$ rpki-client -vvf repo-rpki.idnic.net/repo/47ad0a3a-26b8-449a-88ec-bf0398ea53a6/0/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.mft File: FBC39A6E177F8DD7BA5E257D4489C57574C07E81.mft (raw, json) Hash identifier: 7wGSB/WdXu2Mw6o+B3RSVOSLB2NBIPw323karPGRJHM= Subject key identifier: 00:16:76:74:29:63:68:28:BB:1E:E0:2E:9D:86:26:A4:1E:79:A0:F7 Authority key identifier: FB:C3:9A:6E:17:7F:8D:D7:BA:5E:25:7D:44:89:C5:75:74:C0:7E:81 Certificate issuer: /CN=FBC39A6E177F8DD7BA5E257D4489C57574C07E81 Certificate serial: 468E19E926AF6D17F7E4B2792F67C71D96994873 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.cer Subject info access: rsync://repo-rpki.idnic.net/repo/47ad0a3a-26b8-449a-88ec-bf0398ea53a6/0/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.mft Manifest number: C1 Signing time: Mon 03 Nov 2025 18:41:45 +0000 Manifest this update: Mon 03 Nov 2025 18:36:45 +0000 Manifest next update: Thu 06 Nov 2025 23:17:45 +0000 Files and hashes: 1: 3136302e32352e3235302e302f32342d3234203d3e20313533303938.roa (hash: MrtKeNjFNhl14mhfxKI/GhEb/0ohG0B8bmQ7SLXWttE=) 2: 3136302e32352e3235312e302f32342d3234203d3e20313533303938.roa (hash: +X50gpeSdWT/Y5d22C2/uBOgo8Xzo2+UIRSSAuVLkyI=) 3: 3136302e32352e3235302e302f32332d3233203d3e20313533303938.roa (hash: eL66HCHXLPzvvpIp6yZbwohxEw2vNNGKLUjoRHRX4l0=) 4: FBC39A6E177F8DD7BA5E257D4489C57574C07E81.crl (hash: s01wSGUKVktfMcMaiWX7bx9pdmVky+JYwe8i64DzWgA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/47ad0a3a-26b8-449a-88ec-bf0398ea53a6/0/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.crl rsync://repo-rpki.idnic.net/repo/47ad0a3a-26b8-449a-88ec-bf0398ea53a6/0/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 23:17:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:8e:19:e9:26:af:6d:17:f7:e4:b2:79:2f:67:c7:1d:96:99:48:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FBC39A6E177F8DD7BA5E257D4489C57574C07E81 Validity Not Before: Nov 3 18:36:45 2025 GMT Not After : Nov 6 23:17:45 2025 GMT Subject: CN=0016767429636828BB1EE02E9D8626A41E79A0F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b4:6f:5c:9b:ea:f2:af:e9:93:d4:a2:a6:68: 46:62:ef:d4:08:ec:2e:c6:58:00:7c:13:a6:d9:e3: 66:6f:4e:a9:ea:27:2e:8f:f1:49:98:1c:f9:dd:ab: ee:91:b2:85:09:48:5f:e9:b6:53:51:71:4e:bd:42: f9:b4:9c:2a:4a:03:52:c5:ef:03:3c:82:9d:ba:04: e1:53:7b:f8:de:0c:91:d6:3b:0e:1e:e5:77:bf:ee: a5:c4:0c:0d:99:d3:4c:6f:11:aa:d0:f8:7d:fe:9c: ab:8c:73:25:68:fd:f0:eb:1d:fd:be:55:f0:d8:e0: 96:e2:44:15:dc:9c:97:8b:aa:da:79:9c:f5:c5:8a: b4:8f:55:ea:59:9d:6a:fb:eb:d1:5e:53:d3:30:d1: fb:91:c1:5c:96:80:64:f9:48:84:5a:cb:23:2e:cc: dc:a7:1c:61:2b:ab:3d:7b:ba:3c:26:f1:67:f5:64: 66:db:53:7a:67:9c:74:ff:1a:8d:0f:ab:4b:3d:3b: 97:c2:b0:5e:0c:b9:94:72:62:d9:89:2c:24:2e:d4: e5:b2:8e:c6:f9:b3:19:c6:5e:d7:cb:51:dd:da:07: 43:cc:7f:37:3d:ee:46:fe:c6:65:1f:db:89:85:af: f8:d1:72:a0:c2:fe:2d:c0:a1:bf:9e:17:10:39:9f: 