$ rpki-client -vvf repo-rpki.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.mft File: FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.mft (raw, json) Hash identifier: N/OXV+pzRx5Gx6z90Hu7lUy2fXtk1yQTi7QG3Jj9y7w= Subject key identifier: FD:C7:4D:C5:CB:AD:88:9E:4F:30:1E:46:C4:FE:BD:8E:1C:EB:61:E2 Authority key identifier: FA:B0:81:FC:D8:6A:B0:F8:1D:41:C9:E5:FB:9C:3D:32:22:0F:48:CD Certificate issuer: /CN=FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD Certificate serial: 176CBEF5D2933F358A9418F8B497881197A3895D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.mft Manifest number: ED Signing time: Tue 05 Aug 2025 17:01:20 +0000 Manifest this update: Tue 05 Aug 2025 16:56:20 +0000 Manifest next update: Fri 08 Aug 2025 19:15:20 +0000 Files and hashes: 1: FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.crl (hash: SycKd/XXzxcg0g/KqaeO6aDvfOFiY2wQR/dJYD3zt34=) 2: 3135372e31302e302e302f32332d3233203d3e20313532303739.roa (hash: LI/HMaoSlImx3bWiKBUR5SBmy9IHEOgEnYbWctfALp8=) 3: 3135372e31302e312e302f32342d3234203d3e20313532303739.roa (hash: 8mKHP2haWx9nDqWVpffr2HLwx0PW3MsCMnqlWHBgH8s=) 4: 3135372e31302e302e302f32342d3234203d3e20313532303739.roa (hash: /rLqhw2hFwRMsfI5zGP3QkMBxOWlLSkauOe3xFxChRo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.crl rsync://repo-rpki.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 09:26:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:6c:be:f5:d2:93:3f:35:8a:94:18:f8:b4:97:88:11:97:a3:89:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD Validity Not Before: Aug 5 16:56:20 2025 GMT Not After : Aug 8 19:15:20 2025 GMT Subject: CN=FDC74DC5CBAD889E4F301E46C4FEBD8E1CEB61E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:20:30:b8:b9:5e:fb:c4:1f:74:ce:a2:54:89: 65:5c:65:51:96:92:0c:07:1a:a0:2f:b0:11:54:b0: ee:c5:69:06:30:28:09:ac:69:bb:e3:97:6a:ac:c0: db:3e:9a:47:b7:e0:30:fd:3f:6c:5d:59:bd:a5:af: fb:08:3d:f0:a0:13:26:64:1a:62:f6:b9:26:99:f9: 5b:21:15:ba:1d:c4:c2:26:02:28:29:c8:3a:a0:30: 1f:20:19:7f:a0:47:38:26:d3:12:de:a0:80:54:49: c5:5e:50:8d:96:26:9c:c3:2b:66:17:52:cb:f3:cf: 67:94:b6:8e:d8:21:7e:a6:3d:ca:32:62:fe:82:42: 02:29:05:9c:09:9c:02:97:08:b3:ae:25:aa:68:73: fb:86:8a:98:f3:46:27:fb:15:88:b4:fc:4b:99:91: 2c:e0:1f:80:96:72:72:5d:d2:fb:33:6b:31:b0:77: de:8b:b0:10:6c:dd:64:6a:2f:dd:bc:31:e9:3f:ea: 3c:9f:5b:13:c0:09:0c:67:aa:d2:bd:84:6c:cc:00: b4:1f:08:9a:1c:8a:3e:23:96:7d:e9:30:a1:1d:b1: db:4e:e4:9e:07:0c:90:0b:48:dc:1a:bf:91:f1:af: 94:7c:56:22:c6:e0:b6:c7:8a:25:8c:0b:af:1c:c3: de:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:C7:4D:C5:CB:AD:88:9E:4F:30:1E:46:C4:FE:BD:8E:1C:EB:61:E2 X509v3 Authority Key