$ rpki-client -vvf repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/FBACFC63658425B36399C4B9D0322622B8C5B7F0.mft File: FBACFC63658425B36399C4B9D0322622B8C5B7F0.mft (raw, json) Hash identifier: lxYcvjQMlZZfwzyTdzwch+Xy5w8EPOFCcpjwLmOUHxU= Subject key identifier: 42:78:2B:3E:7A:CC:62:59:3A:7C:53:12:41:5A:BC:9D:F1:F4:CE:EE Authority key identifier: FB:AC:FC:63:65:84:25:B3:63:99:C4:B9:D0:32:26:22:B8:C5:B7:F0 Certificate issuer: /CN=FBACFC63658425B36399C4B9D0322622B8C5B7F0 Certificate serial: 4FCA6EF9AF930B70717FAD59813ACF6F11533F8B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBACFC63658425B36399C4B9D0322622B8C5B7F0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/FBACFC63658425B36399C4B9D0322622B8C5B7F0.mft Manifest number: 0523 Signing time: Sun 26 Oct 2025 02:42:02 +0000 Manifest this update: Sun 26 Oct 2025 02:37:02 +0000 Manifest next update: Wed 29 Oct 2025 03:05:02 +0000 Files and hashes: 1: 323430373a336538303a3a2f33322d3438203d3e203338373638.roa (hash: jCqzfoNt2x+8bcJ6fatZirQ8CiZyxgl3URZLZEZ3szo=) 2: 3130332e3233342e3231382e302f32342d3234203d3e203338373638.roa (hash: vWQKx1TT5Vb7zbmKfpDwSS1ZiebEmEmR3LksZYKeYp8=) 3: 323430373a336538303a363a3a2f34382d3438203d3e203338343936.roa (hash: 4k+7oiIZgf8A+xoNtWkGh4r/bBNQQHgBlobDBAPY3jY=) 4: FBACFC63658425B36399C4B9D0322622B8C5B7F0.crl (hash: c5OD/clMGx8r2VSM/KP/ENz4jvtjz1OoUiV7W7mhVeI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/FBACFC63658425B36399C4B9D0322622B8C5B7F0.crl rsync://repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/FBACFC63658425B36399C4B9D0322622B8C5B7F0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBACFC63658425B36399C4B9D0322622B8C5B7F0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 03:05:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:ca:6e:f9:af:93:0b:70:71:7f:ad:59:81:3a:cf:6f:11:53:3f:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FBACFC63658425B36399C4B9D0322622B8C5B7F0 Validity Not Before: Oct 26 02:37:02 2025 GMT Not After : Oct 29 03:05:02 2025 GMT Subject: CN=42782B3E7ACC62593A7C5312415ABC9DF1F4CEEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:34:13:81:68:6d:57:85:52:2d:c6:54:80:a1: c8:e0:5c:f1:74:a1:73:cc:ff:2d:e2:64:c9:1d:4a: 11:a0:b3:2f:16:71:93:75:b2:9c:bd:b6:4f:b3:07: df:a3:32:30:70:05:ea:46:e1:4b:ef:04:3a:83:f3: ac:c7:50:e8:f0:70:1a:e1:18:fb:39:56:e9:d3:dd: 79:d3:91:1d:11:67:29:a7:90:21:89:8e:86:bd:92: a1:2a:1f:3f:67:9d:da:7b:ff:66:ba:40:7f:57:f0: 50:21:96:e4:2c:56:51:52:72:66:b1:fe:73:20:a8: 01:0e:ef:9f:30:98:d9:78:ef:48:fa:32:8b:c5:fb: 20:7d:65:7d:f3:88:53:02:97:26:a8:ca:1f:cf:c1: c2:90:be:72:3c:3a:d1:c0:b5:b9:62:5d:f3:8f:5c: 03:e9:bd:05:db:96:f9:1e:67:6c:ab:ab:2b:ad:ba: 66:b2:8e:95:11:e9:56:12:93:ae:61:fb:d6:49:af: 7f:e2:36:22:b1:9d:e7:5d:1a:f4:04:07:8e:06:c1: d5:18:9f:97:a2:e7:c9:c4:3f:57:ed:8f:62:ac:70: ca:11:14:38:f1:ac:5c:2e:ae:6e:23:c6:82:07:1b: 85:c4:2c:b5:de:31:ed:a0:cf:74:c1:cb:ae:14:24: 04:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:78:2B:3E:7A:CC:62:59:3A:7C:53:12:41:5A:BC:9D:F1:F4:CE:EE