$ rpki-client -vvf repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.mft File: FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.mft (raw, json) Hash identifier: lz1Tl+JSMBAe+GfF1qeUqt4vD50k5zLOT/gg/6i5xiY= Subject key identifier: 9E:DE:6C:05:68:87:41:78:6F:A9:DE:E9:68:97:8A:F0:E5:64:2B:3A Authority key identifier: FB:D3:B2:8C:90:75:52:9D:EE:81:51:C4:E4:4B:0C:BC:13:FF:DA:91 Certificate issuer: /CN=FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91 Certificate serial: 1878BD20787066EF09DD22E76324CFDF4CF63A6F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.cer Subject info access: rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.mft Manifest number: 0521 Signing time: Fri 31 Oct 2025 19:21:17 +0000 Manifest this update: Fri 31 Oct 2025 19:16:17 +0000 Manifest next update: Tue 04 Nov 2025 05:51:17 +0000 Files and hashes: 1: 3130332e3139382e3132322e302f32332d3234203d3e203436303535.roa (hash: LRTGK+GW9A0RpTs3Gv4UsfHpkx7owdE7KVjUD93I+Vo=) 2: 3130332e3139382e3132302e302f32332d3234203d3e203436303535.roa (hash: Rkqt5EaL5SlKX5GmTTNQMVHFRYt3xFbyKGI2eZYOOAk=) 3: 3230322e35322e34382e302f32332d3234203d3e203436303535.roa (hash: cBKI91E82619dGXlbZQsR3kG8PLRa84sQYxG51fCSE0=) 4: 323430333a313838303a3a2f33322d3332203d3e203436303535.roa (hash: 5E43YVmj6Z7OGECRV0xvOsTql9Kqf+2yG0vKEkPwlDE=) 5: FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.crl (hash: mvRWLgyR3OJYT/K2jzEoMjIOBYFtFdtzxP3flVc/kxE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.crl rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Nov 2025 05:51:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:78:bd:20:78:70:66:ef:09:dd:22:e7:63:24:cf:df:4c:f6:3a:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91 Validity Not Before: Oct 31 19:16:17 2025 GMT Not After : Nov 4 05:51:17 2025 GMT Subject: CN=9EDE6C05688741786FA9DEE968978AF0E5642B3A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:68:ce:41:b4:df:14:94:bd:b0:db:a3:6c:33: d0:f5:e2:58:07:56:b7:83:a5:b7:f0:93:df:a4:9c: 64:9f:7f:56:e7:7f:df:5b:09:f4:b3:4b:9f:67:da: 9b:bf:89:11:ae:2d:d6:fc:4f:24:e1:bf:48:a3:f5: f3:22:09:d8:8c:75:00:76:9c:89:1b:4d:3c:75:d2: 76:f7:f7:e7:a4:8e:f2:f6:96:4b:9c:33:fc:0a:93: 08:c3:c9:01:12:16:2f:d9:7e:23:8f:2b:60:65:5d: 58:c4:4d:36:6b:8a:4e:29:94:ad:e9:1c:50:3c:7f: c8:61:8e:d9:58:ea:0c:69:0c:6e:34:d9:ca:3d:a5: 7e:dc:87:59:1f:4c:16:af:8e:49:f6:45:77:27:2b: 73:27:e4:65:1c:a8:29:9e:85:40:66:9d:ff:64:41: 51:c2:82:f2:89:fc:df:b9:ca:79:9d:41:bb:27:ec: 65:d4:03:a3:84:06:17:56:1d:8c:45:07:57:f0:82: 64:4c:e3:9c:cd:7d:6b:51:c7:e8:72:9e:c2:c1:0d: fb:74:d3:8e:a6:ab:0c:f3:0a:8b:ad:70:7e:56:17: e3:88:a8:d7:bb:89:63:cd:9a:15:1e:82:bb:6d:b6: 7e:b9:a3:3f:34:f4:88:b4:7b:7b:ae:6a:65:91:71: f2:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:DE:6C:05:68:87:41:78:6F:A9:DE:E9:68:97:8A:F0:E5:64:2B:3A X509v3 Authority Key Identifier: keyid:FB:D3:B2:8C:90:75:52:9D:EE:81:51:C4:E4:4B:0C:BC:13:FF:DA:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:42:1c:88:ad:4e:61:22:4a:06:bc:a6:13:65:72:ba:83:fb: 89:e2:14:5b:58:d2:dc:d9:a4:cd:d9:28:d7:54:73:79:43:f5: f2:69:b9:8c:0c:4a:34:da:a9:9f:3f:da:11:c5:aa:aa:19:20: c5:26:4f:5c:52:fd:fb:48:8e:8f:a0:07:dc:9f:b0:97:7f:a4: b0:97:24:20:4a:1e:42:5b:36:1a:16:7a:45:e6:01:cf:97:dc: 17:ac:30:df:ca:18:f2:53:b8:45:0f:c7:21:f8:02:06:7e:16: f4:62:49:4e:84:c2:13:a5:6f:a6:d1:5d:21:a6:45:0d:4c:e5: aa:7d:83:93:b1:c7:b3:04:9d:82:db:86:68:31:1c:70:cc:ac: a0:76:f9:de:34:b0:33:78:96:c2:a1:ae:d3:42:32:b0:6d:ed: f1:75:c9:a3:89:4c:43:0c:a5:3e:b7:85:4c:47:01:8e:79:3f: 3b:a0:da:7c:e5:83:fe:1c:a6:1d:c8:ac:27:66:b7:a8:28:2d: c4:db:46:3b:ab:af:1b:c3:b3:13:1c:e9:a7:71:36:53:c5:57: 0e:89:e8:ae:65:af:c7:df:c2:83:05:dc:df:a4:d5:64:7e:28: 5f:45:e8:fc:b7:ec:4b:63:62:50:01:c4:a4:d4:4f:02:35:c3: c9:4f:34:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGHi9IHhwZu8J3SLnYyTP30z2Om8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkJEM0IyOEM5MDc1NTI5REVFODE1MUM0RTQ0QjBDQkMx M0ZGREE5MTAeFw0yNTEwMzExOTE2MTdaFw0yNTExMDQwNTUxMTdaMDMxMTAvBgNV BAMTKDlFREU2QzA1Njg4NzQxNzg2RkE5REVFOTY4OTc4QUYwRTU2NDJCM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAaM5BtN8UlL2w26NsM9D14lgH VreDpbfwk9+knGSff1bnf99bCfSzS59n2pu/iRGuLdb8TyThv0ij9fMiCdiMdQB2 nIkbTTx10nb39+ekjvL2lkucM/wKkwjDyQESFi/ZfiOPK2BlXVjETTZrik4plK3p HFA8f8hhjtlY6gxpDG402co9pX7ch1kfTBavjkn2RXcnK3Mn5GUcqCmehUBmnf9k QVHCgvKJ/N+5ynmdQbsn7GXUA6OEBhdWHYxFB1fwgmRM45zNfWtRx+hynsLBDft0 046mqwzzCoutcH5WF+OIqNe7iWPNmhUegrtttn65oz809Ii0e3uuamWRcfInAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnt5sBWiHQXhvqd7paJeK8OVkKzowHwYDVR0j BBgwFoAU+9OyjJB1Up3ugVHE5EsMvBP/2pEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ODM5NzdmNC04YzJkLTRlYjEtYjRjZC0zNWI0OTIxNmUwNzMvMC9GQkQzQjI4Qzkw NzU1MjlERUU4MTUxQzRFNDRCMENCQzEzRkZEQTkxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkJEM0IyOEM5MDc1NTI5REVFODE1MUM0RTQ0QjBDQkMxM0ZG REE5MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDgzOTc3ZjQtOGMyZC00ZWIxLWI0 Y2QtMzViNDkyMTZlMDczLzAvRkJEM0IyOEM5MDc1NTI5REVFODE1MUM0RTQ0QjBD QkMxM0ZGREE5MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH1CHIitTmEiSga8phNlcrqD+4niFFtY0tzZ pM3ZKNdUc3lD9fJpuYwMSjTaqZ8/2hHFqqoZIMUmT1xS/ftIjo+gB9yfsJd/pLCX JCBKHkJbNhoWekXmAc+X3BesMN/KGPJTuEUPxyH4AgZ+FvRiSU6EwhOlb6bRXSGm RQ1M5ap9g5Oxx7MEnYLbhmgxHHDMrKB2+d40sDN4lsKhrtNCMrBt7fF1yaOJTEMM pT63hUxHAY55Pzug2nzlg/4cph3IrCdmt6goLcTbRjurrxvDsxMc6adxNlPFVw6J 6K5lr8ffwoMF3N+k1WR+KF9F6Py37EtjYlABxKTUTwI1w8lPNFc= -----END CERTIFICATE-----Generated at Mon Nov 3 00:12:21 2025 by rpki-client