$ rpki-client -vvf repo-rpki.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/FA86E23853549D2EF1D9F9C9222147A550E36A38.mft File: FA86E23853549D2EF1D9F9C9222147A550E36A38.mft (raw, json) Hash identifier: pClgCfAN1gc66sDMJR4KTU4LoE++EMx2A1OzvHTrjN8= Subject key identifier: 86:25:6A:C0:59:73:E1:9D:B8:B1:EE:7D:B4:D3:7D:75:31:92:56:7C Authority key identifier: FA:86:E2:38:53:54:9D:2E:F1:D9:F9:C9:22:21:47:A5:50:E3:6A:38 Certificate issuer: /CN=FA86E23853549D2EF1D9F9C9222147A550E36A38 Certificate serial: 79FE033E54DF44DA1E6A2B952211AF576B1C147C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA86E23853549D2EF1D9F9C9222147A550E36A38.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/FA86E23853549D2EF1D9F9C9222147A550E36A38.mft Manifest number: 01A3 Signing time: Thu 05 Jun 2025 19:19:31 +0000 Manifest this update: Thu 05 Jun 2025 19:14:31 +0000 Manifest next update: Mon 09 Jun 2025 03:52:31 +0000 Files and hashes: 1: 3130332e35352e32392e302f32342d3234203d3e20313530343837.roa (hash: Zcui17ZIB7y9MI9lypagYjRYe4mnYqSwkXUNcZtsFwo=) 2: 3130332e35352e32382e302f32332d3234203d3e20313530343837.roa (hash: 8iSBjCuogDhcUBYZIPXuvYllDkYyp+uiEvzE8S7/ER4=) 3: 3130332e35352e32382e302f32342d3234203d3e20313530343837.roa (hash: RjVxvxxbyDiQSv718+JovDu9zNSEKhSMEBDdXzJXwvE=) 4: FA86E23853549D2EF1D9F9C9222147A550E36A38.crl (hash: SAonk4x19CnYVapIy1eXdr8Fisww8sJiZZCFYsuNHyg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/FA86E23853549D2EF1D9F9C9222147A550E36A38.crl rsync://repo-rpki.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/FA86E23853549D2EF1D9F9C9222147A550E36A38.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA86E23853549D2EF1D9F9C9222147A550E36A38.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 03:52:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:fe:03:3e:54:df:44:da:1e:6a:2b:95:22:11:af:57:6b:1c:14:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA86E23853549D2EF1D9F9C9222147A550E36A38 Validity Not Before: Jun 5 19:14:31 2025 GMT Not After : Jun 9 03:52:31 2025 GMT Subject: CN=86256AC05973E19DB8B1EE7DB4D37D753192567C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:44:da:1e:b7:b2:6b:ae:4e:4f:df:93:38:44: 13:28:6c:01:ca:a3:51:66:f0:ff:04:11:86:3c:d2: 5f:4b:33:26:e2:15:6d:9d:ed:6c:94:31:50:94:e1: 06:b2:61:a7:69:1b:ca:a4:be:32:31:4f:d5:ca:2b: 72:a5:94:c1:b0:64:59:15:d3:74:77:a0:44:25:7f: 66:b5:e7:e5:da:4d:9a:0a:8c:54:98:8b:17:2e:e4: b9:08:83:79:5b:9b:42:4c:f7:41:bd:c4:8f:5b:4d: 3b:a3:4d:04:0f:a6:53:ff:ec:a8:c2:b0:2f:6d:bc: 55:55:e2:23:76:00:2e:f0:e0:07:10:29:12:74:99: b2:3c:6c:af:2d:03:eb:bc:6f:06:87:79:72:51:73: 74:6a:b5:a7:eb:21:38:b9:e8:97:af:a2:44:b5:c5: bc:10:d0:32:be:22:b9:19:90:a6:7d:c1:85:db:c2: d0:42:5f:d2:cc:f6:e1:e8:95:67:29:9b:e1:50:ca: ee:34:5f:06:0e:c1:a2:47:78:ee:af:c4:a0:cd:28: c4:b0:88:4e:6f:86:21:a9:f3:e7:b2:a9:dc:04:b2: d1:8d:75:11:4e:19:51:be:d7:56:c6:07:69:e9:53: b3:6d:bf:a8:59:3f:15:4c:9f:ec:86:57:38:59:cf: 19:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:25:6A:C0:59:73:E1:9D:B8:B1:EE:7D:B4:D3:7D:75:31:92:56:7C X509v3 Authority Key Identifier: keyid:FA:86:E2:38:53:54:9D:2E:F1:D9:F9:C9:22:21:47:A5:50:E3:6A:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/FA86E23853549D2EF1D9F9C9222147A550E36A38.