$ rpki-client -vvf repo-rpki.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.mft File: FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.mft (raw, json) Hash identifier: x/cSYUckkvZmerGkQ5U2grphcwGyzximVdL5FVYYxBA= Subject key identifier: 6D:44:ED:3A:8F:47:72:FE:66:4A:CF:D0:D2:BD:EE:AA:E4:BE:AE:AB Authority key identifier: FB:3F:CC:1A:69:B1:BD:92:D6:A3:19:D7:FD:82:0E:EE:CE:67:42:45 Certificate issuer: /CN=FB3FCC1A69B1BD92D6A319D7FD820EEECE674245 Certificate serial: 6311A643EA0C63BF3F0C41C8718CB3136531CA9C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.mft Manifest number: 0397 Signing time: Mon 20 Oct 2025 21:31:26 +0000 Manifest this update: Mon 20 Oct 2025 21:26:26 +0000 Manifest next update: Fri 24 Oct 2025 08:40:26 +0000 Files and hashes: 1: 3130332e3136342e3137302e302f32332d3234203d3e203137393935.roa (hash: KS9w1B5P8a3jbKsmFzr3W5flDVbhE11L0B9cjjDxpnE=) 2: FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.crl (hash: SbzevneBh3lL5ocKYcfRDvZ8aj1YvCdmjMVrl7i+aLg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.crl rsync://repo-rpki.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 08:40:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:11:a6:43:ea:0c:63:bf:3f:0c:41:c8:71:8c:b3:13:65:31:ca:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB3FCC1A69B1BD92D6A319D7FD820EEECE674245 Validity Not Before: Oct 20 21:26:26 2025 GMT Not After : Oct 24 08:40:26 2025 GMT Subject: CN=6D44ED3A8F4772FE664ACFD0D2BDEEAAE4BEAEAB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a4:1c:89:31:6b:14:0b:79:78:6c:c8:1d:3a: 50:dd:c7:30:89:01:df:f6:fe:f6:dd:55:04:99:a8: fd:fc:fe:89:7d:0c:23:aa:c9:66:1f:e8:82:93:54: d1:9b:36:1f:36:50:2f:ff:32:25:f6:56:b5:2d:c3: 28:35:0b:df:77:35:0d:e6:70:19:0e:b1:eb:12:84: e6:00:1d:41:28:91:f8:b1:1a:c1:c2:3d:fc:8d:80: 8a:98:db:2b:79:7a:9c:00:f5:eb:79:47:41:70:86: 73:e5:6f:5a:ba:cb:5a:a0:54:da:5a:93:ff:95:c8: 5a:67:69:6a:20:33:d0:66:b3:22:c2:78:8a:fa:1d: 39:a5:bf:ff:44:07:6d:1e:51:67:25:16:fd:43:59: 45:70:cd:97:b4:64:1d:7d:dd:36:56:56:d4:3a:42: ac:9b:6a:f9:a8:ff:9d:38:01:14:26:ac:81:c5:0c: 46:5f:7a:16:fb:e5:9f:28:c0:7b:05:65:3e:8f:d7: 1f:a8:f2:99:1e:7b:ee:de:c2:ac:a8:2d:78:ee:30: d4:a3:b8:41:31:a1:cb:07:0c:f8:6b:d6:41:8d:a3: 19:93:1f:b6:d9:af:70:09:b0:53:f6:ce:02:6c:8a: 84:72:28:f9:1c:d8:d8:42:c1:88:44:7a:8d:ff:91: fa:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:44:ED:3A:8F:47:72:FE:66:4A:CF:D0:D2:BD:EE:AA:E4:BE:AE:AB X509v3 Authority Key Identifier: keyid:FB:3F:CC:1A:69:B1:BD:92:D6:A3:19:D7:FD:82:0E:EE:CE:67:42:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:02:7d:99:98:e2:22:40:e9:95:99:e6:de:ae:25:5e:2d:36: 44:0c:df:9e:27:e8:1e:e9:75:83:53:85:a7:84:d2:7c:7f:0b: ff:67:2f:f1:7f:52:9b:25:64:b7:71:e3:f8:b0:e8:6c:db:07: 71:e4:a2:64:a0:6a:80:cb:3d:22:d0:d5:55:33:8d:15:f8:55: 01:1b:be:e1:2e:a3:b0:8b:80:79:d2:e2:ca:e8:30:f4:82:5c: db:e0:6b:70:24:b3:e8:be:f9:cd:41:10:74:af:6f:3e:eb:9b: 7f:25:56:5b:d5:fe:21:ea:bb:f1:f0:14:70:91:c4:54:1d:5a: 93:aa:1b:fe:b0:30:1a:15:23:ea:4e:25:66:22:a4:fb:80:8f: b4:2c:e1:7a:32:16:c6:b1:d1:93:39:03:4a:23:8d:e7:10:ef: 47:21:dc:3e:8c:3a:d8:e8:44:c0:9e:fb:a5:f0:44:c4:9f:63: 09:41:2b:db:7e:0a:95:d0:ee:97:0f:31:e1:f1:8d:09:7e:ce: 51:33:f0:72:86:b9:30:b3:39:17:22:9e:b8:9f:f9:0c:36:da: 7f:44:9a:36:64:f7:19:52:d5:1e:a7:29:e4:64:ac:21:eb:61: b8:52:c8:69:0f:10:ce:7c:a6:a0:54:a0:d3:b9:35:97:bb:70: 0d:24:5b:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYxGmQ+oMY78/DEHIcYyzE2UxypwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkIzRkNDMUE2OUIxQkQ5MkQ2QTMxOUQ3RkQ4MjBFRUVD RTY3NDI0NTAeFw0yNTEwMjAyMTI2MjZaFw0yNTEwMjQwODQwMjZaMDMxMTAvBgNV BAMTKDZENDRFRDNBOEY0NzcyRkU2NjRBQ0ZEMEQyQkRFRUFBRTRCRUFFQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2pByJMWsUC3l4bMgdOlDdxzCJ Ad/2/vbdVQSZqP38/ol9DCOqyWYf6IKTVNGbNh82UC//MiX2VrUtwyg1C993NQ3m cBkOsesShOYAHUEokfixGsHCPfyNgIqY2yt5epwA9et5R0FwhnPlb1q6y1qgVNpa k/+VyFpnaWogM9BmsyLCeIr6HTmlv/9EB20eUWclFv1DWUVwzZe0ZB193TZWVtQ6 Qqybavmo/504ARQmrIHFDEZfehb75Z8owHsFZT6P1x+o8pkee+7ewqyoLXjuMNSj uEExocsHDPhr1kGNoxmTH7bZr3AJsFP2zgJsioRyKPkc2NhCwYhEeo3/kfqfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbUTtOo9Hcv5mSs/Q0r3uquS+rqswHwYDVR0j BBgwFoAU+z/MGmmxvZLWoxnX/YIO7s5nQkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZDg3YmVlZC02MzMwLTRmMzMtOTEwNS04NzcyMmNkZjJkZDAvMC9GQjNGQ0MxQTY5 QjFCRDkyRDZBMzE5RDdGRDgyMEVFRUNFNjc0MjQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkIzRkNDMUE2OUIxQkQ5MkQ2QTMxOUQ3RkQ4MjBFRUVDRTY3 NDI0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWQ4N2JlZWQtNjMzMC00ZjMzLTkx MDUtODc3MjJjZGYyZGQwLzAvRkIzRkNDMUE2OUIxQkQ5MkQ2QTMxOUQ3RkQ4MjBF RUVDRTY3NDI0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADECfZmY4iJA6ZWZ5t6uJV4tNkQM354n6B7p dYNThaeE0nx/C/9nL/F/UpslZLdx4/iw6GzbB3HkomSgaoDLPSLQ1VUzjRX4VQEb vuEuo7CLgHnS4sroMPSCXNvga3Aks+i++c1BEHSvbz7rm38lVlvV/iHqu/HwFHCR xFQdWpOqG/6wMBoVI+pOJWYipPuAj7Qs4XoyFsax0ZM5A0ojjecQ70ch3D6MOtjo RMCe+6XwRMSfYwlBK9t+CpXQ7pcPMeHxjQl+zlEz8HKGuTCzORcinrif+Qw22n9E mjZk9xlS1R6nKeRkrCHrYbhSyGkPEM58pqBUoNO5NZe7cA0kW6k= -----END CERTIFICATE-----Generated at Tue Oct 21 07:26:17 2025 by rpki-client