$ rpki-client -vvf repo-rpki.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.mft File: FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.mft (raw, json) Hash identifier: YhfuXDmnryaIlNvAIb+cZpGi/C789k9HxoZa8OKccCA= Subject key identifier: 7F:E8:BC:05:FB:8A:BD:38:A4:C1:8F:22:29:98:2D:2B:4E:40:A3:C2 Authority key identifier: FA:BD:B6:E4:44:51:B7:F0:37:8A:E9:2C:27:50:EB:FE:5A:3C:FA:38 Certificate issuer: /CN=FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38 Certificate serial: 156177915EAADFF87B57406D6A50A1A341C63D16 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.mft Manifest number: 04CC Signing time: Fri 27 Jun 2025 18:11:41 +0000 Manifest this update: Fri 27 Jun 2025 18:06:41 +0000 Manifest next update: Tue 01 Jul 2025 01:53:41 +0000 Files and hashes: 1: 3130332e3135372e3131362e302f32332d3234203d3e20313337333331.roa (hash: gepyqAbuiPaUA1F4qNan63WSMqffSkJDQ7owW86Bv/s=) 2: 323430363a613063303a3a2f33322d3332203d3e20313337333331.roa (hash: Ai0eZhLY+4L7mdTG5liUS7qc6ABicMzreMWiAuYqKfU=) 3: FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.crl (hash: PV2dFS6mInhOShr+mneOWmZcET3Vff9pmhmV+X3bYFQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.crl rsync://repo-rpki.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 01:53:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:61:77:91:5e:aa:df:f8:7b:57:40:6d:6a:50:a1:a3:41:c6:3d:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38 Validity Not Before: Jun 27 18:06:41 2025 GMT Not After : Jul 1 01:53:41 2025 GMT Subject: CN=7FE8BC05FB8ABD38A4C18F2229982D2B4E40A3C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:cc:43:e0:f8:ab:5b:74:8c:57:36:a3:6a:b8: 87:89:76:5f:39:71:aa:8a:fe:09:41:7b:cf:9d:b4: 89:af:25:5c:06:02:72:a5:7d:97:3c:95:5f:52:3e: 5f:d5:a9:17:1f:58:82:60:a9:89:19:4a:c0:5b:a7: aa:68:64:60:14:5b:ba:30:7e:d9:3f:fe:2b:c3:6c: 71:6a:73:6d:de:6b:57:24:22:2d:8b:4f:9a:2f:84: 84:e9:95:98:7b:aa:2e:9a:11:32:d0:be:91:08:d6: 48:ef:45:f2:1d:29:69:d1:48:1b:19:b0:42:6f:c7: f9:5a:9d:4e:08:88:d6:c4:93:6b:55:28:c2:19:51: ec:ce:a5:f1:c3:e6:7c:fe:05:81:f5:49:2c:6a:27: 5e:2d:f6:b7:74:43:a3:ab:51:cd:6f:a4:3f:7a:d9: 04:cd:ff:d4:4d:89:52:76:f2:0e:92:86:7b:22:a1: 24:e2:f8:e8:85:b0:d8:25:fd:b2:da:19:39:75:85: d0:53:97:2a:70:1e:b8:31:b5:8a:09:d0:13:0b:f2: 86:e1:a3:d0:8f:22:92:30:6a:9f:30:65:6e:de:91: b0:dc:a9:d1:52:0f:04:17:21:f3:fd:e3:9d:74:a5: 54:b2:f5:29:62:f5:ac:87:e0:36:28:cc:30:1f:78: 32:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:E8:BC:05:FB:8A:BD:38:A4:C1:8F:22:29:98:2D:2B:4E:40:A3:C2 X509v3 Authority Key Identifier: keyid:FA:BD:B6:E4:44:51:B7:F0:37:8A:E9:2C:27:50:EB:FE:5A:3C:FA:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:f7:9b:ef:51:15:1b:ca:e3:e0:98:5f:df:63:79:06:b1:70: 4e:14:36:84:b2:e7:36:34:13:bf:dd:84:e5:b3:5c:d6:97:c8: 20:fc:aa:3d:2c:a2:64:c6:7d:ac:63:ad:ed:b4:9a:40:4a:79: 8d:e7:fc:66:58:33:c0:75:c6:d0:93:74:b6:8a:5b:96:29:e2: 25:e9:93:32:0b:7b:b4:5d:f8:cd:3c:36:5a:73:70:29:cb:20: a4:36:26:d1:2c:91:4e:cd:cd:2e:36:fb:9f:85:d4:1d:36:ac: 54:98:9c:ca:99:e9:9d:c8:f2:97:1b:b2:68:39:31:4c:a1:00: 1b:ee:3d:80:51:4b:6a:5e:d8:e2:c3:7e:da:a3:1d:ef:fd:c8: 78:6c:fc:5d:c1:57:28:2e:7c:57:18:43:ed:34:6a:34:c3:94: ca:67:d5:24:ba:d4:7d:b7:25:44:92:10:1d:ac:ef:3b:82:3a: b0:df:cc:a7:d4:d4:ac:9d:9d:e6:37:0e:cb:b7:f3:9d:40:bd: 32:52:3b:db:02:b7:5c:37:90:e0:22:e5:9a:a4:ab:ef:9e:9c: 06:18:20:e6:69:3a:e7:5e:8f:27:e9:92:d8:d5:a7:ce:ba:69: b0:b5:a5:29:e8:dd:bd:4b:85:81:2f:e3:33:1c:f4:05:2f:59: e0:21:b8:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFWF3kV6q3/h7V0BtalCho0HGPRYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkFCREI2RTQ0NDUxQjdGMDM3OEFFOTJDMjc1MEVCRkU1 QTNDRkEzODAeFw0yNTA2MjcxODA2NDFaFw0yNTA3MDEwMTUzNDFaMDMxMTAvBgNV BAMTKDdGRThCQzA1RkI4QUJEMzhBNEMxOEYyMjI5OTgyRDJCNEU0MEEzQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPzEPg+KtbdIxXNqNquIeJdl85 caqK/glBe8+dtImvJVwGAnKlfZc8lV9SPl/VqRcfWIJgqYkZSsBbp6poZGAUW7ow ftk//ivDbHFqc23ea1ckIi2LT5ovhITplZh7qi6aETLQvpEI1kjvRfIdKWnRSBsZ sEJvx/lanU4IiNbEk2tVKMIZUezOpfHD5nz+BYH1SSxqJ14t9rd0Q6OrUc1vpD96 2QTN/9RNiVJ28g6ShnsioSTi+OiFsNgl/bLaGTl1hdBTlypwHrgxtYoJ0BML8obh o9CPIpIwap8wZW7ekbDcqdFSDwQXIfP94510pVSy9Sli9ayH4DYozDAfeDKxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUf+i8BfuKvTikwY8iKZgtK05Ao8IwHwYDVR0j BBgwFoAU+r225ERRt/A3iuksJ1Dr/lo8+jgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZDA3ZTNkOC05YmZjLTQ0ODMtYTJkZC1hZmE0NTkzODExZTUvMC9GQUJEQjZFNDQ0 NTFCN0YwMzc4QUU5MkMyNzUwRUJGRTVBM0NGQTM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkFCREI2RTQ0NDUxQjdGMDM3OEFFOTJDMjc1MEVCRkU1QTND RkEzOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWQwN2UzZDgtOWJmYy00NDgzLWEy ZGQtYWZhNDU5MzgxMWU1LzAvRkFCREI2RTQ0NDUxQjdGMDM3OEFFOTJDMjc1MEVC RkU1QTNDRkEzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFb3m+9RFRvK4+CYX99jeQaxcE4UNoSy5zY0 E7/dhOWzXNaXyCD8qj0somTGfaxjre20mkBKeY3n/GZYM8B1xtCTdLaKW5Yp4iXp kzILe7Rd+M08NlpzcCnLIKQ2JtEskU7NzS42+5+F1B02rFSYnMqZ6Z3I8pcbsmg5 MUyhABvuPYBRS2pe2OLDftqjHe/9yHhs/F3BVygufFcYQ+00ajTDlMpn1SS61H23 JUSSEB2s7zuCOrDfzKfU1KydneY3Dsu3851AvTJSO9sCt1w3kOAi5Zqkq++enAYY IOZpOudejyfpktjVp866abC1pSno3b1LhYEv4zMc9AUvWeAhuOk= -----END CERTIFICATE-----Generated at Sun Jun 29 18:10:15 2025 by rpki-client