$ rpki-client -vvf repo-rpki.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.mft File: FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.mft (raw, json) Hash identifier: GbIbwKN7T5/vIymmP+6RKm0pCWT/+EEJHX0uBxk/FEg= Subject key identifier: 61:A1:EB:41:50:77:01:3C:D3:EA:F1:D0:54:0E:96:CB:6A:DC:8E:1B Authority key identifier: FA:BD:B6:E4:44:51:B7:F0:37:8A:E9:2C:27:50:EB:FE:5A:3C:FA:38 Certificate issuer: /CN=FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38 Certificate serial: 1112524E5D1309D05E87E845C879F917AF35FDEA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.mft Manifest number: 04FE Signing time: Sat 18 Oct 2025 08:31:44 +0000 Manifest this update: Sat 18 Oct 2025 08:26:44 +0000 Manifest next update: Tue 21 Oct 2025 11:10:44 +0000 Files and hashes: 1: FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.crl (hash: 8CThJid+AKRr8l/43W9jTvqXFvCIKIJ4ygSwKzJL3bU=) 2: 323430363a613063303a3a2f33322d3332203d3e20313337333331.roa (hash: Ai0eZhLY+4L7mdTG5liUS7qc6ABicMzreMWiAuYqKfU=) 3: 3130332e3135372e3131362e302f32332d3234203d3e20313337333331.roa (hash: gepyqAbuiPaUA1F4qNan63WSMqffSkJDQ7owW86Bv/s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.crl rsync://repo-rpki.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 11:10:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:12:52:4e:5d:13:09:d0:5e:87:e8:45:c8:79:f9:17:af:35:fd:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38 Validity Not Before: Oct 18 08:26:44 2025 GMT Not After : Oct 21 11:10:44 2025 GMT Subject: CN=61A1EB415077013CD3EAF1D0540E96CB6ADC8E1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:1f:41:50:39:28:1d:8c:64:f0:61:93:b1:61: 7c:ac:fb:a7:d8:fa:bd:0f:30:19:c0:dc:d2:25:b5: 7e:34:7b:68:ca:9e:88:61:56:42:b5:bd:5b:2c:23: e6:df:1b:52:89:8a:96:dd:d3:92:6a:63:92:15:90: 9b:f3:fa:fb:aa:26:3f:bc:e7:5d:7b:ec:5e:c4:c8: 30:3d:8f:cd:d4:47:2c:de:a1:41:f3:b9:6e:60:05: 63:8c:10:a2:84:c8:5c:b8:6d:1a:06:9f:16:95:32: db:cb:99:b7:9d:8b:11:b8:d1:c6:8c:f8:ac:5f:e0: b3:a5:a7:f9:f1:2a:d0:a4:f5:3f:ce:9b:ba:d8:b6: 4a:8b:7f:03:b1:96:ee:a0:57:de:49:63:3d:77:0f: 6e:86:87:13:f7:e1:74:aa:6f:a6:5a:f6:ac:72:ed: 2f:3c:e3:70:5a:ef:72:90:23:bc:dc:50:d8:68:dd: 6a:4a:70:c6:63:ed:d1:d3:95:a0:6a:7a:12:ac:fa: 08:c0:fe:0d:7d:91:8b:19:09:83:e2:11:7a:79:d9: 45:24:3f:61:83:51:18:33:e7:49:82:13:4a:38:fa: ec:fe:3b:d7:a4:21:63:5d:b7:d4:52:07:ed:2d:c1: f5:a8:1a:bc:23:a4:fb:68:c2:d0:61:bd:9e:a3:b0: 62:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:A1:EB:41:50:77:01:3C:D3:EA:F1:D0:54:0E:96:CB:6A:DC:8E:1B X509v3 Authority Key Identifier: keyid:FA:BD:B6:E4:44:51:B7:F0:37:8A:E9:2C:27:50:EB:FE:5A:3C:FA:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:89:fb:19:fc:26:4a:37:88:68:69:66:66:6d:74:fe:1e:25: ea:1c:d2:87:a5:30:26:7e:15:2a:5a:86:16:fd:6b:52:ae:18: 74:54:75:01:2b:d0:6e:dd:40:b9:c6:7b:d4:f5:f3:73:40:7b: cd:68:2e:d9:0c:4d:4b:d4:c6:92:48:14:03:54:60:85:f0:b3: 1a:0d:8e:fe:29:2c:57:57:1c:af:c5:90:32:09:59:3a:a6:8c: e0:22:8e:d6:a1:f8:80:66:c5:50:a5:49:03:88:de:b5:1d:66: c3:73:91:df:5d:d3:1d:d8:a7:bc:c2:86:53:af:cd:4e:c4:aa: d5:07:ee:04:a2:e4:68:1e:df:06:a2:75:16:ee:b9:e4:4c:a8: 6b:56:14:34:1e:d9:62:50:e7:71:8b:52:5b:b4:27:12:69:f0: 5a:6f:4d:04:71:3e:d5:ef:b6:9b:fb:c9:ec:d6:6c:23:ac:44: ee:95:07:f2:bf:5b:8a:e9:c6:54:f4:78:ef:7b:ba:67:47:36: 69:c4:31:27:b0:1c:1e:65:02:33:37:03:ad:6c:80:83:dc:b6: 36:76:2f:a3:fb:9e:11:ad:37:6a:85:a7:73:de:c4:9c:22:54: 88:ff:b2:9d:a6:9c:7d:a7:8b:1d:f2:32:21:88:a4:4d:17:b1: 88:8c:9f:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUERJSTl0TCdBeh+hFyHn5F681/eowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkFCREI2RTQ0NDUxQjdGMDM3OEFFOTJDMjc1MEVCRkU1 QTNDRkEzODAeFw0yNTEwMTgwODI2NDRaFw0yNTEwMjExMTEwNDRaMDMxMTAvBgNV BAMTKDYxQTFFQjQxNTA3NzAxM0NEM0VBRjFEMDU0MEU5NkNCNkFEQzhFMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0H0FQOSgdjGTwYZOxYXys+6fY +r0PMBnA3NIltX40e2jKnohhVkK1vVssI+bfG1KJipbd05JqY5IVkJvz+vuqJj+8 51177F7EyDA9j83URyzeoUHzuW5gBWOMEKKEyFy4bRoGnxaVMtvLmbedixG40caM +Kxf4LOlp/nxKtCk9T/Om7rYtkqLfwOxlu6gV95JYz13D26GhxP34XSqb6Za9qxy 7S8843Ba73KQI7zcUNho3WpKcMZj7dHTlaBqehKs+gjA/g19kYsZCYPiEXp52UUk P2GDURgz50mCE0o4+uz+O9ekIWNdt9RSB+0twfWoGrwjpPtowtBhvZ6jsGIRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYaHrQVB3ATzT6vHQVA6Wy2rcjhswHwYDVR0j BBgwFoAU+r225ERRt/A3iuksJ1Dr/lo8+jgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZDA3ZTNkOC05YmZjLTQ0ODMtYTJkZC1hZmE0NTkzODExZTUvMC9GQUJEQjZFNDQ0 NTFCN0YwMzc4QUU5MkMyNzUwRUJGRTVBM0NGQTM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkFCREI2RTQ0NDUxQjdGMDM3OEFFOTJDMjc1MEVCRkU1QTND RkEzOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWQwN2UzZDgtOWJmYy00NDgzLWEy ZGQtYWZhNDU5MzgxMWU1LzAvRkFCREI2RTQ0NDUxQjdGMDM3OEFFOTJDMjc1MEVC RkU1QTNDRkEzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE+J+xn8Jko3iGhpZmZtdP4eJeoc0oelMCZ+ FSpahhb9a1KuGHRUdQEr0G7dQLnGe9T183NAe81oLtkMTUvUxpJIFANUYIXwsxoN jv4pLFdXHK/FkDIJWTqmjOAijtah+IBmxVClSQOI3rUdZsNzkd9d0x3Yp7zChlOv zU7EqtUH7gSi5Gge3waidRbuueRMqGtWFDQe2WJQ53GLUlu0JxJp8FpvTQRxPtXv tpv7yezWbCOsRO6VB/K/W4rpxlT0eO97umdHNmnEMSewHB5lAjM3A61sgIPctjZ2 L6P7nhGtN2qFp3PexJwiVIj/sp2mnH2nix3yMiGIpE0XsYiMn+w= -----END CERTIFICATE-----Generated at Mon Oct 20 12:26:15 2025 by rpki-client