$ rpki-client -vvf repo-rpki.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.mft File: FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.mft (raw, json) Hash identifier: Ps8uOQ8uov4f9k9v+1SSCpSU1QR/+i9wgpMvWnWf838= Subject key identifier: 9C:0E:01:12:B0:4B:E3:59:04:7A:49:AF:3B:E7:A0:9B:4F:2A:43:72 Authority key identifier: FA:B0:81:FC:D8:6A:B0:F8:1D:41:C9:E5:FB:9C:3D:32:22:0F:48:CD Certificate issuer: /CN=FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD Certificate serial: 3F1281411C332149C6BBF985374C097C9FBBFCA3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.mft Manifest number: F8 Signing time: Sat 30 Aug 2025 05:21:21 +0000 Manifest this update: Sat 30 Aug 2025 05:16:21 +0000 Manifest next update: Tue 02 Sep 2025 16:49:21 +0000 Files and hashes: 1: 3135372e31302e312e302f32342d3234203d3e20313532303739.roa (hash: 8mKHP2haWx9nDqWVpffr2HLwx0PW3MsCMnqlWHBgH8s=) 2: 3135372e31302e302e302f32332d3233203d3e20313532303739.roa (hash: LI/HMaoSlImx3bWiKBUR5SBmy9IHEOgEnYbWctfALp8=) 3: 3135372e31302e302e302f32342d3234203d3e20313532303739.roa (hash: /rLqhw2hFwRMsfI5zGP3QkMBxOWlLSkauOe3xFxChRo=) 4: FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.crl (hash: +CLUVGoFJKEWCRohEwwtHtl4hBC6IYQGlEnJIVjR2ZU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.crl rsync://repo-rpki.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 02 Sep 2025 02:27:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:12:81:41:1c:33:21:49:c6:bb:f9:85:37:4c:09:7c:9f:bb:fc:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD Validity Not Before: Aug 30 05:16:21 2025 GMT Not After : Sep 2 16:49:21 2025 GMT Subject: CN=9C0E0112B04BE359047A49AF3BE7A09B4F2A4372 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:30:c5:b3:eb:25:c8:2f:ba:14:da:18:05:c3: 96:3a:d0:e5:51:3c:5d:79:90:d6:61:70:e9:89:e1: b6:d8:c3:5f:94:bd:72:1b:fc:d1:84:8a:7a:f2:b0: e7:aa:90:ab:e3:53:d1:0b:9c:c6:b1:e8:cc:9f:31: 51:cf:72:c5:77:be:91:85:f7:f9:3a:8e:6a:1f:c9: 91:57:43:2b:88:2f:78:e9:f6:b1:ad:fd:1e:39:4e: 18:b2:45:69:df:1d:ec:1e:f2:db:e4:eb:b0:04:d1: 34:d9:b8:2a:cd:4f:52:1f:1d:a5:07:4f:c4:61:9d: 66:66:3c:f1:3a:ba:88:4c:61:f1:bd:c6:c3:60:17: 41:c5:cb:07:a5:1f:64:3d:05:a1:fb:8b:90:ad:14: 0a:a9:45:29:bc:db:c9:46:8e:bc:42:71:ea:c1:fa: 4b:c9:aa:07:3b:01:a4:2e:33:87:5f:2e:55:d4:41: 98:e9:71:00:6c:96:2f:f7:51:13:26:3d:76:28:49: 97:95:47:f6:b1:93:38:99:87:a8:57:88:c2:9a:a0: 74:cc:01:e8:50:69:d5:15:74:f4:7b:0a:85:23:aa: 6e:21:16:ce:d6:c5:ee:cc:61:07:ea:3e:53:3a:18: ea:77:2e:e2:db:0d:42:25:e4:51:d5:c7:3f:e7:c2: 63:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:0E:01:12:B0:4B:E3:59:04:7A:49:AF:3B:E7:A0:9B:4F:2A:43:72 X509v3 Authority