$ rpki-client -vvf repo-rpki.idnic.net/repo/b32d7627-47d7-4fd0-ae0f-63b873fe2c88/0/FBF979FD5B6D1AF690338C406BB657208D98F3DE.mft File: FBF979FD5B6D1AF690338C406BB657208D98F3DE.mft (raw, json) Hash identifier: xMO89iRnJsf4pIlLA529MdUxpLV2Rs8EI8mIU2tYGOk= Subject key identifier: 0D:25:10:24:D4:54:71:98:31:1A:84:FA:51:92:0B:71:08:BD:A4:39 Authority key identifier: FB:F9:79:FD:5B:6D:1A:F6:90:33:8C:40:6B:B6:57:20:8D:98:F3:DE Certificate issuer: /CN=FBF979FD5B6D1AF690338C406BB657208D98F3DE Certificate serial: 5D38509EED6EF8E2C673B299E55F2F46247469A4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBF979FD5B6D1AF690338C406BB657208D98F3DE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b32d7627-47d7-4fd0-ae0f-63b873fe2c88/0/FBF979FD5B6D1AF690338C406BB657208D98F3DE.mft Manifest number: 0505 Signing time: Fri 05 Sep 2025 07:02:15 +0000 Manifest this update: Fri 05 Sep 2025 06:57:15 +0000 Manifest next update: Mon 08 Sep 2025 08:03:15 +0000 Files and hashes: 1: FBF979FD5B6D1AF690338C406BB657208D98F3DE.crl (hash: 7ycFDLFvzO2DFfQ1+O3OvdCzg9ezb5vt9nSqm8XORC0=) 2: 3130332e3134392e3131362e302f32342d3234203d3e20313430303139.roa (hash: VXJZTzf1N9bLnOE34wm7TG6tn0+JbHJPrkKyWsVcPXk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b32d7627-47d7-4fd0-ae0f-63b873fe2c88/0/FBF979FD5B6D1AF690338C406BB657208D98F3DE.crl rsync://repo-rpki.idnic.net/repo/b32d7627-47d7-4fd0-ae0f-63b873fe2c88/0/FBF979FD5B6D1AF690338C406BB657208D98F3DE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBF979FD5B6D1AF690338C406BB657208D98F3DE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 08:03:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:38:50:9e:ed:6e:f8:e2:c6:73:b2:99:e5:5f:2f:46:24:74:69:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FBF979FD5B6D1AF690338C406BB657208D98F3DE Validity Not Before: Sep 5 06:57:15 2025 GMT Not After : Sep 8 08:03:15 2025 GMT Subject: CN=0D251024D4547198311A84FA51920B7108BDA439 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a4:8f:1b:0b:0e:bd:9c:fb:70:41:6c:4e:28: 01:af:d4:71:4b:e9:4a:a1:f8:54:44:a1:bd:d8:ec: 56:cb:d5:d2:16:d9:8e:19:e2:df:bf:26:6a:76:20: 9c:57:00:59:8a:d5:37:b4:bb:0a:9d:51:ff:4d:73: db:da:ff:14:eb:a6:0d:c2:fc:d9:1e:d6:e4:4a:28: 4a:23:be:68:75:3e:87:1a:97:3d:21:27:3a:03:7b: c3:2a:e9:84:e1:e7:62:b5:94:f9:a7:61:52:29:c5: 24:0e:86:ff:d1:ea:9c:fe:58:c6:3c:fd:a6:99:d3: 52:bf:8d:f7:3a:b7:40:0e:99:3f:47:e0:d8:07:f5: f2:b5:2c:19:3f:a0:42:03:c9:6e:ab:7f:79:0b:5e: 1d:84:86:89:69:e8:c7:f9:5a:11:c7:11:cc:0b:12: 50:26:b2:58:95:33:ed:df:50:cf:15:cf:e1:7a:dd: 12:d7:2e:80:38:7f:79:df:0f:ec:58:83:09:9f:fc: bb:a7:ec:37:61:0d:06:78:47:61:15:0c:d4:11:b4: 6c:bc:60:18:d6:e6:6f:ba:fd:32:c0:f7:5c:bf:0e: 12:45:7c:38:94:57:e6:9a:ea:d6:de:96:ca:7e:fd: 57:4b:16:a5:c7:ca:83:3e:bd:6e:5b:40:fb:4b:e6: 9e:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:25:10:24:D4:54:71:98:31:1A:84:FA:51:92:0B:71:08:BD:A4:39 X509v3 Authority Key Identifier: