$ rpki-client -vvf repo-rpki.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.mft File: FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.mft (raw, json) Hash identifier: a8d9HCvItV8KGkOqxvIdM53SrWEZkiotSEWFueVlac4= Subject key identifier: 8C:6F:91:4E:99:6D:81:FD:25:58:99:33:58:6C:10:79:DA:E8:AE:7B Authority key identifier: FA:B0:81:FC:D8:6A:B0:F8:1D:41:C9:E5:FB:9C:3D:32:22:0F:48:CD Certificate issuer: /CN=FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD Certificate serial: 3D3FB8EE1B823536293F90DD2D5B0447BA1639D3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.mft Manifest number: DD Signing time: Mon 30 Jun 2025 05:32:14 +0000 Manifest this update: Mon 30 Jun 2025 05:27:14 +0000 Manifest next update: Thu 03 Jul 2025 15:51:14 +0000 Files and hashes: 1: FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.crl (hash: vAjKwbVhEhjDY9hzvA2naWwghBVMS0VxripZCyRveBo=) 2: 3135372e31302e302e302f32332d3233203d3e20313532303739.roa (hash: LI/HMaoSlImx3bWiKBUR5SBmy9IHEOgEnYbWctfALp8=) 3: 3135372e31302e302e302f32342d3234203d3e20313532303739.roa (hash: /rLqhw2hFwRMsfI5zGP3QkMBxOWlLSkauOe3xFxChRo=) 4: 3135372e31302e312e302f32342d3234203d3e20313532303739.roa (hash: 8mKHP2haWx9nDqWVpffr2HLwx0PW3MsCMnqlWHBgH8s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.crl rsync://repo-rpki.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 12:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:3f:b8:ee:1b:82:35:36:29:3f:90:dd:2d:5b:04:47:ba:16:39:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD Validity Not Before: Jun 30 05:27:14 2025 GMT Not After : Jul 3 15:51:14 2025 GMT Subject: CN=8C6F914E996D81FD25589933586C1079DAE8AE7B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:0b:b6:45:55:c9:f8:7f:06:f0:23:e8:38:29: 2b:ed:80:0e:9d:dc:e4:f6:89:b6:12:cb:f9:74:f3: 5e:21:cf:e6:45:1a:e2:6c:55:89:0e:7c:63:cc:54: 2b:0b:42:9c:77:2d:7f:10:b1:48:8c:5f:51:f5:43: 0a:12:bb:a6:e1:b5:e9:8a:64:ba:d6:4d:c8:0d:ba: 38:02:0d:8f:bd:24:13:9e:a6:cb:0a:23:3c:42:36: 65:ab:37:1b:10:e6:12:fd:a6:62:60:2f:05:f6:d2: 55:a0:5f:24:40:7a:9b:10:d9:a9:15:cc:31:96:bc: a1:bc:38:26:1c:06:aa:ca:1c:3b:47:49:13:9e:13: a2:09:14:32:11:b0:c8:f4:f6:14:c8:6b:f9:4d:39: 49:3f:f3:77:66:e0:7a:17:12:ae:c8:ad:0a:ca:25: 2b:4e:43:50:7f:ad:b8:72:52:68:50:ac:cc:0f:2f: 19:fc:77:60:c8:d5:8c:e0:bd:16:3c:a8:59:6f:d5: 2e:ee:80:e7:b2:dc:49:98:b1:9b:1a:32:d7:c0:76: 8a:e4:d0:7e:32:90:45:bd:30:21:e8:67:d2:cd:5f: 84:4d:23:ba:ae:30:fb:17:bd:e0:39:d2:1f:fb:ea: 83:21:02:ad:3f:cc:4e:88:a1:97:da:bd:61:c2:95: 32:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:6F:91:4E:99:6D:81:FD:25:58:99:33:58:6C:10:79:DA:E8:AE:7B X509v3 Authority Key