Identifier: keyid:FA:B0:81:FC:D8:6A:B0:F8:1D:41:C9:E5:FB:9C:3D:32:22:0F:48:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:65:59:34:5a:61:53:ba:e6:76:d4:7c:4c:f4:8a:e9:58:ba: 65:ad:cf:5e:6e:fb:93:e7:0e:9d:f6:6c:08:ca:7e:23:06:8b: 7d:9d:45:e9:27:64:68:18:70:a1:1b:27:b9:49:fc:fd:7c:f6: ec:ff:e0:86:90:17:5d:59:07:55:2e:66:1a:c5:70:82:4a:d6: 51:b0:a2:1f:69:e1:7f:3d:d5:78:11:5b:d5:83:ac:18:59:a6: 6c:1c:d2:29:d2:b9:24:8a:89:1b:63:9f:e7:25:cf:3f:cc:34: a0:26:fa:89:57:af:b0:13:87:d4:97:d0:cb:55:9b:cb:02:e1: 5c:39:72:9a:34:73:38:99:d3:13:87:ab:22:84:f6:b8:d8:b7: 47:37:e0:05:34:fe:85:12:b8:57:bc:d4:c5:fe:c2:8b:94:b6: 8a:6d:7e:99:17:a4:76:9b:b1:b1:81:e6:b1:1f:0a:2f:cf:2a: c2:5e:8b:5c:bc:68:96:d3:73:47:10:ee:51:66:88:d9:cd:62: 1f:49:3b:5a:a0:66:02:51:93:00:7d:33:75:95:87:14:16:fc: b6:5e:60:b7:3b:58:eb:29:eb:0b:eb:50:4c:0f:86:97:c6:7b: bf:22:26:29:5f:a4:a8:a0:68:c8:fe:23:ab:4a:ab:81:55:db: fb:e5:87:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF2y+9dKTPzWKlBj4tJeIEZejiV0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkFCMDgxRkNEODZBQjBGODFENDFDOUU1RkI5QzNEMzIy MjBGNDhDRDAeFw0yNTA4MDUxNjU2MjBaFw0yNTA4MDgxOTE1MjBaMDMxMTAvBgNV BAMTKEZEQzc0REM1Q0JBRDg4OUU0RjMwMUU0NkM0RkVCRDhFMUNFQjYxRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKIDC4uV77xB90zqJUiWVcZVGW kgwHGqAvsBFUsO7FaQYwKAmsabvjl2qswNs+mke34DD9P2xdWb2lr/sIPfCgEyZk GmL2uSaZ+VshFbodxMImAigpyDqgMB8gGX+gRzgm0xLeoIBUScVeUI2WJpzDK2YX Usvzz2eUto7YIX6mPcoyYv6CQgIpBZwJnAKXCLOuJapoc/uGipjzRif7FYi0/EuZ kSzgH4CWcnJd0vszazGwd96LsBBs3WRqL928Mek/6jyfWxPACQxnqtK9hGzMALQf CJocij4jln3pMKEdsdtO5J4HDJALSNwav5Hxr5R8ViLG4LbHiiWMC68cw96nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/cdNxcutiJ5PMB5GxP69jhzrYeIwHwYDVR0j BBgwFoAU+rCB/NhqsPgdQcnl+5w9MiIPSM0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OTRkMWY2Mi04NDg4LTQwODYtOGQ0Yy1mMmRlNWM3NmRhM2QvMC9GQUIwODFGQ0Q4 NkFCMEY4MUQ0MUM5RTVGQjlDM0QzMjIyMEY0OENELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkFCMDgxRkNEODZBQjBGODFENDFDOUU1RkI5QzNEMzIyMjBG NDhDRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTk0ZDFmNjItODQ4OC00MDg2LThk NGMtZjJkZTVjNzZkYTNkLzAvRkFCMDgxRkNEODZBQjBGODFENDFDOUU1RkI5QzNE MzIyMjBGNDhDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACRlWTRaYVO65nbUfEz0iulYumWtz15u+5Pn Dp32bAjKfiMGi32dReknZGgYcKEbJ7lJ/P189uz/4IaQF11ZB1UuZhrFcIJK1lGw oh9p4X891XgRW9WDrBhZpmwc0inSuSSKiRtjn+clzz/MNKAm+olXr7ATh9SX0MtV m8sC4Vw5cpo0cziZ0xOHqyKE9rjYt0c34AU0/oUSuFe81MX+wouUtoptfpkXpHab sbGB5rEfCi/PKsJei1y8aJbTc0cQ7lFmiNnNYh9JO1qgZgJRkwB9M3WVhxQW/LZe YLc7WOsp6wvrUEwPhpfGe78iJilfpKigaMj+I6tKq4FV2/vlh0U= -----END CERTIFICATE-----Generated at Wed Aug 6 12:32:51 2025 by rpki-client