$ rpki-client -vvf repo-rpki.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.mft File: FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.mft (raw, json) Hash identifier: sjuigqGt4nJKGuNIhaJ3Z2fX04HxrSE5ZngAlGn/hPA= Subject key identifier: C2:18:EF:AE:0C:5C:76:CD:1A:EE:3C:8D:33:6F:43:C6:8B:CE:01:40 Authority key identifier: FD:18:E3:EC:B5:F2:28:5C:07:51:C4:8E:AF:23:EF:21:0B:A8:FD:CC Certificate issuer: /CN=FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC Certificate serial: 4C868AAAEB948576524BC31DCFC5A16D9D167D14 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.mft Manifest number: B3 Signing time: Thu 17 Apr 2025 10:01:10 +0000 Manifest this update: Thu 17 Apr 2025 09:56:10 +0000 Manifest next update: Sun 20 Apr 2025 21:23:10 +0000 Files and hashes: 1: 3135372e32302e39352e302f32342d3234203d3e20313431363032.roa (hash: vbNqRg8Y2DI2wXMSlXABdq04S+a/OL3FdAA8x2z1HiM=) 2: FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.crl (hash: pe2je0WY1BXYtadiml9VZTau/EZqVK/9DEPR/hx4il4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.crl rsync://repo-rpki.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 19:02:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:86:8a:aa:eb:94:85:76:52:4b:c3:1d:cf:c5:a1:6d:9d:16:7d:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC Validity Not Before: Apr 17 09:56:10 2025 GMT Not After : Apr 20 21:23:10 2025 GMT Subject: CN=C218EFAE0C5C76CD1AEE3C8D336F43C68BCE0140 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:9f:59:d7:be:55:22:27:34:d1:91:63:96:47: d7:96:ae:c3:23:e3:b7:89:66:12:66:6b:49:9a:2d: f1:01:cb:d1:24:5a:fa:e9:fe:c5:e9:e2:40:d4:e5: 94:54:be:1d:6b:14:ee:9b:74:01:ec:20:14:30:65: 6e:6f:12:29:b5:6e:c4:69:f9:48:e2:83:5f:4a:54: fb:f9:bb:ec:1a:b5:1e:3e:30:a9:3f:87:ea:9f:99: f4:f1:ad:87:0e:56:49:2b:17:cd:16:56:26:64:89: 0c:96:0d:c6:25:1d:4e:4c:ef:5a:e3:33:15:04:a7: a2:61:14:de:cf:9b:4a:f5:ba:fe:61:dd:4d:63:52: a0:51:15:de:58:40:28:7c:ad:ef:60:3a:dc:ed:11: db:a5:5c:ca:59:eb:60:06:8f:89:7f:3b:57:d2:6e: 18:89:5d:14:b1:d6:1a:02:89:cc:eb:e9:db:93:05: 24:d5:7f:d7:b4:05:16:a2:0b:16:51:8d:c1:2a:e7: 1b:98:50:61:fe:9b:1c:dd:ef:46:94:60:d6:dc:3a: 40:58:91:6f:ae:e5:1a:a7:68:f9:11:90:77:f2:f5: ad:a3:5d:c5:37:96:74:fe:fa:55:1c:15:08:62:e9: 0a:b0:d9:7b:9e:10:92:aa:70:2c:26:94:39:6b:5a: 53:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:18:EF:AE:0C:5C:76:CD:1A:EE:3C:8D:33:6F:43:C6:8B:CE:01:40 X509v3 Authority Key Identifier: keyid:FD:18:E3:EC:B5:F2:28:5C:07:51:C4:8E:AF:23:EF:21:0B:A8:FD:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:6b:96:8e:2a:17:e7:9c:e6:89:31:78:5a:b6:20:94:75:94: 