332e3135312e3134302e302f32332d3234203d3e20313430343137.roa (hash: maLwNGdhj2YMExFHAn5+1Sop9522GuyaLGRVR2YiAsA=) 3: FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.crl (hash: UNr/p/F8i7/WpldP4/hYhTZOKhCj6yJLt05Cfg8I3Xs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.crl rsync://repo-rpki.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:06:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:a7:65:97:cf:80:ca:a4:00:b9:cb:46:52:54:a4:6c:76:34:11:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3 Validity Not Before: Jun 3 08:07:07 2025 GMT Not After : Jun 6 20:06:07 2025 GMT Subject: CN=A7509EBB317F9E9C533C621FDD98D435662EB30F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:21:58:53:e9:90:13:ca:63:cc:02:b8:9f:6e: 0e:9a:37:fc:c1:47:9c:97:12:c5:bf:f7:8c:48:37: ec:a7:a2:05:67:14:41:f8:71:a7:50:fe:82:f9:d3: ce:01:84:47:30:93:75:6a:38:03:a5:cf:a2:20:0c: 37:06:f1:1a:0b:2f:13:d4:9c:8e:bc:90:cf:e4:bb: 2b:8a:8f:4e:68:9a:ea:48:cd:73:47:2f:49:1f:6c: 5d:29:dd:90:3c:f5:5a:5e:4c:31:cc:ec:44:0e:c5: 1e:e6:c7:d7:3d:dd:0c:11:05:b2:97:b9:6a:93:f3: 08:8e:8d:fe:23:49:9f:7b:cf:5f:27:21:4b:ed:6f: 90:06:10:db:c1:21:82:0b:82:8f:28:70:4b:5d:55: 42:3c:8f:20:3f:6d:bd:0e:ce:ec:61:cf:a6:11:72: 63:12:49:b6:6b:b0:48:78:cb:24:d6:2e:ff:4e:14: fd:e2:58:1a:db:d1:25:15:72:cf:89:b8:25:07:99: 82:78:68:27:a2:3f:51:1a:8e:56:7d:4e:72:b2:5a: 02:b1:64:47:c9:b1:7a:bc:ee:4a:e0:00:d2:34:0b: 36:f7:eb:4e:aa:b2:8c:18:85:54:5a:32:ec:3c:a6: 3b:d2:f8:dd:7b:39:c7:ac:7f:65:d1:79:bd:cd:a6: be:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:50:9E:BB:31:7F:9E:9C:53:3C:62:1F:DD:98:D4:35:66:2E:B3:0F X509v3 Authority Key Identifier: keyid:FC:D5:B5:62:FA:ED:9B:9D:67:F9:DE:5D:B7:05:78:BF:DB:00:57:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:87:8b:4d:7f:7c:36:a8:75:59:3a:08:5a:41:9e:e7:a5:d6: 26:4e:d4:10:54:5a:b1:d6:ea:06:c6:ba:b4:88:73:ca:94:1f: bd:26:80:0c:0f:c9:ba:e2:aa:0e:d7:1d:90:15:af:b9:e7:19: c2:a7:1e:c1:10:31:37:59:64:4f:6a:56:b9:96:5c:2c:e8:6e: ab:76:fc:21:9d:49:62:9f:6e:21:98:85:05:be:48:c7:94:e9: 8f:ba:a5:ef:d7:d1:5f:16:8d:ad:b0:c4:e5:d9:fa:47:82:df: e5:e6:30:13:60:a0:17:3f:51:80:b0:a7:d8:b1:12:75:b1:dd: d5:ee:f1:40:3f:68:10:3a:e1:b8:6d:7e:66:89:4a:0c:01:27: d6:0b:88:9d:1b:1f:9a:fa:58:ba:0d:ec:fc:4c:3c:7e:34:6c: ea:09:f2:1a:dd:f7:c5:c2:de:21:2d:54:08:04:60:48:40:24: fc:ed:d6:19:6f:fa:db:fc:bf:64:d2:b2:a0:43:16:86:6e:ea: 48:a2:40:41:dd:e1:66:d9:dc:b6:67:83:3f:1f:da:46:6f:ad: b2:69:7b:45:87:cb:76:bf:33:c5:b6:a2:08:22:7e:4b:a0:03: 2c:f8:7b:e5:a3:71:fe:18:4d:71:59:40:d2:6c:29:7b:69:d0: 6b:7e:c6:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfKdll8+AyqQAuctGUlSkbHY0EfYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkNENUI1NjJGQUVEOUI5RDY3RjlERTVEQjcwNTc4QkZE QjAwNTdCMzAeFw0yNTA2MDMwODA3MDdaFw0yNTA2MDYyMDA2MDdaMDMxMTAvBgNV BAMTKEE3NTA5RUJCMzE3RjlFOUM1MzNDNjIxRkREOThENDM1NjYyRUIzMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0IVhT6ZATymPMArifbg6aN/zB R5yXEsW/94xIN+ynogVnFEH4cadQ/oL5084BhEcwk3VqOAOlz6IgDDcG8RoLLxPU nI68kM/kuyuKj05omupIzXNHL0kfbF0p3ZA89VpeTDHM7EQOxR7mx9c93QwRBbKX uWqT8wiOjf4jSZ97z18nIUvtb5AGENvBIYILgo8ocEtdVUI8jyA/bb0Ozuxhz6YR cmMSSbZrsEh4yyTWLv9OFP3iWBrb0SUVcs+JuCUHmYJ4aCeiP1EajlZ9TnKyWgKx ZEfJsXq87krgANI0Czb3606qsowYhVRaMuw8pjvS+N17Ocesf2XReb3Npr5jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUp1CeuzF/npxTPGIf3ZjUNWYusw8wHwYDVR0j BBgwFoAU/NW1Yvrtm51n+d5dtwV4v9sAV7MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NDcwMjZhOS0wYzlhLTRkNzktYWQ2Ny0yYzlkYmQzNjZkMGIvMC9GQ0Q1QjU2MkZB RUQ5QjlENjdGOURFNURCNzA1NzhCRkRCMDA1N0IzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkNENUI1NjJGQUVEOUI5RDY3RjlERTVEQjcwNTc4QkZEQjAw NTdCMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDQ3MDI2YTktMGM5YS00ZDc5LWFk NjctMmM5ZGJkMzY2ZDBiLzAvRkNENUI1NjJGQUVEOUI5RDY3RjlERTVEQjcwNTc4 QkZEQjAwNTdCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALOHi01/fDaodVk6CFpBnuel1iZO1BBUWrHW 6gbGurSIc8qUH70mgAwPybriqg7XHZAVr7nnGcKnHsEQMTdZZE9qVrmWXCzobqt2 /CGdSWKfbiGYhQW+SMeU6Y+6pe/X0V8Wja2wxOXZ+keC3+XmMBNgoBc/UYCwp9ix EnWx3dXu8UA/aBA64bhtfmaJSgwBJ9YLiJ0bH5r6WLoN7PxMPH40bOoJ8hrd98XC 3iEtVAgEYEhAJPzt1hlv+tv8v2TSsqBDFoZu6kiiQEHd4WbZ3LZngz8f2kZvrbJp e0WHy3a/M8W2oggifkugAyz4e+Wjcf4YTXFZQNJsKXtp0Gt+xkU= -----END CERTIFICATE-----Generated at Thu Jun 5 18:24:40 2025 by rpki-client