$ rpki-client -vvf repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.mft File: FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.mft (raw, json) Hash identifier: uTj3v+1rQWyIPvxVHtSjZo0rtk3ZZC4Z2u7MIhajq/8= Subject key identifier: E1:65:B9:DA:1D:39:CD:08:ED:4F:39:84:87:42:D6:E2:41:61:B6:CC Authority key identifier: FB:D3:B2:8C:90:75:52:9D:EE:81:51:C4:E4:4B:0C:BC:13:FF:DA:91 Certificate issuer: /CN=FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91 Certificate serial: 32BF4A5CAB3CB566785BB6FB9BD8384123BAFD9F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.cer Subject info access: rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.mft Manifest number: 0522 Signing time: Mon 03 Nov 2025 06:01:16 +0000 Manifest this update: Mon 03 Nov 2025 05:56:16 +0000 Manifest next update: Thu 06 Nov 2025 06:10:16 +0000 Files and hashes: 1: 3130332e3139382e3132322e302f32332d3234203d3e203436303535.roa (hash: LRTGK+GW9A0RpTs3Gv4UsfHpkx7owdE7KVjUD93I+Vo=) 2: 3130332e3139382e3132302e302f32332d3234203d3e203436303535.roa (hash: Rkqt5EaL5SlKX5GmTTNQMVHFRYt3xFbyKGI2eZYOOAk=) 3: FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.crl (hash: DV+Bx/RUpRWWgJmLwLADhXggL0uh8LnxFMHjkJ6pWJw=) 4: 323430333a313838303a3a2f33322d3332203d3e203436303535.roa (hash: 5E43YVmj6Z7OGECRV0xvOsTql9Kqf+2yG0vKEkPwlDE=) 5: 3230322e35322e34382e302f32332d3234203d3e203436303535.roa (hash: cBKI91E82619dGXlbZQsR3kG8PLRa84sQYxG51fCSE0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.crl rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 06:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:bf:4a:5c:ab:3c:b5:66:78:5b:b6:fb:9b:d8:38:41:23:ba:fd:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91 Validity Not Before: Nov 3 05:56:16 2025 GMT Not After : Nov 6 06:10:16 2025 GMT Subject: CN=E165B9DA1D39CD08ED4F39848742D6E24161B6CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f4:05:8f:04:59:fa:17:42:a0:c8:5b:00:cc: 26:a3:ac:47:0b:df:91:77:93:07:30:bb:0a:81:02: 8d:7c:f9:2f:93:0d:80:ed:d1:ae:d0:9f:b1:0c:63: db:21:67:cd:74:8c:59:00:96:dc:3d:1d:8f:27:f6: 77:89:27:ef:fa:75:16:73:35:de:dd:b8:4b:38:00: 6c:a3:d9:8f:fd:4a:25:7d:17:72:2d:7e:fc:d7:26: 09:de:d6:52:8e:3b:74:80:29:b7:83:5e:80:e9:d1: 31:2b:92:21:bb:fa:3e:67:78:5d:97:9e:74:69:05: f5:6d:dc:d8:3f:af:d0:cb:32:1f:81:90:45:a7:2f: 30:35:22:5b:41:f3:71:be:bc:aa:ba:2a:2e:55:62: 8f:17:1d:97:0d:0b:88:2b:e2:82:bf:df:a4:48:bb: 12:f6:c2:2e:b0:a1:51:9a:1e:d7:fa:8e:62:83:2d: 49:82:db:9f:29:18:20:43:95:3c:92:e3:af:ce:d8: 30:34:37:40:0d:88:93:91:16:18:da:24:7a:7e:fe: 24:5a:21:a7:1e:d0:2a:b7:4b:42:f5:11:1d:a1:df: 9e:de:34:37:54:27:36:27:53:8b:f4:fb:4a:00:11: c9:60:c1:da:fe:b6:f7:0e:6b:78:ce:a9:2d:93:4c: 