$ rpki-client -vvf repo-rpki.idnic.net/repo/8165e481-5a79-4868-a4e4-facfd922d813/0/FB3AAFE074610C85854BE75082EC16E60A126879.mft File: FB3AAFE074610C85854BE75082EC16E60A126879.mft (raw, json) Hash identifier: ByzhUOmHKCOynH3fxrnazbwmOew9Y79AyoUdUgeQGZE= Subject key identifier: 48:42:36:A6:5E:BE:41:F7:FE:30:4B:C4:B1:2C:9E:49:73:75:69:4B Authority key identifier: FB:3A:AF:E0:74:61:0C:85:85:4B:E7:50:82:EC:16:E6:0A:12:68:79 Certificate issuer: /CN=FB3AAFE074610C85854BE75082EC16E60A126879 Certificate serial: 0CB094B1B12A4E8D8CC49C5991CB9BFDBC6A1420 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB3AAFE074610C85854BE75082EC16E60A126879.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8165e481-5a79-4868-a4e4-facfd922d813/0/FB3AAFE074610C85854BE75082EC16E60A126879.mft Manifest number: EA Signing time: Sat 06 Sep 2025 14:20:42 +0000 Manifest this update: Sat 06 Sep 2025 14:15:42 +0000 Manifest next update: Tue 09 Sep 2025 14:48:42 +0000 Files and hashes: 1: 3130332e3135302e3135392e302f32342d3234203d3e20313430343331.roa (hash: e3s751+uHuq2vHbykLAhhBQ6L17VHuRd5Etg83ChrxA=) 2: FB3AAFE074610C85854BE75082EC16E60A126879.crl (hash: Wd5RsTLbcHPROJv3KCK0QsK4rf4530IlAIHQHHfB9aA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8165e481-5a79-4868-a4e4-facfd922d813/0/FB3AAFE074610C85854BE75082EC16E60A126879.crl rsync://repo-rpki.idnic.net/repo/8165e481-5a79-4868-a4e4-facfd922d813/0/FB3AAFE074610C85854BE75082EC16E60A126879.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB3AAFE074610C85854BE75082EC16E60A126879.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 14:48:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:b0:94:b1:b1:2a:4e:8d:8c:c4:9c:59:91:cb:9b:fd:bc:6a:14:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB3AAFE074610C85854BE75082EC16E60A126879 Validity Not Before: Sep 6 14:15:42 2025 GMT Not After : Sep 9 14:48:42 2025 GMT Subject: CN=484236A65EBE41F7FE304BC4B12C9E497375694B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:35:ab:4f:8c:12:2e:9e:c5:88:48:36:51:29: 9e:00:91:56:9f:57:9b:81:4d:00:79:e6:d8:a1:bd: ed:b2:c8:d5:16:5b:d5:1d:9f:11:87:98:8f:e9:d5: ed:62:51:f0:a9:eb:29:4f:23:dd:88:80:ea:52:2d: 80:4d:5e:47:50:d4:a4:00:06:d4:08:72:93:be:f9: df:20:78:b8:7f:24:a7:68:fd:1e:5b:73:10:96:44: 03:51:5e:4b:bd:73:e6:a4:b3:1c:3b:07:f6:ae:65: 5a:6f:43:0d:ee:7b:f1:f8:19:76:82:72:6e:5d:b6: e4:54:98:57:cd:f9:ab:2b:54:2d:3c:2a:fa:cc:9d: 9a:17:cb:6f:0b:6d:02:51:17:51:f6:5a:ca:16:a5: 02:b9:0a:67:b1:a7:0e:2c:1c:fe:9d:83:8b:f7:48: 8e:33:51:05:65:eb:02:b0:01:0f:a4:81:f8:fe:f3: 3b:1e:56:23:40:34:1c:56:0a:74:77:66:17:e8:41: 74:b0:b7:37:54:f4:14:08:d4:1d:43:ea:c6:84:5b: a5:dc:a9:19:f3:44:0c:39:df:33:91:90:68:4d:cd: 2c:e7:88:6d:10:3c:14:0a:2c:7f:77:81:c0:56:1a: c8:e1:7f:48:9c:1c:59:9b:71:dc:83:b9:c2:cf:a1: 6a:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:42:36:A6:5E:BE:41:F7:FE:30:4B:C4:B1:2C:9E:49:73:75:69:4B X509v3 Authority Key Identifier: keyid:FB:3A:AF:E0:74:61:0C:85:85:4B:E7:50:82:EC:16:E6:0A:12:68:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8165e481-5a79-4868-a4e4-facfd922d813/0/FB3AAFE074610C85854BE75082EC16E60A126879.