$ rpki-client -vvf repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.mft File: FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.mft (raw, json) Hash identifier: VokCYLSvost+n90MBWewM8IapaNQ50l42bj8U+17y1k= Subject key identifier: E5:92:F5:2F:55:0D:20:21:0E:4A:4A:BF:12:DE:E5:19:B6:22:AA:AB Authority key identifier: FB:1D:4F:91:39:A6:1D:F4:B9:1E:31:27:0F:3D:2A:1C:07:B3:5C:E1 Certificate issuer: /CN=FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1 Certificate serial: 3FECFE7C62FD5858F05E549CAB0E83A2FD9E7A58 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.mft Manifest number: 01B6 Signing time: Mon 20 Oct 2025 04:32:06 +0000 Manifest this update: Mon 20 Oct 2025 04:27:05 +0000 Manifest next update: Thu 23 Oct 2025 13:02:05 +0000 Files and hashes: 1: FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.crl (hash: D4zz8vAQ+8JWITisujOEij0RqZt1+zEUJOXIJcdtz7A=) 2: 3130332e3134392e3131382e302f32332d3234203d3e20313431303535.roa (hash: u22TiDBqhxRDgDXVHX7pAHC7nu8jAukDNtzJmORzlts=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.crl rsync://repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 13:02:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:ec:fe:7c:62:fd:58:58:f0:5e:54:9c:ab:0e:83:a2:fd:9e:7a:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1 Validity Not Before: Oct 20 04:27:05 2025 GMT Not After : Oct 23 13:02:05 2025 GMT Subject: CN=E592F52F550D20210E4A4ABF12DEE519B622AAAB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:0f:3b:ab:75:6b:2f:6b:0c:ca:f8:73:97:d9: 92:a7:6f:9e:eb:d7:a6:56:57:f6:77:75:0b:cf:d2: 06:b6:ca:a4:48:ed:14:6e:fe:fe:c2:1d:20:10:d3: 6f:0d:0c:6b:64:2b:f0:12:a0:ae:70:f2:bd:1b:f3: c4:a5:db:ff:15:20:7e:72:ea:63:58:f8:0e:73:d0: bc:18:11:50:e8:0c:5b:43:73:3a:52:35:0d:49:42: 77:b9:0d:42:26:ef:35:ed:43:b1:2a:c3:2d:01:f0: ba:30:0f:4f:b0:4e:73:e1:1d:b3:18:5e:1c:db:48: bf:8f:f7:85:5b:91:f1:07:fb:d5:f4:36:2a:3a:69: e3:ef:8a:80:70:c8:81:4e:f9:fb:69:4a:b1:32:bb: 1e:5a:c2:86:dd:63:5f:dd:fe:cc:35:c0:4f:25:70: 5b:47:e9:69:77:d8:03:73:2c:07:1e:00:1b:8c:95: f7:e5:78:40:05:9c:3b:a8:53:c9:be:52:55:48:0d: 08:9e:c6:8c:fb:b1:e9:f1:81:25:cf:e9:1a:bc:24: ce:b3:3f:12:a6:84:3e:0b:a9:e9:31:6d:f0:dd:76: 12:b4:51:41:79:48:b3:50:5a:e7:76:21:3f:5a:7c: bf:a4:24:0f:42:6d:04:d7:65:96:d8:e3:c9:44:85: de:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:92:F5:2F:55:0D:20:21:0E:4A:4A:BF:12:DE:E5:19:B6:22:AA:AB X509v3 Authority Key Identifier: keyid:FB:1D:4F:91:39:A6:1D:F4:B9:1E:31:27:0F:3D:2A:1C:07:B3:5C:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:93:bb:79:08:fc:54:98:66:e2:07:b7:2d:0c:29:1c:51:49: 