Key Identifier: keyid:FA:B0:81:FC:D8:6A:B0:F8:1D:41:C9:E5:FB:9C:3D:32:22:0F:48:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:52:b3:4b:ec:bf:14:55:3b:2c:b3:e8:e2:9f:dd:63:8c:90: 62:06:29:57:1f:db:be:ad:1b:ac:ad:ff:14:92:a8:7b:15:a4: f4:69:4d:c0:79:a4:fb:a4:6c:a8:1c:b9:d9:49:51:b0:60:75: 77:39:4e:ba:4a:a0:62:a7:ce:aa:bf:69:ab:a6:67:b4:df:90: 0e:f2:53:42:e4:7b:a3:f9:25:6c:58:65:ad:51:3e:d6:f2:4d: a8:ee:71:09:af:c6:5c:d5:43:a2:2f:62:55:96:eb:27:b6:ce: d2:e9:6b:91:89:56:54:a4:80:ad:d9:a1:40:07:fb:e2:49:78: 8b:89:83:87:47:cd:05:47:c3:ad:74:a1:6a:2c:39:cf:7a:a3: fc:81:2a:92:c3:8c:30:40:0c:1e:d5:66:5d:b1:ec:8b:19:6f: 62:ac:e3:af:08:42:cb:44:53:6a:e5:e0:6c:42:a6:e2:6c:c8: 50:d8:be:2e:4a:6f:80:a9:b2:89:84:54:15:c2:be:da:e5:69: a8:a8:60:8a:f9:ca:f6:07:3a:8f:39:c2:1d:2d:58:ef:b7:2e: 3b:48:98:49:14:11:85:50:17:36:df:c5:4e:c0:5c:76:a6:96: 03:92:7f:a2:ec:00:bb:ed:72:06:d1:26:2d:df:88:29:d1:50: dc:a2:fb:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPxKBQRwzIUnGu/mFN0wJfJ+7/KMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkFCMDgxRkNEODZBQjBGODFENDFDOUU1RkI5QzNEMzIy MjBGNDhDRDAeFw0yNTA4MzAwNTE2MjFaFw0yNTA5MDIxNjQ5MjFaMDMxMTAvBgNV BAMTKDlDMEUwMTEyQjA0QkUzNTkwNDdBNDlBRjNCRTdBMDlCNEYyQTQzNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbMMWz6yXIL7oU2hgFw5Y60OVR PF15kNZhcOmJ4bbYw1+UvXIb/NGEinrysOeqkKvjU9ELnMax6MyfMVHPcsV3vpGF 9/k6jmofyZFXQyuIL3jp9rGt/R45ThiyRWnfHewe8tvk67AE0TTZuCrNT1IfHaUH T8RhnWZmPPE6uohMYfG9xsNgF0HFywelH2Q9BaH7i5CtFAqpRSm828lGjrxCcerB +kvJqgc7AaQuM4dfLlXUQZjpcQBsli/3URMmPXYoSZeVR/axkziZh6hXiMKaoHTM AehQadUVdPR7CoUjqm4hFs7Wxe7MYQfqPlM6GOp3LuLbDUIl5FHVxz/nwmO1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnA4BErBL41kEekmvO+egm08qQ3IwHwYDVR0j BBgwFoAU+rCB/NhqsPgdQcnl+5w9MiIPSM0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OTRkMWY2Mi04NDg4LTQwODYtOGQ0Yy1mMmRlNWM3NmRhM2QvMC9GQUIwODFGQ0Q4 NkFCMEY4MUQ0MUM5RTVGQjlDM0QzMjIyMEY0OENELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkFCMDgxRkNEODZBQjBGODFENDFDOUU1RkI5QzNEMzIyMjBG NDhDRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTk0ZDFmNjItODQ4OC00MDg2LThk NGMtZjJkZTVjNzZkYTNkLzAvRkFCMDgxRkNEODZBQjBGODFENDFDOUU1RkI5QzNE MzIyMjBGNDhDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALNSs0vsvxRVOyyz6OKf3WOMkGIGKVcf276t G6yt/xSSqHsVpPRpTcB5pPukbKgcudlJUbBgdXc5TrpKoGKnzqq/aaumZ7TfkA7y U0Lke6P5JWxYZa1RPtbyTajucQmvxlzVQ6IvYlWW6ye2ztLpa5GJVlSkgK3ZoUAH ++JJeIuJg4dHzQVHw610oWosOc96o/yBKpLDjDBADB7VZl2x7IsZb2Ks468IQstE U2rl4GxCpuJsyFDYvi5Kb4CpsomEVBXCvtrlaaioYIr5yvYHOo85wh0tWO+3LjtI mEkUEYVQFzbfxU7AXHamlgOSf6LsALvtcgbRJi3fiCnRUNyi+w4= -----END CERTIFICATE-----Generated at Sun Aug 31 06:53:56 2025 by rpki-client