$ rpki-client -vvf repo-rpki.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.mft File: FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.mft (raw, json) Hash identifier: Qpa8hQnL3Rme+SC3yEbXqzGIy5/zK4fY6iSqCLfsVtA= Subject key identifier: 14:28:30:26:91:3B:73:9B:3F:04:DD:FA:E7:1B:92:26:E6:27:E4:86 Authority key identifier: FB:3F:CC:1A:69:B1:BD:92:D6:A3:19:D7:FD:82:0E:EE:CE:67:42:45 Certificate issuer: /CN=FB3FCC1A69B1BD92D6A319D7FD820EEECE674245 Certificate serial: 350A1F4ED2F717D892FF1D11689CD9F318FD6A53 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.mft Manifest number: 037D Signing time: Fri 22 Aug 2025 13:21:25 +0000 Manifest this update: Fri 22 Aug 2025 13:16:25 +0000 Manifest next update: Mon 25 Aug 2025 18:41:25 +0000 Files and hashes: 1: 3130332e3136342e3137302e302f32332d3234203d3e203137393935.roa (hash: KS9w1B5P8a3jbKsmFzr3W5flDVbhE11L0B9cjjDxpnE=) 2: FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.crl (hash: BGiCdxvUX41E6+leiLzKyUUBKINkbGqLlxhT4jzDnH0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.crl rsync://repo-rpki.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 18:41:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:0a:1f:4e:d2:f7:17:d8:92:ff:1d:11:68:9c:d9:f3:18:fd:6a:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB3FCC1A69B1BD92D6A319D7FD820EEECE674245 Validity Not Before: Aug 22 13:16:25 2025 GMT Not After : Aug 25 18:41:25 2025 GMT Subject: CN=14283026913B739B3F04DDFAE71B9226E627E486 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:6a:75:81:d2:f8:4f:45:c6:f4:24:1c:a6:51: 5f:a1:c0:5e:41:19:8b:cb:c7:b3:3e:ab:59:87:fd: 96:65:4e:9c:d8:c4:92:e6:99:18:02:a1:bc:97:fb: 05:e9:c5:56:b3:c6:c6:46:94:d3:79:97:a9:36:7b: ae:e7:c5:12:63:81:62:74:6b:64:f3:1d:2f:11:cc: 5a:47:97:c7:0a:b5:70:0e:3f:34:9b:31:2d:ae:81: e0:ed:22:89:4f:ff:e7:d2:74:fa:a6:fe:49:51:f2: b7:6b:18:cf:67:e9:a6:e1:d7:8a:56:1b:ae:02:48: 86:96:a5:e7:d0:47:83:b0:09:91:45:5d:fa:37:16: 38:38:56:42:12:35:f7:6e:72:18:e2:e1:3e:57:62: 79:9c:be:54:cb:0b:26:06:22:fa:3a:70:8c:51:67: 83:97:ac:0b:0c:53:34:07:da:da:66:d2:ac:d1:a9: 03:c1:5b:78:30:7a:df:0f:fd:1f:62:aa:de:8e:36: 9d:ab:71:e7:2c:16:9d:c7:2b:b3:10:61:2a:aa:fe: 94:77:56:e0:36:73:cb:6c:b7:cd:64:65:b9:d7:7b: 52:c7:3f:b4:58:c3:ad:d2:bd:4a:08:b5:0e:21:71: 7f:4e:e1:2c:9a:ca:5f:aa:7b:05:4d:d4:12:2d:f5: 3a:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:28:30:26:91:3B:73:9B:3F:04:DD:FA:E7:1B:92:26:E6:27:E4:86 X509v3 Authority Key Identifier: keyid:FB:3F:CC:1A:69:B1:BD:92:D6:A3:19:D7:FD:82:0E:EE:CE:67:42:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:09:69:1f:c7:74:85:64:ad:4c:a2:aa:0a:1a:25:7a:33:20: 0f:95:2f:0e:e4:c5:d2:0d:4a:f4:5a:ed:a5:6b:2c:72:21:af: 2b:23:c8:aa:05:0b:22:59:b5:87:db:59:5e:57:38:49:75:ab: f3:b8:b8:d2:51:85:c9:7c:a7:50:93:cc:ea:73:6e:ab:64:95: c3:f1:82:19:97:ab:d0:59:e5:d9:d2:f1:70:9a:75:2a:3f:6f: 0f:cc:10:fa:00:16:ff:48:53:41:87:7c:e8:8a:ad:ea:1a:27: c1:ee:f6:51:9f:d2:6f:13:dc:7a:a1:7a:52:19:77:7d:2f:55: 29:77:5d:75:ad:ae:a1:e8:d1:08:d9:5e:53:1b:02:10:f5:89: fd:94:f7:b9:0d:00:ff:5b:06:42:bf:f5:e0:6c:c1:61:ac:17: 26:67:3c:5c:19:3d:97:be:e8:48:cd:50:7c:a2:5c:4b:d7:ae: 78:c6:db:e1:06:3b:0e:ac:a5:7f:d9:e9:d2:bc:60:2b:58:0c: d7:11:33:98:6e:35:fc:6b:35:20:b1:6c:12:91:a1:3c:36:db: 7d:03:66:80:7e:06:b5:31:a9:2f:43:63:68:90:1a:01:9f:d5: 5d:7e:03:9d:71:f6:24:e0:f7:c8:80:72:d9:67:7d:c7:ce:32: 06:b0:bb:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNQofTtL3F9iS/x0RaJzZ8xj9alMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkIzRkNDMUE2OUIxQkQ5MkQ2QTMxOUQ3RkQ4MjBFRUVD RTY3NDI0NTAeFw0yNTA4MjIxMzE2MjVaFw0yNTA4MjUxODQxMjVaMDMxMTAvBgNV BAMTKDE0MjgzMDI2OTEzQjczOUIzRjA0RERGQUU3MUI5MjI2RTYyN0U0ODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIanWB0vhPRcb0JBymUV+hwF5B GYvLx7M+q1mH/ZZlTpzYxJLmmRgCobyX+wXpxVazxsZGlNN5l6k2e67nxRJjgWJ0 a2TzHS8RzFpHl8cKtXAOPzSbMS2ugeDtIolP/+fSdPqm/klR8rdrGM9n6abh14pW G64CSIaWpefQR4OwCZFFXfo3Fjg4VkISNfduchji4T5XYnmcvlTLCyYGIvo6cIxR Z4OXrAsMUzQH2tpm0qzRqQPBW3gwet8P/R9iqt6ONp2rcecsFp3HK7MQYSqq/pR3 VuA2c8tst81kZbnXe1LHP7RYw63SvUoItQ4hcX9O4Syayl+qewVN1BIt9ToDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFCgwJpE7c5s/BN365xuSJuYn5IYwHwYDVR0j BBgwFoAU+z/MGmmxvZLWoxnX/YIO7s5nQkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZDg3YmVlZC02MzMwLTRmMzMtOTEwNS04NzcyMmNkZjJkZDAvMC9GQjNGQ0MxQTY5 QjFCRDkyRDZBMzE5RDdGRDgyMEVFRUNFNjc0MjQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkIzRkNDMUE2OUIxQkQ5MkQ2QTMxOUQ3RkQ4MjBFRUVDRTY3 NDI0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWQ4N2JlZWQtNjMzMC00ZjMzLTkx MDUtODc3MjJjZGYyZGQwLzAvRkIzRkNDMUE2OUIxQkQ5MkQ2QTMxOUQ3RkQ4MjBF RUVDRTY3NDI0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABEJaR/HdIVkrUyiqgoaJXozIA+VLw7kxdIN SvRa7aVrLHIhrysjyKoFCyJZtYfbWV5XOEl1q/O4uNJRhcl8p1CTzOpzbqtklcPx ghmXq9BZ5dnS8XCadSo/bw/MEPoAFv9IU0GHfOiKreoaJ8Hu9lGf0m8T3HqhelIZ d30vVSl3XXWtrqHo0QjZXlMbAhD1if2U97kNAP9bBkK/9eBswWGsFyZnPFwZPZe+ 6EjNUHyiXEvXrnjG2+EGOw6spX/Z6dK8YCtYDNcRM5huNfxrNSCxbBKRoTw2230D ZoB+BrUxqS9DY2iQGgGf1V1+A51x9iTg98iActlnfcfOMgawu1o= -----END CERTIFICATE-----Generated at Sat Aug 23 12:34:28 2025 by rpki-client