$ rpki-client -vvf repo-rpki.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.mft File: FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.mft (raw, json) Hash identifier: lsEZBKcOYZtOsv04puTzM6mmEoEk+QTA0YHS5jjw/iA= Subject key identifier: 1D:A7:BA:68:D3:70:58:4D:63:62:A5:87:19:C8:BD:87:45:87:11:99 Authority key identifier: FA:B0:81:FC:D8:6A:B0:F8:1D:41:C9:E5:FB:9C:3D:32:22:0F:48:CD Certificate issuer: /CN=FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD Certificate serial: 3F4DC5093BBF69351FDA3E1A150A41032DA83A78 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.mft Manifest number: 0114 Signing time: Sun 02 Nov 2025 21:01:20 +0000 Manifest this update: Sun 02 Nov 2025 20:56:20 +0000 Manifest next update: Thu 06 Nov 2025 08:08:20 +0000 Files and hashes: 1: FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.crl (hash: YnvMlSTon3v8vHR4uonLDmFRAiEmpekqkktnf0kMmJk=) 2: 3135372e31302e302e302f32342d3234203d3e20313532303739.roa (hash: /rLqhw2hFwRMsfI5zGP3QkMBxOWlLSkauOe3xFxChRo=) 3: 3135372e31302e302e302f32332d3233203d3e20313532303739.roa (hash: LI/HMaoSlImx3bWiKBUR5SBmy9IHEOgEnYbWctfALp8=) 4: 3135372e31302e312e302f32342d3234203d3e20313532303739.roa (hash: 8mKHP2haWx9nDqWVpffr2HLwx0PW3MsCMnqlWHBgH8s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.crl rsync://repo-rpki.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 08:08:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:4d:c5:09:3b:bf:69:35:1f:da:3e:1a:15:0a:41:03:2d:a8:3a:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD Validity Not Before: Nov 2 20:56:20 2025 GMT Not After : Nov 6 08:08:20 2025 GMT Subject: CN=1DA7BA68D370584D6362A58719C8BD8745871199 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:40:4b:0e:37:a7:6c:b5:61:b6:9a:61:7d:3d: 90:8f:fe:40:7d:40:6e:d1:ed:90:b7:ad:79:e5:95: 08:8f:59:22:39:75:13:be:6f:f4:08:88:13:86:37: 4f:6b:8e:b4:c8:9b:7b:9c:c3:01:d2:bc:3f:71:fa: c4:d2:36:33:50:c0:e4:04:e9:10:af:ca:3a:99:6b: e4:43:79:87:ca:4c:4f:ac:f1:0f:54:d2:5a:d4:03: e0:97:2e:49:a0:a9:e9:ad:4a:54:22:84:29:40:69: 99:a6:8a:10:24:5e:76:09:69:47:6b:19:ae:39:30: eb:c6:da:bc:80:a0:2f:e2:9d:a2:71:34:f3:ae:29: 9c:12:3f:bd:fd:43:52:59:3f:4d:af:57:a8:1c:c0: 7a:2e:8c:07:03:79:77:16:19:bc:35:6a:2b:49:16: 5e:b7:2b:a3:84:5e:77:2d:0d:a4:dc:43:42:fc:58: 29:7a:9d:26:3c:80:48:0d:44:15:54:84:8c:d1:ad: cb:46:59:a6:0a:5a:a2:b5:b5:4b:f9:c5:8e:b3:e9: ae:2a:39:84:b3:3c:97:1b:32:b4:9e:2c:f7:3d:ee: 6e:81:f0:fe:43:e9:ef:89:cc:d8:c7:2a:99:f8:b5: 7c:10:9f:69:2f:98:24:dc:aa:7a:71:af:82:77:dc: 1e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:A7:BA:68:D3:70:58:4D:63:62:A5:87:19:C8:BD:87:45:87:11:99 X509v3 Authority Key