2b:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:16:76:74:29:63:68:28:BB:1E:E0:2E:9D:86:26:A4:1E:79:A0:F7 X509v3 Authority Key Identifier: keyid:FB:C3:9A:6E:17:7F:8D:D7:BA:5E:25:7D:44:89:C5:75:74:C0:7E:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/47ad0a3a-26b8-449a-88ec-bf0398ea53a6/0/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/47ad0a3a-26b8-449a-88ec-bf0398ea53a6/0/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:57:c1:bb:ff:87:17:3b:89:1b:66:6f:82:df:23:0d:f1:67: a1:5f:e3:28:ba:9f:b9:a0:08:38:46:c6:d2:20:2a:f8:8b:2e: 35:5a:d0:ad:0f:3e:1e:f5:e9:3e:7d:fb:9e:d7:3b:46:1f:bf: 35:f6:09:30:64:43:36:f0:88:80:f6:2e:41:c1:2a:79:72:4b: bf:f9:02:5c:80:8c:02:a0:9c:3b:50:74:bc:a1:42:28:a7:6f: a7:bc:c1:10:5f:16:fd:7d:f4:52:4d:32:20:ad:95:75:15:33: f1:e7:31:58:23:f0:15:b2:e1:09:ba:6b:ab:b6:47:5b:f0:40: 7c:32:8d:1a:77:92:20:12:52:59:3c:3e:21:5f:3a:c1:37:7b: af:77:d4:87:1e:8c:e4:65:cc:f7:10:78:40:32:5b:1d:9d:db: 26:77:2d:97:90:f8:67:83:01:fe:4f:22:ca:4a:b4:ed:58:21: 7b:91:73:e9:61:cd:70:44:44:e7:7f:cb:fe:44:06:2d:6e:ee: 93:1a:f0:a7:45:68:cf:b8:af:b2:d8:2e:cc:6a:d9:cd:6f:af: f8:b5:09:23:4f:4c:e2:e2:a8:f9:1f:e1:bf:e7:9d:75:a8:b4: 6a:a3:49:58:f7:0d:bd:b6:5a:b9:cc:c9:2d:c9:65:00:30:b8: 66:dc:c3:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURo4Z6SavbRf35LJ5L2fHHZaZSHMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkJDMzlBNkUxNzdGOEREN0JBNUUyNTdENDQ4OUM1NzU3 NEMwN0U4MTAeFw0yNTExMDMxODM2NDVaFw0yNTExMDYyMzE3NDVaMDMxMTAvBgNV BAMTKDAwMTY3Njc0Mjk2MzY4MjhCQjFFRTAyRTlEODYyNkE0MUU3OUEwRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLtG9cm+ryr+mT1KKmaEZi79QI 7C7GWAB8E6bZ42ZvTqnqJy6P8UmYHPndq+6RsoUJSF/ptlNRcU69Qvm0nCpKA1LF 7wM8gp26BOFTe/jeDJHWOw4e5Xe/7qXEDA2Z00xvEarQ+H3+nKuMcyVo/fDrHf2+ VfDY4JbiRBXcnJeLqtp5nPXFirSPVepZnWr769FeU9Mw0fuRwVyWgGT5SIRayyMu zNynHGErqz17ujwm8Wf1ZGbbU3pnnHT/Go0Pq0s9O5fCsF4MuZRyYtmJLCQu1OWy jsb5sxnGXtfLUd3aB0PMfzc97kb+xmUf24mFr/jRcqDC/i3Aob+eFxA5nyuvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUABZ2dCljaCi7HuAunYYmpB55oPcwHwYDVR0j BBgwFoAU+8Oabhd/jde6XiV9RInFdXTAfoEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 N2FkMGEzYS0yNmI4LTQ0OWEtODhlYy1iZjAzOThlYTUzYTYvMC9GQkMzOUE2RTE3 N0Y4REQ3QkE1RTI1N0Q0NDg5QzU3NTc0QzA3RTgxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkJDMzlBNkUxNzdGOEREN0JBNUUyNTdENDQ4OUM1NzU3NEMw N0U4MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDdhZDBhM2EtMjZiOC00NDlhLTg4 ZWMtYmYwMzk4ZWE1M2E2LzAvRkJDMzlBNkUxNzdGOEREN0JBNUUyNTdENDQ4OUM1 NzU3NEMwN0U4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE1Xwbv/hxc7iRtmb4LfIw3xZ6Ff4yi6n7mg CDhGxtIgKviLLjVa0K0PPh716T59+57XO0YfvzX2CTBkQzbwiID2LkHBKnlyS7/5 AlyAjAKgnDtQdLyhQiinb6e8wRBfFv199FJNMiCtlXUVM/HnMVgj8BWy4Qm6a6u2 R1vwQHwyjRp3kiASUlk8PiFfOsE3e6931IcejORlzPcQeEAyWx2d2yZ3LZeQ+GeD Af5PIspKtO1YIXuRc+lhzXBEROd/y/5EBi1u7pMa8KdFaM+4r7LYLsxq2c1vr/i1 CSNPTOLiqPkf4b/nnXWotGqjSVj3Db22WrnMyS3JZQAwuGbcw08= -----END CERTIFICATE-----Generated at Wed Nov 5 00:31:29 2025 by rpki-client