$ rpki-client -vvf repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.mft File: FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.mft (raw, json) Hash identifier: 3r0uQ6BzoyKJZSAxxmTPJN0zM2/Q7vNvzDRi7BMd9sE= Subject key identifier: 82:F9:61:FD:E6:E8:58:31:15:88:18:90:D4:50:81:58:11:3A:9B:C6 Authority key identifier: FB:D3:B2:8C:90:75:52:9D:EE:81:51:C4:E4:4B:0C:BC:13:FF:DA:91 Certificate issuer: /CN=FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91 Certificate serial: 101AB2070F1AB160B98BB97BA787FFC5379334C5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.cer Subject info access: rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.mft Manifest number: 0508 Signing time: Fri 05 Sep 2025 17:21:13 +0000 Manifest this update: Fri 05 Sep 2025 17:16:13 +0000 Manifest next update: Mon 08 Sep 2025 21:38:13 +0000 Files and hashes: 1: 323430333a313838303a3a2f33322d3332203d3e203436303535.roa (hash: 5E43YVmj6Z7OGECRV0xvOsTql9Kqf+2yG0vKEkPwlDE=) 2: 3130332e3139382e3132322e302f32332d3234203d3e203436303535.roa (hash: LRTGK+GW9A0RpTs3Gv4UsfHpkx7owdE7KVjUD93I+Vo=) 3: 3230322e35322e34382e302f32332d3234203d3e203436303535.roa (hash: cBKI91E82619dGXlbZQsR3kG8PLRa84sQYxG51fCSE0=) 4: FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.crl (hash: 8dtsoirpsj8DmS+JiIyur2C7LnlY/FntNaMlyU40RWA=) 5: 3130332e3139382e3132302e302f32332d3234203d3e203436303535.roa (hash: Rkqt5EaL5SlKX5GmTTNQMVHFRYt3xFbyKGI2eZYOOAk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.crl rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 21:38:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:1a:b2:07:0f:1a:b1:60:b9:8b:b9:7b:a7:87:ff:c5:37:93:34:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91 Validity Not Before: Sep 5 17:16:13 2025 GMT Not After : Sep 8 21:38:13 2025 GMT Subject: CN=82F961FDE6E8583115881890D4508158113A9BC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:4b:5a:89:38:73:74:04:a0:7f:13:51:41:a1: 60:ef:d1:7b:54:c2:f3:9b:e8:21:23:60:2b:44:a3: 86:8c:64:71:4c:51:8e:e6:fa:f8:0c:0f:26:aa:26: 3b:e6:4b:6f:41:a6:be:3d:65:88:48:46:47:76:e6: 75:3d:3e:d1:e1:51:f9:d4:e3:f7:85:8a:64:3a:ec: 30:b3:9c:07:a8:70:d7:2e:eb:b7:61:1c:28:0a:a3: 9d:75:5d:08:5c:9a:3a:13:1c:cb:36:53:5b:d6:db: 6e:ab:e4:c1:29:ad:cd:3b:19:9a:a2:15:c0:86:b0: c4:ef:91:27:18:41:20:c5:1e:a3:f8:2d:5a:45:9d: ec:d3:18:e1:c9:3b:0c:76:85:bf:cf:9f:71:72:39: 5a:0d:90:6c:c9:2f:07:7b:f9:e0:4f:97:9a:0a:20: 10:e4:e5:d2:a8:9a:11:79:e2:23:a8:a1:36:9e:8f: b9:80:0a:92:13:57:cf:24:f5:32:5d:45:48:9e:da: 8e:68:00:ab:e6:66:24:6d:af:42:e9:07:42:bc:74: 1f:91:51:14:f4:25:86:67:05:55:bd:d0:4c:90:7c: 80:c6:79:d9:28:f1:75:ed:b3:f9:30:2f:04:10:02: ec:de:a9:a4:c0:44:3b:d2:a9:82:0d:3e:99:fa:73: 