$ rpki-client -vvf repo-rpki.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.mft File: FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.mft (raw, json) Hash identifier: bvI8Q+EIV9LSLDXm3nO9L7nEZGJGpLfYqPF5O+CxgQY= Subject key identifier: 5A:43:52:83:7A:40:94:13:5A:F3:55:BE:75:85:C4:79:82:31:A4:3D Authority key identifier: FA:BD:B6:E4:44:51:B7:F0:37:8A:E9:2C:27:50:EB:FE:5A:3C:FA:38 Certificate issuer: /CN=FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38 Certificate serial: 51B7D0623A1E92CFDC28878ED6487E2D0D04F95E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.mft Manifest number: 0506 Signing time: Wed 05 Nov 2025 17:11:43 +0000 Manifest this update: Wed 05 Nov 2025 17:06:43 +0000 Manifest next update: Sat 08 Nov 2025 19:22:43 +0000 Files and hashes: 1: 3130332e3135372e3131362e302f32332d3234203d3e20313337333331.roa (hash: gepyqAbuiPaUA1F4qNan63WSMqffSkJDQ7owW86Bv/s=) 2: 323430363a613063303a3a2f33322d3332203d3e20313337333331.roa (hash: Ai0eZhLY+4L7mdTG5liUS7qc6ABicMzreMWiAuYqKfU=) 3: FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.crl (hash: hN9wyzFFCmt99uC5Y3P7oGkjKWQdFsf+RWtIUE/1eR0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.crl rsync://repo-rpki.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 19:22:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:b7:d0:62:3a:1e:92:cf:dc:28:87:8e:d6:48:7e:2d:0d:04:f9:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38 Validity Not Before: Nov 5 17:06:43 2025 GMT Not After : Nov 8 19:22:43 2025 GMT Subject: CN=5A4352837A4094135AF355BE7585C4798231A43D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:d2:f5:4b:1f:f0:44:1b:06:47:0f:86:e6:93: 60:a7:3b:4e:65:37:7f:16:fa:76:5b:4c:05:58:76: 54:fa:72:75:d9:4b:1c:60:9e:af:04:cb:44:af:07: d1:74:b0:79:fc:f7:8e:05:c3:7e:93:17:1c:2c:ee: 8d:d5:9d:6b:45:68:aa:f3:9e:3d:09:99:66:04:5b: b8:6b:0f:78:02:20:15:6a:06:98:86:f6:3c:41:19: 87:6c:12:db:d0:b3:ab:3f:5d:a2:68:a4:20:f5:f9: b1:db:c2:3c:e2:07:bb:82:8d:1e:06:0b:7f:1f:29: fe:04:5f:23:90:d5:15:15:16:b2:0f:ff:2b:cc:e9: e9:50:26:37:6b:ba:87:1d:9d:36:c4:73:e8:df:58: f4:2c:fc:9b:ff:78:56:bd:2d:21:75:e6:1b:35:27: ce:a5:08:86:58:1f:e4:db:4e:86:04:8d:63:e2:78: 04:45:c5:22:ac:0a:bd:a0:7a:49:45:8d:a1:35:aa: 73:ea:a4:61:09:70:8c:90:66:70:ae:2e:8d:27:d3: 18:8f:e0:b6:de:1a:cc:fa:6c:9a:fa:07:50:64:df: 71:4b:69:d4:5c:95:f1:79:9d:6f:86:9c:2e:16:7c: c0:65:d1:d0:87:40:19:c2:e9:b2:ad:24:95:b0:67: 0e:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:43:52:83:7A:40:94:13:5A:F3:55:BE:75:85:C4:79:82:31:A4:3D X509v3 Authority Key Identifier: