$ rpki-client -vvf repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/FBACFC63658425B36399C4B9D0322622B8C5B7F0.mft File: FBACFC63658425B36399C4B9D0322622B8C5B7F0.mft (raw, json) Hash identifier: 8s5cqyTfJhXLXp2nLB0m+6z4SeyN2K21NMclfwHPD6Q= Subject key identifier: C0:25:66:C5:14:73:5D:49:D8:DE:81:7B:67:ED:C9:9C:BA:95:B0:75 Authority key identifier: FB:AC:FC:63:65:84:25:B3:63:99:C4:B9:D0:32:26:22:B8:C5:B7:F0 Certificate issuer: /CN=FBACFC63658425B36399C4B9D0322622B8C5B7F0 Certificate serial: 0152596A69DAAF83EF70DE9FFABABCDD4E8A0124 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBACFC63658425B36399C4B9D0322622B8C5B7F0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/FBACFC63658425B36399C4B9D0322622B8C5B7F0.mft Manifest number: 0520 Signing time: Sun 19 Oct 2025 15:12:00 +0000 Manifest this update: Sun 19 Oct 2025 15:07:00 +0000 Manifest next update: Wed 22 Oct 2025 17:18:00 +0000 Files and hashes: 1: 3130332e3233342e3231382e302f32342d3234203d3e203338373638.roa (hash: vWQKx1TT5Vb7zbmKfpDwSS1ZiebEmEmR3LksZYKeYp8=) 2: 323430373a336538303a3a2f33322d3438203d3e203338373638.roa (hash: jCqzfoNt2x+8bcJ6fatZirQ8CiZyxgl3URZLZEZ3szo=) 3: FBACFC63658425B36399C4B9D0322622B8C5B7F0.crl (hash: IkGUvdO0BgmIZCnYzM8wKDzHSY6J1vi67qWipmagKPk=) 4: 323430373a336538303a363a3a2f34382d3438203d3e203338343936.roa (hash: 4k+7oiIZgf8A+xoNtWkGh4r/bBNQQHgBlobDBAPY3jY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/FBACFC63658425B36399C4B9D0322622B8C5B7F0.crl rsync://repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/FBACFC63658425B36399C4B9D0322622B8C5B7F0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBACFC63658425B36399C4B9D0322622B8C5B7F0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 17:18:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:52:59:6a:69:da:af:83:ef:70:de:9f:fa:ba:bc:dd:4e:8a:01:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FBACFC63658425B36399C4B9D0322622B8C5B7F0 Validity Not Before: Oct 19 15:07:00 2025 GMT Not After : Oct 22 17:18:00 2025 GMT Subject: CN=C02566C514735D49D8DE817B67EDC99CBA95B075 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f9:e6:01:ff:e4:59:9f:66:3d:90:4f:c0:c9: 25:74:32:e2:e7:67:d9:4e:ca:21:83:05:44:a7:4c: 8a:b6:aa:1b:b0:bf:8b:9f:88:77:1e:ca:98:8d:50: 03:80:d9:08:02:18:98:22:90:03:08:83:6b:c5:b2: 4a:3f:91:24:03:3b:52:19:cf:1c:70:5f:7f:c7:79: 08:58:cb:1f:31:4f:e3:39:7e:d9:39:e8:75:f4:a4: bb:44:b0:05:df:51:41:a0:ea:ab:a3:ac:cc:05:48: bf:ef:bc:ac:f4:17:91:12:fb:c6:99:77:11:4f:7a: 76:18:38:e0:fb:1d:99:b4:7d:14:25:cf:98:09:8f: 32:41:c8:64:ec:a7:d0:20:05:18:a4:5b:02:69:ab: ba:bd:91:0b:7d:e4:cd:f2:5d:cc:18:73:ba:6f:67: 40:37:9f:bb:7c:7b:63:d8:75:2e:fa:85:cf:c4:72: 44:fa:54:23:de:62:15:5e:7b:44:17:74:0a:95:d6: 90:8e:f5:fc:08:8a:67:8f:19:aa:cb:14:c4:6b:e6: 3c:11:ef:92:ce:d2:82:f2:6a:15:1b:10:c0:c2:a3: 8a:da:8f:1e:8d:b8:22:bf:59:71:78:27:c3:67:74: 94:a3:1e:ec:81:15:a1:c4:c8:b5:0f:03:98:59:47: ab:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:25:66:C5:14:73:5D:49:D8:DE:81:7B:67:ED:C9:9C:BA:95:B0:75 