$ rpki-client -vvf repo-rpki.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.mft File: FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.mft (raw, json) Hash identifier: FR3/eKX5kABJxqhPE6N3VFnxQWlPvfYwWJ/KeBYdU7A= Subject key identifier: 55:01:24:9C:D0:D7:0A:8C:25:88:0F:90:7B:32:FB:5D:DB:C9:A3:FB Authority key identifier: FA:B0:81:FC:D8:6A:B0:F8:1D:41:C9:E5:FB:9C:3D:32:22:0F:48:CD Certificate issuer: /CN=FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD Certificate serial: 04E7E46D9CC740ECBCA8ED627D1DE544DE22DB22 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.mft Manifest number: D3 Signing time: Sat 07 Jun 2025 15:51:19 +0000 Manifest this update: Sat 07 Jun 2025 15:46:19 +0000 Manifest next update: Tue 10 Jun 2025 15:51:19 +0000 Files and hashes: 1: 3135372e31302e302e302f32332d3233203d3e20313532303739.roa (hash: LI/HMaoSlImx3bWiKBUR5SBmy9IHEOgEnYbWctfALp8=) 2: 3135372e31302e312e302f32342d3234203d3e20313532303739.roa (hash: 8mKHP2haWx9nDqWVpffr2HLwx0PW3MsCMnqlWHBgH8s=) 3: FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.crl (hash: up+Pa+e7hHTB5VsEDW2DIzEjLKRgYMoz3alyUSTn+OE=) 4: 3135372e31302e302e302f32342d3234203d3e20313532303739.roa (hash: /rLqhw2hFwRMsfI5zGP3QkMBxOWlLSkauOe3xFxChRo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.crl rsync://repo-rpki.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 06:30:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:e7:e4:6d:9c:c7:40:ec:bc:a8:ed:62:7d:1d:e5:44:de:22:db:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD Validity Not Before: Jun 7 15:46:19 2025 GMT Not After : Jun 10 15:51:19 2025 GMT Subject: CN=5501249CD0D70A8C25880F907B32FB5DDBC9A3FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:11:4a:76:cc:21:38:11:7f:92:7e:d6:5b:33: f4:8b:23:f3:7f:38:1b:83:75:b1:77:45:42:03:2c: 91:82:e7:7e:6f:8d:f5:d5:68:9e:e4:7f:2e:17:36: b2:d8:8b:79:ae:02:0e:a0:a8:eb:6a:66:78:96:0f: ca:eb:77:c1:6d:8c:7d:c6:4f:a7:a3:1b:33:e3:76: 7e:a2:b9:f5:d6:9f:10:73:80:41:ec:e0:3f:bc:ac: ff:2a:74:98:74:7a:b6:bb:18:5c:c3:fa:ba:c0:d7: 3c:8a:90:22:21:5b:21:22:97:39:f6:17:dc:9b:cf: 29:bf:31:fd:e7:48:ec:a8:05:bd:6c:c1:f0:6e:a7: 52:d2:d8:fb:f9:2d:18:f3:51:10:9c:19:a3:92:cc: 78:c6:db:ba:de:5b:91:db:10:8b:0f:16:b5:c6:9f: 47:6f:60:fe:46:a3:77:ec:44:17:7c:65:6a:67:ba: 6e:e3:02:40:69:ed:f6:9d:d9:2d:8a:18:ae:5e:2d: 79:70:13:4b:85:9b:91:1e:e4:3a:19:29:b2:34:79: 1d:8f:62:87:22:0b:4f:cc:19:48:db:f9:b6:bd:d2: 82:20:0a:31:5c:a1:58:e7:b2:a3:56:49:4a:18:3b: 48:a3:40:af:7c:45:b6:c2:83:63:50:eb:b4:c7:5b: 6e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:01:24:9C:D0:D7:0A:8C:25:88:0F:90:7B:32:FB:5D:DB:C9:A3:FB X509v3 Authority Key