$ rpki-client -vvf repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.mft File: FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.mft (raw, json) Hash identifier: e4EcKWH+lDO4c4jvImQ1rOFTulSKRMyvdARdpR006w4= Subject key identifier: 6B:9E:13:3D:09:FE:BC:82:BF:37:E2:6A:0B:F8:DA:44:34:92:05:16 Authority key identifier: FB:D3:B2:8C:90:75:52:9D:EE:81:51:C4:E4:4B:0C:BC:13:FF:DA:91 Certificate issuer: /CN=FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91 Certificate serial: 590AE0F0D9438A637DE3BF4743CD650005786F61 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.cer Subject info access: rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.mft Manifest number: 04FB Signing time: Thu 07 Aug 2025 03:51:16 +0000 Manifest this update: Thu 07 Aug 2025 03:46:16 +0000 Manifest next update: Sun 10 Aug 2025 10:25:16 +0000 Files and hashes: 1: 323430333a313838303a3a2f33322d3332203d3e203436303535.roa (hash: 5E43YVmj6Z7OGECRV0xvOsTql9Kqf+2yG0vKEkPwlDE=) 2: 3130332e3139382e3132302e302f32332d3234203d3e203436303535.roa (hash: Rkqt5EaL5SlKX5GmTTNQMVHFRYt3xFbyKGI2eZYOOAk=) 3: 3230322e35322e34382e302f32332d3234203d3e203436303535.roa (hash: cBKI91E82619dGXlbZQsR3kG8PLRa84sQYxG51fCSE0=) 4: FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.crl (hash: 1teYow7SPsDZH7OFrE2uNKaJRW7kMEzdSiWrDO8+O1s=) 5: 3130332e3139382e3132322e302f32332d3234203d3e203436303535.roa (hash: LRTGK+GW9A0RpTs3Gv4UsfHpkx7owdE7KVjUD93I+Vo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.crl rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 10:25:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:0a:e0:f0:d9:43:8a:63:7d:e3:bf:47:43:cd:65:00:05:78:6f:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91 Validity Not Before: Aug 7 03:46:16 2025 GMT Not After : Aug 10 10:25:16 2025 GMT Subject: CN=6B9E133D09FEBC82BF37E26A0BF8DA4434920516 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:cb:e4:19:de:49:31:72:90:c6:cf:9c:90:a1: c6:83:18:9e:24:77:fd:e6:c3:0c:78:d6:29:65:f5: 22:64:74:ea:29:83:b7:c9:3a:07:51:44:27:de:5c: 1f:5c:e6:6f:69:bd:d9:e2:cf:12:6a:a3:44:46:e1: 3e:0e:8b:5b:6f:96:35:94:ff:5a:b1:e0:08:e2:56: 56:4b:74:f3:30:93:e9:c6:f6:09:14:d0:0c:b1:00: 41:62:89:d2:2e:e6:58:28:e1:55:c7:6d:fe:5b:e4: 01:bb:70:86:01:83:0a:7c:f3:46:0b:69:d1:fc:35: 7d:ea:df:c3:37:8c:dd:95:3e:06:5c:22:c4:bc:50: 34:f6:0f:53:ea:f0:b7:04:63:bd:d5:9d:4b:f0:8c: ff:bf:46:43:99:1d:e6:32:35:61:7d:ce:fc:a9:a8: 8c:6d:9b:38:17:e0:69:0c:c3:c2:04:15:85:62:1b: b7:c6:93:17:97:33:f9:dd:7c:49:19:4e:e3:4e:47: 11:33:65:7a:74:08:36:fb:8a:bd:93:cc:17:7d:c3: 88:73:6a:6f:64:af:b6:36:04:43:5e:3c:f3:4e:10: db:63:0d:fb:6e:97:c5:4f:77:e6:df:cc:c1:e5:2b: 63:01:10:ec:21:15:1c:09:ad:92:3d:da:54:5f:aa: 59:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:9E:13:3D:09:FE:BC:82:BF:37:E2:6A:0B:F8:DA:44:34:92:05:16 X509v3 Authority Key Identifier: keyid:FB:D3:B2:8C:90:75:52:9D:EE:81:51:C4:E4:4B:0C:BC:13:FF:DA:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:24:65:1e:63:95:9e:d8:95:fb:72:31:98:93:c9:08:f8:a9: 43:51:85:0c:82:9d:12:a6:c6:27:bc:cf:84:19:bc:4a:7d:c8: dd:03:56:1c:03:6e:87:46:f7:d5:ed:83:59:58:ca:67:13:7e: 88:a3:eb:d2:83:78:f8:aa:44:16:f7:aa:1f:32:ba:87:79:da: 11:07:ed:2d:60:80:65:cb:b7:98:8d:5f:06:45:e4:ac:d3:4e: 46:41:50:d0:3b:f7:f4:bb:77:f7:5b:26:44:bc:cc:26:44:19: e5:28:d3:18:fe:e5:4e:22:93:6a:73:99:18:95:72:ca:aa:ab: 47:9b:fc:28:61:71:1a:77:e3:f9:90:7b:35:46:44:bb:c3:dd: 3c:38:f6:45:6d:6f:92:ea:0a:48:d2:73:71:ce:36:33:03:8f: 65:4b:63:49:a1:fd:31:3a:23:41:c0:ea:1f:0b:90:97:c1:66: d0:6e:79:6b:b0:63:1c:39:86:c6:31:ba:99:63:7e:53:8c:4f: 09:f7:9c:01:76:2c:ea:27:e9:7f:52:52:f8:c3:96:7c:4d:cd: b5:b6:45:c2:7d:d3:5c:f8:64:1f:fa:29:59:c5:5e:46:02:59: 98:79:fb:0e:7a:a2:2c:5f:0b:08:de:7f:fe:b8:49:93:b1:71: 22:b8:ad:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWQrg8NlDimN9479HQ81lAAV4b2EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkJEM0IyOEM5MDc1NTI5REVFODE1MUM0RTQ0QjBDQkMx M0ZGREE5MTAeFw0yNTA4MDcwMzQ2MTZaFw0yNTA4MTAxMDI1MTZaMDMxMTAvBgNV BAMTKDZCOUUxMzNEMDlGRUJDODJCRjM3RTI2QTBCRjhEQTQ0MzQ5MjA1MTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuy+QZ3kkxcpDGz5yQocaDGJ4k d/3mwwx41ill9SJkdOopg7fJOgdRRCfeXB9c5m9pvdnizxJqo0RG4T4Oi1tvljWU /1qx4AjiVlZLdPMwk+nG9gkU0AyxAEFiidIu5lgo4VXHbf5b5AG7cIYBgwp880YL adH8NX3q38M3jN2VPgZcIsS8UDT2D1Pq8LcEY73VnUvwjP+/RkOZHeYyNWF9zvyp qIxtmzgX4GkMw8IEFYViG7fGkxeXM/ndfEkZTuNORxEzZXp0CDb7ir2TzBd9w4hz am9kr7Y2BENePPNOENtjDftul8VPd+bfzMHlK2MBEOwhFRwJrZI92lRfqlk5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUa54TPQn+vIK/N+JqC/jaRDSSBRYwHwYDVR0j BBgwFoAU+9OyjJB1Up3ugVHE5EsMvBP/2pEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ODM5NzdmNC04YzJkLTRlYjEtYjRjZC0zNWI0OTIxNmUwNzMvMC9GQkQzQjI4Qzkw NzU1MjlERUU4MTUxQzRFNDRCMENCQzEzRkZEQTkxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkJEM0IyOEM5MDc1NTI5REVFODE1MUM0RTQ0QjBDQkMxM0ZG REE5MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDgzOTc3ZjQtOGMyZC00ZWIxLWI0 Y2QtMzViNDkyMTZlMDczLzAvRkJEM0IyOEM5MDc1NTI5REVFODE1MUM0RTQ0QjBD QkMxM0ZGREE5MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGAkZR5jlZ7YlftyMZiTyQj4qUNRhQyCnRKm xie8z4QZvEp9yN0DVhwDbodG99Xtg1lYymcTfoij69KDePiqRBb3qh8yuod52hEH 7S1ggGXLt5iNXwZF5KzTTkZBUNA79/S7d/dbJkS8zCZEGeUo0xj+5U4ik2pzmRiV csqqq0eb/ChhcRp34/mQezVGRLvD3Tw49kVtb5LqCkjSc3HONjMDj2VLY0mh/TE6 I0HA6h8LkJfBZtBueWuwYxw5hsYxupljflOMTwn3nAF2LOon6X9SUvjDlnxNzbW2 RcJ901z4ZB/6KVnFXkYCWZh5+w56oixfCwjef/64SZOxcSK4rYw= -----END CERTIFICATE-----Generated at Thu Aug 7 07:17:18 2025 by rpki-client