$ rpki-client -vvf repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/FBACFC63658425B36399C4B9D0322622B8C5B7F0.mft File: FBACFC63658425B36399C4B9D0322622B8C5B7F0.mft (raw, json) Hash identifier: jQc5kBndaokfPSydBvzj5QVR16p4dYVHpvBRThw79Mo= Subject key identifier: A3:52:D0:81:30:36:5C:3C:A8:DC:6B:6C:29:C0:C2:33:2E:06:DD:7C Authority key identifier: FB:AC:FC:63:65:84:25:B3:63:99:C4:B9:D0:32:26:22:B8:C5:B7:F0 Certificate issuer: /CN=FBACFC63658425B36399C4B9D0322622B8C5B7F0 Certificate serial: 726F13597991B1B5B1EE3B29EDD91796BC99A4BC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBACFC63658425B36399C4B9D0322622B8C5B7F0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/FBACFC63658425B36399C4B9D0322622B8C5B7F0.mft Manifest number: 04FB Signing time: Sat 26 Jul 2025 16:31:58 +0000 Manifest this update: Sat 26 Jul 2025 16:26:58 +0000 Manifest next update: Wed 30 Jul 2025 03:00:58 +0000 Files and hashes: 1: 323430373a336538303a363a3a2f34382d3438203d3e203338343936.roa (hash: 4k+7oiIZgf8A+xoNtWkGh4r/bBNQQHgBlobDBAPY3jY=) 2: 323430373a336538303a3a2f33322d3438203d3e203338373638.roa (hash: jCqzfoNt2x+8bcJ6fatZirQ8CiZyxgl3URZLZEZ3szo=) 3: FBACFC63658425B36399C4B9D0322622B8C5B7F0.crl (hash: yzDGbeuAH4BA6er6GTKhfjMbLUAZDjgJbbfPj8a4ut4=) 4: 3130332e3233342e3231382e302f32342d3234203d3e203338373638.roa (hash: vWQKx1TT5Vb7zbmKfpDwSS1ZiebEmEmR3LksZYKeYp8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/FBACFC63658425B36399C4B9D0322622B8C5B7F0.crl rsync://repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/FBACFC63658425B36399C4B9D0322622B8C5B7F0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBACFC63658425B36399C4B9D0322622B8C5B7F0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Jul 2025 03:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:6f:13:59:79:91:b1:b5:b1:ee:3b:29:ed:d9:17:96:bc:99:a4:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FBACFC63658425B36399C4B9D0322622B8C5B7F0 Validity Not Before: Jul 26 16:26:58 2025 GMT Not After : Jul 30 03:00:58 2025 GMT Subject: CN=A352D08130365C3CA8DC6B6C29C0C2332E06DD7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:7f:db:f9:f5:62:55:2e:31:60:46:21:25:07: fe:fb:a3:52:6f:be:99:61:c6:51:dd:88:3d:a2:dc: 24:1f:de:93:b6:b7:01:c3:a1:dc:f8:53:58:86:55: be:12:ca:cd:3d:d6:7c:25:ee:01:52:d3:3f:fc:38: 41:ed:50:ae:55:a2:3e:91:18:b0:d4:79:84:5c:44: 78:67:a3:69:7a:b3:c0:d4:c4:67:12:d2:5b:67:b8: ff:b6:13:74:f6:11:fc:1d:19:5b:ba:b7:eb:1d:59: 2d:44:14:9a:5a:e9:78:a8:42:0d:89:2a:08:5d:e7: 87:d3:47:e1:b2:66:29:50:21:9d:72:d0:a5:e4:70: 7a:55:31:03:e5:e5:18:c6:0b:9c:f9:b0:ae:c7:f2: 43:0b:86:ca:49:37:0c:bb:2a:43:93:79:9e:fd:2d: ce:8b:78:8b:81:9a:86:de:ab:41:95:f3:0a:e5:af: b9:27:a4:fc:f5:75:b7:49:61:75:75:1a:37:7f:a0: c6:a7:40:6e:a8:09:83:70:a0:ab:3c:d0:d1:54:73: f1:fe:fd:c3:a7:7a:9a:80:18:7e:3f:e7:20:58:3a: b4:de:59:84:1c:3b:cc:38:aa:fe:a3:ab:39:fa:12: a6:35:3c:25:f5:6c:5e:38:89:1b:70:b6:df:9c:94: 62:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:52:D0:81:30:36:5C:3C:A8:DC:6B:6C:29:C0:C2:33:2E:06:DD:7C