Identifier: keyid:FA:B0:81:FC:D8:6A:B0:F8:1D:41:C9:E5:FB:9C:3D:32:22:0F:48:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:07:94:23:7f:78:5b:2f:30:c2:93:47:cb:8d:db:dc:2c:3a: da:7c:84:43:3f:2b:0b:44:95:43:bc:3a:17:c0:87:3b:13:c2: c0:74:cb:02:4c:62:fc:74:92:57:76:96:ad:e0:72:c8:76:b9: c8:43:e4:a9:48:10:d1:1f:4e:c2:75:eb:91:29:6c:c3:fa:64: 04:b0:96:66:41:60:44:88:62:15:68:13:19:2d:53:26:33:4b: 07:be:6d:e1:b1:25:a5:84:16:83:0c:80:9d:f1:c7:91:25:49: c8:e9:aa:08:df:5b:fe:d7:4b:85:23:ab:80:78:8e:9f:10:ae: 12:3e:b0:65:b5:1a:ef:68:53:11:04:30:68:fc:98:d5:a9:5d: 32:61:96:8d:dc:5b:14:08:af:0b:ea:cc:64:21:0f:88:e9:69: 6b:ec:6c:af:21:aa:2e:13:d5:e7:4c:0a:17:f0:38:7e:fa:0b: bd:9b:f6:9c:c9:06:98:24:45:ed:b6:3b:d5:b2:2d:e9:78:c0: 50:f1:53:c7:19:9b:a3:e0:c7:a7:3e:7c:b2:10:04:a6:e4:a0: c4:1c:c4:ea:37:86:ff:07:a5:e0:f2:48:01:9e:67:05:c0:00: 09:ff:1a:fd:e7:c5:c3:c3:ec:d4:c5:dc:e6:41:5b:dc:19:6f: b7:a7:2f:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBOfkbZzHQOy8qO1ifR3lRN4i2yIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkFCMDgxRkNEODZBQjBGODFENDFDOUU1RkI5QzNEMzIy MjBGNDhDRDAeFw0yNTA2MDcxNTQ2MTlaFw0yNTA2MTAxNTUxMTlaMDMxMTAvBgNV BAMTKDU1MDEyNDlDRDBENzBBOEMyNTg4MEY5MDdCMzJGQjVEREJDOUEzRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrEUp2zCE4EX+SftZbM/SLI/N/ OBuDdbF3RUIDLJGC535vjfXVaJ7kfy4XNrLYi3muAg6gqOtqZniWD8rrd8FtjH3G T6ejGzPjdn6iufXWnxBzgEHs4D+8rP8qdJh0era7GFzD+rrA1zyKkCIhWyEilzn2 F9ybzym/Mf3nSOyoBb1swfBup1LS2Pv5LRjzURCcGaOSzHjG27reW5HbEIsPFrXG n0dvYP5Go3fsRBd8ZWpnum7jAkBp7fad2S2KGK5eLXlwE0uFm5Ee5DoZKbI0eR2P YociC0/MGUjb+ba90oIgCjFcoVjnsqNWSUoYO0ijQK98RbbCg2NQ67THW24HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVQEknNDXCowliA+QezL7XdvJo/swHwYDVR0j BBgwFoAU+rCB/NhqsPgdQcnl+5w9MiIPSM0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OTRkMWY2Mi04NDg4LTQwODYtOGQ0Yy1mMmRlNWM3NmRhM2QvMC9GQUIwODFGQ0Q4 NkFCMEY4MUQ0MUM5RTVGQjlDM0QzMjIyMEY0OENELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkFCMDgxRkNEODZBQjBGODFENDFDOUU1RkI5QzNEMzIyMjBG NDhDRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTk0ZDFmNjItODQ4OC00MDg2LThk NGMtZjJkZTVjNzZkYTNkLzAvRkFCMDgxRkNEODZBQjBGODFENDFDOUU1RkI5QzNE MzIyMjBGNDhDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACYHlCN/eFsvMMKTR8uN29wsOtp8hEM/KwtE lUO8OhfAhzsTwsB0ywJMYvx0kld2lq3gcsh2uchD5KlIENEfTsJ165EpbMP6ZASw lmZBYESIYhVoExktUyYzSwe+beGxJaWEFoMMgJ3xx5ElScjpqgjfW/7XS4Ujq4B4 jp8QrhI+sGW1Gu9oUxEEMGj8mNWpXTJhlo3cWxQIrwvqzGQhD4jpaWvsbK8hqi4T 1edMChfwOH76C72b9pzJBpgkRe22O9WyLel4wFDxU8cZm6Pgx6c+fLIQBKbkoMQc xOo3hv8HpeDySAGeZwXAAAn/Gv3nxcPD7NTF3OZBW9wZb7enL5w= -----END CERTIFICATE-----Generated at Sat Jun 7 22:56:46 2025 by rpki-client