$ rpki-client -vvf repo-rpki.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.mft File: FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.mft (raw, json) Hash identifier: uLfiUfQtwFjNJRYL+/se9rynwx8iEmrx+QVPuEUV9iY= Subject key identifier: B7:B2:6F:0D:36:B0:35:76:3C:F1:A2:5B:75:E8:E5:EE:B5:89:C8:0E Authority key identifier: FA:B0:81:FC:D8:6A:B0:F8:1D:41:C9:E5:FB:9C:3D:32:22:0F:48:CD Certificate issuer: /CN=FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD Certificate serial: 7ABE5204E3CC22601AB5A99A84C864548A197B9A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.mft Manifest number: F4 Signing time: Thu 21 Aug 2025 14:31:19 +0000 Manifest this update: Thu 21 Aug 2025 14:26:19 +0000 Manifest next update: Sun 24 Aug 2025 22:59:19 +0000 Files and hashes: 1: 3135372e31302e302e302f32332d3233203d3e20313532303739.roa (hash: LI/HMaoSlImx3bWiKBUR5SBmy9IHEOgEnYbWctfALp8=) 2: FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.crl (hash: Oxj3ZfzHHsoF/gAnCd83oxfEoJIzCMMYeDQxtyCUHls=) 3: 3135372e31302e302e302f32342d3234203d3e20313532303739.roa (hash: /rLqhw2hFwRMsfI5zGP3QkMBxOWlLSkauOe3xFxChRo=) 4: 3135372e31302e312e302f32342d3234203d3e20313532303739.roa (hash: 8mKHP2haWx9nDqWVpffr2HLwx0PW3MsCMnqlWHBgH8s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.crl rsync://repo-rpki.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 22:59:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:be:52:04:e3:cc:22:60:1a:b5:a9:9a:84:c8:64:54:8a:19:7b:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD Validity Not Before: Aug 21 14:26:19 2025 GMT Not After : Aug 24 22:59:19 2025 GMT Subject: CN=B7B26F0D36B035763CF1A25B75E8E5EEB589C80E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:24:55:b3:be:e5:19:7a:7d:f9:00:8e:43:8f: 19:ba:c4:bc:fd:31:41:1b:01:f3:2b:66:7c:ce:b7: 08:76:5f:27:4c:1a:1c:f9:98:56:e9:1f:41:aa:fd: d0:9c:07:e4:e1:b9:91:49:d6:39:b7:0c:84:7f:8a: 73:8c:f7:cd:01:21:3d:c9:ad:ab:db:75:b6:cc:f7: 99:cb:6b:e7:32:c5:6a:8e:0f:62:89:31:7c:cd:04: fc:56:e9:d2:9e:63:58:a2:38:cc:c0:cc:ff:86:56: b1:94:62:c0:d0:d8:a9:10:5d:70:77:a8:fa:64:1d: 92:2b:6b:d5:a9:a1:cb:9c:6c:ce:32:fc:a6:c2:fd: 0b:d1:6c:15:ef:30:ec:e5:78:13:36:6f:8a:b7:8f: 70:d6:d0:e1:b2:a0:a6:3e:ce:d5:26:23:95:d2:e8: 01:9a:03:85:6c:ef:b5:b2:bf:78:04:df:f4:c7:e8: c9:de:d2:15:cd:e4:57:07:a0:ea:2d:f3:43:a9:88: d3:33:4e:ee:fd:8a:3f:df:d3:da:a6:bc:11:69:03: 55:d2:d1:d3:32:b6:66:4d:06:42:e6:f7:52:f3:1c: 44:b5:4a:b4:47:a2:f8:8b:e3:32:c7:01:d8:78:49: 27:f9:66:96:9e:c3:6a:7a:17:b7:aa:e0:74:9d:cd: e7:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:B2:6F:0D:36:B0:35:76:3C:F1:A2:5B:75:E8:E5:EE:B5:89:C8:0E X509v3 Authority Key