$ rpki-client -vvf repo-rpki.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.mft File: FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.mft (raw, json) Hash identifier: cB5D8+JTJ5mKNVyfxvhBWXZkPK1g65xv0cOsKzyPjNE= Subject key identifier: 1F:42:18:85:AC:D7:FA:19:1B:C5:C0:74:32:15:5F:1D:99:6F:C8:16 Authority key identifier: FD:18:E3:EC:B5:F2:28:5C:07:51:C4:8E:AF:23:EF:21:0B:A8:FD:CC Certificate issuer: /CN=FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC Certificate serial: 3B65C660A9EA597A5942700A323A8D39F9CFA121 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.mft Manifest number: C9 Signing time: Thu 05 Jun 2025 12:51:11 +0000 Manifest this update: Thu 05 Jun 2025 12:46:11 +0000 Manifest next update: Sun 08 Jun 2025 14:08:11 +0000 Files and hashes: 1: FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.crl (hash: w9UV9NYbHROtstOfHF1Mxctr8vj6tyJQeXSEgldgO90=) 2: 3135372e32302e39352e302f32342d3234203d3e20313431363032.roa (hash: 88y84elDiek3O/IhTaNMS2vLlPQVqlAnqgDoLBdJafc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.crl rsync://repo-rpki.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 14:08:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:65:c6:60:a9:ea:59:7a:59:42:70:0a:32:3a:8d:39:f9:cf:a1:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC Validity Not Before: Jun 5 12:46:11 2025 GMT Not After : Jun 8 14:08:11 2025 GMT Subject: CN=1F421885ACD7FA191BC5C07432155F1D996FC816 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:bc:93:92:8b:cc:08:72:d2:85:ff:f3:be:46: 43:ed:ed:98:13:81:86:f7:d7:07:68:5e:a2:99:32: ac:8e:e4:b5:03:40:a8:0f:75:03:d4:0b:23:43:46: 3c:81:55:fa:72:38:c1:93:fa:ea:25:6c:a7:82:3a: 98:62:cb:9f:02:5d:28:2b:94:4c:a0:4c:f9:dd:5a: 82:5f:a9:79:69:41:dc:a5:47:d6:10:f9:5a:04:ff: 4f:51:24:b6:a0:4f:59:38:57:ac:16:da:ac:68:fd: cd:2e:32:59:b3:ab:ae:eb:2a:b9:d7:6e:e2:04:44: 02:99:3b:dd:a5:28:11:53:f7:d8:03:7e:59:38:39: 12:68:dc:b3:c4:e5:09:5d:15:0e:a3:55:36:a1:7a: f2:db:5c:f4:83:28:0d:86:1f:0d:e3:b8:42:5e:9f: 08:01:f6:c7:a1:87:2e:15:d4:60:84:a5:f1:83:8b: 85:16:b6:d5:dc:c8:de:4f:3e:e4:c8:57:32:fd:a7: 6f:a6:49:6f:e7:a6:f0:71:32:23:9a:bf:a7:ea:81: 14:61:a2:9d:2f:91:52:b7:9d:c9:fc:1e:50:c2:53: 39:2a:05:fd:92:4b:e1:d4:b0:c0:d0:ad:07:52:2f: b6:3c:5a:28:02:6f:78:76:fa:95:32:a7:21:3c:8b: 48:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:42:18:85:AC:D7:FA:19:1B:C5:C0:74:32:15:5F:1D:99:6F:C8:16 X509v3 Authority Key Identifier: keyid:FD:18:E3:EC:B5:F2:28:5C:07:51:C4:8E:AF:23:EF:21:0B:A8:FD:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:1e:70:c6:af:b4:57:9b:fc:1b:d0:42:0c:b6:c9:2a:8f:26: 