X509v3 Authority Key Identifier: keyid:FB:AC:FC:63:65:84:25:B3:63:99:C4:B9:D0:32:26:22:B8:C5:B7:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/FBACFC63658425B36399C4B9D0322622B8C5B7F0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBACFC63658425B36399C4B9D0322622B8C5B7F0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/FBACFC63658425B36399C4B9D0322622B8C5B7F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:11:1f:66:b0:18:73:e8:f0:f2:78:88:e7:47:b6:81:f3:f9: 9e:23:77:84:20:a7:4c:16:c5:ad:f4:96:82:81:1d:2c:d1:da: 39:75:8a:98:ac:5d:b8:eb:3d:71:47:b8:9e:e8:af:c7:4f:fc: 75:89:0f:a2:ef:3f:d5:0b:eb:12:18:b9:f9:25:12:6f:3c:86: 79:07:94:2f:b0:e2:8c:02:4f:61:78:bf:14:25:9f:20:e9:ae: 5f:d9:e5:dd:a9:2d:35:3b:23:a5:20:24:17:9d:dc:1f:26:f7: 00:c1:7a:74:8f:2c:ec:9f:6c:3f:ba:f3:2e:6f:36:da:c7:af: 20:6b:00:a1:23:04:0f:f8:71:d2:95:4f:9f:7a:8e:e5:cf:e3: 5d:b7:08:98:57:6f:b1:7f:62:de:cd:14:15:0e:68:45:e1:17: cc:7c:cf:e5:c6:d1:98:07:4e:69:18:96:98:81:43:95:c4:85: 73:ae:54:a3:55:f7:3f:f3:0f:5b:fc:fa:db:3a:e5:ca:d9:e5: 72:4e:12:1e:13:6e:d5:80:8c:d5:15:4d:27:a0:45:2d:d3:7f: dd:ac:23:f1:eb:d8:fa:1b:db:29:f5:a5:1a:c1:6d:03:13:45: ce:7a:11:af:69:c4:74:c9:e0:f3:48:1e:5c:1f:1e:3b:0f:51: 36:5c:ab:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcm8TWXmRsbWx7jsp7dkXlryZpLwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkJBQ0ZDNjM2NTg0MjVCMzYzOTlDNEI5RDAzMjI2MjJC OEM1QjdGMDAeFw0yNTA3MjYxNjI2NThaFw0yNTA3MzAwMzAwNThaMDMxMTAvBgNV BAMTKEEzNTJEMDgxMzAzNjVDM0NBOERDNkI2QzI5QzBDMjMzMkUwNkREN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKf9v59WJVLjFgRiElB/77o1Jv vplhxlHdiD2i3CQf3pO2twHDodz4U1iGVb4Sys091nwl7gFS0z/8OEHtUK5Voj6R GLDUeYRcRHhno2l6s8DUxGcS0ltnuP+2E3T2EfwdGVu6t+sdWS1EFJpa6XioQg2J Kghd54fTR+GyZilQIZ1y0KXkcHpVMQPl5RjGC5z5sK7H8kMLhspJNwy7KkOTeZ79 Lc6LeIuBmobeq0GV8wrlr7knpPz1dbdJYXV1Gjd/oManQG6oCYNwoKs80NFUc/H+ /cOnepqAGH4/5yBYOrTeWYQcO8w4qv6jqzn6EqY1PCX1bF44iRtwtt+clGKNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUo1LQgTA2XDyo3GtsKcDCMy4G3XwwHwYDVR0j BBgwFoAU+6z8Y2WEJbNjmcS50DImIrjFt/AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MWU5NDI0My04N2YwLTQyNmYtYTljYS00YzE5ZWRiMDZiNDIvMC9GQkFDRkM2MzY1 ODQyNUIzNjM5OUM0QjlEMDMyMjYyMkI4QzVCN0YwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkJBQ0ZDNjM2NTg0MjVCMzYzOTlDNEI5RDAzMjI2MjJCOEM1 QjdGMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTFlOTQyNDMtODdmMC00MjZmLWE5 Y2EtNGMxOWVkYjA2YjQyLzAvRkJBQ0ZDNjM2NTg0MjVCMzYzOTlDNEI5RDAzMjI2 MjJCOEM1QjdGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF8RH2awGHPo8PJ4iOdHtoHz+Z4jd4Qgp0wW xa30loKBHSzR2jl1ipisXbjrPXFHuJ7or8dP/HWJD6LvP9UL6xIYufklEm88hnkH lC+w4owCT2F4vxQlnyDprl/Z5d2pLTU7I6UgJBed3B8m9wDBenSPLOyfbD+68y5v NtrHryBrAKEjBA/4cdKVT596juXP4123CJhXb7F/Yt7NFBUOaEXhF8x8z+XG0ZgH TmkYlpiBQ5XEhXOuVKNV9z/zD1v8+ts65crZ5XJOEh4TbtWAjNUVTSegRS3Tf92s I/Hr2Pob2yn1pRrBbQMTRc56Ea9pxHTJ4PNIHlwfHjsPUTZcqyw= -----END CERTIFICATE-----Generated at Sun Jul 27 04:50:03 2025 by rpki-client