6d:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:65:B9:DA:1D:39:CD:08:ED:4F:39:84:87:42:D6:E2:41:61:B6:CC X509v3 Authority Key Identifier: keyid:FB:D3:B2:8C:90:75:52:9D:EE:81:51:C4:E4:4B:0C:BC:13:FF:DA:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dc:9b:26:2b:0a:d8:75:b6:55:dc:a0:4e:f8:2e:a8:2e:2a:ca: 34:a8:9e:8b:1a:15:16:69:f5:5e:7c:e0:7d:f4:50:c7:ed:35: cf:0c:29:64:fd:cc:47:34:52:04:9e:05:b8:8b:10:57:67:34: 45:02:0d:98:66:5b:bd:c4:a6:b3:1a:24:de:b2:7a:34:83:73: fe:f2:f7:8d:de:13:45:8b:bc:19:cc:7a:93:5f:69:78:fc:6b: d2:f2:fc:5d:3d:a4:97:7f:30:2c:69:9e:3c:ee:07:7f:a7:8b: f3:38:8a:e6:c8:7a:85:3c:c3:00:ce:a1:75:ab:de:15:de:95: b3:58:28:7c:f5:02:ae:1e:a7:47:4b:d0:56:0e:50:f6:f5:f1: 85:35:fe:98:e6:41:39:72:57:d8:00:4a:a7:d7:5f:97:dc:23: 6f:bf:ea:e2:3a:06:8f:7b:33:b8:6a:57:fc:f5:4d:81:f2:23: 6d:6d:71:1a:3f:f3:8a:33:31:cc:85:0c:69:63:91:be:00:90: e3:62:9a:c1:35:bd:d7:f5:bb:f9:1e:d7:8e:04:46:4b:ec:fc: 74:66:42:cf:31:64:01:06:61:4c:2e:11:0f:8a:11:bd:b0:53: be:b3:39:fd:ee:71:b9:16:91:b5:27:0d:26:1a:c4:a8:4f:0b: cc:98:e9:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMr9KXKs8tWZ4W7b7m9g4QSO6/Z8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkJEM0IyOEM5MDc1NTI5REVFODE1MUM0RTQ0QjBDQkMx M0ZGREE5MTAeFw0yNTExMDMwNTU2MTZaFw0yNTExMDYwNjEwMTZaMDMxMTAvBgNV BAMTKEUxNjVCOURBMUQzOUNEMDhFRDRGMzk4NDg3NDJENkUyNDE2MUI2Q0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu9AWPBFn6F0KgyFsAzCajrEcL 35F3kwcwuwqBAo18+S+TDYDt0a7Qn7EMY9shZ810jFkAltw9HY8n9neJJ+/6dRZz Nd7duEs4AGyj2Y/9SiV9F3ItfvzXJgne1lKOO3SAKbeDXoDp0TErkiG7+j5neF2X nnRpBfVt3Ng/r9DLMh+BkEWnLzA1IltB83G+vKq6Ki5VYo8XHZcNC4gr4oK/36RI uxL2wi6woVGaHtf6jmKDLUmC258pGCBDlTyS46/O2DA0N0ANiJORFhjaJHp+/iRa Iace0Cq3S0L1ER2h357eNDdUJzYnU4v0+0oAEclgwdr+tvcOa3jOqS2TTG2nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4WW52h05zQjtTzmEh0LW4kFhtswwHwYDVR0j BBgwFoAU+9OyjJB1Up3ugVHE5EsMvBP/2pEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ODM5NzdmNC04YzJkLTRlYjEtYjRjZC0zNWI0OTIxNmUwNzMvMC9GQkQzQjI4Qzkw NzU1MjlERUU4MTUxQzRFNDRCMENCQzEzRkZEQTkxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkJEM0IyOEM5MDc1NTI5REVFODE1MUM0RTQ0QjBDQkMxM0ZG REE5MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDgzOTc3ZjQtOGMyZC00ZWIxLWI0 Y2QtMzViNDkyMTZlMDczLzAvRkJEM0IyOEM5MDc1NTI5REVFODE1MUM0RTQ0QjBD QkMxM0ZGREE5MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANybJisK2HW2VdygTvguqC4qyjSonosaFRZp 9V584H30UMftNc8MKWT9zEc0UgSeBbiLEFdnNEUCDZhmW73EprMaJN6yejSDc/7y 943eE0WLvBnMepNfaXj8a9Ly/F09pJd/MCxpnjzuB3+ni/M4iubIeoU8wwDOoXWr 3hXelbNYKHz1Aq4ep0dL0FYOUPb18YU1/pjmQTlyV9gASqfXX5fcI2+/6uI6Bo97 M7hqV/z1TYHyI21tcRo/84ozMcyFDGljkb4AkONimsE1vdf1u/ke144ERkvs/HRm Qs8xZAEGYUwuEQ+KEb2wU76zOf3ucbkWkbUnDSYaxKhPC8yY6f4= -----END CERTIFICATE-----Generated at Tue Nov 4 01:58:38 2025 by rpki-client