$ rpki-client -vvf repo-rpki.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.mft File: FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.mft (raw, json) Hash identifier: obK8DMxcbe0Expl2yckTGtveOJSxh0Qw2F7IDus4KWE= Subject key identifier: 29:A7:CE:9D:CF:E2:B2:F0:3F:76:68:E1:48:C2:18:A2:2B:86:A3:79 Authority key identifier: FB:3F:CC:1A:69:B1:BD:92:D6:A3:19:D7:FD:82:0E:EE:CE:67:42:45 Certificate issuer: /CN=FB3FCC1A69B1BD92D6A319D7FD820EEECE674245 Certificate serial: 4E2999FD1D6CA32890FE256B0DFC90501D5EA3CC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.mft Manifest number: 039D Signing time: Mon 03 Nov 2025 10:51:26 +0000 Manifest this update: Mon 03 Nov 2025 10:46:26 +0000 Manifest next update: Thu 06 Nov 2025 17:15:26 +0000 Files and hashes: 1: FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.crl (hash: Z3M9VDCZOPmtVrGtGo7wCk2fnK9T16ktz3PpBP37Owo=) 2: 3130332e3136342e3137302e302f32332d3234203d3e203137393935.roa (hash: KS9w1B5P8a3jbKsmFzr3W5flDVbhE11L0B9cjjDxpnE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.crl rsync://repo-rpki.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 17:15:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:29:99:fd:1d:6c:a3:28:90:fe:25:6b:0d:fc:90:50:1d:5e:a3:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB3FCC1A69B1BD92D6A319D7FD820EEECE674245 Validity Not Before: Nov 3 10:46:26 2025 GMT Not After : Nov 6 17:15:26 2025 GMT Subject: CN=29A7CE9DCFE2B2F03F7668E148C218A22B86A379 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f2:c4:78:f9:31:8c:fa:e6:e6:d1:fd:2f:03: 42:d5:4d:49:37:b3:85:4c:18:03:ff:90:9a:8e:2b: 68:a3:9c:e1:03:cb:45:83:64:bd:47:c7:cf:21:55: 30:71:9f:eb:fe:d8:ca:b8:d8:26:7f:33:53:65:c3: c2:fc:ed:31:a6:b6:01:85:cb:7e:e8:a8:35:8b:01: 96:68:ac:b8:01:12:7b:30:57:bb:4e:d0:a0:aa:01: a9:c0:94:8a:7c:47:9f:ff:e6:90:26:da:1b:33:e5: c2:5c:05:ea:dc:4f:86:1e:29:a2:d7:ce:54:a0:cc: a3:bf:35:de:f6:d6:6b:5a:f0:09:1c:cf:a4:3a:d0: 5b:31:8b:8c:a0:c4:16:59:a7:61:3e:00:50:21:13: 0f:3f:5d:6b:a1:e0:ca:0c:1e:04:64:ad:34:cf:e0: ad:bb:51:27:d8:23:d2:06:3d:c7:ae:f6:3d:2c:43: 65:00:e6:d9:61:5f:3d:d9:1c:e7:08:47:0b:5e:a9: 98:db:b0:e2:a8:77:d7:00:b1:72:9a:de:8b:ee:ad: 19:a3:fc:d1:78:ba:53:9d:a8:58:c1:4f:2d:91:35: c6:ed:d3:d0:1d:f5:e8:9d:ae:e7:33:e8:64:db:0b: cb:78:1a:86:f7:5f:69:68:67:ba:99:c3:b5:48:28: 74:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:A7:CE:9D:CF:E2:B2:F0:3F:76:68:E1:48:C2:18:A2:2B:86:A3:79 X509v3 Authority Key Identifier: keyid:FB:3F:CC:1A:69:B1:BD:92:D6:A3:19:D7:FD:82:0E:EE:CE:67:42:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:e6:e4:7b:41:da:83:0b:a8:9b:83:ea:70:68:6e:e0:6a:99: 6c:f1:26:a0:14:f5:25:b6:7f:63:d3:71:6f:8d:db:cf:da:6c: df:11:bc:56:52:1a:16:2c:af:58:c9:05:cc:b0:7e:6e:44:b1: dc:2e:f5:99:0e:b6:1a:95:f1:3f:71:1c:22:e6:36:5b:14:37: d2:df:e8:fc:7e:ed:d8:fc:f6:61:90:f0:39:d2:07:ce:7d:c3: 89:4b:a1:46:f6:c5:a4:07:d7:1b:30:85:db:95:13:7a:62:ab: fa:cd:01:e5:ee:21:89:3f:92:e7:e8:ff:c6:2a:b1:70:47:18: f8:7b:0f:cf:29:f3:a5:14:92:8c:58:c6:83:db:93:09:bc:81: 20:a6:8b:6b:6f:ae:95:e1:09:ce:40:a7:cf:f4:79:7a:07:d8: be:51:88:6b:97:ac:42:3b:f3:b9:23:e4:5a:84:8f:bb:bd:95: d4:19:df:1a:25:b6:4e:19:9d:f7:d8:0b:93:e6:61:09:8d:36: d6:46:13:c0:33:75:ae:f6:c4:79:10:92:48:fe:4f:2f:90:12: d2:f0:e9:86:09:9e:92:64:f6:7a:ea:00:09:0f:6f:34:af:7e: 45:63:d7:ac:8c:40:02:07:b8:bf:3d:f1:80:8b:0c:5a:23:9a: 30:c5:c2:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTimZ/R1soyiQ/iVrDfyQUB1eo8wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkIzRkNDMUE2OUIxQkQ5MkQ2QTMxOUQ3RkQ4MjBFRUVD RTY3NDI0NTAeFw0yNTExMDMxMDQ2MjZaFw0yNTExMDYxNzE1MjZaMDMxMTAvBgNV BAMTKDI5QTdDRTlEQ0ZFMkIyRjAzRjc2NjhFMTQ4QzIxOEEyMkI4NkEzNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC18sR4+TGM+ubm0f0vA0LVTUk3 s4VMGAP/kJqOK2ijnOEDy0WDZL1Hx88hVTBxn+v+2Mq42CZ/M1Nlw8L87TGmtgGF y37oqDWLAZZorLgBEnswV7tO0KCqAanAlIp8R5//5pAm2hsz5cJcBercT4YeKaLX zlSgzKO/Nd721mta8Akcz6Q60Fsxi4ygxBZZp2E+AFAhEw8/XWuh4MoMHgRkrTTP 4K27USfYI9IGPceu9j0sQ2UA5tlhXz3ZHOcIRwteqZjbsOKod9cAsXKa3ovurRmj /NF4ulOdqFjBTy2RNcbt09Ad9eidrucz6GTbC8t4Gob3X2loZ7qZw7VIKHR9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKafOnc/isvA/dmjhSMIYoiuGo3kwHwYDVR0j BBgwFoAU+z/MGmmxvZLWoxnX/YIO7s5nQkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZDg3YmVlZC02MzMwLTRmMzMtOTEwNS04NzcyMmNkZjJkZDAvMC9GQjNGQ0MxQTY5 QjFCRDkyRDZBMzE5RDdGRDgyMEVFRUNFNjc0MjQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkIzRkNDMUE2OUIxQkQ5MkQ2QTMxOUQ3RkQ4MjBFRUVDRTY3 NDI0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWQ4N2JlZWQtNjMzMC00ZjMzLTkx MDUtODc3MjJjZGYyZGQwLzAvRkIzRkNDMUE2OUIxQkQ5MkQ2QTMxOUQ3RkQ4MjBF RUVDRTY3NDI0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEjm5HtB2oMLqJuD6nBobuBqmWzxJqAU9SW2 f2PTcW+N28/abN8RvFZSGhYsr1jJBcywfm5Esdwu9ZkOthqV8T9xHCLmNlsUN9Lf 6Px+7dj89mGQ8DnSB859w4lLoUb2xaQH1xswhduVE3piq/rNAeXuIYk/kufo/8Yq sXBHGPh7D88p86UUkoxYxoPbkwm8gSCmi2tvrpXhCc5Ap8/0eXoH2L5RiGuXrEI7 87kj5FqEj7u9ldQZ3xoltk4ZnffYC5PmYQmNNtZGE8Azda72xHkQkkj+Ty+QEtLw 6YYJnpJk9nrqAAkPbzSvfkVj16yMQAIHuL898YCLDFojmjDFwpY= -----END CERTIFICATE-----Generated at Tue Nov 4 08:21:13 2025 by rpki-client