$ rpki-client -vvf repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/FBACFC63658425B36399C4B9D0322622B8C5B7F0.mft File: FBACFC63658425B36399C4B9D0322622B8C5B7F0.mft (raw, json) Hash identifier: txQRnav1xB9D1B7zA0CLYGJ5owIWo8gSFPLzd3w7oOE= Subject key identifier: DA:FF:D8:13:F4:AC:9B:B9:85:F6:74:A6:90:93:AE:D9:64:2A:59:AC Authority key identifier: FB:AC:FC:63:65:84:25:B3:63:99:C4:B9:D0:32:26:22:B8:C5:B7:F0 Certificate issuer: /CN=FBACFC63658425B36399C4B9D0322622B8C5B7F0 Certificate serial: 24EE91118969B73FE68407329D041A1CF65471E2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBACFC63658425B36399C4B9D0322622B8C5B7F0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/FBACFC63658425B36399C4B9D0322622B8C5B7F0.mft Manifest number: 0506 Signing time: Fri 22 Aug 2025 02:22:00 +0000 Manifest this update: Fri 22 Aug 2025 02:17:00 +0000 Manifest next update: Mon 25 Aug 2025 06:49:00 +0000 Files and hashes: 1: 323430373a336538303a3a2f33322d3438203d3e203338373638.roa (hash: jCqzfoNt2x+8bcJ6fatZirQ8CiZyxgl3URZLZEZ3szo=) 2: 323430373a336538303a363a3a2f34382d3438203d3e203338343936.roa (hash: 4k+7oiIZgf8A+xoNtWkGh4r/bBNQQHgBlobDBAPY3jY=) 3: FBACFC63658425B36399C4B9D0322622B8C5B7F0.crl (hash: VSVE2Xrjc5mjoHGxKs6S/E/gsyn/VuWcy68Oa12B/3w=) 4: 3130332e3233342e3231382e302f32342d3234203d3e203338373638.roa (hash: vWQKx1TT5Vb7zbmKfpDwSS1ZiebEmEmR3LksZYKeYp8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/FBACFC63658425B36399C4B9D0322622B8C5B7F0.crl rsync://repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/FBACFC63658425B36399C4B9D0322622B8C5B7F0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBACFC63658425B36399C4B9D0322622B8C5B7F0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 06:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:ee:91:11:89:69:b7:3f:e6:84:07:32:9d:04:1a:1c:f6:54:71:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FBACFC63658425B36399C4B9D0322622B8C5B7F0 Validity Not Before: Aug 22 02:17:00 2025 GMT Not After : Aug 25 06:49:00 2025 GMT Subject: CN=DAFFD813F4AC9BB985F674A69093AED9642A59AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:8e:69:6c:ce:ed:51:4a:cc:48:98:9d:51:07: 65:67:76:e6:45:90:3a:06:d6:54:6d:08:d4:f0:97: 01:81:cc:f3:c7:42:6b:c1:e2:dd:32:72:b4:fc:da: 8e:41:bd:51:49:85:59:68:9f:30:76:4d:ea:2e:5b: 13:ef:04:f1:d8:2f:65:82:ee:1a:dc:c9:7a:ce:17: 22:f2:6b:c7:ee:82:35:d8:d6:bd:0b:64:3b:1c:2d: d6:0b:d5:75:0a:75:f3:52:ec:ee:1b:4f:af:33:c7: 7e:6b:66:c2:4d:e6:da:fd:81:27:18:e5:24:fc:d8: a4:0a:d6:7e:cd:5c:a1:cc:9d:cf:5b:1b:c3:97:e9: 02:2d:35:2c:58:eb:ab:d8:b0:e6:ab:34:ec:96:a3: f0:9a:61:f3:70:9e:4f:61:eb:0d:eb:9e:1b:fe:5f: 69:75:46:9e:b4:5a:03:ba:26:f5:da:10:6b:50:48: cf:c7:20:25:5b:cd:90:7a:9e:3f:70:69:07:50:a9: 2b:ab:bc:b4:40:d4:ba:5a:65:31:5c:ab:90:24:f8: cf:c0:85:7b:5a:d8:5a:7b:78:66:a1:44:7f:88:43: c7:89:d9:7e:b7:3f:ae:ad:cb:07:b9:af:ba:02:d9: 85:05:6f:78:28:f3:22:08:b0:8f:6a:77:84:53:f7: ce:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:FF:D8:13:F4:AC:9B:B9:85:F6:74:A6:90:93:AE:D9:64:2A:59:AC