$ rpki-client -vvf repo-rpki.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/FB138C203D8A14318A87CA5B1BC5A19CA221F056.mft File: FB138C203D8A14318A87CA5B1BC5A19CA221F056.mft (raw, json) Hash identifier: 5xN1qnpZTk+0cjPHuR4NY6sJUrezhVHTau0zyyxOUD0= Subject key identifier: D3:5E:ED:E6:4A:4B:A1:30:B7:F4:A5:E2:ED:AB:3F:76:8A:1F:5D:84 Authority key identifier: FB:13:8C:20:3D:8A:14:31:8A:87:CA:5B:1B:C5:A1:9C:A2:21:F0:56 Certificate issuer: /CN=FB138C203D8A14318A87CA5B1BC5A19CA221F056 Certificate serial: 7562168902E926C0419BB22B72EEBEB4BE5D8350 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB138C203D8A14318A87CA5B1BC5A19CA221F056.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/FB138C203D8A14318A87CA5B1BC5A19CA221F056.mft Manifest number: 024B Signing time: Mon 03 Nov 2025 06:52:06 +0000 Manifest this update: Mon 03 Nov 2025 06:47:06 +0000 Manifest next update: Thu 06 Nov 2025 15:05:06 +0000 Files and hashes: 1: 3130332e3138352e34342e302f32332d3234203d3e20313339343536.roa (hash: n6d81yOcWUfTqWq3gPGmFsJ5Gf5N6Vzjiwj6FeqOedY=) 2: FB138C203D8A14318A87CA5B1BC5A19CA221F056.crl (hash: b7fqfoJXs/RIxsiVRrxBEEJZLPdXjlVhsQ6pPRq4JZA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/FB138C203D8A14318A87CA5B1BC5A19CA221F056.crl rsync://repo-rpki.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/FB138C203D8A14318A87CA5B1BC5A19CA221F056.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB138C203D8A14318A87CA5B1BC5A19CA221F056.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 15:05:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:62:16:89:02:e9:26:c0:41:9b:b2:2b:72:ee:be:b4:be:5d:83:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB138C203D8A14318A87CA5B1BC5A19CA221F056 Validity Not Before: Nov 3 06:47:06 2025 GMT Not After : Nov 6 15:05:06 2025 GMT Subject: CN=D35EEDE64A4BA130B7F4A5E2EDAB3F768A1F5D84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c1:23:79:46:56:c4:77:3c:14:78:da:f2:5c: b7:b4:5b:23:0d:85:82:06:35:6b:41:02:72:53:e4: ee:c3:e0:65:ef:2b:02:08:91:07:99:93:df:e6:95: 91:a7:cf:e1:57:d6:7f:77:b2:14:16:1f:67:bc:1d: 90:7b:45:aa:b0:91:26:df:3f:c1:58:90:ba:b2:61: 88:33:70:fc:05:18:a2:01:ab:52:72:f4:f6:ba:5f: e8:eb:c0:7a:bf:77:6d:78:eb:06:b0:a1:72:09:83: 3a:fb:f5:4f:45:98:fb:be:bd:83:b1:e1:34:c6:28: 6e:9e:23:6d:3b:e7:0a:93:d4:6c:94:41:33:e3:bc: 9c:00:65:c2:fe:6a:ae:a1:52:64:26:a7:da:84:4d: 2c:46:1f:c4:1a:02:36:54:f3:ce:78:75:2c:c5:89: 13:ba:2f:77:a2:6b:e0:16:65:77:3a:36:0c:91:b1: 41:c8:67:22:b7:bb:81:d8:d7:7e:06:88:7d:40:bc: c3:28:04:62:93:a2:4d:71:b9:ae:11:c6:c3:ae:e0: ef:e0:31:c8:82:eb:ab:43:17:7e:b5:ec:65:48:f4: fc:d1:4e:39:cf:e5:b9:ed:d0:8a:37:91:11:9d:86: e4:5a:95:db:cf:9b:11:de:b7:1f:5d:af:be:66:df: 08:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:5E:ED:E6:4A:4B:A1:30:B7:F4:A5:E2:ED:AB:3F:76:8A:1F:5D:84 X509v3 Authority Key Identifier: keyid:FB:13:8C:20:3D:8A:14:31:8A:87:CA:5B:1B:C5:A1:9C:A2:21:F0:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/FB138C203D8A14318A87CA5B1BC5A19CA221F056.