$ rpki-client -vvf repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.mft File: FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.mft (raw, json) Hash identifier: DlDqyac3H3F33j5xL9YxVlNObdKlS2u5aFkWZXjj49Q= Subject key identifier: 57:A1:36:53:EB:6B:A2:5C:7A:D3:F0:46:00:49:A8:E7:15:FA:14:58 Authority key identifier: FB:D3:B2:8C:90:75:52:9D:EE:81:51:C4:E4:4B:0C:BC:13:FF:DA:91 Certificate issuer: /CN=FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91 Certificate serial: 7E73F1E84F783B8E1967B02A3C4A98CD15403A54 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.cer Subject info access: rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.mft Manifest number: 051B Signing time: Sat 18 Oct 2025 08:41:15 +0000 Manifest this update: Sat 18 Oct 2025 08:36:15 +0000 Manifest next update: Tue 21 Oct 2025 13:33:15 +0000 Files and hashes: 1: 323430333a313838303a3a2f33322d3332203d3e203436303535.roa (hash: 5E43YVmj6Z7OGECRV0xvOsTql9Kqf+2yG0vKEkPwlDE=) 2: FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.crl (hash: NJ0wKgRwwycB2Y3Su0ubBm9F+jtEnOdbgkovTGu8VwE=) 3: 3130332e3139382e3132302e302f32332d3234203d3e203436303535.roa (hash: Rkqt5EaL5SlKX5GmTTNQMVHFRYt3xFbyKGI2eZYOOAk=) 4: 3230322e35322e34382e302f32332d3234203d3e203436303535.roa (hash: cBKI91E82619dGXlbZQsR3kG8PLRa84sQYxG51fCSE0=) 5: 3130332e3139382e3132322e302f32332d3234203d3e203436303535.roa (hash: LRTGK+GW9A0RpTs3Gv4UsfHpkx7owdE7KVjUD93I+Vo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.crl rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 13:33:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:73:f1:e8:4f:78:3b:8e:19:67:b0:2a:3c:4a:98:cd:15:40:3a:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91 Validity Not Before: Oct 18 08:36:15 2025 GMT Not After : Oct 21 13:33:15 2025 GMT Subject: CN=57A13653EB6BA25C7AD3F0460049A8E715FA1458 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:2a:7c:ee:b8:ec:c9:d5:3f:85:45:b5:fd:26: ff:45:2d:b2:4d:a6:da:f6:f1:70:b2:82:fc:fd:c3: ff:9c:f4:61:87:a5:0f:7a:19:84:83:68:8b:de:ee: 2c:b7:48:a2:a8:14:a1:9a:99:a6:a8:98:ff:c4:70: 9a:9f:9f:c9:77:d2:0e:87:1d:c6:3e:b6:bb:0a:4b: fc:6c:9b:d7:0e:90:54:1a:48:9c:ba:7a:7b:3b:71: 49:fa:63:98:0c:eb:e8:b2:0f:16:1b:db:c3:63:1c: bb:8a:2a:09:b2:c5:2b:8b:0e:2e:91:25:0b:eb:cc: 8b:44:6d:25:84:b3:24:76:e7:39:b2:c3:bc:2f:dd: b5:80:e5:74:21:c6:54:5b:c1:12:e0:2b:73:b4:08: be:b3:1b:79:80:51:7e:8c:b8:06:8f:ce:eb:ba:c9: 09:6f:36:80:3a:73:45:d9:2c:c2:b6:74:f8:6a:84: 27:92:f6:5a:22:24:02:eb:f6:56:b6:e5:ec:d0:39: eb:19:0e:41:99:0c:8e:50:1a:c3:62:0b:dc:9c:71: aa:2d:d5:cf:12:c2:2f:dc:7e:d8:61:92:5b:e7:65: 95:46:cd:1f:4f:95:b9:65:ad:20:d7:1b:1c:2a:ff: 2c:7c:fd:aa:7d:dc:87:ea:9e:64:32:a0:d4:38:38: 69:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:A1:36:53:EB:6B:A2:5C:7A:D3:F0:46:00:49:A8:E7:15:FA:14:58 X509v3 Authority Key Identifier: keyid:FB:D3:B2:8C:90:75:52:9D:EE:81:51:C4:E4:4B:0C:BC:13:FF:DA:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:80:d5:42:8c:b1:dd:8f:80:98:ea:ed:43:83:52:a7:1c:11: c7:de:43:29:ff:df:45:f4:47:5d:40:b2:a2:90:0f:97:b7:2a: 34:5d:dd:34:ca:19:f1:ad:09:6d:fe:94:4b:ab:11:59:37:cf: fc:30:e9:f3:7c:d7:c5:7d:25:94:73:bb:c7:ee:38:dd:58:f9: b3:27:0f:0e:e3:0a:fe:15:e0:48:7d:73:e8:83:17:fb:f4:07: 12:e0:f8:37:10:fe:b2:d4:a5:0a:2a:25:de:9f:ab:5c:4e:5e: 65:c2:cb:f5:8b:37:d8:75:59:e3:29:ae:e6:e0:b1:55:46:8d: 8d:9b:c4:3d:42:82:17:aa:5f:3c:bf:fc:e1:f6:06:4a:31:06: 99:8c:19:04:69:36:40:5c:4c:bf:03:2c:88:41:09:3c:dc:06: 87:2b:c3:3c:c7:dc:a2:9c:68:89:c7:f2:60:23:92:69:15:0a: 1c:f0:14:2c:e7:94:a7:58:8c:c5:79:d6:a5:73:e1:d9:2e:00: 3e:e7:61:3f:c4:ec:33:f1:15:15:67:13:6b:c0:28:48:8d:a9: 54:7d:92:af:96:2c:86:52:cf:ce:ad:bc:36:6c:c2:77:33:0d: e0:50:bc:12:92:c0:2c:26:6e:ff:d6:6e:fc:75:65:66:d6:97: b3:f9:e8:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfnPx6E94O44ZZ7AqPEqYzRVAOlQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkJEM0IyOEM5MDc1NTI5REVFODE1MUM0RTQ0QjBDQkMx M0ZGREE5MTAeFw0yNTEwMTgwODM2MTVaFw0yNTEwMjExMzMzMTVaMDMxMTAvBgNV BAMTKDU3QTEzNjUzRUI2QkEyNUM3QUQzRjA0NjAwNDlBOEU3MTVGQTE0NTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcKnzuuOzJ1T+FRbX9Jv9FLbJN ptr28XCygvz9w/+c9GGHpQ96GYSDaIve7iy3SKKoFKGamaaomP/EcJqfn8l30g6H HcY+trsKS/xsm9cOkFQaSJy6ens7cUn6Y5gM6+iyDxYb28NjHLuKKgmyxSuLDi6R JQvrzItEbSWEsyR25zmyw7wv3bWA5XQhxlRbwRLgK3O0CL6zG3mAUX6MuAaPzuu6 yQlvNoA6c0XZLMK2dPhqhCeS9loiJALr9la25ezQOesZDkGZDI5QGsNiC9yccaot 1c8Swi/cfthhklvnZZVGzR9PlbllrSDXGxwq/yx8/ap93IfqnmQyoNQ4OGnpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUV6E2U+trolx60/BGAEmo5xX6FFgwHwYDVR0j BBgwFoAU+9OyjJB1Up3ugVHE5EsMvBP/2pEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ODM5NzdmNC04YzJkLTRlYjEtYjRjZC0zNWI0OTIxNmUwNzMvMC9GQkQzQjI4Qzkw NzU1MjlERUU4MTUxQzRFNDRCMENCQzEzRkZEQTkxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkJEM0IyOEM5MDc1NTI5REVFODE1MUM0RTQ0QjBDQkMxM0ZG REE5MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDgzOTc3ZjQtOGMyZC00ZWIxLWI0 Y2QtMzViNDkyMTZlMDczLzAvRkJEM0IyOEM5MDc1NTI5REVFODE1MUM0RTQ0QjBD QkMxM0ZGREE5MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFWA1UKMsd2PgJjq7UODUqccEcfeQyn/30X0 R11AsqKQD5e3KjRd3TTKGfGtCW3+lEurEVk3z/ww6fN818V9JZRzu8fuON1Y+bMn Dw7jCv4V4Eh9c+iDF/v0BxLg+DcQ/rLUpQoqJd6fq1xOXmXCy/WLN9h1WeMprubg sVVGjY2bxD1CgheqXzy//OH2BkoxBpmMGQRpNkBcTL8DLIhBCTzcBocrwzzH3KKc aInH8mAjkmkVChzwFCznlKdYjMV51qVz4dkuAD7nYT/E7DPxFRVnE2vAKEiNqVR9 kq+WLIZSz86tvDZswnczDeBQvBKSwCwmbv/Wbvx1ZWbWl7P56Es= -----END CERTIFICATE-----Generated at Mon Oct 20 12:32:27 2025 by rpki-client