$ rpki-client -vvf repo-rpki.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/FA86E23853549D2EF1D9F9C9222147A550E36A38.mft File: FA86E23853549D2EF1D9F9C9222147A550E36A38.mft (raw, json) Hash identifier: M+3IA2y+nFgC90ivM4HDVkx4EcgGkWc4rrGT6fDGfA8= Subject key identifier: F3:BD:83:76:D4:F9:C8:3A:E9:76:58:51:A0:9D:DC:86:4A:C7:8E:14 Authority key identifier: FA:86:E2:38:53:54:9D:2E:F1:D9:F9:C9:22:21:47:A5:50:E3:6A:38 Certificate issuer: /CN=FA86E23853549D2EF1D9F9C9222147A550E36A38 Certificate serial: 241F3E05F45BCC981B91A2D645B6F259CBA61D84 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA86E23853549D2EF1D9F9C9222147A550E36A38.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/FA86E23853549D2EF1D9F9C9222147A550E36A38.mft Manifest number: 01CB Signing time: Wed 03 Sep 2025 11:50:43 +0000 Manifest this update: Wed 03 Sep 2025 11:45:43 +0000 Manifest next update: Sat 06 Sep 2025 22:08:43 +0000 Files and hashes: 1: 3130332e35352e32382e302f32332d3234203d3e20313530343837.roa (hash: 8iSBjCuogDhcUBYZIPXuvYllDkYyp+uiEvzE8S7/ER4=) 2: FA86E23853549D2EF1D9F9C9222147A550E36A38.crl (hash: ZTiCiUmxvQHCC6wuV/7PesBXsY2uqSV0faWWNjNPxiQ=) 3: 3130332e35352e32392e302f32342d3234203d3e20313530343837.roa (hash: Zcui17ZIB7y9MI9lypagYjRYe4mnYqSwkXUNcZtsFwo=) 4: 3130332e35352e32382e302f32342d3234203d3e20313530343837.roa (hash: RjVxvxxbyDiQSv718+JovDu9zNSEKhSMEBDdXzJXwvE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/FA86E23853549D2EF1D9F9C9222147A550E36A38.crl rsync://repo-rpki.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/FA86E23853549D2EF1D9F9C9222147A550E36A38.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA86E23853549D2EF1D9F9C9222147A550E36A38.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 22:08:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:1f:3e:05:f4:5b:cc:98:1b:91:a2:d6:45:b6:f2:59:cb:a6:1d:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA86E23853549D2EF1D9F9C9222147A550E36A38 Validity Not Before: Sep 3 11:45:43 2025 GMT Not After : Sep 6 22:08:43 2025 GMT Subject: CN=F3BD8376D4F9C83AE9765851A09DDC864AC78E14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:06:9f:64:35:6e:59:28:cd:03:8f:7c:74:e2: 98:7a:40:95:24:80:5d:b8:df:89:f5:2b:01:1c:a7: 7f:f3:8f:a0:fc:1d:b1:ab:d2:02:b2:f7:92:91:3f: 31:8e:20:67:54:43:46:d6:1e:c6:3e:d2:b6:80:de: 99:f4:a8:b9:34:17:65:3a:9f:bf:c9:44:2b:6f:34: 6f:34:19:8a:30:f4:f9:5b:fd:22:e9:78:e9:65:6d: c8:ba:e2:ff:b6:3f:c6:b2:0d:71:c4:05:2e:dd:54: af:14:82:98:38:a0:73:e5:d3:52:91:66:4d:5d:d3: fb:8d:b5:cc:72:a6:1a:0d:8c:11:3d:22:34:4a:c3: 4b:68:fb:8a:9b:13:da:9e:a8:17:31:fd:ff:cd:5e: c2:b3:83:52:47:e5:ac:1d:7b:04:62:4a:75:52:cc: 72:37:7e:2c:19:63:d6:04:29:d4:41:c4:98:e8:7b: 10:e3:01:6f:eb:2a:0f:95:cf:ea:61:fe:2d:4e:c5: 87:1f:ff:a3:b2:9a:c1:6c:24:1f:df:7b:da:06:61: f5:3e:20:be:ee:ac:16:15:16:b5:cf:d6:03:cb:bf: 5b:3b:a7:62:20:13:ac:3f:27:aa:69:82:6f:34:c7: 4e:76:22:e0:ee:0c:ee:a1:a2:4c:ca:d5:d7:67:b4: 67:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:BD:83:76:D4:F9:C8:3A:E9:76:58:51:A0:9D:DC:86:4A:C7:8E:14 X509v3 Authority Key Identifier: keyid:FA:86:E2:38:53:54:9D:2E:F1:D9:F9:C9:22:21:47:A5:50:E3:6A:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/FA86E23853549D2EF1D9F9C9222147A550E36A38.