$ rpki-client -vvf repo-rpki.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.mft File: FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.mft (raw, json) Hash identifier: 5VWLbycWHDAfiYB1xWnBAJAVMHigtj9kEEBYCWqx79c= Subject key identifier: 1A:D5:A3:7C:B2:E1:96:37:1B:2F:C8:5E:E1:93:40:1E:01:B1:AA:C3 Authority key identifier: FA:BD:B6:E4:44:51:B7:F0:37:8A:E9:2C:27:50:EB:FE:5A:3C:FA:38 Certificate issuer: /CN=FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38 Certificate serial: 54BD7AB9465A0B10613ED27FC984445D5103AF92 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.mft Manifest number: 04EB Signing time: Sat 06 Sep 2025 09:41:43 +0000 Manifest this update: Sat 06 Sep 2025 09:36:43 +0000 Manifest next update: Tue 09 Sep 2025 10:33:43 +0000 Files and hashes: 1: 323430363a613063303a3a2f33322d3332203d3e20313337333331.roa (hash: Ai0eZhLY+4L7mdTG5liUS7qc6ABicMzreMWiAuYqKfU=) 2: 3130332e3135372e3131362e302f32332d3234203d3e20313337333331.roa (hash: gepyqAbuiPaUA1F4qNan63WSMqffSkJDQ7owW86Bv/s=) 3: FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.crl (hash: 0bhOyvdDPFpoOQ6nhkrrQEsWI54vjUa/r7t/C485r2g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.crl rsync://repo-rpki.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 10:33:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:bd:7a:b9:46:5a:0b:10:61:3e:d2:7f:c9:84:44:5d:51:03:af:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38 Validity Not Before: Sep 6 09:36:43 2025 GMT Not After : Sep 9 10:33:43 2025 GMT Subject: CN=1AD5A37CB2E196371B2FC85EE193401E01B1AAC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:50:86:07:6c:17:fb:e0:83:f3:22:95:76:a4: b1:6c:b3:30:ea:8a:35:98:16:09:16:d3:e7:a7:de: 2d:f7:65:70:8a:74:e7:18:94:11:58:1d:73:e3:1f: a0:02:03:14:b9:ce:3e:70:14:dd:68:11:db:f6:80: f4:0c:64:3d:3c:bc:0f:0e:a9:e2:a9:95:08:cc:37: d2:74:f9:40:a3:d1:83:72:6d:bc:cb:a8:f8:bb:69: 49:c5:cc:c9:08:fe:6c:54:5d:4b:12:86:c2:05:06: 9b:bf:22:eb:bc:b5:5d:d2:14:71:0c:e0:48:d6:78: 4a:18:5e:d2:b2:a2:fe:dc:a1:8b:f9:10:1d:39:62: a7:7f:0a:26:1f:83:29:35:02:ce:2d:9d:33:a4:ac: c7:7f:f6:92:87:4f:da:3d:a0:c3:0e:a8:26:36:63: d5:6a:1a:58:b4:a4:28:5b:d9:9e:c6:ca:4a:86:39: 1c:d1:57:cd:9c:d9:f7:02:5e:87:f6:0d:4f:e4:d0: b0:d3:3e:78:a5:ac:c7:31:31:d7:0a:a3:0d:1d:60: 57:44:61:a6:17:9e:38:54:e8:4a:6f:87:5c:c9:88: a7:8c:e7:cb:b0:ce:12:a1:51:e1:ae:86:5e:d2:ad: eb:43:f2:f8:c2:c7:a9:44:13:8f:29:c9:6f:63:36: a9:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:D5:A3:7C:B2:E1:96:37:1B:2F:C8:5E:E1:93:40:1E:01:B1:AA:C3 X509v3 Authority Key Identifier: keyid:FA:BD:B6:E4:44:51:B7:F0:37:8A:E9:2C:27:50:EB:FE:5A:3C:FA:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:21:2e:d3:e9:6a:55:69:70:d4:8a:cb:44:f0:a4:f4:f8:93: 8e:02:eb:9f:f8:bf:e7:97:bf:08:3e:2d:a0:df:06:5a:e2:77: eb:4f:62:63:f2:29:24:f7:5a:2c:cf:0b:66:8f:1a:79:b0:5a: 55:f0:54:77:8a:88:0c:f2:03:dd:7e:3b:60:c6:27:f1:20:da: a9:b3:7f:68:17:98:52:5d:9b:97:73:40:78:5e:b3:bd:71:f4: b6:bc:18:55:c9:b6:1d:71:11:ea:91:dc:fb:df:78:68:e4:28: 45:37:19:76:66:9a:db:4f:2c:0e:bf:28:42:0d:92:2c:a5:22: 04:4f:cf:31:d1:9b:3b:7f:8e:e3:92:68:01:cb:8b:fe:8f:93: 5a:90:d9:54:09:61:06:d2:0c:20:1e:68:c0:e3:30:89:42:ac: dd:c9:f0:7a:8d:90:ce:7c:74:6c:5a:19:30:56:91:14:fa:65: 66:31:5f:6a:13:37:be:af:e0:cc:18:5a:14:31:23:a3:32:6a: fe:0d:01:ad:db:66:43:66:26:ab:9e:52:4f:f1:8f:b9:32:74: 82:f6:8a:dc:a1:c9:44:45:1a:1c:47:11:4d:01:e9:67:4e:f8: 49:ee:40:ce:39:1d:fa:67:95:9d:60:79:a2:8f:f2:2a:6d:98: 53:3d:42:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVL16uUZaCxBhPtJ/yYREXVEDr5IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkFCREI2RTQ0NDUxQjdGMDM3OEFFOTJDMjc1MEVCRkU1 QTNDRkEzODAeFw0yNTA5MDYwOTM2NDNaFw0yNTA5MDkxMDMzNDNaMDMxMTAvBgNV BAMTKDFBRDVBMzdDQjJFMTk2MzcxQjJGQzg1RUUxOTM0MDFFMDFCMUFBQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/UIYHbBf74IPzIpV2pLFsszDq ijWYFgkW0+en3i33ZXCKdOcYlBFYHXPjH6ACAxS5zj5wFN1oEdv2gPQMZD08vA8O qeKplQjMN9J0+UCj0YNybbzLqPi7aUnFzMkI/mxUXUsShsIFBpu/Iuu8tV3SFHEM 4EjWeEoYXtKyov7coYv5EB05Yqd/CiYfgyk1As4tnTOkrMd/9pKHT9o9oMMOqCY2 Y9VqGli0pChb2Z7GykqGORzRV82c2fcCXof2DU/k0LDTPnilrMcxMdcKow0dYFdE YaYXnjhU6Epvh1zJiKeM58uwzhKhUeGuhl7SretD8vjCx6lEE48pyW9jNqkhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGtWjfLLhljcbL8he4ZNAHgGxqsMwHwYDVR0j BBgwFoAU+r225ERRt/A3iuksJ1Dr/lo8+jgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZDA3ZTNkOC05YmZjLTQ0ODMtYTJkZC1hZmE0NTkzODExZTUvMC9GQUJEQjZFNDQ0 NTFCN0YwMzc4QUU5MkMyNzUwRUJGRTVBM0NGQTM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkFCREI2RTQ0NDUxQjdGMDM3OEFFOTJDMjc1MEVCRkU1QTND RkEzOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWQwN2UzZDgtOWJmYy00NDgzLWEy ZGQtYWZhNDU5MzgxMWU1LzAvRkFCREI2RTQ0NDUxQjdGMDM3OEFFOTJDMjc1MEVC RkU1QTNDRkEzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKMhLtPpalVpcNSKy0TwpPT4k44C65/4v+eX vwg+LaDfBlrid+tPYmPyKST3WizPC2aPGnmwWlXwVHeKiAzyA91+O2DGJ/Eg2qmz f2gXmFJdm5dzQHhes71x9La8GFXJth1xEeqR3PvfeGjkKEU3GXZmmttPLA6/KEIN kiylIgRPzzHRmzt/juOSaAHLi/6Pk1qQ2VQJYQbSDCAeaMDjMIlCrN3J8HqNkM58 dGxaGTBWkRT6ZWYxX2oTN76v4MwYWhQxI6Myav4NAa3bZkNmJqueUk/xj7kydIL2 ityhyURFGhxHEU0B6WdO+EnuQM45HfpnlZ1geaKP8iptmFM9QoQ= -----END CERTIFICATE-----Generated at Sun Sep 7 15:34:20 2025 by rpki-client