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB138C203D8A14318A87CA5B1BC5A19CA221F056.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/FB138C203D8A14318A87CA5B1BC5A19CA221F056.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:a0:0e:02:4e:e4:aa:65:87:93:56:10:75:99:dc:f5:57:48: 24:86:01:e4:be:92:f8:f2:0f:15:59:ae:33:dd:20:5b:da:e2: d2:9c:90:4f:f6:54:fb:c9:a8:03:8a:86:f5:d2:40:a2:b6:5d: 44:76:bf:19:12:48:b6:6a:37:d5:ed:63:54:6d:01:93:f6:28: 84:88:45:11:c2:a3:1a:82:a8:b1:46:68:da:d0:2f:33:b1:92: 30:6e:8f:0c:18:49:b6:dc:5a:77:5b:30:9a:dc:4b:61:50:d9: a9:e7:a7:28:18:9a:cf:90:3f:32:55:53:5d:d3:36:c9:46:d2: 43:8e:88:50:ef:00:ed:25:2d:cb:b3:54:92:86:cf:23:f8:cd: 54:73:f9:0e:a4:1b:16:e6:68:8b:cc:5a:f5:1f:cb:a2:65:b3: 48:96:86:f8:eb:18:90:57:b1:ea:a7:83:35:a8:c0:ff:0d:b6: 91:6f:40:80:4e:73:ec:96:78:5b:97:6c:18:f8:b7:d1:70:4e: 6d:ea:4d:50:5c:31:a1:00:8e:34:87:58:05:4e:35:d4:c0:bf: 9e:f6:e1:63:e1:aa:d2:0a:18:09:32:8c:a8:89:81:5d:02:94: 5c:be:b1:00:92:4c:31:ae:47:90:7c:86:3d:43:87:3e:56:e2: 49:93:a4:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdWIWiQLpJsBBm7Ircu6+tL5dg1AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkIxMzhDMjAzRDhBMTQzMThBODdDQTVCMUJDNUExOUNB MjIxRjA1NjAeFw0yNTExMDMwNjQ3MDZaFw0yNTExMDYxNTA1MDZaMDMxMTAvBgNV BAMTKEQzNUVFREU2NEE0QkExMzBCN0Y0QTVFMkVEQUIzRjc2OEExRjVEODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzwSN5RlbEdzwUeNryXLe0WyMN hYIGNWtBAnJT5O7D4GXvKwIIkQeZk9/mlZGnz+FX1n93shQWH2e8HZB7RaqwkSbf P8FYkLqyYYgzcPwFGKIBq1Jy9Pa6X+jrwHq/d2146wawoXIJgzr79U9FmPu+vYOx 4TTGKG6eI2075wqT1GyUQTPjvJwAZcL+aq6hUmQmp9qETSxGH8QaAjZU8854dSzF iRO6L3eia+AWZXc6NgyRsUHIZyK3u4HY134GiH1AvMMoBGKTok1xua4RxsOu4O/g MciC66tDF3617GVI9PzRTjnP5bnt0Io3kRGdhuRaldvPmxHetx9dr75m3wgfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU017t5kpLoTC39KXi7as/doofXYQwHwYDVR0j BBgwFoAU+xOMID2KFDGKh8pbG8WhnKIh8FYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YzVmMmU0Zi00NWQ0LTRkNjItOTJjZi1kNzhiNWM1NDFhMWMvMC9GQjEzOEMyMDNE OEExNDMxOEE4N0NBNUIxQkM1QTE5Q0EyMjFGMDU2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkIxMzhDMjAzRDhBMTQzMThBODdDQTVCMUJDNUExOUNBMjIx RjA1Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWM1ZjJlNGYtNDVkNC00ZDYyLTky Y2YtZDc4YjVjNTQxYTFjLzAvRkIxMzhDMjAzRDhBMTQzMThBODdDQTVCMUJDNUEx OUNBMjIxRjA1Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEegDgJO5Kplh5NWEHWZ3PVXSCSGAeS+kvjy DxVZrjPdIFva4tKckE/2VPvJqAOKhvXSQKK2XUR2vxkSSLZqN9XtY1RtAZP2KISI RRHCoxqCqLFGaNrQLzOxkjBujwwYSbbcWndbMJrcS2FQ2annpygYms+QPzJVU13T NslG0kOOiFDvAO0lLcuzVJKGzyP4zVRz+Q6kGxbmaIvMWvUfy6Jls0iWhvjrGJBX seqngzWowP8NtpFvQIBOc+yWeFuXbBj4t9FwTm3qTVBcMaEAjjSHWAVONdTAv572 4WPhqtIKGAkyjKiJgV0ClFy+sQCSTDGuR5B8hj1Dhz5W4kmTpD4= -----END CERTIFICATE-----Generated at Mon Nov 3 14:53:39 2025 by rpki-client