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA86E23853549D2EF1D9F9C9222147A550E36A38.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/FA86E23853549D2EF1D9F9C9222147A550E36A38.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:40:85:46:2a:77:6c:97:d2:e1:6c:6e:df:05:b3:16:f8:2a: 87:89:49:85:a0:20:90:80:76:0c:94:6d:30:f4:c0:40:ca:a5: d5:ee:92:75:1e:17:9b:12:b6:3b:fc:01:23:95:8c:22:c0:80: 26:12:48:c4:03:7a:9f:65:76:12:b3:bf:8a:ce:20:31:63:d5: de:dd:f5:58:c3:34:ee:c8:53:9b:ca:39:de:20:ca:d5:1c:72: b8:70:3a:d0:47:6f:e2:de:0a:4a:53:51:1f:ef:4a:56:66:1a: 83:d3:5b:a2:58:83:f6:27:05:dc:fd:ce:17:d5:04:1e:b2:03: 02:fe:75:f8:0e:48:6b:49:ee:87:44:aa:be:bf:fd:1a:0a:53: be:00:26:02:f5:a4:01:49:d4:a0:21:82:fc:76:c4:e4:7d:21: 7d:8b:4d:48:d8:68:c2:5a:2e:64:e3:f4:e7:a8:4b:a8:8b:c1: 85:33:1f:27:ea:a6:21:3c:03:9f:fa:05:25:7c:32:3f:fb:84: 0b:46:f8:68:0f:1b:0c:e7:2c:39:f3:1c:63:27:2d:c1:cf:83: a7:d2:e2:31:50:11:57:93:c2:ee:7b:67:42:64:67:ef:d8:aa: 08:e9:1c:a4:f5:83:ec:85:92:4c:54:f1:43:f4:74:f0:13:9d: 69:9e:c0:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJB8+BfRbzJgbkaLWRbbyWcumHYQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE4NkUyMzg1MzU0OUQyRUYxRDlGOUM5MjIyMTQ3QTU1 MEUzNkEzODAeFw0yNTA5MDMxMTQ1NDNaFw0yNTA5MDYyMjA4NDNaMDMxMTAvBgNV BAMTKEYzQkQ4Mzc2RDRGOUM4M0FFOTc2NTg1MUEwOUREQzg2NEFDNzhFMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhBp9kNW5ZKM0Dj3x04ph6QJUk gF2434n1KwEcp3/zj6D8HbGr0gKy95KRPzGOIGdUQ0bWHsY+0raA3pn0qLk0F2U6 n7/JRCtvNG80GYow9Plb/SLpeOllbci64v+2P8ayDXHEBS7dVK8Ugpg4oHPl01KR Zk1d0/uNtcxyphoNjBE9IjRKw0to+4qbE9qeqBcx/f/NXsKzg1JH5awdewRiSnVS zHI3fiwZY9YEKdRBxJjoexDjAW/rKg+Vz+ph/i1OxYcf/6OymsFsJB/fe9oGYfU+ IL7urBYVFrXP1gPLv1s7p2IgE6w/J6ppgm80x052IuDuDO6hokzK1ddntGc5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU872DdtT5yDrpdlhRoJ3chkrHjhQwHwYDVR0j BBgwFoAU+obiOFNUnS7x2fnJIiFHpVDjajgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NTA0NzkzYy1jMjA5LTQ2OWEtOGUzYy1lYjNmNWE4Mzg2M2YvMC9GQTg2RTIzODUz NTQ5RDJFRjFEOUY5QzkyMjIxNDdBNTUwRTM2QTM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkE4NkUyMzg1MzU0OUQyRUYxRDlGOUM5MjIyMTQ3QTU1MEUz NkEzOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTUwNDc5M2MtYzIwOS00NjlhLThl M2MtZWIzZjVhODM4NjNmLzAvRkE4NkUyMzg1MzU0OUQyRUYxRDlGOUM5MjIyMTQ3 QTU1MEUzNkEzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHJAhUYqd2yX0uFsbt8Fsxb4KoeJSYWgIJCA dgyUbTD0wEDKpdXuknUeF5sStjv8ASOVjCLAgCYSSMQDep9ldhKzv4rOIDFj1d7d 9VjDNO7IU5vKOd4gytUccrhwOtBHb+LeCkpTUR/vSlZmGoPTW6JYg/YnBdz9zhfV BB6yAwL+dfgOSGtJ7odEqr6//RoKU74AJgL1pAFJ1KAhgvx2xOR9IX2LTUjYaMJa LmTj9OeoS6iLwYUzHyfqpiE8A5/6BSV8Mj/7hAtG+GgPGwznLDnzHGMnLcHPg6fS 4jFQEVeTwu57Z0JkZ+/YqgjpHKT1g+yFkkxU8UP0dPATnWmewE4= -----END CERTIFICATE-----Generated at Fri Sep 5 10:16:13 2025 by rpki-client