6f:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:F9:61:FD:E6:E8:58:31:15:88:18:90:D4:50:81:58:11:3A:9B:C6 X509v3 Authority Key Identifier: keyid:FB:D3:B2:8C:90:75:52:9D:EE:81:51:C4:E4:4B:0C:BC:13:FF:DA:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:33:ee:60:4e:23:ee:89:e4:b7:e7:03:7b:17:91:b7:c1:ed: 43:10:ae:81:47:d8:7f:9d:78:be:c8:af:63:f8:11:ff:21:58: 81:d8:22:d7:44:e8:7e:77:83:87:71:b5:d9:54:08:88:aa:9d: 15:78:dd:ce:4d:84:ba:64:aa:ef:3d:e9:0b:73:7d:6f:fb:31: ad:2c:7c:53:fe:c3:2e:a3:f5:00:79:b4:e6:b1:90:f5:d3:72: 10:9f:17:1c:6f:8c:1f:9c:15:c6:af:5a:0e:03:ad:20:03:f1: 2c:d4:1a:d8:61:77:eb:b5:76:ac:23:6f:eb:3c:8d:51:c7:a3: 0b:14:cf:02:5e:bd:81:44:a6:04:f1:d6:36:8c:7d:06:30:3d: 55:32:ff:9d:36:b9:2d:7c:62:bb:e5:13:a0:eb:ec:28:34:e4: 95:52:1c:59:b9:d0:81:2a:67:32:bf:55:70:fc:b2:d2:ec:18: c1:52:e0:b5:03:6c:00:60:7b:83:dc:68:1b:6f:dd:ce:66:9f: 15:73:57:81:14:50:bc:cc:36:c4:93:98:0a:dd:b9:cd:e9:86: 52:fc:da:c0:9c:b6:e5:03:0d:aa:3a:29:de:79:50:bd:70:19: e9:d1:be:55:8a:f1:eb:2f:ed:5e:6d:2e:ef:4e:75:fb:1c:f8: 89:96:88:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEBqyBw8asWC5i7l7p4f/xTeTNMUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkJEM0IyOEM5MDc1NTI5REVFODE1MUM0RTQ0QjBDQkMx M0ZGREE5MTAeFw0yNTA5MDUxNzE2MTNaFw0yNTA5MDgyMTM4MTNaMDMxMTAvBgNV BAMTKDgyRjk2MUZERTZFODU4MzExNTg4MTg5MEQ0NTA4MTU4MTEzQTlCQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTS1qJOHN0BKB/E1FBoWDv0XtU wvOb6CEjYCtEo4aMZHFMUY7m+vgMDyaqJjvmS29Bpr49ZYhIRkd25nU9PtHhUfnU 4/eFimQ67DCznAeocNcu67dhHCgKo511XQhcmjoTHMs2U1vW226r5MEprc07GZqi FcCGsMTvkScYQSDFHqP4LVpFnezTGOHJOwx2hb/Pn3FyOVoNkGzJLwd7+eBPl5oK IBDk5dKomhF54iOooTaej7mACpITV88k9TJdRUie2o5oAKvmZiRtr0LpB0K8dB+R URT0JYZnBVW90EyQfIDGedko8XXts/kwLwQQAuzeqaTARDvSqYINPpn6c2/xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgvlh/eboWDEViBiQ1FCBWBE6m8YwHwYDVR0j BBgwFoAU+9OyjJB1Up3ugVHE5EsMvBP/2pEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ODM5NzdmNC04YzJkLTRlYjEtYjRjZC0zNWI0OTIxNmUwNzMvMC9GQkQzQjI4Qzkw NzU1MjlERUU4MTUxQzRFNDRCMENCQzEzRkZEQTkxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkJEM0IyOEM5MDc1NTI5REVFODE1MUM0RTQ0QjBDQkMxM0ZG REE5MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDgzOTc3ZjQtOGMyZC00ZWIxLWI0 Y2QtMzViNDkyMTZlMDczLzAvRkJEM0IyOEM5MDc1NTI5REVFODE1MUM0RTQ0QjBD QkMxM0ZGREE5MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKwz7mBOI+6J5LfnA3sXkbfB7UMQroFH2H+d eL7Ir2P4Ef8hWIHYItdE6H53g4dxtdlUCIiqnRV43c5NhLpkqu896QtzfW/7Ma0s fFP+wy6j9QB5tOaxkPXTchCfFxxvjB+cFcavWg4DrSAD8SzUGthhd+u1dqwjb+s8 jVHHowsUzwJevYFEpgTx1jaMfQYwPVUy/502uS18YrvlE6Dr7Cg05JVSHFm50IEq ZzK/VXD8stLsGMFS4LUDbABge4PcaBtv3c5mnxVzV4EUULzMNsSTmArduc3phlL8 2sCctuUDDao6Kd55UL1wGenRvlWK8esv7V5tLu9Odfsc+ImWiLc= -----END CERTIFICATE-----Generated at Sun Sep 7 15:25:40 2025 by rpki-client