Identifier: keyid:FA:B0:81:FC:D8:6A:B0:F8:1D:41:C9:E5:FB:9C:3D:32:22:0F:48:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:8a:30:a1:e5:7b:cb:d5:79:3d:03:72:b7:0c:aa:cd:33:6e: 93:27:5b:3d:04:f7:af:35:ee:b5:c1:50:96:49:f6:d5:ee:98: 7d:0a:00:41:e1:01:fe:da:1d:c0:a4:68:42:0b:e1:50:13:4d: f9:ed:7d:82:1d:ae:29:8b:1e:80:d7:fc:f7:c6:53:22:0a:d8: fd:da:62:3f:b9:c4:42:47:f9:a6:7f:a7:55:fe:57:8b:05:cf: 8b:3b:93:80:fc:f6:e0:cc:71:09:48:37:71:f4:16:b1:2f:87: c8:b1:11:c9:3f:63:cd:66:f0:25:f3:a1:ca:bc:0b:fd:e5:00: 09:3f:74:01:85:f5:77:cc:dc:24:08:21:5e:a6:7e:50:2b:ab: ec:12:df:30:2e:bd:9e:e2:dc:9f:d9:90:76:a9:36:aa:75:9f: 78:c0:b0:f4:67:92:01:6f:43:e0:06:ca:1f:d4:b6:9c:6f:4e: 9b:df:b2:47:71:7c:e4:06:42:89:53:48:8e:85:b0:dd:a9:c4: 57:a3:ce:96:b8:c7:10:e0:98:27:c0:4e:0a:49:13:68:b3:32: 5c:8c:32:df:48:31:10:f2:ff:6e:74:be:6c:6e:c3:c6:2b:4c: 40:76:52:60:e6:7c:0f:d7:89:74:5b:41:c1:98:14:d4:7a:62: f7:47:c0:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP03FCTu/aTUf2j4aFQpBAy2oOngwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkFCMDgxRkNEODZBQjBGODFENDFDOUU1RkI5QzNEMzIy MjBGNDhDRDAeFw0yNTExMDIyMDU2MjBaFw0yNTExMDYwODA4MjBaMDMxMTAvBgNV BAMTKDFEQTdCQTY4RDM3MDU4NEQ2MzYyQTU4NzE5QzhCRDg3NDU4NzExOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJQEsON6dstWG2mmF9PZCP/kB9 QG7R7ZC3rXnllQiPWSI5dRO+b/QIiBOGN09rjrTIm3ucwwHSvD9x+sTSNjNQwOQE 6RCvyjqZa+RDeYfKTE+s8Q9U0lrUA+CXLkmgqemtSlQihClAaZmmihAkXnYJaUdr Ga45MOvG2ryAoC/inaJxNPOuKZwSP739Q1JZP02vV6gcwHoujAcDeXcWGbw1aitJ Fl63K6OEXnctDaTcQ0L8WCl6nSY8gEgNRBVUhIzRrctGWaYKWqK1tUv5xY6z6a4q OYSzPJcbMrSeLPc97m6B8P5D6e+JzNjHKpn4tXwQn2kvmCTcqnpxr4J33B6HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHae6aNNwWE1jYqWHGci9h0WHEZkwHwYDVR0j BBgwFoAU+rCB/NhqsPgdQcnl+5w9MiIPSM0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OTRkMWY2Mi04NDg4LTQwODYtOGQ0Yy1mMmRlNWM3NmRhM2QvMC9GQUIwODFGQ0Q4 NkFCMEY4MUQ0MUM5RTVGQjlDM0QzMjIyMEY0OENELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkFCMDgxRkNEODZBQjBGODFENDFDOUU1RkI5QzNEMzIyMjBG NDhDRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTk0ZDFmNjItODQ4OC00MDg2LThk NGMtZjJkZTVjNzZkYTNkLzAvRkFCMDgxRkNEODZBQjBGODFENDFDOUU1RkI5QzNE MzIyMjBGNDhDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALaKMKHle8vVeT0DcrcMqs0zbpMnWz0E9681 7rXBUJZJ9tXumH0KAEHhAf7aHcCkaEIL4VATTfntfYIdrimLHoDX/PfGUyIK2P3a Yj+5xEJH+aZ/p1X+V4sFz4s7k4D89uDMcQlIN3H0FrEvh8ixEck/Y81m8CXzocq8 C/3lAAk/dAGF9XfM3CQIIV6mflArq+wS3zAuvZ7i3J/ZkHapNqp1n3jAsPRnkgFv Q+AGyh/UtpxvTpvfskdxfOQGQolTSI6FsN2pxFejzpa4xxDgmCfATgpJE2izMlyM Mt9IMRDy/250vmxuw8YrTEB2UmDmfA/XiXRbQcGYFNR6YvdHwM0= -----END CERTIFICATE-----Generated at Tue Nov 4 21:22:28 2025 by rpki-client