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB3AAFE074610C85854BE75082EC16E60A126879.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8165e481-5a79-4868-a4e4-facfd922d813/0/FB3AAFE074610C85854BE75082EC16E60A126879.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:a3:99:d4:e6:f9:b2:0a:44:19:98:8e:88:39:79:b2:dd:d7: aa:55:c9:30:cd:db:a2:ce:74:cf:07:3f:c3:f7:3e:df:9b:05: 97:3f:10:c6:00:e1:02:ce:8c:f9:c8:e3:47:f3:8b:cb:86:73: e9:6e:68:8b:fa:9d:32:3f:0d:d1:af:73:6e:a4:b5:99:22:6a: b5:b6:58:89:46:09:74:e9:c9:8a:a7:5e:7c:01:cc:72:0e:09: eb:fb:26:be:1a:c2:ad:43:9a:07:12:81:0e:68:ba:af:0d:87: 58:cb:38:82:56:ca:05:21:23:97:ab:2e:28:42:f5:73:57:fc: 7c:e2:5c:8f:70:87:96:b5:12:6a:08:76:29:45:31:a4:f7:94: e9:ad:4e:c8:e0:d2:7a:d3:a0:68:82:91:7a:c2:a4:76:f1:6b: 8d:95:ed:af:04:23:23:07:05:9f:d1:03:c0:da:36:aa:c4:80: 20:d2:ce:a8:d8:f8:f4:a7:ab:7b:2f:bf:2a:bf:f3:05:08:cb: d8:b2:4f:fc:37:80:3e:4c:cf:ff:2e:9c:b1:0e:f2:91:d7:23: 37:30:1c:36:ec:d4:28:31:71:17:ae:82:fc:58:30:d7:aa:91: a3:4d:34:fd:1c:1f:ad:71:4a:b4:6c:28:b7:c4:ed:8c:b0:b8: 35:0a:54:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDLCUsbEqTo2MxJxZkcub/bxqFCAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkIzQUFGRTA3NDYxMEM4NTg1NEJFNzUwODJFQzE2RTYw QTEyNjg3OTAeFw0yNTA5MDYxNDE1NDJaFw0yNTA5MDkxNDQ4NDJaMDMxMTAvBgNV BAMTKDQ4NDIzNkE2NUVCRTQxRjdGRTMwNEJDNEIxMkM5RTQ5NzM3NTY5NEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVNatPjBIunsWISDZRKZ4AkVaf V5uBTQB55tihve2yyNUWW9UdnxGHmI/p1e1iUfCp6ylPI92IgOpSLYBNXkdQ1KQA BtQIcpO++d8geLh/JKdo/R5bcxCWRANRXku9c+aksxw7B/auZVpvQw3ue/H4GXaC cm5dtuRUmFfN+asrVC08KvrMnZoXy28LbQJRF1H2WsoWpQK5Cmexpw4sHP6dg4v3 SI4zUQVl6wKwAQ+kgfj+8zseViNANBxWCnR3ZhfoQXSwtzdU9BQI1B1D6saEW6Xc qRnzRAw53zORkGhNzSzniG0QPBQKLH93gcBWGsjhf0icHFmbcdyDucLPoWoRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSEI2pl6+Qff+MEvEsSyeSXN1aUswHwYDVR0j BBgwFoAU+zqv4HRhDIWFS+dQguwW5goSaHkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MTY1ZTQ4MS01YTc5LTQ4NjgtYTRlNC1mYWNmZDkyMmQ4MTMvMC9GQjNBQUZFMDc0 NjEwQzg1ODU0QkU3NTA4MkVDMTZFNjBBMTI2ODc5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkIzQUFGRTA3NDYxMEM4NTg1NEJFNzUwODJFQzE2RTYwQTEy Njg3OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODE2NWU0ODEtNWE3OS00ODY4LWE0 ZTQtZmFjZmQ5MjJkODEzLzAvRkIzQUFGRTA3NDYxMEM4NTg1NEJFNzUwODJFQzE2 RTYwQTEyNjg3OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHWjmdTm+bIKRBmYjog5ebLd16pVyTDN26LO dM8HP8P3Pt+bBZc/EMYA4QLOjPnI40fzi8uGc+luaIv6nTI/DdGvc26ktZkiarW2 WIlGCXTpyYqnXnwBzHIOCev7Jr4awq1DmgcSgQ5ouq8Nh1jLOIJWygUhI5erLihC 9XNX/HziXI9wh5a1EmoIdilFMaT3lOmtTsjg0nrToGiCkXrCpHbxa42V7a8EIyMH BZ/RA8DaNqrEgCDSzqjY+PSnq3svvyq/8wUIy9iyT/w3gD5Mz/8unLEO8pHXIzcw HDbs1CgxcReugvxYMNeqkaNNNP0cH61xSrRsKLfE7YywuDUKVA0= -----END CERTIFICATE-----Generated at Sun Sep 7 14:00:41 2025 by rpki-client