$ rpki-client -vvf repo-rpki.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.mft File: FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.mft (raw, json) Hash identifier: jL0PgLk9PK6gomLpjPL4TmETWciC4hUD+DOkBFhvCZk= Subject key identifier: 50:69:7B:EC:83:D4:53:13:CB:8B:D7:FA:86:78:85:01:9E:A3:2B:D1 Authority key identifier: FA:B0:81:FC:D8:6A:B0:F8:1D:41:C9:E5:FB:9C:3D:32:22:0F:48:CD Certificate issuer: /CN=FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD Certificate serial: 3F718FDB0C946665BFEE53AF22070E843A930B22 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.mft Manifest number: 010E Signing time: Sun 19 Oct 2025 23:01:20 +0000 Manifest this update: Sun 19 Oct 2025 22:56:20 +0000 Manifest next update: Thu 23 Oct 2025 10:41:20 +0000 Files and hashes: 1: FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.crl (hash: sYfg6ptNn3HOm2nyBglkQRaz4yfoKJdpvZgA5EO/jVI=) 2: 3135372e31302e302e302f32332d3233203d3e20313532303739.roa (hash: LI/HMaoSlImx3bWiKBUR5SBmy9IHEOgEnYbWctfALp8=) 3: 3135372e31302e302e302f32342d3234203d3e20313532303739.roa (hash: /rLqhw2hFwRMsfI5zGP3QkMBxOWlLSkauOe3xFxChRo=) 4: 3135372e31302e312e302f32342d3234203d3e20313532303739.roa (hash: 8mKHP2haWx9nDqWVpffr2HLwx0PW3MsCMnqlWHBgH8s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.crl rsync://repo-rpki.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 03:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:71:8f:db:0c:94:66:65:bf:ee:53:af:22:07:0e:84:3a:93:0b:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD Validity Not Before: Oct 19 22:56:20 2025 GMT Not After : Oct 23 10:41:20 2025 GMT Subject: CN=50697BEC83D45313CB8BD7FA867885019EA32BD1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d0:e6:92:73:cc:58:7d:cb:f4:40:27:70:6b: 4c:d7:83:90:f5:0f:be:86:da:fd:49:46:97:4a:82: 3c:44:00:cb:bc:da:cb:c5:8b:37:e3:4e:5c:93:bf: a6:76:3d:44:b5:13:d5:68:7d:a7:e7:b7:c8:42:ca: 3f:e5:e4:14:39:82:9b:f3:c4:c8:b7:42:20:4e:c2: e6:e9:9d:45:9b:fd:89:61:e0:a0:af:f8:8d:05:3f: f8:7b:8c:49:9a:ed:86:ed:6e:ff:0c:6f:7d:1c:bf: dc:0d:76:a9:cd:34:98:ae:f9:04:80:eb:dc:91:b2: ec:84:02:75:fc:e6:e1:1b:70:13:4e:ea:12:db:26: 5b:88:3f:00:07:02:15:cb:ae:03:c0:f3:b7:10:d1: 54:9d:ac:7d:f8:67:c7:26:b8:c2:b8:c0:1a:4f:cf: 92:9c:07:ce:81:eb:26:d7:48:02:c8:e9:9b:4e:0a: d3:f0:7a:ca:e9:32:5b:7c:06:44:86:26:9d:31:51: fc:bb:58:d9:78:56:00:ea:8f:eb:7a:08:62:9e:7d: b7:ac:99:23:a0:a1:11:25:a7:b3:47:dc:4d:d6:c7: b4:48:35:3a:0a:1f:34:23:4e:04:b4:89:6c:4b:75: 29:03:df:ae:ea:16:e0:2c:15:0b:7a:0c:65:1c:51: 9c:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:69:7B:EC:83:D4:53:13:CB:8B:D7:FA:86:78:85:01:9E:A3:2B:D1 X509v3 Authority Key