$ rpki-client -vvf repo-rpki.idnic.net/repo/47ad0a3a-26b8-449a-88ec-bf0398ea53a6/0/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.mft File: FBC39A6E177F8DD7BA5E257D4489C57574C07E81.mft (raw, json) Hash identifier: xBb2Cxm0qhps2tc79qiUEcQQu95xlE+PnSCi4V6Xd9I= Subject key identifier: BE:E3:86:99:62:A8:33:53:1D:B6:99:8D:A3:C0:C2:05:6F:47:52:6A Authority key identifier: FB:C3:9A:6E:17:7F:8D:D7:BA:5E:25:7D:44:89:C5:75:74:C0:7E:81 Certificate issuer: /CN=FBC39A6E177F8DD7BA5E257D4489C57574C07E81 Certificate serial: 06CC875387979FE15F175E1D18A3C019CBE6B133 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.cer Subject info access: rsync://repo-rpki.idnic.net/repo/47ad0a3a-26b8-449a-88ec-bf0398ea53a6/0/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.mft Manifest number: BA Signing time: Sat 18 Oct 2025 13:41:44 +0000 Manifest this update: Sat 18 Oct 2025 13:36:44 +0000 Manifest next update: Wed 22 Oct 2025 01:14:44 +0000 Files and hashes: 1: 3136302e32352e3235302e302f32342d3234203d3e20313533303938.roa (hash: MrtKeNjFNhl14mhfxKI/GhEb/0ohG0B8bmQ7SLXWttE=) 2: 3136302e32352e3235312e302f32342d3234203d3e20313533303938.roa (hash: +X50gpeSdWT/Y5d22C2/uBOgo8Xzo2+UIRSSAuVLkyI=) 3: FBC39A6E177F8DD7BA5E257D4489C57574C07E81.crl (hash: oE0ADGoTrwEJ8fDiP3Bj6zfdgxUrYpmhhEyOfN6l5co=) 4: 3136302e32352e3235302e302f32332d3233203d3e20313533303938.roa (hash: eL66HCHXLPzvvpIp6yZbwohxEw2vNNGKLUjoRHRX4l0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/47ad0a3a-26b8-449a-88ec-bf0398ea53a6/0/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.crl rsync://repo-rpki.idnic.net/repo/47ad0a3a-26b8-449a-88ec-bf0398ea53a6/0/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 01:14:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:cc:87:53:87:97:9f:e1:5f:17:5e:1d:18:a3:c0:19:cb:e6:b1:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FBC39A6E177F8DD7BA5E257D4489C57574C07E81 Validity Not Before: Oct 18 13:36:44 2025 GMT Not After : Oct 22 01:14:44 2025 GMT Subject: CN=BEE3869962A833531DB6998DA3C0C2056F47526A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e3:12:69:d9:3a:ff:18:71:1b:94:8e:aa:44: 2b:15:84:4c:ea:1f:d7:a4:aa:e3:9b:8b:c4:09:00: 23:c5:ea:10:b0:36:bb:a2:c6:a3:21:5d:e8:04:a7: 9b:53:1d:af:da:54:16:e6:f1:ba:e4:21:fb:d0:31: 73:e9:92:0d:02:14:ba:77:de:6b:8e:1c:7a:41:7c: 2a:76:a7:9e:b5:6f:c9:db:f5:ea:4f:96:c2:86:2d: 83:60:c2:c9:0b:fe:0a:c1:a2:f8:4f:78:c1:f6:5a: f0:41:b0:c2:88:ec:20:1f:ac:90:12:31:f5:be:d4: 3f:0c:df:4d:b5:cd:d5:28:a7:5b:2d:a0:dd:e1:70: 57:65:29:b8:df:6b:3d:ce:e9:a3:c8:0f:7c:e6:6d: cd:4a:92:8e:25:4d:a7:46:3c:08:e9:95:36:f2:3c: 33:58:f9:94:b6:bb:91:4c:02:fd:3c:1d:af:38:80: 3f:40:84:5f:13:fe:88:e2:97:8d:90:97:70:35:91: 8f:c4:60:19:10:d3:d9:8d:4c:82:bd:ca:b9:0e:95: 77:0f:4e:e3:90:e7:85:c3:0d:1c:75:53:9b:31:61: ff:98:81:6b:6b:77:eb:ed:5d:32:c1:98:7e:af:a6: a9:99:6c:36:50:fd:7a:4a:d8:0c:9e:c1:04:32:7e: f1:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:E3:86:99:62:A8:33:53:1D:B6:99:8D:A3:C0:C2:05:6F:47:52:6A X509v3 Authority Key Identifier: keyid:FB:C3:9A:6E:17:7F:8D:D7:BA:5E:25:7D:44:89:C5:75:74:C0:7E:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/47ad0a3a-26b8-449a-88ec-bf0398ea53a6/0/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/47ad0a3a-26b8-449a-88ec-bf0398ea53a6/0/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:20:67:fd:1e:63:a1:50:f8:74:be:2b:4f:04:c0:9c:2c:f6: 26:7e:3a:63:8e:af:a6:2c:26:16:fa:a4:ed:42:22:bb:40:e3: 39:57:f5:f7:92:7d:fb:6c:15:00:07:b7:4c:6e:1e:c7:b7:ad: ee:7c:6e:d0:30:88:25:40:c8:ce:55:c8:98:2c:04:b9:a1:2a: 4b:00:c8:7a:69:24:c5:9b:fd:bc:57:95:c1:99:d6:31:50:94: af:3f:83:2b:79:e7:37:ed:4c:89:e1:ab:9f:62:50:66:25:83: 30:db:2f:ba:b4:63:54:f5:65:54:a5:c8:9a:55:e8:29:84:62: 7f:ba:e3:ed:1a:3f:5d:33:49:93:a6:41:2f:59:7f:90:a9:4c: 5b:d8:f4:6f:e6:fe:f2:a7:56:f1:87:c6:62:ba:f8:cc:ad:6a: be:31:6f:3b:38:d4:67:18:d3:33:e0:86:b3:6c:cb:a1:a4:86: a7:fe:c3:5e:5b:65:7e:1f:c6:69:bd:9b:00:0c:93:75:a5:e3: d4:8f:b2:4c:69:d7:d0:a9:6e:1c:71:cf:aa:17:b5:46:60:7b: 85:60:e0:50:45:ae:4f:14:90:2f:be:68:9e:1a:8d:23:4f:8a: 80:0e:ee:d6:cc:43:88:cc:d0:7c:63:8b:59:c3:44:5f:d6:66: b6:bf:d4:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBsyHU4eXn+FfF14dGKPAGcvmsTMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkJDMzlBNkUxNzdGOEREN0JBNUUyNTdENDQ4OUM1NzU3 NEMwN0U4MTAeFw0yNTEwMTgxMzM2NDRaFw0yNTEwMjIwMTE0NDRaMDMxMTAvBgNV BAMTKEJFRTM4Njk5NjJBODMzNTMxREI2OTk4REEzQzBDMjA1NkY0NzUyNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP4xJp2Tr/GHEblI6qRCsVhEzq H9ekquObi8QJACPF6hCwNruixqMhXegEp5tTHa/aVBbm8brkIfvQMXPpkg0CFLp3 3muOHHpBfCp2p561b8nb9epPlsKGLYNgwskL/grBovhPeMH2WvBBsMKI7CAfrJAS MfW+1D8M3021zdUop1stoN3hcFdlKbjfaz3O6aPID3zmbc1Kko4lTadGPAjplTby PDNY+ZS2u5FMAv08Ha84gD9AhF8T/ojil42Ql3A1kY/EYBkQ09mNTIK9yrkOlXcP TuOQ54XDDRx1U5sxYf+YgWtrd+vtXTLBmH6vpqmZbDZQ/XpK2AyewQQyfvFXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvuOGmWKoM1MdtpmNo8DCBW9HUmowHwYDVR0j BBgwFoAU+8Oabhd/jde6XiV9RInFdXTAfoEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 N2FkMGEzYS0yNmI4LTQ0OWEtODhlYy1iZjAzOThlYTUzYTYvMC9GQkMzOUE2RTE3 N0Y4REQ3QkE1RTI1N0Q0NDg5QzU3NTc0QzA3RTgxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkJDMzlBNkUxNzdGOEREN0JBNUUyNTdENDQ4OUM1NzU3NEMw N0U4MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDdhZDBhM2EtMjZiOC00NDlhLTg4 ZWMtYmYwMzk4ZWE1M2E2LzAvRkJDMzlBNkUxNzdGOEREN0JBNUUyNTdENDQ4OUM1 NzU3NEMwN0U4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB4gZ/0eY6FQ+HS+K08EwJws9iZ+OmOOr6Ys Jhb6pO1CIrtA4zlX9feSfftsFQAHt0xuHse3re58btAwiCVAyM5VyJgsBLmhKksA yHppJMWb/bxXlcGZ1jFQlK8/gyt55zftTInhq59iUGYlgzDbL7q0Y1T1ZVSlyJpV 6CmEYn+64+0aP10zSZOmQS9Zf5CpTFvY9G/m/vKnVvGHxmK6+Mytar4xbzs41GcY 0zPghrNsy6Gkhqf+w15bZX4fxmm9mwAMk3Wl49SPskxp19Cpbhxxz6oXtUZge4Vg 4FBFrk8UkC++aJ4ajSNPioAO7tbMQ4jM0Hxji1nDRF/WZra/1EQ= -----END CERTIFICATE-----Generated at Mon Oct 20 13:14:28 2025 by rpki-client