Identifier: keyid:FA:B0:81:FC:D8:6A:B0:F8:1D:41:C9:E5:FB:9C:3D:32:22:0F:48:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:35:c2:36:2d:85:d4:75:00:3d:b1:25:b8:2a:51:10:ca:04: a2:44:1a:23:32:19:83:0a:af:fb:aa:f5:9a:40:a0:1b:73:55: 78:69:72:a9:96:80:61:d7:ff:ef:9a:23:57:ee:a1:31:6f:14: d9:16:db:1c:e7:79:d7:d1:20:7e:9a:95:21:03:06:00:65:b3: c2:d0:ce:b3:df:52:d7:36:5c:59:8c:2d:85:a0:13:5f:d3:c4: 78:2a:bf:0b:20:3b:66:d0:b7:a3:41:7f:67:11:af:e8:3d:55: 80:dd:b2:ef:01:a0:4c:df:c9:dd:b7:9d:05:c0:e8:bf:bd:b0: b6:d4:f7:f4:3f:5b:6f:51:32:28:79:67:58:64:27:1f:99:ab: b1:60:2c:b6:c7:73:e2:9e:dc:2d:fc:dd:d7:29:ba:25:7b:a5: 2b:d7:4a:69:ec:e1:7e:14:ed:e4:1f:22:84:7c:4d:13:ca:21: 3b:9a:cd:4b:3b:c0:89:ab:e0:ba:25:f0:d4:f5:e0:f1:cc:f9: 86:aa:bd:cb:8e:a2:8d:8b:b9:2b:43:4f:2e:c7:ff:7d:5e:71: ec:65:5b:79:d0:a2:33:08:74:53:d3:e9:e6:3c:ca:7b:8f:90: 48:3c:5b:47:fa:02:47:e4:ea:77:a6:75:b8:9e:2b:6f:14:c2: f7:03:e4:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPT+47huCNTYpP5DdLVsER7oWOdMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkFCMDgxRkNEODZBQjBGODFENDFDOUU1RkI5QzNEMzIy MjBGNDhDRDAeFw0yNTA2MzAwNTI3MTRaFw0yNTA3MDMxNTUxMTRaMDMxMTAvBgNV BAMTKDhDNkY5MTRFOTk2RDgxRkQyNTU4OTkzMzU4NkMxMDc5REFFOEFFN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChC7ZFVcn4fwbwI+g4KSvtgA6d 3OT2ibYSy/l0814hz+ZFGuJsVYkOfGPMVCsLQpx3LX8QsUiMX1H1QwoSu6bhtemK ZLrWTcgNujgCDY+9JBOepssKIzxCNmWrNxsQ5hL9pmJgLwX20lWgXyRAepsQ2akV zDGWvKG8OCYcBqrKHDtHSROeE6IJFDIRsMj09hTIa/lNOUk/83dm4HoXEq7IrQrK JStOQ1B/rbhyUmhQrMwPLxn8d2DI1YzgvRY8qFlv1S7ugOey3EmYsZsaMtfAdork 0H4ykEW9MCHoZ9LNX4RNI7quMPsXveA50h/76oMhAq0/zE6IoZfavWHClTLtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjG+RTpltgf0lWJkzWGwQedrornswHwYDVR0j BBgwFoAU+rCB/NhqsPgdQcnl+5w9MiIPSM0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OTRkMWY2Mi04NDg4LTQwODYtOGQ0Yy1mMmRlNWM3NmRhM2QvMC9GQUIwODFGQ0Q4 NkFCMEY4MUQ0MUM5RTVGQjlDM0QzMjIyMEY0OENELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkFCMDgxRkNEODZBQjBGODFENDFDOUU1RkI5QzNEMzIyMjBG NDhDRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTk0ZDFmNjItODQ4OC00MDg2LThk NGMtZjJkZTVjNzZkYTNkLzAvRkFCMDgxRkNEODZBQjBGODFENDFDOUU1RkI5QzNE MzIyMjBGNDhDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADM1wjYthdR1AD2xJbgqURDKBKJEGiMyGYMK r/uq9ZpAoBtzVXhpcqmWgGHX/++aI1fuoTFvFNkW2xznedfRIH6alSEDBgBls8LQ zrPfUtc2XFmMLYWgE1/TxHgqvwsgO2bQt6NBf2cRr+g9VYDdsu8BoEzfyd23nQXA 6L+9sLbU9/Q/W29RMih5Z1hkJx+Zq7FgLLbHc+Ke3C383dcpuiV7pSvXSmns4X4U 7eQfIoR8TRPKITuazUs7wImr4Lol8NT14PHM+YaqvcuOoo2LuStDTy7H/31ecexl W3nQojMIdFPT6eY8ynuPkEg8W0f6Akfk6nemdbieK28UwvcD5IY= -----END CERTIFICATE-----Generated at Mon Jun 30 08:07:19 2025 by rpki-client