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA86E23853549D2EF1D9F9C9222147A550E36A38.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/FA86E23853549D2EF1D9F9C9222147A550E36A38.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:68:50:f5:37:38:5f:90:11:c1:7b:14:9f:16:6d:c6:46:13: bd:ef:0e:01:9c:43:ec:e7:ed:ab:5f:2a:23:a1:bd:09:2b:42: c7:84:be:6c:fc:2e:dd:78:9b:2f:f6:b2:d5:e9:c7:d4:40:5c: d2:fa:bb:f7:7a:5e:80:ab:b3:ed:7f:03:c8:2f:d1:2f:35:da: 95:61:a7:cf:af:07:b1:ce:a4:0d:80:2c:25:5d:a0:52:65:98: fb:79:0c:5e:b5:06:a8:de:41:df:fb:b7:03:d1:e3:b9:b1:9c: de:41:97:06:3a:23:c1:56:7e:bd:ec:65:54:24:8f:2b:5b:2f: e7:ff:e8:bd:2c:61:fb:69:f6:81:2c:bd:52:3e:d7:0a:f2:3a: 2a:49:c4:49:f1:23:f0:e1:16:53:f9:9a:d8:7b:45:73:f5:d8: a2:77:90:fe:e1:70:22:f9:89:74:8c:2a:0a:ec:69:e7:88:c2: 04:bf:e8:6b:2b:73:47:8d:8d:72:bd:b0:a7:07:d1:c9:9f:5c: b0:94:b5:6f:6b:67:4f:67:ad:db:0f:35:f9:5e:e4:08:95:0f: a7:bc:a5:24:0f:51:aa:68:1c:bd:5f:81:82:53:d7:79:44:a5: 54:cd:35:9b:41:bc:d9:27:20:6e:eb:86:7f:51:0b:88:3b:d7: 62:e8:3f:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUef4DPlTfRNoeaiuVIhGvV2scFHwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE4NkUyMzg1MzU0OUQyRUYxRDlGOUM5MjIyMTQ3QTU1 MEUzNkEzODAeFw0yNTA2MDUxOTE0MzFaFw0yNTA2MDkwMzUyMzFaMDMxMTAvBgNV BAMTKDg2MjU2QUMwNTk3M0UxOURCOEIxRUU3REI0RDM3RDc1MzE5MjU2N0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxRNoet7Jrrk5P35M4RBMobAHK o1Fm8P8EEYY80l9LMybiFW2d7WyUMVCU4QayYadpG8qkvjIxT9XKK3KllMGwZFkV 03R3oEQlf2a15+XaTZoKjFSYixcu5LkIg3lbm0JM90G9xI9bTTujTQQPplP/7KjC sC9tvFVV4iN2AC7w4AcQKRJ0mbI8bK8tA+u8bwaHeXJRc3RqtafrITi56JevokS1 xbwQ0DK+IrkZkKZ9wYXbwtBCX9LM9uHolWcpm+FQyu40XwYOwaJHeO6vxKDNKMSw iE5vhiGp8+eyqdwEstGNdRFOGVG+11bGB2npU7Ntv6hZPxVMn+yGVzhZzxlfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhiVqwFlz4Z24se59tNN9dTGSVnwwHwYDVR0j BBgwFoAU+obiOFNUnS7x2fnJIiFHpVDjajgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NTA0NzkzYy1jMjA5LTQ2OWEtOGUzYy1lYjNmNWE4Mzg2M2YvMC9GQTg2RTIzODUz NTQ5RDJFRjFEOUY5QzkyMjIxNDdBNTUwRTM2QTM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkE4NkUyMzg1MzU0OUQyRUYxRDlGOUM5MjIyMTQ3QTU1MEUz NkEzOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTUwNDc5M2MtYzIwOS00NjlhLThl M2MtZWIzZjVhODM4NjNmLzAvRkE4NkUyMzg1MzU0OUQyRUYxRDlGOUM5MjIyMTQ3 QTU1MEUzNkEzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAERoUPU3OF+QEcF7FJ8WbcZGE73vDgGcQ+zn 7atfKiOhvQkrQseEvmz8Lt14my/2stXpx9RAXNL6u/d6XoCrs+1/A8gv0S812pVh p8+vB7HOpA2ALCVdoFJlmPt5DF61BqjeQd/7twPR47mxnN5BlwY6I8FWfr3sZVQk jytbL+f/6L0sYftp9oEsvVI+1wryOipJxEnxI/DhFlP5mth7RXP12KJ3kP7hcCL5 iXSMKgrsaeeIwgS/6Gsrc0eNjXK9sKcH0cmfXLCUtW9rZ09nrdsPNfle5AiVD6e8 pSQPUapoHL1fgYJT13lEpVTNNZtBvNknIG7rhn9RC4g712LoPwQ= -----END CERTIFICATE-----Generated at Sat Jun 7 21:14:53 2025 by rpki-client