76:e3:60:ce:e7:01:81:5b:47:f2:3a:34:ca:83:74:9a:97:8b: f4:04:38:eb:1a:0d:2d:8f:49:04:58:48:aa:04:6c:a2:c8:44: 37:94:c8:65:28:d9:8a:ef:e6:10:18:90:da:fe:a2:d1:35:74: 04:13:ac:0e:ca:d8:62:5a:66:35:2c:5e:d8:cf:20:6d:45:87: 3c:47:d4:b8:8c:2b:bc:c4:e6:f9:38:00:be:e5:78:13:39:53: a1:92:d6:bc:a2:46:9d:3e:51:05:83:33:71:dd:25:9d:fc:5e: 4b:a0:ef:94:04:cf:3a:89:eb:ab:e2:3b:f5:75:91:5a:47:9b: f1:bf:75:ed:c0:a9:d7:75:20:3f:74:44:b3:b9:fb:63:e2:e5: 53:85:7c:44:81:d4:57:b4:b0:9b:ab:2d:49:a1:d6:b9:ba:97: cc:85:e3:18:ac:e4:d6:1f:33:8b:7d:5c:f6:40:0d:46:c5:fb: 8f:23:92:5f:ad:11:fc:e3:f7:72:cf:46:78:9a:68:4c:42:65: ec:ca:f0:4d:d7:d2:d9:cf:be:04:4e:4b:38:eb:07:85:4d:77: fb:00:fc:4b:01:1c:cd:6b:d0:37:45:7c:51:ce:a8:ba:47:94: 5b:11:d5:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO2XGYKnqWXpZQnAKMjqNOfnPoSEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkQxOEUzRUNCNUYyMjg1QzA3NTFDNDhFQUYyM0VGMjEw QkE4RkRDQzAeFw0yNTA2MDUxMjQ2MTFaFw0yNTA2MDgxNDA4MTFaMDMxMTAvBgNV BAMTKDFGNDIxODg1QUNEN0ZBMTkxQkM1QzA3NDMyMTU1RjFEOTk2RkM4MTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmvJOSi8wIctKF//O+RkPt7ZgT gYb31wdoXqKZMqyO5LUDQKgPdQPUCyNDRjyBVfpyOMGT+uolbKeCOphiy58CXSgr lEygTPndWoJfqXlpQdylR9YQ+VoE/09RJLagT1k4V6wW2qxo/c0uMlmzq67rKrnX buIERAKZO92lKBFT99gDflk4ORJo3LPE5QldFQ6jVTahevLbXPSDKA2GHw3juEJe nwgB9sehhy4V1GCEpfGDi4UWttXcyN5PPuTIVzL9p2+mSW/npvBxMiOav6fqgRRh op0vkVK3ncn8HlDCUzkqBf2SS+HUsMDQrQdSL7Y8WigCb3h2+pUypyE8i0h/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUH0IYhazX+hkbxcB0MhVfHZlvyBYwHwYDVR0j BBgwFoAU/Rjj7LXyKFwHUcSOryPvIQuo/cwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YWUxM2JhYy05MWMxLTQ2M2ItODMzMy02NGVlYzZkMjc5N2UvMC9GRDE4RTNFQ0I1 RjIyODVDMDc1MUM0OEVBRjIzRUYyMTBCQThGRENDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkQxOEUzRUNCNUYyMjg1QzA3NTFDNDhFQUYyM0VGMjEwQkE4 RkRDQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGFlMTNiYWMtOTFjMS00NjNiLTgz MzMtNjRlZWM2ZDI3OTdlLzAvRkQxOEUzRUNCNUYyMjg1QzA3NTFDNDhFQUYyM0VG MjEwQkE4RkRDQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFMecMavtFeb/BvQQgy2ySqPJnbjYM7nAYFb R/I6NMqDdJqXi/QEOOsaDS2PSQRYSKoEbKLIRDeUyGUo2Yrv5hAYkNr+otE1dAQT rA7K2GJaZjUsXtjPIG1FhzxH1LiMK7zE5vk4AL7leBM5U6GS1ryiRp0+UQWDM3Hd JZ38Xkug75QEzzqJ66viO/V1kVpHm/G/de3Aqdd1ID90RLO5+2Pi5VOFfESB1Fe0 sJurLUmh1rm6l8yF4xis5NYfM4t9XPZADUbF+48jkl+tEfzj93LPRniaaExCZezK 8E3X0tnPvgROSzjrB4VNd/sA/EsBHM1r0DdFfFHOqLpHlFsR1Z8= -----END CERTIFICATE-----Generated at Sat Jun 7 07:32:13 2025 by rpki-client