9b:1b:21:f7:f4:e5:25:4e:ca:38:28:21:50:18:13:38:16:25: 4e:fa:bb:62:d6:ec:b6:d8:71:a5:51:5b:7f:e9:ec:38:3a:2b: 67:d4:04:ea:02:46:ab:36:6e:6a:17:7a:e6:c4:d2:95:ac:5a: 2a:bd:d6:a6:d4:33:e2:fa:38:63:f4:f5:ed:11:ec:eb:c4:a0: 21:6c:43:a9:85:ab:4b:4c:8c:a7:b6:17:5a:b3:48:26:97:eb: ae:5b:62:0b:cf:21:b0:81:43:9f:e7:c4:7a:0d:49:f6:9d:28: 6b:f5:81:7b:75:36:ec:b8:36:22:9d:9c:b1:2f:ec:6c:f6:a7: 7a:44:dd:90:d3:d7:77:8d:fd:b9:10:ba:77:34:6b:7d:ac:45: 8a:fd:16:d8:0e:1a:df:f6:ef:d4:96:dd:fe:cd:cd:44:37:3c: 9c:62:4a:ff:89:6a:7d:19:77:a7:a9:8f:8a:e7:11:9e:91:14: 5e:1c:71:be:b0:61:74:fb:62:9e:de:c2:b7:96:11:83:39:43: 7e:50:e4:43:4f:73:f2:9c:01:6d:ef:bc:1f:d6:e7:f4:3a:65: 69:94:f5:0d:22:f0:4f:47:ac:d7:92:18:b0:f0:d5:72:72:9f: ad:99:14:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTIaKquuUhXZSS8Mdz8WhbZ0WfRQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkQxOEUzRUNCNUYyMjg1QzA3NTFDNDhFQUYyM0VGMjEw QkE4RkRDQzAeFw0yNTA0MTcwOTU2MTBaFw0yNTA0MjAyMTIzMTBaMDMxMTAvBgNV BAMTKEMyMThFRkFFMEM1Qzc2Q0QxQUVFM0M4RDMzNkY0M0M2OEJDRTAxNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3n1nXvlUiJzTRkWOWR9eWrsMj 47eJZhJma0maLfEBy9EkWvrp/sXp4kDU5ZRUvh1rFO6bdAHsIBQwZW5vEim1bsRp +Ujig19KVPv5u+watR4+MKk/h+qfmfTxrYcOVkkrF80WViZkiQyWDcYlHU5M71rj MxUEp6JhFN7Pm0r1uv5h3U1jUqBRFd5YQCh8re9gOtztEdulXMpZ62AGj4l/O1fS bhiJXRSx1hoCiczr6duTBSTVf9e0BRaiCxZRjcEq5xuYUGH+mxzd70aUYNbcOkBY kW+u5RqnaPkRkHfy9a2jXcU3lnT++lUcFQhi6Qqw2XueEJKqcCwmlDlrWlMtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwhjvrgxcds0a7jyNM29DxovOAUAwHwYDVR0j BBgwFoAU/Rjj7LXyKFwHUcSOryPvIQuo/cwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YWUxM2JhYy05MWMxLTQ2M2ItODMzMy02NGVlYzZkMjc5N2UvMC9GRDE4RTNFQ0I1 RjIyODVDMDc1MUM0OEVBRjIzRUYyMTBCQThGRENDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkQxOEUzRUNCNUYyMjg1QzA3NTFDNDhFQUYyM0VGMjEwQkE4 RkRDQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGFlMTNiYWMtOTFjMS00NjNiLTgz MzMtNjRlZWM2ZDI3OTdlLzAvRkQxOEUzRUNCNUYyMjg1QzA3NTFDNDhFQUYyM0VG MjEwQkE4RkRDQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAZrlo4qF+ec5okxeFq2IJR1lJsbIff05SVO yjgoIVAYEzgWJU76u2LW7LbYcaVRW3/p7Dg6K2fUBOoCRqs2bmoXeubE0pWsWiq9 1qbUM+L6OGP09e0R7OvEoCFsQ6mFq0tMjKe2F1qzSCaX665bYgvPIbCBQ5/nxHoN SfadKGv1gXt1Nuy4NiKdnLEv7Gz2p3pE3ZDT13eN/bkQunc0a32sRYr9FtgOGt/2 79SW3f7NzUQ3PJxiSv+Jan0Zd6epj4rnEZ6RFF4ccb6wYXT7Yp7ewreWEYM5Q35Q 5ENPc/KcAW3vvB/W5/Q6ZWmU9Q0i8E9HrNeSGLDw1XJyn62ZFCg= -----END CERTIFICATE-----Generated at Fri Apr 18 07:40:26 2025 by rpki-client