X509v3 Authority Key Identifier: keyid:FB:AC:FC:63:65:84:25:B3:63:99:C4:B9:D0:32:26:22:B8:C5:B7:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/FBACFC63658425B36399C4B9D0322622B8C5B7F0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBACFC63658425B36399C4B9D0322622B8C5B7F0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/FBACFC63658425B36399C4B9D0322622B8C5B7F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:27:a2:4e:92:f1:78:94:eb:8c:e1:79:07:8b:0b:ac:43:48: c5:48:cf:d1:89:d6:93:03:ab:35:a1:a8:cf:3e:67:7f:af:75: c8:6a:8b:d2:30:f8:4e:3e:5e:ab:9b:45:a2:b3:a6:f2:df:d7: 34:51:67:69:ad:7c:87:2a:1e:69:08:30:db:1e:a4:aa:dc:30: 2b:dc:a2:93:57:a9:ac:ec:f4:c4:6e:b7:fc:bf:da:11:cd:6d: fc:ae:c7:8a:ef:05:9e:4a:31:44:6a:0c:fd:65:6f:fe:f6:f7: fe:c2:81:d1:1b:a6:2a:09:c9:71:3a:f5:5d:42:8b:87:84:2a: e7:64:4d:2e:a5:6d:c5:c6:da:ea:a5:38:5f:3c:d1:c3:b3:c3: 2b:53:2d:2b:81:8a:91:cd:44:a5:af:50:6a:0f:eb:44:bf:aa: 05:14:12:94:45:14:7e:74:02:51:c7:e1:5c:3b:5b:4d:d0:50: 2b:6f:50:04:92:03:5d:72:80:c6:c5:17:6c:dd:1e:09:27:68: a6:48:fa:00:1d:5e:be:e2:da:84:b2:68:f3:99:c9:3e:7c:70: dd:b1:39:a6:a5:a4:bb:57:40:61:39:18:e5:4a:45:ad:d3:c1: 86:c2:d6:a8:f2:1b:0f:e4:75:6a:ea:7a:ca:92:85:32:14:a5: 00:c7:02:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJO6REYlptz/mhAcynQQaHPZUceIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkJBQ0ZDNjM2NTg0MjVCMzYzOTlDNEI5RDAzMjI2MjJC OEM1QjdGMDAeFw0yNTA4MjIwMjE3MDBaFw0yNTA4MjUwNjQ5MDBaMDMxMTAvBgNV BAMTKERBRkZEODEzRjRBQzlCQjk4NUY2NzRBNjkwOTNBRUQ5NjQyQTU5QUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0jmlszu1RSsxImJ1RB2VnduZF kDoG1lRtCNTwlwGBzPPHQmvB4t0ycrT82o5BvVFJhVlonzB2TeouWxPvBPHYL2WC 7hrcyXrOFyLya8fugjXY1r0LZDscLdYL1XUKdfNS7O4bT68zx35rZsJN5tr9gScY 5ST82KQK1n7NXKHMnc9bG8OX6QItNSxY66vYsOarNOyWo/CaYfNwnk9h6w3rnhv+ X2l1Rp60WgO6JvXaEGtQSM/HICVbzZB6nj9waQdQqSurvLRA1LpaZTFcq5Ak+M/A hXta2Fp7eGahRH+IQ8eJ2X63P66tywe5r7oC2YUFb3go8yIIsI9qd4RT985HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2v/YE/Ssm7mF9nSmkJOu2WQqWawwHwYDVR0j BBgwFoAU+6z8Y2WEJbNjmcS50DImIrjFt/AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MWU5NDI0My04N2YwLTQyNmYtYTljYS00YzE5ZWRiMDZiNDIvMC9GQkFDRkM2MzY1 ODQyNUIzNjM5OUM0QjlEMDMyMjYyMkI4QzVCN0YwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkJBQ0ZDNjM2NTg0MjVCMzYzOTlDNEI5RDAzMjI2MjJCOEM1 QjdGMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTFlOTQyNDMtODdmMC00MjZmLWE5 Y2EtNGMxOWVkYjA2YjQyLzAvRkJBQ0ZDNjM2NTg0MjVCMzYzOTlDNEI5RDAzMjI2 MjJCOEM1QjdGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKknok6S8XiU64zheQeLC6xDSMVIz9GJ1pMD qzWhqM8+Z3+vdchqi9Iw+E4+XqubRaKzpvLf1zRRZ2mtfIcqHmkIMNsepKrcMCvc opNXqazs9MRut/y/2hHNbfyux4rvBZ5KMURqDP1lb/729/7CgdEbpioJyXE69V1C i4eEKudkTS6lbcXG2uqlOF880cOzwytTLSuBipHNRKWvUGoP60S/qgUUEpRFFH50 AlHH4Vw7W03QUCtvUASSA11ygMbFF2zdHgknaKZI+gAdXr7i2oSyaPOZyT58cN2x OaalpLtXQGE5GOVKRa3TwYbC1qjyGw/kdWrqesqShTIUpQDHAgY= -----END CERTIFICATE-----Generated at Sat Aug 23 14:12:34 2025 by rpki-client