$ rpki-client -vvf repo-rpki.idnic.net/repo/8165e481-5a79-4868-a4e4-facfd922d813/0/FB3AAFE074610C85854BE75082EC16E60A126879.mft File: FB3AAFE074610C85854BE75082EC16E60A126879.mft (raw, json) Hash identifier: thzXFMfbPo9/ny0TgbqCHGX9C8L3oPjMwJQ2G5AUqso= Subject key identifier: 43:91:08:99:35:74:73:5F:2A:31:A9:84:9A:68:D3:C3:B9:B7:D4:3E Authority key identifier: FB:3A:AF:E0:74:61:0C:85:85:4B:E7:50:82:EC:16:E6:0A:12:68:79 Certificate issuer: /CN=FB3AAFE074610C85854BE75082EC16E60A126879 Certificate serial: 63C7D9B087184E32294905DFA140F1DFF112DBE9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB3AAFE074610C85854BE75082EC16E60A126879.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8165e481-5a79-4868-a4e4-facfd922d813/0/FB3AAFE074610C85854BE75082EC16E60A126879.mft Manifest number: FD Signing time: Mon 20 Oct 2025 03:40:43 +0000 Manifest this update: Mon 20 Oct 2025 03:35:43 +0000 Manifest next update: Thu 23 Oct 2025 05:32:43 +0000 Files and hashes: 1: 3130332e3135302e3135392e302f32342d3234203d3e20313430343331.roa (hash: e3s751+uHuq2vHbykLAhhBQ6L17VHuRd5Etg83ChrxA=) 2: FB3AAFE074610C85854BE75082EC16E60A126879.crl (hash: LEvdj4xV1PvyQmBIlwe7SfltX7KXphUhR8C8qPd3yRw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8165e481-5a79-4868-a4e4-facfd922d813/0/FB3AAFE074610C85854BE75082EC16E60A126879.crl rsync://repo-rpki.idnic.net/repo/8165e481-5a79-4868-a4e4-facfd922d813/0/FB3AAFE074610C85854BE75082EC16E60A126879.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB3AAFE074610C85854BE75082EC16E60A126879.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 05:32:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:c7:d9:b0:87:18:4e:32:29:49:05:df:a1:40:f1:df:f1:12:db:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB3AAFE074610C85854BE75082EC16E60A126879 Validity Not Before: Oct 20 03:35:43 2025 GMT Not After : Oct 23 05:32:43 2025 GMT Subject: CN=439108993574735F2A31A9849A68D3C3B9B7D43E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:d1:d7:50:42:8e:c5:99:b1:e2:6c:89:78:e4: 67:88:93:01:04:a8:7d:62:aa:e9:e6:56:02:07:0e: 87:76:a5:03:d0:48:1c:cb:fd:ec:24:45:7c:0d:ba: ed:2c:a8:0e:2c:8f:65:68:6e:4d:f2:4a:ed:ec:d0: 7a:50:15:a8:b8:2f:23:12:57:a5:f8:24:89:93:7c: 00:d4:bd:0f:41:72:7b:bd:bf:07:e7:f1:c8:6f:0e: d9:1d:02:ec:d9:cc:e3:36:9b:b2:fc:74:be:c2:ae: e4:be:89:71:78:01:77:de:1c:8b:92:33:40:7e:14: c9:3d:2b:c8:15:83:3a:c9:40:46:b5:ac:88:5f:c5: fa:54:05:a5:85:d3:94:ee:f3:26:d0:2a:76:c9:09: 86:96:17:0c:ca:9c:c6:b8:c8:c0:40:f4:9b:0d:4e: da:b9:55:d4:11:97:95:db:64:2a:06:46:9f:a3:e5: 6b:1a:25:47:95:c0:84:bd:02:41:b1:e8:ac:9b:16: e0:71:65:db:83:5f:c5:24:ac:58:ac:2f:4f:f0:15: 15:e7:89:10:77:4f:26:a7:b7:ce:9a:ac:8f:f1:92: 4a:e5:75:5f:42:40:be:ce:c3:a2:11:4f:7a:14:ed: 9d:3f:05:db:e2:2f:fd:a4:05:c3:05:22:ba:ea:05: e5:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:91:08:99:35:74:73:5F:2A:31:A9:84:9A:68:D3:C3:B9:B7:D4:3E X509v3 Authority Key Identifier: keyid:FB:3A:AF:E0:74:61:0C:85:85:4B:E7:50:82:EC:16:E6:0A:12:68:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8165e481-5a79-4868-a4e4-facfd922d813/0/FB3AAFE074610C85854BE75082EC16E60A126879.