$ rpki-client -vvf repo-rpki.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.mft File: FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.mft (raw, json) Hash identifier: BGVIa7T9LQzXqA1dm2UEVd/xkB/lvzm42i5Sav3yALw= Subject key identifier: 18:D3:C5:59:8A:E1:3C:EC:70:19:EF:7A:E7:89:D3:F4:FB:29:D4:08 Authority key identifier: FB:3F:CC:1A:69:B1:BD:92:D6:A3:19:D7:FD:82:0E:EE:CE:67:42:45 Certificate issuer: /CN=FB3FCC1A69B1BD92D6A319D7FD820EEECE674245 Certificate serial: 7E799E6EB84B4C2336CE448FAA7D3D588816FA9A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.mft Manifest number: 0384 Signing time: Sun 07 Sep 2025 23:21:25 +0000 Manifest this update: Sun 07 Sep 2025 23:16:25 +0000 Manifest next update: Thu 11 Sep 2025 05:23:25 +0000 Files and hashes: 1: FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.crl (hash: 6TLIsCn3Mu83soZzV5H+V6k2YqSr8/euu5TzPFUP8ic=) 2: 3130332e3136342e3137302e302f32332d3234203d3e203137393935.roa (hash: KS9w1B5P8a3jbKsmFzr3W5flDVbhE11L0B9cjjDxpnE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.crl rsync://repo-rpki.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 05:23:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:79:9e:6e:b8:4b:4c:23:36:ce:44:8f:aa:7d:3d:58:88:16:fa:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB3FCC1A69B1BD92D6A319D7FD820EEECE674245 Validity Not Before: Sep 7 23:16:25 2025 GMT Not After : Sep 11 05:23:25 2025 GMT Subject: CN=18D3C5598AE13CEC7019EF7AE789D3F4FB29D408 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e4:97:72:fa:7b:17:9b:e0:0c:d0:32:86:a1: 5a:f3:ca:a4:73:8c:68:39:57:5d:72:37:ce:c9:1d: 68:e8:92:ee:c2:d9:71:0e:72:8d:73:eb:65:6c:f1: 53:45:4c:13:a9:d3:3f:c4:84:b7:40:2d:a7:cf:54: 26:8e:b8:42:0d:0c:87:b6:9a:0b:fb:d4:8f:26:48: 9b:85:2e:89:4c:f7:bd:78:31:ab:e9:3b:d6:d9:cd: 21:5e:0e:2d:33:be:f7:16:2c:5e:12:94:c5:a7:0a: db:a5:37:cc:67:85:bc:35:e0:90:09:e0:38:41:11: cb:45:12:88:e4:b9:c9:89:2c:6f:cb:c9:27:78:b5: c1:49:82:21:d8:7b:80:3d:58:fc:c5:db:30:dc:19: 9d:d5:54:3b:0e:93:b8:a9:6f:28:ca:de:ef:7a:f4: a8:27:1a:4e:79:01:3e:2b:f3:b7:f7:bb:c3:8c:47: 6e:e7:1e:44:9e:fd:95:76:3b:ce:19:9e:08:da:3f: 9e:ef:3b:01:6a:71:dd:43:5c:2f:32:39:b0:c7:a5: 8b:c6:ad:94:f6:67:14:d6:33:7a:c7:0b:92:86:42: c0:70:7b:e8:6a:d7:e2:6f:3e:ae:49:80:c1:1d:2b: f4:c2:6d:8c:de:12:10:8f:a2:3a:e4:45:08:4c:ca: bd:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:D3:C5:59:8A:E1:3C:EC:70:19:EF:7A:E7:89:D3:F4:FB:29:D4:08 X509v3 Authority Key Identifier: keyid:FB:3F:CC:1A:69:B1:BD:92:D6:A3:19:D7:FD:82:0E:EE:CE:67:42:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:0c:15:16:d0:4a:74:bf:df:57:10:87:3b:19:f3:2a:95:54: d5:f0:a4:10:6e:af:9f:fd:6e:eb:49:c8:cb:c1:c7:a1:bc:41: 65:97:77:f1:f3:36:f3:db:30:56:fc:df:ba:de:c2:dd:04:e9: 49:fa:05:59:7c:3c:ed:fc:2e:56:1a:04:f3:78:50:86:83:0e: 19:eb:ca:d9:27:f9:79:b9:21:af:fd:90:f4:e7:ea:e0:f9:d2: 8e:9b:b6:69:b6:4d:50:8a:29:01:97:b4:a5:db:fa:ef:6f:02: 85:9b:4c:16:ed:9e:4c:e1:36:aa:df:0e:00:a0:2d:0b:3d:dd: b1:b0:c6:87:e1:2a:4a:4c:cb:f4:46:bc:a2:b7:e2:61:d0:cb: ea:6a:dc:84:47:8f:8a:d4:1d:f6:0b:0c:22:f7:1e:b1:5c:19: 77:81:46:d7:e4:ae:8d:ca:4e:6e:ec:6c:f0:aa:11:36:d9:ad: 15:32:83:ed:70:02:3e:32:ce:4f:51:58:88:86:59:de:47:95: 2d:6b:90:77:31:f4:b7:09:1a:0d:57:e5:1d:74:95:81:be:86: 51:93:18:a3:d5:7b:d8:19:8b:ac:2a:07:cb:8b:c9:f0:73:23: 5d:f9:a3:19:5e:fe:d8:fb:a6:6b:ff:9c:de:2f:36:c5:03:fd: c3:47:b5:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfnmebrhLTCM2zkSPqn09WIgW+powDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkIzRkNDMUE2OUIxQkQ5MkQ2QTMxOUQ3RkQ4MjBFRUVD RTY3NDI0NTAeFw0yNTA5MDcyMzE2MjVaFw0yNTA5MTEwNTIzMjVaMDMxMTAvBgNV BAMTKDE4RDNDNTU5OEFFMTNDRUM3MDE5RUY3QUU3ODlEM0Y0RkIyOUQ0MDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG5Jdy+nsXm+AM0DKGoVrzyqRz jGg5V11yN87JHWjoku7C2XEOco1z62Vs8VNFTBOp0z/EhLdALafPVCaOuEINDIe2 mgv71I8mSJuFLolM9714MavpO9bZzSFeDi0zvvcWLF4SlMWnCtulN8xnhbw14JAJ 4DhBEctFEojkucmJLG/LySd4tcFJgiHYe4A9WPzF2zDcGZ3VVDsOk7ipbyjK3u96 9KgnGk55AT4r87f3u8OMR27nHkSe/ZV2O84ZngjaP57vOwFqcd1DXC8yObDHpYvG rZT2ZxTWM3rHC5KGQsBwe+hq1+JvPq5JgMEdK/TCbYzeEhCPojrkRQhMyr0TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGNPFWYrhPOxwGe9654nT9Psp1AgwHwYDVR0j BBgwFoAU+z/MGmmxvZLWoxnX/YIO7s5nQkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZDg3YmVlZC02MzMwLTRmMzMtOTEwNS04NzcyMmNkZjJkZDAvMC9GQjNGQ0MxQTY5 QjFCRDkyRDZBMzE5RDdGRDgyMEVFRUNFNjc0MjQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkIzRkNDMUE2OUIxQkQ5MkQ2QTMxOUQ3RkQ4MjBFRUVDRTY3 NDI0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWQ4N2JlZWQtNjMzMC00ZjMzLTkx MDUtODc3MjJjZGYyZGQwLzAvRkIzRkNDMUE2OUIxQkQ5MkQ2QTMxOUQ3RkQ4MjBF RUVDRTY3NDI0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGMMFRbQSnS/31cQhzsZ8yqVVNXwpBBur5/9 butJyMvBx6G8QWWXd/HzNvPbMFb837rewt0E6Un6BVl8PO38LlYaBPN4UIaDDhnr ytkn+Xm5Ia/9kPTn6uD50o6btmm2TVCKKQGXtKXb+u9vAoWbTBbtnkzhNqrfDgCg LQs93bGwxofhKkpMy/RGvKK34mHQy+pq3IRHj4rUHfYLDCL3HrFcGXeBRtfkro3K Tm7sbPCqETbZrRUyg+1wAj4yzk9RWIiGWd5HlS1rkHcx9LcJGg1X5R10lYG+hlGT GKPVe9gZi6wqB8uLyfBzI135oxle/tj7pmv/nN4vNsUD/cNHtWo= -----END CERTIFICATE-----Generated at Tue Sep 9 01:24:14 2025 by rpki-client