keyid:FA:BD:B6:E4:44:51:B7:F0:37:8A:E9:2C:27:50:EB:FE:5A:3C:FA:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:d5:2f:fb:3e:ac:d8:6d:bb:ba:85:a8:f7:08:27:22:35:76: 5f:8d:fb:6c:03:59:8d:9a:17:0d:27:bf:67:7a:2e:9f:fa:07: 42:9c:c3:4d:99:78:8b:b9:e0:ab:23:47:f1:1b:01:a8:73:b0: c0:08:34:ce:30:6c:08:08:0e:68:05:7a:65:4b:a0:75:4d:a7: 3f:65:85:94:6a:bd:62:83:a0:72:f6:0e:d5:26:33:6d:75:c1: 47:d8:be:2b:c5:a5:cf:c7:8a:73:6d:d2:c0:0a:da:a3:e6:e8: ac:89:6f:2f:66:62:89:97:18:81:4c:e6:03:93:56:de:d1:30: 1e:7e:37:b7:cc:30:1c:dd:2a:8e:f8:e2:cb:7b:00:62:e8:48: 49:d3:30:fa:e8:52:ac:ad:cc:bd:07:f2:39:06:ac:9e:ac:0e: 75:ad:bc:24:c0:3b:30:6f:a7:37:7a:10:61:71:9a:50:dd:40: f1:ac:13:98:ba:f8:7c:99:2c:4b:7b:13:eb:92:cf:5d:91:a0: a9:49:2a:18:38:6a:07:6a:2d:09:bc:73:cf:a3:93:dd:84:10: 16:f9:1b:6d:6d:cd:da:41:7f:0d:14:c3:5d:2f:4d:12:6a:f3: 00:18:cb:cc:3f:59:32:28:59:ff:8d:4d:77:b1:dc:71:96:19: 48:0c:a3:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUbfQYjoeks/cKIeO1kh+LQ0E+V4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkFCREI2RTQ0NDUxQjdGMDM3OEFFOTJDMjc1MEVCRkU1 QTNDRkEzODAeFw0yNTExMDUxNzA2NDNaFw0yNTExMDgxOTIyNDNaMDMxMTAvBgNV BAMTKDVBNDM1MjgzN0E0MDk0MTM1QUYzNTVCRTc1ODVDNDc5ODIzMUE0M0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW0vVLH/BEGwZHD4bmk2CnO05l N38W+nZbTAVYdlT6cnXZSxxgnq8Ey0SvB9F0sHn8944Fw36TFxws7o3VnWtFaKrz nj0JmWYEW7hrD3gCIBVqBpiG9jxBGYdsEtvQs6s/XaJopCD1+bHbwjziB7uCjR4G C38fKf4EXyOQ1RUVFrIP/yvM6elQJjdruocdnTbEc+jfWPQs/Jv/eFa9LSF15hs1 J86lCIZYH+TbToYEjWPieARFxSKsCr2geklFjaE1qnPqpGEJcIyQZnCuLo0n0xiP 4LbeGsz6bJr6B1Bk33FLadRclfF5nW+GnC4WfMBl0dCHQBnC6bKtJJWwZw6vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWkNSg3pAlBNa81W+dYXEeYIxpD0wHwYDVR0j BBgwFoAU+r225ERRt/A3iuksJ1Dr/lo8+jgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZDA3ZTNkOC05YmZjLTQ0ODMtYTJkZC1hZmE0NTkzODExZTUvMC9GQUJEQjZFNDQ0 NTFCN0YwMzc4QUU5MkMyNzUwRUJGRTVBM0NGQTM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkFCREI2RTQ0NDUxQjdGMDM3OEFFOTJDMjc1MEVCRkU1QTND RkEzOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWQwN2UzZDgtOWJmYy00NDgzLWEy ZGQtYWZhNDU5MzgxMWU1LzAvRkFCREI2RTQ0NDUxQjdGMDM3OEFFOTJDMjc1MEVC RkU1QTNDRkEzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMbVL/s+rNhtu7qFqPcIJyI1dl+N+2wDWY2a Fw0nv2d6Lp/6B0Kcw02ZeIu54KsjR/EbAahzsMAINM4wbAgIDmgFemVLoHVNpz9l hZRqvWKDoHL2DtUmM211wUfYvivFpc/HinNt0sAK2qPm6KyJby9mYomXGIFM5gOT Vt7RMB5+N7fMMBzdKo744st7AGLoSEnTMProUqytzL0H8jkGrJ6sDnWtvCTAOzBv pzd6EGFxmlDdQPGsE5i6+HyZLEt7E+uSz12RoKlJKhg4agdqLQm8c8+jk92EEBb5 G21tzdpBfw0Uw10vTRJq8wAYy8w/WTIoWf+NTXex3HGWGUgMo3Y= -----END CERTIFICATE-----Generated at Thu Nov 6 00:36:37 2025 by rpki-client