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB3AAFE074610C85854BE75082EC16E60A126879.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8165e481-5a79-4868-a4e4-facfd922d813/0/FB3AAFE074610C85854BE75082EC16E60A126879.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:e7:42:ef:33:8e:ed:5b:7c:c3:73:81:1a:8a:e2:bc:f5:92: a3:d7:c0:4c:e2:36:1d:d8:98:9a:54:98:40:f8:1b:17:4d:f0: 60:60:79:43:b9:f0:3a:1b:bd:12:64:03:d6:e9:45:c0:63:1d: 0f:a5:b7:8c:1d:7e:e5:be:60:ea:ff:01:4e:44:fa:62:b8:c6: 87:2d:0d:23:bf:8a:5f:b5:21:62:ab:c8:d5:d6:86:ce:8f:19: d6:1f:c7:4d:ec:d7:a5:84:96:dc:98:45:64:e4:ef:4f:8b:74: c5:26:41:57:95:2e:f1:86:c3:c5:2d:ea:08:61:07:1b:3e:61: 29:3a:16:32:07:ab:d4:22:41:29:d9:7d:7e:1c:fc:24:23:83: ee:14:bf:bd:bc:d2:08:b2:90:23:81:32:b3:34:a8:b1:40:10: a6:f0:ab:f9:bb:58:c9:aa:5a:a9:b1:95:c8:a2:b8:e8:44:2e: ad:c0:7d:72:4b:94:47:8e:49:53:02:9d:bb:60:ff:20:87:27: a2:69:dd:b6:c8:65:39:fd:b5:b3:1e:a0:c9:a6:b6:ef:f9:45: 0b:36:6e:c8:f6:fc:1a:a3:64:b3:8a:ef:e4:fb:db:53:56:e5: 5f:8d:62:ba:34:81:97:80:12:9e:60:08:be:90:c2:ba:40:5d: 42:11:bb:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY8fZsIcYTjIpSQXfoUDx3/ES2+kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkIzQUFGRTA3NDYxMEM4NTg1NEJFNzUwODJFQzE2RTYw QTEyNjg3OTAeFw0yNTEwMjAwMzM1NDNaFw0yNTEwMjMwNTMyNDNaMDMxMTAvBgNV BAMTKDQzOTEwODk5MzU3NDczNUYyQTMxQTk4NDlBNjhEM0MzQjlCN0Q0M0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDm0ddQQo7FmbHibIl45GeIkwEE qH1iqunmVgIHDod2pQPQSBzL/ewkRXwNuu0sqA4sj2Vobk3ySu3s0HpQFai4LyMS V6X4JImTfADUvQ9Bcnu9vwfn8chvDtkdAuzZzOM2m7L8dL7CruS+iXF4AXfeHIuS M0B+FMk9K8gVgzrJQEa1rIhfxfpUBaWF05Tu8ybQKnbJCYaWFwzKnMa4yMBA9JsN Ttq5VdQRl5XbZCoGRp+j5WsaJUeVwIS9AkGx6KybFuBxZduDX8UkrFisL0/wFRXn iRB3Tyant86arI/xkkrldV9CQL7Ow6IRT3oU7Z0/BdviL/2kBcMFIrrqBeXtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ5EImTV0c18qMamEmmjTw7m31D4wHwYDVR0j BBgwFoAU+zqv4HRhDIWFS+dQguwW5goSaHkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MTY1ZTQ4MS01YTc5LTQ4NjgtYTRlNC1mYWNmZDkyMmQ4MTMvMC9GQjNBQUZFMDc0 NjEwQzg1ODU0QkU3NTA4MkVDMTZFNjBBMTI2ODc5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkIzQUFGRTA3NDYxMEM4NTg1NEJFNzUwODJFQzE2RTYwQTEy Njg3OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODE2NWU0ODEtNWE3OS00ODY4LWE0 ZTQtZmFjZmQ5MjJkODEzLzAvRkIzQUFGRTA3NDYxMEM4NTg1NEJFNzUwODJFQzE2 RTYwQTEyNjg3OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALHnQu8zju1bfMNzgRqK4rz1kqPXwEziNh3Y mJpUmED4GxdN8GBgeUO58DobvRJkA9bpRcBjHQ+lt4wdfuW+YOr/AU5E+mK4xoct DSO/il+1IWKryNXWhs6PGdYfx03s16WEltyYRWTk70+LdMUmQVeVLvGGw8Ut6ghh Bxs+YSk6FjIHq9QiQSnZfX4c/CQjg+4Uv7280giykCOBMrM0qLFAEKbwq/m7WMmq WqmxlciiuOhELq3AfXJLlEeOSVMCnbtg/yCHJ6Jp3bbIZTn9tbMeoMmmtu/5RQs2 bsj2/BqjZLOK7+T721NW5V+NYro0gZeAEp5gCL6QwrpAXUIRu4o= -----END CERTIFICATE-----Generated at Mon Oct 20 15:31:33 2025 by rpki-client