$ rpki-client -vvf repo-rpki.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.mft File: FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.mft (raw, json) Hash identifier: 4ovskwdiEDyAAZLi/WyIig0rTotLOqbQSjRPoL+T8Xo= Subject key identifier: 36:B7:1E:76:6A:6E:3E:10:EC:EF:C9:9D:FA:A5:AB:90:BF:C9:1F:B4 Authority key identifier: FA:BD:B6:E4:44:51:B7:F0:37:8A:E9:2C:27:50:EB:FE:5A:3C:FA:38 Certificate issuer: /CN=FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38 Certificate serial: 5B240E885EC123ABFB8D93368E04C0F8693CB18A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.mft Manifest number: 04D6 Signing time: Sun 20 Jul 2025 16:51:41 +0000 Manifest this update: Sun 20 Jul 2025 16:46:41 +0000 Manifest next update: Thu 24 Jul 2025 03:29:41 +0000 Files and hashes: 1: 3130332e3135372e3131362e302f32332d3234203d3e20313337333331.roa (hash: gepyqAbuiPaUA1F4qNan63WSMqffSkJDQ7owW86Bv/s=) 2: 323430363a613063303a3a2f33322d3332203d3e20313337333331.roa (hash: Ai0eZhLY+4L7mdTG5liUS7qc6ABicMzreMWiAuYqKfU=) 3: FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.crl (hash: oxJ58G18J1qdx4UqcO4QSTfOmGUY0x8kiYhHagS2bf4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.crl rsync://repo-rpki.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 03:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:24:0e:88:5e:c1:23:ab:fb:8d:93:36:8e:04:c0:f8:69:3c:b1:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38 Validity Not Before: Jul 20 16:46:41 2025 GMT Not After : Jul 24 03:29:41 2025 GMT Subject: CN=36B71E766A6E3E10ECEFC99DFAA5AB90BFC91FB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:43:e8:4f:0f:24:be:79:e1:54:7d:9f:06:e9: ce:5b:52:0e:79:3e:84:b4:e1:31:dd:60:53:02:99: 7d:56:05:cf:90:dd:8e:d5:3e:92:28:ee:71:d5:8c: 48:27:35:2b:88:cc:e7:7d:26:04:07:0c:a5:9d:ce: f1:ec:fb:c3:09:98:5f:3f:bb:92:d8:a5:ba:fb:27: 7a:41:26:ab:fa:e1:e5:71:92:ce:5a:21:92:2e:99: fc:86:f0:aa:e6:77:62:fa:39:7c:e5:23:50:c3:10: 87:7e:96:5a:1c:cf:bd:ac:a3:c1:bb:e7:9f:fd:43: 4a:e9:87:b6:e3:e5:16:ff:8a:c2:7f:99:e5:2a:52: b6:41:2a:01:4a:5b:99:20:2b:96:74:d2:14:30:34: 3a:fa:c4:f8:4d:82:9c:cf:a5:6e:d7:31:d1:1c:b2: 0c:b9:f7:97:b5:ec:e2:16:fc:75:17:15:aa:3c:48: d6:b4:73:64:0e:b1:14:8a:9d:6c:8e:36:ea:8d:87: 9d:8d:37:5d:83:d6:d0:cf:44:7d:ce:58:67:71:39: e3:fc:f7:26:fb:56:9a:93:2c:47:39:19:f3:4c:ab: 27:a8:64:68:85:62:69:46:de:da:22:3c:94:44:3f: 06:ce:9d:d9:48:33:de:b6:9a:14:18:a5:25:a6:54: 1a:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:B7:1E:76:6A:6E:3E:10:EC:EF:C9:9D:FA:A5:AB:90:BF:C9:1F:B4 X509v3 Authority Key Identifier: keyid:FA:BD:B6:E4:44:51:B7:F0:37:8A:E9:2C:27:50:EB:FE:5A:3C:FA:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:7b:60:20:58:89:b2:73:dc:cf:0e:c6:6e:f8:be:72:c8:5e: 7d:f3:51:dd:5e:43:f4:8b:4f:78:fb:15:64:3c:5f:43:4e:68: 00:99:ec:af:0a:f2:6a:5f:86:22:fe:44:15:a4:11:cc:08:02: 43:0c:e8:ce:44:90:51:40:02:a0:65:51:bd:4f:60:85:38:ba: a7:e7:77:86:94:6e:ab:dd:63:bb:c9:db:b9:20:8a:5b:c5:e6: 69:11:f9:0f:e8:61:48:c6:9b:d8:c1:f1:2e:d2:c7:7f:7d:99: 75:44:0c:79:b2:07:fa:59:e8:66:95:93:58:77:d9:e8:b6:72: bb:98:50:d1:7a:00:50:f2:29:3a:c8:86:8c:44:c6:81:b6:c9: a1:18:8b:0a:fe:bd:93:8c:06:9a:3f:16:d8:62:35:b7:f4:82: 90:de:f6:ea:87:87:bd:70:e3:b0:46:f2:55:5e:3f:cb:92:f5: d7:3a:40:87:14:be:9b:fa:ca:88:bf:11:dd:93:e9:cc:4f:ad: 97:40:da:62:7b:28:a6:15:eb:1c:61:88:6f:0d:6a:41:61:3c: 51:df:31:f5:ee:b3:46:a1:fe:d3:1b:9c:a6:5b:6c:12:51:c8: 11:3b:c6:e6:59:90:2d:bd:f9:03:13:c0:54:b8:eb:ef:e2:57: 4e:40:8a:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWyQOiF7BI6v7jZM2jgTA+Gk8sYowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkFCREI2RTQ0NDUxQjdGMDM3OEFFOTJDMjc1MEVCRkU1 QTNDRkEzODAeFw0yNTA3MjAxNjQ2NDFaFw0yNTA3MjQwMzI5NDFaMDMxMTAvBgNV BAMTKDM2QjcxRTc2NkE2RTNFMTBFQ0VGQzk5REZBQTVBQjkwQkZDOTFGQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfQ+hPDyS+eeFUfZ8G6c5bUg55 PoS04THdYFMCmX1WBc+Q3Y7VPpIo7nHVjEgnNSuIzOd9JgQHDKWdzvHs+8MJmF8/ u5LYpbr7J3pBJqv64eVxks5aIZIumfyG8Krmd2L6OXzlI1DDEId+llocz72so8G7 55/9Q0rph7bj5Rb/isJ/meUqUrZBKgFKW5kgK5Z00hQwNDr6xPhNgpzPpW7XMdEc sgy595e17OIW/HUXFao8SNa0c2QOsRSKnWyONuqNh52NN12D1tDPRH3OWGdxOeP8 9yb7VpqTLEc5GfNMqyeoZGiFYmlG3toiPJREPwbOndlIM962mhQYpSWmVBobAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNrcedmpuPhDs78md+qWrkL/JH7QwHwYDVR0j BBgwFoAU+r225ERRt/A3iuksJ1Dr/lo8+jgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZDA3ZTNkOC05YmZjLTQ0ODMtYTJkZC1hZmE0NTkzODExZTUvMC9GQUJEQjZFNDQ0 NTFCN0YwMzc4QUU5MkMyNzUwRUJGRTVBM0NGQTM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkFCREI2RTQ0NDUxQjdGMDM3OEFFOTJDMjc1MEVCRkU1QTND RkEzOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWQwN2UzZDgtOWJmYy00NDgzLWEy ZGQtYWZhNDU5MzgxMWU1LzAvRkFCREI2RTQ0NDUxQjdGMDM3OEFFOTJDMjc1MEVC RkU1QTNDRkEzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADp7YCBYibJz3M8Oxm74vnLIXn3zUd1eQ/SL T3j7FWQ8X0NOaACZ7K8K8mpfhiL+RBWkEcwIAkMM6M5EkFFAAqBlUb1PYIU4uqfn d4aUbqvdY7vJ27kgilvF5mkR+Q/oYUjGm9jB8S7Sx399mXVEDHmyB/pZ6GaVk1h3 2ei2cruYUNF6AFDyKTrIhoxExoG2yaEYiwr+vZOMBpo/FthiNbf0gpDe9uqHh71w 47BG8lVeP8uS9dc6QIcUvpv6yoi/Ed2T6cxPrZdA2mJ7KKYV6xxhiG8NakFhPFHf MfXus0ah/tMbnKZbbBJRyBE7xuZZkC29+QMTwFS46+/iV05Aipk= -----END CERTIFICATE-----Generated at Mon Jul 21 06:48:25 2025 by rpki-client