X509v3 Authority Key Identifier: keyid:FB:AC:FC:63:65:84:25:B3:63:99:C4:B9:D0:32:26:22:B8:C5:B7:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/FBACFC63658425B36399C4B9D0322622B8C5B7F0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBACFC63658425B36399C4B9D0322622B8C5B7F0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/FBACFC63658425B36399C4B9D0322622B8C5B7F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:8e:a5:85:9c:d5:52:2e:59:23:f9:be:4d:0c:a7:51:73:b7: de:87:b2:e1:50:ac:75:a3:d7:fa:62:be:e0:38:e3:98:1f:4b: ac:27:d9:00:b9:04:b5:b5:59:18:d4:37:84:0c:a3:25:75:ee: 0e:43:a3:ab:f9:9b:86:8a:c0:d7:5f:b4:be:17:50:22:f1:62: a5:4f:78:e4:ec:cd:41:f5:21:dc:06:29:4a:ed:7d:5e:13:b5: 60:da:4d:bc:8f:33:96:56:d2:de:a5:8d:ab:1a:8c:55:3d:0d: 2d:5a:90:46:75:b6:b7:65:ba:91:7f:df:c4:7e:cf:c3:af:db: b6:c5:83:48:5d:b7:ce:9c:e8:6c:3c:5a:91:36:0e:14:5a:03: 12:a8:a0:4e:41:f3:4b:a7:19:15:f6:e7:77:de:df:94:16:34: 52:ee:9e:c5:de:5c:c6:45:95:e0:39:07:f7:dc:7a:0d:4e:60: ad:50:6a:4f:f4:d0:2e:9f:f5:38:b9:28:a6:e7:b9:fa:e4:5f: 08:50:7b:e3:7f:ca:d7:bb:c7:ae:f2:c6:c5:47:65:24:23:f6: e8:87:f9:37:f3:ae:75:3f:ac:c9:c5:cd:be:b5:23:08:a1:4a: b6:3d:d1:36:52:d2:b8:e8:80:73:88:a5:c9:f5:e9:b5:d0:ac: 86:7d:50:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAVJZamnar4PvcN6f+rq83U6KASQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkJBQ0ZDNjM2NTg0MjVCMzYzOTlDNEI5RDAzMjI2MjJC OEM1QjdGMDAeFw0yNTEwMTkxNTA3MDBaFw0yNTEwMjIxNzE4MDBaMDMxMTAvBgNV BAMTKEMwMjU2NkM1MTQ3MzVENDlEOERFODE3QjY3RURDOTlDQkE5NUIwNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/+eYB/+RZn2Y9kE/AySV0MuLn Z9lOyiGDBUSnTIq2qhuwv4ufiHceypiNUAOA2QgCGJgikAMIg2vFsko/kSQDO1IZ zxxwX3/HeQhYyx8xT+M5ftk56HX0pLtEsAXfUUGg6qujrMwFSL/vvKz0F5ES+8aZ dxFPenYYOOD7HZm0fRQlz5gJjzJByGTsp9AgBRikWwJpq7q9kQt95M3yXcwYc7pv Z0A3n7t8e2PYdS76hc/EckT6VCPeYhVee0QXdAqV1pCO9fwIimePGarLFMRr5jwR 75LO0oLyahUbEMDCo4rajx6NuCK/WXF4J8NndJSjHuyBFaHEyLUPA5hZR6uVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwCVmxRRzXUnY3oF7Z+3JnLqVsHUwHwYDVR0j BBgwFoAU+6z8Y2WEJbNjmcS50DImIrjFt/AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MWU5NDI0My04N2YwLTQyNmYtYTljYS00YzE5ZWRiMDZiNDIvMC9GQkFDRkM2MzY1 ODQyNUIzNjM5OUM0QjlEMDMyMjYyMkI4QzVCN0YwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkJBQ0ZDNjM2NTg0MjVCMzYzOTlDNEI5RDAzMjI2MjJCOEM1 QjdGMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTFlOTQyNDMtODdmMC00MjZmLWE5 Y2EtNGMxOWVkYjA2YjQyLzAvRkJBQ0ZDNjM2NTg0MjVCMzYzOTlDNEI5RDAzMjI2 MjJCOEM1QjdGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ2OpYWc1VIuWSP5vk0Mp1Fzt96HsuFQrHWj 1/pivuA445gfS6wn2QC5BLW1WRjUN4QMoyV17g5Do6v5m4aKwNdftL4XUCLxYqVP eOTszUH1IdwGKUrtfV4TtWDaTbyPM5ZW0t6ljasajFU9DS1akEZ1trdlupF/38R+ z8Ov27bFg0hdt86c6Gw8WpE2DhRaAxKooE5B80unGRX253fe35QWNFLunsXeXMZF leA5B/fceg1OYK1Qak/00C6f9Ti5KKbnufrkXwhQe+N/yte7x67yxsVHZSQj9uiH +TfzrnU/rMnFzb61IwihSrY90TZS0rjogHOIpcn16bXQrIZ9UEY= -----END CERTIFICATE-----Generated at Mon Oct 20 09:41:32 2025 by rpki-client