19:2a:ae:e9:67:ec:4e:ac:f7:f5:0d:61:8d:0a:bd:bc:06:1e: a8:fe:b2:f0:58:eb:5c:2e:7d:96:c8:af:2b:5b:71:2d:f3:87: 03:ab:9b:aa:77:43:f7:ef:35:17:7e:a5:bb:92:ad:d2:b8:bd: 67:74:b0:b9:94:28:38:ff:8a:e9:74:6a:e3:a8:cc:d5:30:16: 43:ed:ad:ee:a1:0c:9a:57:27:92:25:cb:33:ea:8c:00:73:f1: 73:68:2b:e3:9d:6c:d7:65:e2:56:3b:73:7f:55:00:72:f1:44: 29:5c:38:23:8a:5a:94:cc:da:2f:0c:4a:5b:32:37:b0:c0:d9: d8:da:29:5a:b8:46:95:99:af:6a:95:2d:92:09:de:45:7b:8d: 8b:4a:cc:3a:cf:f8:40:95:85:6b:c5:66:25:6f:83:09:b7:5c: 76:ab:88:2d:9f:be:f3:c6:fe:73:62:a5:f4:b3:d6:29:a0:8a: a4:db:f8:93:ae:4b:81:c8:f7:d9:81:7b:37:22:6a:28:45:f8: 24:cd:dc:71:81:53:84:c3:60:35:33:9f:00:2b:13:81:35:c1: df:67:a6:2d:97:05:f9:9b:50:c7:2c:a1:4c:5b:87:92:0b:cf: c7:db:5f:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP+z+fGL9WFjwXlScqw6Dov2eelgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkIxRDRGOTEzOUE2MURGNEI5MUUzMTI3MEYzRDJBMUMw N0IzNUNFMTAeFw0yNTEwMjAwNDI3MDVaFw0yNTEwMjMxMzAyMDVaMDMxMTAvBgNV BAMTKEU1OTJGNTJGNTUwRDIwMjEwRTRBNEFCRjEyREVFNTE5QjYyMkFBQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+DzurdWsvawzK+HOX2ZKnb57r 16ZWV/Z3dQvP0ga2yqRI7RRu/v7CHSAQ028NDGtkK/ASoK5w8r0b88Sl2/8VIH5y 6mNY+A5z0LwYEVDoDFtDczpSNQ1JQne5DUIm7zXtQ7Eqwy0B8LowD0+wTnPhHbMY XhzbSL+P94VbkfEH+9X0Nio6aePvioBwyIFO+ftpSrEyux5awobdY1/d/sw1wE8l cFtH6Wl32ANzLAceABuMlffleEAFnDuoU8m+UlVIDQiexoz7senxgSXP6Rq8JM6z PxKmhD4LqekxbfDddhK0UUF5SLNQWud2IT9afL+kJA9CbQTXZZbY48lEhd4hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5ZL1L1UNICEOSkq/Et7lGbYiqqswHwYDVR0j BBgwFoAU+x1PkTmmHfS5HjEnDz0qHAezXOEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Y2M3MGY3ZC0zM2ZlLTRkZjItODFlNS1kYzBkNTVhYzUxNzAvMC9GQjFENEY5MTM5 QTYxREY0QjkxRTMxMjcwRjNEMkExQzA3QjM1Q0UxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkIxRDRGOTEzOUE2MURGNEI5MUUzMTI3MEYzRDJBMUMwN0Iz NUNFMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWNjNzBmN2QtMzNmZS00ZGYyLTgx ZTUtZGMwZDU1YWM1MTcwLzAvRkIxRDRGOTEzOUE2MURGNEI5MUUzMTI3MEYzRDJB MUMwN0IzNUNFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJeTu3kI/FSYZuIHty0MKRxRSRkqruln7E6s 9/UNYY0KvbwGHqj+svBY61wufZbIrytbcS3zhwOrm6p3Q/fvNRd+pbuSrdK4vWd0 sLmUKDj/iul0auOozNUwFkPtre6hDJpXJ5IlyzPqjABz8XNoK+OdbNdl4lY7c39V AHLxRClcOCOKWpTM2i8MSlsyN7DA2djaKVq4RpWZr2qVLZIJ3kV7jYtKzDrP+ECV hWvFZiVvgwm3XHariC2fvvPG/nNipfSz1imgiqTb+JOuS4HI99mBezciaihF+CTN 3HGBU4TDYDUznwArE4E1wd9npi2XBfmbUMcsoUxbh5ILz8fbX8M= -----END CERTIFICATE-----Generated at Tue Oct 21 08:32:45 2025 by rpki-client