$ rpki-client -vvf repo-rpki.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.mft File: FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.mft (raw, json) Hash identifier: xStToXSyayvJBwXtb1A4DuudF7+etKBRDvIRn7pF+40= Subject key identifier: 3D:1F:48:6C:2A:61:08:E1:7A:F8:9E:1C:9B:29:E2:D7:76:C9:23:29 Authority key identifier: FB:3F:CC:1A:69:B1:BD:92:D6:A3:19:D7:FD:82:0E:EE:CE:67:42:45 Certificate issuer: /CN=FB3FCC1A69B1BD92D6A319D7FD820EEECE674245 Certificate serial: 42F604662E41C3F3123D9291EDF2D37F4C757162 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.mft Manifest number: 036E Signing time: Sun 20 Jul 2025 21:11:23 +0000 Manifest this update: Sun 20 Jul 2025 21:06:23 +0000 Manifest next update: Thu 24 Jul 2025 02:10:23 +0000 Files and hashes: 1: FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.crl (hash: ECwC9iDR38KsETFd/zfKDkzvXPc+ypDfWAJp/fAmf9Q=) 2: 3130332e3136342e3137302e302f32332d3234203d3e203137393935.roa (hash: KS9w1B5P8a3jbKsmFzr3W5flDVbhE11L0B9cjjDxpnE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.crl rsync://repo-rpki.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 02:10:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:f6:04:66:2e:41:c3:f3:12:3d:92:91:ed:f2:d3:7f:4c:75:71:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB3FCC1A69B1BD92D6A319D7FD820EEECE674245 Validity Not Before: Jul 20 21:06:23 2025 GMT Not After : Jul 24 02:10:23 2025 GMT Subject: CN=3D1F486C2A6108E17AF89E1C9B29E2D776C92329 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:40:89:f4:97:61:14:b4:66:81:77:c9:45:06: c6:ca:58:08:fd:45:66:2c:89:14:62:64:59:6f:e0: cc:db:bd:90:ce:44:7b:1b:63:64:2a:6c:43:18:26: 13:ad:13:23:48:30:e2:5a:9d:1b:96:74:a0:35:65: 92:af:27:54:84:f8:41:0f:e4:3d:b3:eb:5c:c1:fb: f2:f7:49:a4:08:22:3a:b4:c6:00:a4:8a:16:8c:62: bc:04:9a:82:60:ae:57:9f:0f:24:1b:15:aa:95:ad: e4:20:41:04:e2:1b:0a:aa:73:4c:db:be:f1:83:75: 72:d4:6d:5f:43:05:53:9d:00:bd:16:64:45:79:f9: 6f:46:84:d9:1a:0a:25:0b:e2:bf:55:61:78:86:7d: de:00:1f:41:fd:1e:3e:96:9a:d3:7b:0e:e0:26:f8: 7b:d2:74:fc:6e:f4:2b:ce:27:aa:ff:2d:fc:7d:b7: 0b:cd:52:b3:6a:ed:0c:c5:fe:6c:69:50:0d:7a:3c: 6f:50:ef:48:5b:0f:5f:c6:29:8a:5e:1b:6c:c2:e3: 93:ee:9e:bb:3f:a4:50:a2:5f:6c:34:45:73:a0:17: 1b:c8:5b:0b:a6:29:26:b9:c3:48:07:b9:f6:7a:bd: a8:60:b0:4b:08:7e:be:4a:95:b0:bf:5e:93:9f:b8: e6:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:1F:48:6C:2A:61:08:E1:7A:F8:9E:1C:9B:29:E2:D7:76:C9:23:29 X509v3 Authority Key Identifier: keyid:FB:3F:CC:1A:69:B1:BD:92:D6:A3:19:D7:FD:82:0E:EE:CE:67:42:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:66:86:e9:5b:ec:98:f2:df:ac:38:2e:af:ee:d6:1e:de:28: f1:50:31:c1:38:5d:48:46:a6:20:07:cb:de:e4:bb:2b:80:ea: 32:7f:17:37:b4:85:ce:3c:a2:eb:1d:9d:91:01:1a:6f:d0:90: 09:e3:e1:b9:cf:77:3f:3a:da:9b:90:ea:6a:dc:f1:06:a6:bf: 9c:01:f1:23:dc:47:af:89:13:b0:e1:c4:af:4c:ce:af:ff:2d: 83:da:1c:e3:d0:87:1d:99:19:cf:ff:0f:be:ce:be:2a:0e:91: f9:34:61:74:2c:7a:7e:04:1e:00:88:b1:df:da:80:cd:5a:03: eb:e9:7d:63:99:b4:18:f5:1f:2c:2b:f9:74:84:76:be:3c:df: 1f:b9:cb:13:c5:b7:4a:4f:66:85:18:cb:a4:93:3e:9c:cd:72: ba:b5:3c:98:37:5f:3d:2e:3f:ab:c2:ae:a9:ac:ef:de:c7:01: 81:2f:89:98:3d:68:39:eb:f0:30:2d:9a:fc:30:11:c2:62:c6: d8:7f:5a:19:e9:9f:f3:68:d9:87:eb:82:4f:88:61:51:97:25: 1a:4e:57:00:9b:73:02:1a:69:b5:c9:9a:36:0e:52:75:a2:65: 1c:b0:1d:5a:b3:7d:26:42:11:a7:e1:66:6c:a1:f5:38:99:aa: 78:8c:a5:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQvYEZi5Bw/MSPZKR7fLTf0x1cWIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkIzRkNDMUE2OUIxQkQ5MkQ2QTMxOUQ3RkQ4MjBFRUVD RTY3NDI0NTAeFw0yNTA3MjAyMTA2MjNaFw0yNTA3MjQwMjEwMjNaMDMxMTAvBgNV BAMTKDNEMUY0ODZDMkE2MTA4RTE3QUY4OUUxQzlCMjlFMkQ3NzZDOTIzMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCQIn0l2EUtGaBd8lFBsbKWAj9 RWYsiRRiZFlv4MzbvZDORHsbY2QqbEMYJhOtEyNIMOJanRuWdKA1ZZKvJ1SE+EEP 5D2z61zB+/L3SaQIIjq0xgCkihaMYrwEmoJgrlefDyQbFaqVreQgQQTiGwqqc0zb vvGDdXLUbV9DBVOdAL0WZEV5+W9GhNkaCiUL4r9VYXiGfd4AH0H9Hj6WmtN7DuAm +HvSdPxu9CvOJ6r/Lfx9twvNUrNq7QzF/mxpUA16PG9Q70hbD1/GKYpeG2zC45Pu nrs/pFCiX2w0RXOgFxvIWwumKSa5w0gHufZ6vahgsEsIfr5KlbC/XpOfuObnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPR9IbCphCOF6+J4cmyni13bJIykwHwYDVR0j BBgwFoAU+z/MGmmxvZLWoxnX/YIO7s5nQkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZDg3YmVlZC02MzMwLTRmMzMtOTEwNS04NzcyMmNkZjJkZDAvMC9GQjNGQ0MxQTY5 QjFCRDkyRDZBMzE5RDdGRDgyMEVFRUNFNjc0MjQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkIzRkNDMUE2OUIxQkQ5MkQ2QTMxOUQ3RkQ4MjBFRUVDRTY3 NDI0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWQ4N2JlZWQtNjMzMC00ZjMzLTkx MDUtODc3MjJjZGYyZGQwLzAvRkIzRkNDMUE2OUIxQkQ5MkQ2QTMxOUQ3RkQ4MjBF RUVDRTY3NDI0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABlmhulb7Jjy36w4Lq/u1h7eKPFQMcE4XUhG piAHy97kuyuA6jJ/Fze0hc48ousdnZEBGm/QkAnj4bnPdz862puQ6mrc8Qamv5wB 8SPcR6+JE7DhxK9Mzq//LYPaHOPQhx2ZGc//D77OvioOkfk0YXQsen4EHgCIsd/a gM1aA+vpfWOZtBj1Hywr+XSEdr483x+5yxPFt0pPZoUYy6STPpzNcrq1PJg3Xz0u P6vCrqms797HAYEviZg9aDnr8DAtmvwwEcJixth/Whnpn/No2Yfrgk+IYVGXJRpO VwCbcwIaabXJmjYOUnWiZRywHVqzfSZCEafhZmyh9TiZqniMpag= -----END CERTIFICATE-----Generated at Wed Jul 23 02:10:01 2025 by rpki-client