Identifier: keyid:FA:B0:81:FC:D8:6A:B0:F8:1D:41:C9:E5:FB:9C:3D:32:22:0F:48:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:9d:ce:c8:42:7d:0f:d5:d5:40:e2:5c:8f:c8:2a:1d:5c:91: da:c1:27:b5:23:1a:63:38:2a:2f:92:c5:d0:b9:44:15:c9:5d: cf:73:17:7b:48:b9:bf:61:32:f7:60:42:24:2a:1e:93:69:54: 94:5f:5d:c5:b6:95:04:5f:fb:f8:6c:90:50:4d:76:73:1c:ba: 69:e1:61:b6:21:63:96:fc:f8:83:1e:6d:e3:30:ca:1b:c5:23: fd:a7:6a:e2:81:a0:0a:5c:2d:f3:fd:34:0d:1f:14:f7:a2:a7: 70:ed:24:4f:cd:a5:f6:e0:fd:7e:86:4d:19:f1:dd:c2:97:59: 64:89:4a:6d:f5:2b:a7:93:1d:eb:e5:ee:d8:00:fa:3d:be:80: 58:2e:db:60:24:52:36:b4:b2:09:e5:04:5f:e2:52:e5:65:e5: 7c:87:39:20:0d:0c:89:e5:4c:61:22:c3:b3:88:23:67:16:1e: 77:7c:72:56:22:16:44:59:11:ad:10:76:a4:3e:3c:c5:16:17: ec:96:e1:f2:a8:57:70:94:53:d2:f4:75:e9:a7:e0:8b:b4:a9: ca:84:fd:35:12:56:b3:95:8d:8b:04:15:76:71:99:93:44:64: 66:bc:d6:ec:0b:8c:01:f8:5a:c4:c6:0e:99:10:2c:f0:19:d2: 40:a0:be:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUer5SBOPMImAatamahMhkVIoZe5owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkFCMDgxRkNEODZBQjBGODFENDFDOUU1RkI5QzNEMzIy MjBGNDhDRDAeFw0yNTA4MjExNDI2MTlaFw0yNTA4MjQyMjU5MTlaMDMxMTAvBgNV BAMTKEI3QjI2RjBEMzZCMDM1NzYzQ0YxQTI1Qjc1RThFNUVFQjU4OUM4MEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgJFWzvuUZen35AI5Djxm6xLz9 MUEbAfMrZnzOtwh2XydMGhz5mFbpH0Gq/dCcB+ThuZFJ1jm3DIR/inOM980BIT3J ravbdbbM95nLa+cyxWqOD2KJMXzNBPxW6dKeY1iiOMzAzP+GVrGUYsDQ2KkQXXB3 qPpkHZIra9WpocucbM4y/KbC/QvRbBXvMOzleBM2b4q3j3DW0OGyoKY+ztUmI5XS 6AGaA4Vs77Wyv3gE3/TH6Mne0hXN5FcHoOot80OpiNMzTu79ij/f09qmvBFpA1XS 0dMytmZNBkLm91LzHES1SrRHoviL4zLHAdh4SSf5Zpaew2p6F7eq4HSdzedBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt7JvDTawNXY88aJbdejl7rWJyA4wHwYDVR0j BBgwFoAU+rCB/NhqsPgdQcnl+5w9MiIPSM0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OTRkMWY2Mi04NDg4LTQwODYtOGQ0Yy1mMmRlNWM3NmRhM2QvMC9GQUIwODFGQ0Q4 NkFCMEY4MUQ0MUM5RTVGQjlDM0QzMjIyMEY0OENELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkFCMDgxRkNEODZBQjBGODFENDFDOUU1RkI5QzNEMzIyMjBG NDhDRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTk0ZDFmNjItODQ4OC00MDg2LThk NGMtZjJkZTVjNzZkYTNkLzAvRkFCMDgxRkNEODZBQjBGODFENDFDOUU1RkI5QzNE MzIyMjBGNDhDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACCdzshCfQ/V1UDiXI/IKh1ckdrBJ7UjGmM4 Ki+SxdC5RBXJXc9zF3tIub9hMvdgQiQqHpNpVJRfXcW2lQRf+/hskFBNdnMcumnh YbYhY5b8+IMebeMwyhvFI/2nauKBoApcLfP9NA0fFPeip3DtJE/Npfbg/X6GTRnx 3cKXWWSJSm31K6eTHevl7tgA+j2+gFgu22AkUja0sgnlBF/iUuVl5XyHOSANDInl TGEiw7OII2cWHnd8clYiFkRZEa0QdqQ+PMUWF+yW4fKoV3CUU9L0demn4Iu0qcqE /TUSVrOVjYsEFXZxmZNEZGa81uwLjAH4WsTGDpkQLPAZ0kCgvt8= -----END CERTIFICATE-----Generated at Sat Aug 23 19:48:51 2025 by rpki-client