$ rpki-client -vvf repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.mft File: FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.mft (raw, json) Hash identifier: APE/XRggLKsZSs0FUEel97+zYnXEXjiVf7cmpchmmH8= Subject key identifier: 4B:00:5A:EB:63:A1:C7:22:01:A2:38:1B:8C:61:FB:BF:89:2C:CA:EE Authority key identifier: FB:D3:B2:8C:90:75:52:9D:EE:81:51:C4:E4:4B:0C:BC:13:FF:DA:91 Certificate issuer: /CN=FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91 Certificate serial: 3E40D0F96E4AF07AFD933D4B62A88FDEF8B99830 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.cer Subject info access: rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.mft Manifest number: 0502 Signing time: Fri 22 Aug 2025 23:21:13 +0000 Manifest this update: Fri 22 Aug 2025 23:16:13 +0000 Manifest next update: Tue 26 Aug 2025 04:30:13 +0000 Files and hashes: 1: 3230322e35322e34382e302f32332d3234203d3e203436303535.roa (hash: cBKI91E82619dGXlbZQsR3kG8PLRa84sQYxG51fCSE0=) 2: FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.crl (hash: tCMJbpxvEEgCJZRl/s2l6BKXT4XkB2YfvBOGqDzHxxI=) 3: 3130332e3139382e3132302e302f32332d3234203d3e203436303535.roa (hash: Rkqt5EaL5SlKX5GmTTNQMVHFRYt3xFbyKGI2eZYOOAk=) 4: 323430333a313838303a3a2f33322d3332203d3e203436303535.roa (hash: 5E43YVmj6Z7OGECRV0xvOsTql9Kqf+2yG0vKEkPwlDE=) 5: 3130332e3139382e3132322e302f32332d3234203d3e203436303535.roa (hash: LRTGK+GW9A0RpTs3Gv4UsfHpkx7owdE7KVjUD93I+Vo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.crl rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 04:30:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:40:d0:f9:6e:4a:f0:7a:fd:93:3d:4b:62:a8:8f:de:f8:b9:98:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91 Validity Not Before: Aug 22 23:16:13 2025 GMT Not After : Aug 26 04:30:13 2025 GMT Subject: CN=4B005AEB63A1C72201A2381B8C61FBBF892CCAEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f7:cb:7c:0e:cf:c2:08:3a:c3:23:ac:89:a2: d1:5d:01:91:f9:51:7c:c7:fc:30:77:99:57:ce:a6: 7e:99:d0:b3:67:ac:47:a0:85:2a:7b:c0:59:96:09: f3:84:01:83:c8:42:bf:34:cd:f2:e8:dc:cd:9a:8b: b2:04:39:94:e6:c7:fd:19:9d:93:59:93:e7:f0:e0: 09:5d:75:f8:10:91:77:d8:6f:fe:1e:5b:31:6a:fd: 86:d0:43:31:7a:50:75:a0:b4:ef:45:6a:ad:94:fb: b7:0f:48:8c:eb:f0:21:f4:6c:49:f8:c5:14:5a:9a: 61:08:5c:78:e8:b4:13:e1:ed:fe:10:9d:9c:7a:c3: 47:a1:06:c0:40:2b:d6:3e:3c:f8:97:64:af:53:49: 4e:d5:09:60:5a:4a:4e:40:4a:48:57:c5:f6:c0:d9: ea:b2:05:cc:27:0e:0e:45:d7:c6:27:55:2e:13:95: 5b:75:16:03:9d:57:2d:c9:32:b8:62:c2:9c:1a:6c: 84:82:c8:c1:61:ec:48:7d:3f:68:e1:d1:9b:43:84: fa:37:b6:9f:ea:de:80:d7:79:16:44:c3:67:e0:07: 0f:fe:9d:73:88:78:b8:89:db:50:ca:2b:b5:fb:2b: 3e:9c:c5:52:55:a5:ec:b4:69:ef:f7:17:b5:30:66: 99:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:00:5A:EB:63:A1:C7:22:01:A2:38:1B:8C:61:FB:BF:89:2C:CA:EE X509v3 Authority Key Identifier: keyid:FB:D3:B2:8C:90:75:52:9D:EE:81:51:C4:E4:4B:0C:BC:13:FF:DA:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e0:d6:be:53:b8:63:06:2d:0a:e1:c7:68:58:bf:a8:44:1e:a7: 69:44:c4:8a:ac:e1:55:92:d1:c4:7d:d3:94:36:66:5c:18:17: 88:0a:7b:9d:68:95:63:90:ab:5b:05:50:e9:21:bf:82:8f:69: 91:71:8c:50:de:78:6d:49:ee:57:11:8b:20:34:07:50:cc:a9: 2a:05:fd:dd:1c:32:84:f3:b4:2d:35:ff:c1:af:04:59:07:34: 22:c4:5d:82:88:fd:4c:9d:74:71:37:b2:fe:a5:cf:69:ef:0c: 93:8d:75:4b:e0:d1:dd:37:f6:85:51:a7:d5:ad:ff:ca:43:bf: ed:16:28:30:6b:59:d0:50:e1:12:06:88:0b:a3:12:47:90:a2: f2:21:e8:05:04:c1:97:de:cb:49:96:df:d0:11:08:aa:19:50: 73:da:48:97:28:fc:09:82:2b:51:9f:2b:03:2c:c5:50:66:8d: 32:a5:b3:2c:c0:1d:be:4f:9d:92:2c:64:68:d8:17:dd:2b:8a: 6e:7c:2d:52:73:43:ed:4a:71:62:9c:90:f3:03:6a:f4:aa:4d: c4:03:0a:43:a9:50:9a:06:c6:be:35:72:2e:f6:d4:53:36:7d: 6f:d9:a3:03:20:6a:6c:f6:83:0c:df:84:d1:97:3c:bf:e2:72: a7:de:30:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPkDQ+W5K8Hr9kz1LYqiP3vi5mDAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkJEM0IyOEM5MDc1NTI5REVFODE1MUM0RTQ0QjBDQkMx M0ZGREE5MTAeFw0yNTA4MjIyMzE2MTNaFw0yNTA4MjYwNDMwMTNaMDMxMTAvBgNV BAMTKDRCMDA1QUVCNjNBMUM3MjIwMUEyMzgxQjhDNjFGQkJGODkyQ0NBRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF98t8Ds/CCDrDI6yJotFdAZH5 UXzH/DB3mVfOpn6Z0LNnrEeghSp7wFmWCfOEAYPIQr80zfLo3M2ai7IEOZTmx/0Z nZNZk+fw4AlddfgQkXfYb/4eWzFq/YbQQzF6UHWgtO9Faq2U+7cPSIzr8CH0bEn4 xRRammEIXHjotBPh7f4QnZx6w0ehBsBAK9Y+PPiXZK9TSU7VCWBaSk5ASkhXxfbA 2eqyBcwnDg5F18YnVS4TlVt1FgOdVy3JMrhiwpwabISCyMFh7Eh9P2jh0ZtDhPo3 tp/q3oDXeRZEw2fgBw/+nXOIeLiJ21DKK7X7Kz6cxVJVpey0ae/3F7UwZpkrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSwBa62OhxyIBojgbjGH7v4ksyu4wHwYDVR0j BBgwFoAU+9OyjJB1Up3ugVHE5EsMvBP/2pEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ODM5NzdmNC04YzJkLTRlYjEtYjRjZC0zNWI0OTIxNmUwNzMvMC9GQkQzQjI4Qzkw NzU1MjlERUU4MTUxQzRFNDRCMENCQzEzRkZEQTkxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkJEM0IyOEM5MDc1NTI5REVFODE1MUM0RTQ0QjBDQkMxM0ZG REE5MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDgzOTc3ZjQtOGMyZC00ZWIxLWI0 Y2QtMzViNDkyMTZlMDczLzAvRkJEM0IyOEM5MDc1NTI5REVFODE1MUM0RTQ0QjBD QkMxM0ZGREE5MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAODWvlO4YwYtCuHHaFi/qEQep2lExIqs4VWS 0cR905Q2ZlwYF4gKe51olWOQq1sFUOkhv4KPaZFxjFDeeG1J7lcRiyA0B1DMqSoF /d0cMoTztC01/8GvBFkHNCLEXYKI/UyddHE3sv6lz2nvDJONdUvg0d039oVRp9Wt /8pDv+0WKDBrWdBQ4RIGiAujEkeQovIh6AUEwZfey0mW39ARCKoZUHPaSJco/AmC K1GfKwMsxVBmjTKlsyzAHb5PnZIsZGjYF90rim58LVJzQ+1KcWKckPMDavSqTcQD CkOpUJoGxr41ci721FM2fW/ZowMgamz2gwzfhNGXPL/icqfeMAQ= -----END CERTIFICATE-----Generated at Sat Aug 23 12:03:35 2025 by rpki-client