keyid:FB:F9:79:FD:5B:6D:1A:F6:90:33:8C:40:6B:B6:57:20:8D:98:F3:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b32d7627-47d7-4fd0-ae0f-63b873fe2c88/0/FBF979FD5B6D1AF690338C406BB657208D98F3DE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBF979FD5B6D1AF690338C406BB657208D98F3DE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b32d7627-47d7-4fd0-ae0f-63b873fe2c88/0/FBF979FD5B6D1AF690338C406BB657208D98F3DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:59:7b:4f:3a:07:8f:61:5c:31:d0:cd:cf:5d:bc:35:db:67: 23:af:f8:18:86:61:30:29:66:c7:91:5e:7e:73:e6:18:dc:3a: d9:4a:c7:e9:62:a5:4b:03:17:1c:2c:1f:72:a9:b4:a1:a1:3c: 49:9f:77:95:9d:02:c6:10:0c:ff:df:03:f7:d1:05:80:02:4d: 02:79:6a:2e:e0:db:02:75:b3:ba:ad:d2:c1:14:c4:ca:d3:24: e0:1d:b2:b9:44:c9:7f:19:95:86:89:86:26:c6:4c:4d:32:d5: 4b:23:3f:1d:49:14:12:81:94:92:50:a3:7c:ad:12:e7:54:25: d8:f3:19:d8:70:c2:b0:56:b8:98:42:50:22:10:ca:27:f3:8d: f5:51:c0:20:a5:80:0b:8d:82:a8:12:10:e6:c0:b6:3b:88:dc: 14:c6:f5:02:6e:36:09:27:5a:8f:ec:4b:59:5c:3f:1d:68:eb: e4:80:11:44:18:f1:fd:9d:67:2f:a0:ca:2e:3d:33:31:b0:2b: ab:72:c1:8e:db:b5:a6:ae:80:85:0e:74:1c:14:a9:65:9b:d9: da:46:7a:61:49:4d:4f:1e:c0:1b:3b:13:ef:47:a7:5e:bc:93: c2:ff:6b:58:a0:54:78:0b:76:f6:7b:6c:aa:b6:40:6d:bb:7d: 57:20:b5:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXThQnu1u+OLGc7KZ5V8vRiR0aaQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkJGOTc5RkQ1QjZEMUFGNjkwMzM4QzQwNkJCNjU3MjA4 RDk4RjNERTAeFw0yNTA5MDUwNjU3MTVaFw0yNTA5MDgwODAzMTVaMDMxMTAvBgNV BAMTKDBEMjUxMDI0RDQ1NDcxOTgzMTFBODRGQTUxOTIwQjcxMDhCREE0MzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6pI8bCw69nPtwQWxOKAGv1HFL 6Uqh+FREob3Y7FbL1dIW2Y4Z4t+/Jmp2IJxXAFmK1Te0uwqdUf9Nc9va/xTrpg3C /Nke1uRKKEojvmh1Pocalz0hJzoDe8Mq6YTh52K1lPmnYVIpxSQOhv/R6pz+WMY8 /aaZ01K/jfc6t0AOmT9H4NgH9fK1LBk/oEIDyW6rf3kLXh2Eholp6Mf5WhHHEcwL ElAmsliVM+3fUM8Vz+F63RLXLoA4f3nfD+xYgwmf/Lun7DdhDQZ4R2EVDNQRtGy8 YBjW5m+6/TLA91y/DhJFfDiUV+aa6tbelsp+/VdLFqXHyoM+vW5bQPtL5p73AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDSUQJNRUcZgxGoT6UZILcQi9pDkwHwYDVR0j BBgwFoAU+/l5/VttGvaQM4xAa7ZXII2Y894wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MzJkNzYyNy00N2Q3LTRmZDAtYWUwZi02M2I4NzNmZTJjODgvMC9GQkY5NzlGRDVC NkQxQUY2OTAzMzhDNDA2QkI2NTcyMDhEOThGM0RFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkJGOTc5RkQ1QjZEMUFGNjkwMzM4QzQwNkJCNjU3MjA4RDk4 RjNERS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjMyZDc2MjctNDdkNy00ZmQwLWFl MGYtNjNiODczZmUyYzg4LzAvRkJGOTc5RkQ1QjZEMUFGNjkwMzM4QzQwNkJCNjU3 MjA4RDk4RjNERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKhZe086B49hXDHQzc9dvDXbZyOv+BiGYTAp ZseRXn5z5hjcOtlKx+lipUsDFxwsH3KptKGhPEmfd5WdAsYQDP/fA/fRBYACTQJ5 ai7g2wJ1s7qt0sEUxMrTJOAdsrlEyX8ZlYaJhibGTE0y1UsjPx1JFBKBlJJQo3yt EudUJdjzGdhwwrBWuJhCUCIQyifzjfVRwCClgAuNgqgSEObAtjuI3BTG9QJuNgkn Wo/sS1lcPx1o6+SAEUQY8f2dZy+gyi49MzGwK6tywY7btaaugIUOdBwUqWWb2dpG emFJTU8ewBs7E+9Hp168k8L/a1igVHgLdvZ7bKq2QG27fVcgtTc= -----END CERTIFICATE-----Generated at Fri Sep 5 10:31:56 2025 by rpki-client