$ rpki-client -vvf repo-rpki.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.mft File: FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.mft (raw, json) Hash identifier: 3ESIukENYTFnD8LZQikIknchhmxrF+6ykZk7bQzrA+E= Subject key identifier: 3D:E4:D6:A2:FD:81:81:B8:91:A6:BD:FC:69:53:51:07:C8:7C:6D:DF Authority key identifier: FB:3F:CC:1A:69:B1:BD:92:D6:A3:19:D7:FD:82:0E:EE:CE:67:42:45 Certificate issuer: /CN=FB3FCC1A69B1BD92D6A319D7FD820EEECE674245 Certificate serial: 23A22BA458AC9FAB7E72BF88ABACFC8F4AEB3EC8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.mft Manifest number: 0376 Signing time: Thu 07 Aug 2025 07:11:25 +0000 Manifest this update: Thu 07 Aug 2025 07:06:25 +0000 Manifest next update: Sun 10 Aug 2025 18:21:25 +0000 Files and hashes: 1: 3130332e3136342e3137302e302f32332d3234203d3e203137393935.roa (hash: KS9w1B5P8a3jbKsmFzr3W5flDVbhE11L0B9cjjDxpnE=) 2: FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.crl (hash: tJ9dMZ24wonNXiaxr0U+oNvPrfkIrNQtbnENdl2rI8Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.crl rsync://repo-rpki.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 18:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:a2:2b:a4:58:ac:9f:ab:7e:72:bf:88:ab:ac:fc:8f:4a:eb:3e:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB3FCC1A69B1BD92D6A319D7FD820EEECE674245 Validity Not Before: Aug 7 07:06:25 2025 GMT Not After : Aug 10 18:21:25 2025 GMT Subject: CN=3DE4D6A2FD8181B891A6BDFC69535107C87C6DDF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:6d:5f:78:7e:ec:09:f6:e4:9f:04:ac:ae:1b: 4a:fd:1c:5d:71:d9:4f:fb:f5:fd:f6:85:bc:b9:89: eb:c8:c5:a7:c5:ae:20:8f:dd:ca:9b:d0:48:69:82: e4:82:29:2f:d2:4b:61:d0:fe:26:11:16:d3:c8:a0: 16:e6:6d:9e:a9:43:08:58:20:9a:2d:5b:ea:42:ca: fa:16:af:6d:19:e9:06:36:db:97:9f:f4:00:b5:59: 92:1a:c1:fd:60:41:37:20:97:fe:33:a9:33:78:eb: b2:ef:33:58:e5:91:a2:e7:d2:92:5f:b7:87:a6:0b: 0a:c1:5a:7a:70:b8:20:d0:91:66:88:07:16:ec:3e: 1f:c2:6e:ab:90:07:d9:21:dd:b6:4f:0d:65:f6:e7: 92:29:9a:f5:d4:d9:6c:6d:4f:23:69:34:28:8e:4d: a6:de:42:86:ea:45:b0:9a:94:8c:02:a5:17:d5:b8: d9:b2:a8:21:88:7d:15:b6:94:af:e4:29:38:e6:07: cb:7f:54:f4:d8:7a:2b:37:09:c2:92:6a:b0:72:30: ef:e2:d4:12:ea:46:db:c2:f5:29:b0:2c:97:97:51: 4c:ba:51:14:70:11:5b:b3:40:20:0d:8d:c5:8e:65: bc:eb:b7:e3:00:0c:77:b8:66:92:87:4f:01:2a:ca: 6f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:E4:D6:A2:FD:81:81:B8:91:A6:BD:FC:69:53:51:07:C8:7C:6D:DF X509v3 Authority Key Identifier: keyid:FB:3F:CC:1A:69:B1:BD:92:D6:A3:19:D7:FD:82:0E:EE:CE:67:42:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:9f:51:a0:c7:a6:3d:57:49:07:b4:cd:8d:15:9a:79:06:6b: dd:5c:9e:7c:c4:b2:7b:ed:66:fc:f0:ed:64:96:a0:62:e9:af: b1:7b:81:88:4d:52:b0:6f:89:80:a7:ea:10:58:ba:be:7e:1d: 50:f1:56:74:b3:45:41:78:2f:32:5b:cb:66:b7:b7:18:ab:f9: dd:ea:cf:b3:3e:d4:d9:49:80:94:fc:42:05:cc:c2:28:7b:4c: a3:96:8c:5c:8b:93:b4:49:c3:46:54:87:46:a3:6e:57:16:1f: 6d:5a:d5:04:5b:1a:5e:76:3c:7e:fa:97:0c:9c:d2:bc:49:44: bc:69:44:53:02:d8:6a:97:15:50:a3:59:20:3f:c4:8b:f5:23: 60:ad:38:74:4b:9d:ff:a1:c1:f9:ea:3f:75:4f:49:6a:80:a2: 3a:3c:3d:e2:0c:34:01:38:bb:65:a3:4a:1e:fd:32:4a:84:64: 0a:51:a5:70:73:5b:5f:05:04:12:e3:74:3d:af:1c:9d:3b:34: 66:36:ad:df:a1:96:b0:95:d3:ad:af:29:d0:3a:0f:8f:ea:d2: 8f:39:5b:fc:89:af:8b:fe:80:ae:34:c8:f2:54:9c:14:94:e0: 42:d2:db:3c:9f:78:74:ef:30:01:ba:d1:65:f0:74:48:9a:7f: 73:0a:de:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI6IrpFisn6t+cr+Iq6z8j0rrPsgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkIzRkNDMUE2OUIxQkQ5MkQ2QTMxOUQ3RkQ4MjBFRUVD RTY3NDI0NTAeFw0yNTA4MDcwNzA2MjVaFw0yNTA4MTAxODIxMjVaMDMxMTAvBgNV BAMTKDNERTRENkEyRkQ4MTgxQjg5MUE2QkRGQzY5NTM1MTA3Qzg3QzZEREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3bV94fuwJ9uSfBKyuG0r9HF1x 2U/79f32hby5ievIxafFriCP3cqb0EhpguSCKS/SS2HQ/iYRFtPIoBbmbZ6pQwhY IJotW+pCyvoWr20Z6QY225ef9AC1WZIawf1gQTcgl/4zqTN467LvM1jlkaLn0pJf t4emCwrBWnpwuCDQkWaIBxbsPh/CbquQB9kh3bZPDWX255IpmvXU2WxtTyNpNCiO TabeQobqRbCalIwCpRfVuNmyqCGIfRW2lK/kKTjmB8t/VPTYeis3CcKSarByMO/i 1BLqRtvC9SmwLJeXUUy6URRwEVuzQCANjcWOZbzrt+MADHe4ZpKHTwEqym/HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPeTWov2BgbiRpr38aVNRB8h8bd8wHwYDVR0j BBgwFoAU+z/MGmmxvZLWoxnX/YIO7s5nQkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZDg3YmVlZC02MzMwLTRmMzMtOTEwNS04NzcyMmNkZjJkZDAvMC9GQjNGQ0MxQTY5 QjFCRDkyRDZBMzE5RDdGRDgyMEVFRUNFNjc0MjQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkIzRkNDMUE2OUIxQkQ5MkQ2QTMxOUQ3RkQ4MjBFRUVDRTY3 NDI0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWQ4N2JlZWQtNjMzMC00ZjMzLTkx MDUtODc3MjJjZGYyZGQwLzAvRkIzRkNDMUE2OUIxQkQ5MkQ2QTMxOUQ3RkQ4MjBF RUVDRTY3NDI0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIefUaDHpj1XSQe0zY0VmnkGa91cnnzEsnvt Zvzw7WSWoGLpr7F7gYhNUrBviYCn6hBYur5+HVDxVnSzRUF4LzJby2a3txir+d3q z7M+1NlJgJT8QgXMwih7TKOWjFyLk7RJw0ZUh0ajblcWH21a1QRbGl52PH76lwyc 0rxJRLxpRFMC2GqXFVCjWSA/xIv1I2CtOHRLnf+hwfnqP3VPSWqAojo8PeIMNAE4 u2WjSh79MkqEZApRpXBzW18FBBLjdD2vHJ07NGY2rd+hlrCV062vKdA6D4/q0o85 W/yJr4v+gK40yPJUnBSU4ELS2zyfeHTvMAG60WXwdEiaf3MK3sU= -----END CERTIFICATE-----Generated at Fri Aug 8 19:26:38 2025 by rpki-client