X509v3 Authority Key Identifier: keyid:FB:AC:FC:63:65:84:25:B3:63:99:C4:B9:D0:32:26:22:B8:C5:B7:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/FBACFC63658425B36399C4B9D0322622B8C5B7F0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBACFC63658425B36399C4B9D0322622B8C5B7F0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/FBACFC63658425B36399C4B9D0322622B8C5B7F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:2e:8b:f7:cc:bb:44:6b:9f:8a:06:38:0b:a1:53:bd:09:6f: 04:35:d4:a2:ff:f5:15:9f:0f:06:2a:fd:ae:62:13:2c:8b:44: 6b:11:63:2a:d6:92:14:7b:95:da:3d:ea:9f:26:2c:c4:a3:66: bf:ac:43:50:c9:79:9c:5b:e9:db:d1:70:73:e5:5d:b8:7b:55: 44:28:5f:ca:98:b3:c5:36:01:f0:11:33:2d:b1:38:20:85:e2: 62:b9:ee:9c:16:da:5c:98:6c:4a:83:41:79:b3:11:53:99:54: 0b:92:ac:e1:63:e2:22:d7:09:9d:09:db:a2:dc:b9:bb:6e:a8: 5a:80:12:c0:a4:c8:aa:6a:e2:3e:03:c3:da:0e:d8:97:bd:10: 93:ba:b4:dc:65:22:42:fb:dd:64:be:62:b1:58:8b:fb:1f:46: 41:68:46:f6:a7:06:f4:ba:e2:57:47:6a:b5:61:0e:72:af:97: 5e:6d:ae:68:ee:d9:99:9e:c4:6e:d4:3a:0d:72:ed:3d:08:79: f3:9f:cd:20:b7:ca:96:c4:82:b1:6b:97:a5:68:7c:53:b9:af: 65:7d:7b:47:73:a8:6d:1a:31:db:89:e1:8b:5d:b1:7d:71:34: 56:2c:da:d5:53:2c:1f:5a:8c:74:b2:4c:c5:e1:03:13:d9:55: 81:16:80:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT8pu+a+TC3Bxf61ZgTrPbxFTP4swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkJBQ0ZDNjM2NTg0MjVCMzYzOTlDNEI5RDAzMjI2MjJC OEM1QjdGMDAeFw0yNTEwMjYwMjM3MDJaFw0yNTEwMjkwMzA1MDJaMDMxMTAvBgNV BAMTKDQyNzgyQjNFN0FDQzYyNTkzQTdDNTMxMjQxNUFCQzlERjFGNENFRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDONBOBaG1XhVItxlSAocjgXPF0 oXPM/y3iZMkdShGgsy8WcZN1spy9tk+zB9+jMjBwBepG4UvvBDqD86zHUOjwcBrh GPs5VunT3XnTkR0RZymnkCGJjoa9kqEqHz9nndp7/2a6QH9X8FAhluQsVlFScmax /nMgqAEO758wmNl470j6MovF+yB9ZX3ziFMClyaoyh/PwcKQvnI8OtHAtbliXfOP XAPpvQXblvkeZ2yrqyutumayjpUR6VYSk65h+9ZJr3/iNiKxneddGvQEB44GwdUY n5ei58nEP1ftj2KscMoRFDjxrFwurm4jxoIHG4XELLXeMe2gz3TBy64UJAQJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQngrPnrMYlk6fFMSQVq8nfH0zu4wHwYDVR0j BBgwFoAU+6z8Y2WEJbNjmcS50DImIrjFt/AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MWU5NDI0My04N2YwLTQyNmYtYTljYS00YzE5ZWRiMDZiNDIvMC9GQkFDRkM2MzY1 ODQyNUIzNjM5OUM0QjlEMDMyMjYyMkI4QzVCN0YwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkJBQ0ZDNjM2NTg0MjVCMzYzOTlDNEI5RDAzMjI2MjJCOEM1 QjdGMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTFlOTQyNDMtODdmMC00MjZmLWE5 Y2EtNGMxOWVkYjA2YjQyLzAvRkJBQ0ZDNjM2NTg0MjVCMzYzOTlDNEI5RDAzMjI2 MjJCOEM1QjdGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKcui/fMu0Rrn4oGOAuhU70JbwQ11KL/9RWf DwYq/a5iEyyLRGsRYyrWkhR7ldo96p8mLMSjZr+sQ1DJeZxb6dvRcHPlXbh7VUQo X8qYs8U2AfARMy2xOCCF4mK57pwW2lyYbEqDQXmzEVOZVAuSrOFj4iLXCZ0J26Lc ubtuqFqAEsCkyKpq4j4Dw9oO2Je9EJO6tNxlIkL73WS+YrFYi/sfRkFoRvanBvS6 4ldHarVhDnKvl15trmju2ZmexG7UOg1y7T0IefOfzSC3ypbEgrFrl6VofFO5r2V9 e0dzqG0aMduJ4YtdsX1xNFYs2tVTLB9ajHSyTMXhAxPZVYEWgHQ= -----END CERTIFICATE-----Generated at Mon Oct 27 13:29:16 2025 by rpki-client