$ rpki-client -vvf repo-rpki.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.mft File: FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.mft (raw, json) Hash identifier: iZ0ao6J6Fx5h1BxHa0gQBCYsB2EcHFRsEnwkWgZOLKo= Subject key identifier: AC:61:52:F3:A8:7E:B6:7F:47:96:11:B7:10:B1:D8:3C:EE:DD:6D:63 Authority key identifier: FA:BD:B6:E4:44:51:B7:F0:37:8A:E9:2C:27:50:EB:FE:5A:3C:FA:38 Certificate issuer: /CN=FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38 Certificate serial: 098C7351BA134E7108E30B5265EF028CE2672C22 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.mft Manifest number: 04C6 Signing time: Mon 16 Jun 2025 07:41:44 +0000 Manifest this update: Mon 16 Jun 2025 07:36:44 +0000 Manifest next update: Thu 19 Jun 2025 13:42:44 +0000 Files and hashes: 1: 323430363a613063303a3a2f33322d3332203d3e20313337333331.roa (hash: Ai0eZhLY+4L7mdTG5liUS7qc6ABicMzreMWiAuYqKfU=) 2: 3130332e3135372e3131362e302f32332d3234203d3e20313337333331.roa (hash: UWkWpy75FXXiO6uLHlRhSo0V3lTHBX2E8QT7GG3BfWs=) 3: FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.crl (hash: Aq1Unxa7kJDdR0eQWDuL0L/VEyrN9Z83RK1NjTfpzUo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.crl rsync://repo-rpki.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 11:04:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:8c:73:51:ba:13:4e:71:08:e3:0b:52:65:ef:02:8c:e2:67:2c:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38 Validity Not Before: Jun 16 07:36:44 2025 GMT Not After : Jun 19 13:42:44 2025 GMT Subject: CN=AC6152F3A87EB67F479611B710B1D83CEEDD6D63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:12:e4:fd:14:4a:52:a0:1f:69:09:02:2f:36: 17:43:08:c8:4b:70:71:f2:ff:7b:29:da:24:b7:d1: ac:6a:d4:c2:8a:76:a5:d0:ca:a0:ee:cb:b5:b5:2c: 5b:85:d7:0b:c6:be:75:af:a2:e0:70:b1:03:14:81: ff:9c:50:52:93:f4:5f:39:f6:0e:b7:08:9a:26:31: 64:32:b2:53:52:f2:65:dd:5b:b1:10:ad:31:86:49: 88:1d:e5:11:35:e9:b5:9c:86:74:ab:98:28:99:56: 13:65:15:db:da:64:45:de:28:43:70:51:b0:03:81: 32:4b:98:ee:7a:1f:b3:cc:db:5e:9b:08:24:3d:68: a0:af:10:01:99:1b:53:5a:da:80:22:c1:b5:4a:2a: 15:ef:d2:de:4a:9a:12:31:0a:a7:ea:b1:1c:8e:c0: 11:63:33:1d:9e:40:ea:33:28:a1:25:11:0b:cc:c2: c8:59:1b:f7:b6:70:da:5e:89:7c:66:6b:15:fe:0b: 02:30:b2:aa:6f:c8:44:7f:7f:dc:de:b4:d2:5f:cc: c6:9d:13:78:da:d8:de:33:24:ee:1e:5d:11:d8:3a: 8b:76:f9:14:1f:b8:34:ef:3f:8d:ea:e1:d0:01:9d: 18:75:8f:b7:f3:19:7a:27:fe:80:89:d2:b8:3b:1d: a6:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:61:52:F3:A8:7E:B6:7F:47:96:11:B7:10:B1:D8:3C:EE:DD:6D:63 X509v3 Authority Key Identifier: keyid:FA:BD:B6:E4:44:51:B7:F0:37:8A:E9:2C:27:50:EB:FE:5A:3C:FA:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:c4:ba:f3:18:69:61:81:ad:d1:7c:4f:d6:c6:2c:46:1e:af: ba:8e:4a:61:0c:3e:6d:f1:e5:9c:1e:97:b5:53:06:0c:c5:11: bd:6f:fe:14:7a:37:dc:e7:6c:88:48:88:3f:b1:eb:d9:55:31: 34:28:63:a9:8b:b6:a8:73:01:4f:dc:3a:c5:0c:11:f3:0e:ea: 27:43:b1:f5:4d:bc:74:f0:e4:53:d4:47:c2:3b:e2:e6:bc:6a: be:9e:d9:6a:31:2b:77:cf:48:27:d4:ec:fa:5a:47:d7:34:60: 35:9c:a5:9a:c6:a8:12:5e:ca:d8:86:d8:44:7f:38:90:77:cd: 79:b0:e9:8e:23:d5:f9:d7:89:c3:f4:0d:a2:70:92:ab:49:f5: 99:66:c2:b8:e6:ff:61:ca:7a:4e:82:da:62:f1:34:2d:ad:31: f5:dd:d3:60:a1:d2:bb:51:64:0f:9f:3e:2f:c7:23:ef:47:e3: 81:62:45:81:b1:d6:e0:66:35:37:c6:74:c0:96:12:cd:a2:74: aa:36:7f:e1:43:a4:12:f2:9f:fa:f5:d7:97:42:13:c2:4e:1d: ea:e6:ab:49:9f:13:99:b8:ce:1c:8a:d5:05:a6:64:51:49:bd: 4d:2a:ef:f0:0b:60:95:c2:bf:25:54:c7:79:9c:cc:26:45:e4: a2:1c:ea:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCYxzUboTTnEI4wtSZe8CjOJnLCIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkFCREI2RTQ0NDUxQjdGMDM3OEFFOTJDMjc1MEVCRkU1 QTNDRkEzODAeFw0yNTA2MTYwNzM2NDRaFw0yNTA2MTkxMzQyNDRaMDMxMTAvBgNV BAMTKEFDNjE1MkYzQTg3RUI2N0Y0Nzk2MTFCNzEwQjFEODNDRUVERDZENjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvEuT9FEpSoB9pCQIvNhdDCMhL cHHy/3sp2iS30axq1MKKdqXQyqDuy7W1LFuF1wvGvnWvouBwsQMUgf+cUFKT9F85 9g63CJomMWQyslNS8mXdW7EQrTGGSYgd5RE16bWchnSrmCiZVhNlFdvaZEXeKENw UbADgTJLmO56H7PM216bCCQ9aKCvEAGZG1Na2oAiwbVKKhXv0t5KmhIxCqfqsRyO wBFjMx2eQOozKKElEQvMwshZG/e2cNpeiXxmaxX+CwIwsqpvyER/f9zetNJfzMad E3ja2N4zJO4eXRHYOot2+RQfuDTvP43q4dABnRh1j7fzGXon/oCJ0rg7HaY5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrGFS86h+tn9HlhG3ELHYPO7dbWMwHwYDVR0j BBgwFoAU+r225ERRt/A3iuksJ1Dr/lo8+jgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZDA3ZTNkOC05YmZjLTQ0ODMtYTJkZC1hZmE0NTkzODExZTUvMC9GQUJEQjZFNDQ0 NTFCN0YwMzc4QUU5MkMyNzUwRUJGRTVBM0NGQTM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkFCREI2RTQ0NDUxQjdGMDM3OEFFOTJDMjc1MEVCRkU1QTND RkEzOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWQwN2UzZDgtOWJmYy00NDgzLWEy ZGQtYWZhNDU5MzgxMWU1LzAvRkFCREI2RTQ0NDUxQjdGMDM3OEFFOTJDMjc1MEVC RkU1QTNDRkEzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK7EuvMYaWGBrdF8T9bGLEYer7qOSmEMPm3x 5Zwel7VTBgzFEb1v/hR6N9znbIhIiD+x69lVMTQoY6mLtqhzAU/cOsUMEfMO6idD sfVNvHTw5FPUR8I74ua8ar6e2WoxK3fPSCfU7PpaR9c0YDWcpZrGqBJeytiG2ER/ OJB3zXmw6Y4j1fnXicP0DaJwkqtJ9Zlmwrjm/2HKek6C2mLxNC2tMfXd02Ch0rtR ZA+fPi/HI+9H44FiRYGx1uBmNTfGdMCWEs2idKo2f+FDpBLyn/r115dCE8JOHerm q0mfE5m4zhyK1QWmZFFJvU0q7/ALYJXCvyVUx3mczCZF5KIc6uw= -----END CERTIFICATE-----Generated at Mon Jun 16 10:41:54 2025 by rpki-client