Identifier: keyid:FA:B0:81:FC:D8:6A:B0:F8:1D:41:C9:E5:FB:9C:3D:32:22:0F:48:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:9b:4d:53:6a:3d:94:4f:3a:50:9e:63:ed:5c:12:18:19:61: 62:0e:d4:7c:05:f1:03:9d:2d:9c:b6:9b:83:e7:e7:e6:f1:3e: bb:b2:ab:62:a2:6d:3e:8c:82:f1:9b:87:d8:3f:6f:5e:87:1c: ad:a8:1a:f3:16:75:f3:96:c1:cd:fc:71:5a:1e:cc:75:c9:31: bb:13:71:27:bf:4c:f8:51:9c:30:ca:92:f0:c0:80:59:d2:56: f2:a0:62:1e:24:43:54:af:c9:23:86:b3:00:63:d0:ca:7e:9a: 6e:2c:91:5b:19:a6:60:13:42:59:27:a3:d2:1a:e3:58:c6:3a: 70:af:2e:b9:4b:34:d9:20:24:4e:e3:75:54:a1:ed:11:6e:1e: 07:fc:09:df:dc:f9:75:57:cd:1e:48:8f:79:73:d4:7a:e8:35: 2b:56:88:ef:3e:50:d5:95:59:4a:7c:39:01:1f:81:4a:35:3a: 47:81:07:d1:df:99:5c:a3:0a:4f:c0:4b:31:b4:9f:c7:23:71: 82:e0:26:d8:ff:54:2b:79:49:fc:5a:dd:2c:81:f1:ee:d5:fa: 9c:51:7d:b5:f5:f4:5c:19:0e:72:e6:15:ca:4c:87:11:d9:15: b8:d9:68:07:b0:d1:68:ee:7d:37:09:41:fa:36:ce:31:49:72: eb:2e:97:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP3GP2wyUZmW/7lOvIgcOhDqTCyIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkFCMDgxRkNEODZBQjBGODFENDFDOUU1RkI5QzNEMzIy MjBGNDhDRDAeFw0yNTEwMTkyMjU2MjBaFw0yNTEwMjMxMDQxMjBaMDMxMTAvBgNV BAMTKDUwNjk3QkVDODNENDUzMTNDQjhCRDdGQTg2Nzg4NTAxOUVBMzJCRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo0OaSc8xYfcv0QCdwa0zXg5D1 D76G2v1JRpdKgjxEAMu82svFizfjTlyTv6Z2PUS1E9Vofafnt8hCyj/l5BQ5gpvz xMi3QiBOwubpnUWb/Ylh4KCv+I0FP/h7jEma7Ybtbv8Mb30cv9wNdqnNNJiu+QSA 69yRsuyEAnX85uEbcBNO6hLbJluIPwAHAhXLrgPA87cQ0VSdrH34Z8cmuMK4wBpP z5KcB86B6ybXSALI6ZtOCtPwesrpMlt8BkSGJp0xUfy7WNl4VgDqj+t6CGKefbes mSOgoRElp7NH3E3Wx7RINToKHzQjTgS0iWxLdSkD367qFuAsFQt6DGUcUZyZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUGl77IPUUxPLi9f6hniFAZ6jK9EwHwYDVR0j BBgwFoAU+rCB/NhqsPgdQcnl+5w9MiIPSM0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OTRkMWY2Mi04NDg4LTQwODYtOGQ0Yy1mMmRlNWM3NmRhM2QvMC9GQUIwODFGQ0Q4 NkFCMEY4MUQ0MUM5RTVGQjlDM0QzMjIyMEY0OENELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkFCMDgxRkNEODZBQjBGODFENDFDOUU1RkI5QzNEMzIyMjBG NDhDRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTk0ZDFmNjItODQ4OC00MDg2LThk NGMtZjJkZTVjNzZkYTNkLzAvRkFCMDgxRkNEODZBQjBGODFENDFDOUU1RkI5QzNE MzIyMjBGNDhDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAWbTVNqPZRPOlCeY+1cEhgZYWIO1HwF8QOd LZy2m4Pn5+bxPruyq2KibT6MgvGbh9g/b16HHK2oGvMWdfOWwc38cVoezHXJMbsT cSe/TPhRnDDKkvDAgFnSVvKgYh4kQ1SvySOGswBj0Mp+mm4skVsZpmATQlkno9Ia 41jGOnCvLrlLNNkgJE7jdVSh7RFuHgf8Cd/c+XVXzR5Ij3lz1HroNStWiO8+UNWV WUp8OQEfgUo1OkeBB9HfmVyjCk/ASzG0n8cjcYLgJtj/VCt5Sfxa3SyB8e7V+pxR fbX19FwZDnLmFcpMhxHZFbjZaAew0WjufTcJQfo2zjFJcusulys= -----END CERTIFICATE-----Generated at Mon Oct 20 21:19:33 2025 by rpki-client