$ rpki-client -vvf repo-rpki.idnic.net/repo/ede4719a-ace4-41f2-a070-8de3192b7f49/0/FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.mft File: FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.mft (raw, json) Hash identifier: mJKpOa4e2xI99Kv2beydxVFbdMIbmRW4B/4TFEzxNmo= Subject key identifier: 3B:46:44:8D:A0:14:A5:3B:93:E5:54:1A:F3:FC:AD:BB:0C:07:5D:32 Authority key identifier: FC:31:DB:70:F7:B2:F1:7F:13:E9:2A:2E:7B:AE:55:54:79:2E:FB:BF Certificate issuer: /CN=FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF Certificate serial: 4A93A8E6930FBE3AF69A3129FDAEAC9469302288 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ede4719a-ace4-41f2-a070-8de3192b7f49/0/FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.mft Manifest number: 04D8 Signing time: Fri 06 Jun 2025 15:10:42 +0000 Manifest this update: Fri 06 Jun 2025 15:05:42 +0000 Manifest next update: Tue 10 Jun 2025 02:28:42 +0000 Files and hashes: 1: 3230322e36312e39382e302f32332d3234203d3e203234353337.roa (hash: 7v+UWewpBXKuzE8AR/fYejkKyBNOrEBvR5vrqtJwA4s=) 2: FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.crl (hash: KCd08S/MNfq5iheZupejo+HuF6O93uNfAjvTdp58OW0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ede4719a-ace4-41f2-a070-8de3192b7f49/0/FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.crl rsync://repo-rpki.idnic.net/repo/ede4719a-ace4-41f2-a070-8de3192b7f49/0/FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 22:57:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:93:a8:e6:93:0f:be:3a:f6:9a:31:29:fd:ae:ac:94:69:30:22:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF Validity Not Before: Jun 6 15:05:42 2025 GMT Not After : Jun 10 02:28:42 2025 GMT Subject: CN=3B46448DA014A53B93E5541AF3FCADBB0C075D32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c5:80:f9:e2:dd:3b:05:3b:ae:b5:54:fa:45: 8c:0a:4f:0f:ab:4b:bf:b1:aa:50:e3:dc:e0:0a:8a: 9a:6e:f3:55:fd:11:eb:b4:d5:76:90:b4:b5:92:fe: 5d:f9:80:25:8d:68:c8:d1:d6:57:42:13:ef:73:c4: b7:d8:a4:f0:9e:20:a8:28:41:78:85:41:f3:d1:6f: a4:af:b2:f6:91:8d:79:37:e8:f6:dc:9c:b7:3e:4b: ee:a2:31:a1:a8:d8:6e:73:bf:4d:e2:9a:a7:f4:76: 6b:4b:3e:74:7a:ef:76:56:c0:f9:cb:d3:52:55:22: 66:9a:dc:1e:ba:2a:7c:c1:fd:f4:48:8d:85:7b:1d: 19:b6:09:33:4a:20:11:b1:16:79:0d:11:7d:d7:45: 52:3b:8f:9c:90:10:dc:98:28:2b:b8:5a:63:71:0b: 61:00:2c:51:95:2b:e0:8c:75:20:28:a1:c9:fd:d1: 59:92:69:15:1b:c3:e8:7e:06:64:2c:ad:a2:fd:38: 08:00:f6:0b:91:7c:b9:ce:f0:c3:6d:20:54:a8:d4: 4d:aa:f6:3b:7b:1e:9f:cf:2d:68:00:44:ae:d1:5e: ef:d7:8f:7d:31:07:b2:20:00:66:b1:2d:f6:58:01: 4b:29:25:3d:1c:dc:26:e6:b9:fe:4d:4b:5e:b6:67: 85:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:46:44:8D:A0:14:A5:3B:93:E5:54:1A:F3:FC:AD:BB:0C:07:5D:32 X509v3 Authority Key Identifier: keyid:FC:31:DB:70:F7:B2:F1:7F:13:E9:2A:2E:7B:AE:55:54:79:2E:FB:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ede4719a-ace4-41f2-a070-8de3192b7f49/0/FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ede4719a-ace4-41f2-a070-8de3192b7f49/0/FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:c9:7c:71:58:91:e2:8e:0f:c0:e2:b2:27:6b:42:79:1f:8b: e0:fd:eb:3c:78:cb:6d:3f:6e:e4:cf:2a:39:31:e1:0f:9b:16: a2:19:87:28:e6:b8:5d:2f:4c:9d:82:1c:41:ce:4e:0d:90:1e: 1c:bc:34:64:92:b1:b9:29:9c:af:1a:05:da:bf:7a:06:d4:df: da:11:93:c1:d8:a3:b2:45:82:eb:9d:d5:b3:25:57:c9:01:d5: c7:42:ce:f2:49:3e:fc:69:a0:40:e4:8d:c6:9e:41:10:e7:33: a5:ec:2a:01:27:d3:e1:35:8c:db:16:8b:79:1d:69:58:a3:c4: 72:f7:6c:e3:46:f4:15:69:e3:7a:33:ae:c1:63:8a:19:e7:8f: e6:d4:80:0b:95:6a:7a:23:c5:f2:bf:6c:2f:8a:05:51:bd:a6: fe:03:e0:87:bf:2c:c0:cf:f4:8a:af:6c:81:da:09:cb:bf:7b: f5:8d:70:dc:89:cf:cc:2d:b9:5d:f1:59:a5:d9:d5:22:41:6b: f1:dd:4d:13:27:3e:66:55:aa:88:1e:b2:ac:0b:be:66:71:a0: de:17:49:aa:5a:db:49:5a:64:d1:c3:69:b7:3c:58:76:5d:5a: ea:cb:55:b0:e9:98:44:d7:2c:69:ad:10:0d:93:13:8a:8b:71: c9:bc:87:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSpOo5pMPvjr2mjEp/a6slGkwIogwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkMzMURCNzBGN0IyRjE3RjEzRTkyQTJFN0JBRTU1NTQ3 OTJFRkJCRjAeFw0yNTA2MDYxNTA1NDJaFw0yNTA2MTAwMjI4NDJaMDMxMTAvBgNV BAMTKDNCNDY0NDhEQTAxNEE1M0I5M0U1NTQxQUYzRkNBREJCMEMwNzVEMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSxYD54t07BTuutVT6RYwKTw+r S7+xqlDj3OAKippu81X9Eeu01XaQtLWS/l35gCWNaMjR1ldCE+9zxLfYpPCeIKgo QXiFQfPRb6SvsvaRjXk36PbcnLc+S+6iMaGo2G5zv03imqf0dmtLPnR673ZWwPnL 01JVImaa3B66KnzB/fRIjYV7HRm2CTNKIBGxFnkNEX3XRVI7j5yQENyYKCu4WmNx C2EALFGVK+CMdSAoocn90VmSaRUbw+h+BmQsraL9OAgA9guRfLnO8MNtIFSo1E2q 9jt7Hp/PLWgARK7RXu/Xj30xB7IgAGaxLfZYAUspJT0c3Cbmuf5NS162Z4WNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUO0ZEjaAUpTuT5VQa8/ytuwwHXTIwHwYDVR0j BBgwFoAU/DHbcPey8X8T6Soue65VVHku+78wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZGU0NzE5YS1hY2U0LTQxZjItYTA3MC04ZGUzMTkyYjdmNDkvMC9GQzMxREI3MEY3 QjJGMTdGMTNFOTJBMkU3QkFFNTU1NDc5MkVGQkJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkMzMURCNzBGN0IyRjE3RjEzRTkyQTJFN0JBRTU1NTQ3OTJF RkJCRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWRlNDcxOWEtYWNlNC00MWYyLWEw NzAtOGRlMzE5MmI3ZjQ5LzAvRkMzMURCNzBGN0IyRjE3RjEzRTkyQTJFN0JBRTU1 NTQ3OTJFRkJCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADjJfHFYkeKOD8DisidrQnkfi+D96zx4y20/ buTPKjkx4Q+bFqIZhyjmuF0vTJ2CHEHOTg2QHhy8NGSSsbkpnK8aBdq/egbU39oR k8HYo7JFguud1bMlV8kB1cdCzvJJPvxpoEDkjcaeQRDnM6XsKgEn0+E1jNsWi3kd aVijxHL3bONG9BVp43ozrsFjihnnj+bUgAuVanojxfK/bC+KBVG9pv4D4Ie/LMDP 9IqvbIHaCcu/e/WNcNyJz8wtuV3xWaXZ1SJBa/HdTRMnPmZVqogesqwLvmZxoN4X Sapa20laZNHDabc8WHZdWurLVbDpmETXLGmtEA2TE4qLccm8hw4= -----END CERTIFICATE-----Generated at Sat Jun 7 04:04:00 2025 by rpki-client