$ rpki-client -vvf repo-rpki.idnic.net/repo/b32d7627-47d7-4fd0-ae0f-63b873fe2c88/0/FBF979FD5B6D1AF690338C406BB657208D98F3DE.mft File: FBF979FD5B6D1AF690338C406BB657208D98F3DE.mft (raw, json) Hash identifier: DUdc7O1/ulbcaHmryPMWmyI+fYTtZ6Cj8ZDkOFrwAF0= Subject key identifier: 61:E4:1A:23:C0:A0:2C:9F:AA:15:3B:7C:95:73:86:BB:60:53:B0:B9 Authority key identifier: FB:F9:79:FD:5B:6D:1A:F6:90:33:8C:40:6B:B6:57:20:8D:98:F3:DE Certificate issuer: /CN=FBF979FD5B6D1AF690338C406BB657208D98F3DE Certificate serial: 78221A96CBF93FFF8F3F8CB9FD7B2B6A11B9431F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBF979FD5B6D1AF690338C406BB657208D98F3DE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b32d7627-47d7-4fd0-ae0f-63b873fe2c88/0/FBF979FD5B6D1AF690338C406BB657208D98F3DE.mft Manifest number: 0519 Signing time: Mon 20 Oct 2025 05:32:15 +0000 Manifest this update: Mon 20 Oct 2025 05:27:15 +0000 Manifest next update: Thu 23 Oct 2025 06:02:15 +0000 Files and hashes: 1: 3130332e3134392e3131362e302f32342d3234203d3e20313430303139.roa (hash: VXJZTzf1N9bLnOE34wm7TG6tn0+JbHJPrkKyWsVcPXk=) 2: FBF979FD5B6D1AF690338C406BB657208D98F3DE.crl (hash: NWqppTICjq4gJ/2bhwpML5A5jC9cTGXlWvtMkcIamKU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b32d7627-47d7-4fd0-ae0f-63b873fe2c88/0/FBF979FD5B6D1AF690338C406BB657208D98F3DE.crl rsync://repo-rpki.idnic.net/repo/b32d7627-47d7-4fd0-ae0f-63b873fe2c88/0/FBF979FD5B6D1AF690338C406BB657208D98F3DE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBF979FD5B6D1AF690338C406BB657208D98F3DE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 06:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:22:1a:96:cb:f9:3f:ff:8f:3f:8c:b9:fd:7b:2b:6a:11:b9:43:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FBF979FD5B6D1AF690338C406BB657208D98F3DE Validity Not Before: Oct 20 05:27:15 2025 GMT Not After : Oct 23 06:02:15 2025 GMT Subject: CN=61E41A23C0A02C9FAA153B7C957386BB6053B0B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:1f:3a:eb:54:36:bc:4a:f2:0b:8b:61:3d:de: 61:84:23:2b:aa:89:3d:5b:be:d2:05:38:b3:a8:56: 51:a2:1e:4e:3f:25:fd:8a:8c:ec:27:2d:ac:23:1f: 67:a5:12:d0:98:ad:f8:f2:51:f1:4d:55:c2:1f:37: c8:49:60:c9:c7:78:11:40:da:74:59:bf:2e:50:88: a0:7c:5b:c3:42:08:67:9e:10:4f:fb:61:dd:f1:e3: e5:be:e2:f9:b5:6a:91:1d:a7:34:43:34:49:2f:64: f6:19:19:ff:5a:2d:e1:83:1b:f2:59:ce:76:56:e4: a4:45:c5:b5:0a:df:57:b2:3e:43:e4:d2:25:a4:9d: 98:0f:2c:07:33:2c:f2:c4:09:01:ed:d3:33:54:9b: 8c:21:b2:12:09:f2:5e:cc:7d:6d:3a:71:11:6f:e3: 69:14:83:b1:fd:ec:26:62:08:af:5f:e3:02:44:f9: 6a:ba:c5:f8:24:25:49:56:ea:e6:24:24:39:a7:b5: 44:08:b7:b7:0b:08:9b:33:3e:22:d9:0e:2f:2e:75: ba:fb:e0:5d:46:0f:0d:d4:04:e9:50:31:a3:b5:32: 40:1f:14:c2:06:23:01:55:01:53:67:35:2f:51:ff: 3c:f5:ec:58:eb:f3:33:31:d6:f6:89:1a:d9:97:c6: c0:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:E4:1A:23:C0:A0:2C:9F:AA:15:3B:7C:95:73:86:BB:60:53:B0:B9 X509v3 Authority Key Identifier: keyid:FB:F9:79:FD:5B:6D:1A:F6:90:33:8C:40:6B:B6:57:20:8D:98:F3:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b32d7627-47d7-4fd0-ae0f-63b873fe2c88/0/FBF979FD5B6D1AF690338C406BB657208D98F3DE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBF979FD5B6D1AF690338C406BB657208D98F3DE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b32d7627-47d7-4fd0-ae0f-63b873fe2c88/0/FBF979FD5B6D1AF690338C406BB657208D98F3DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:f0:18:38:d7:0e:54:f3:04:64:2e:55:02:0e:15:a4:26:db: 62:f7:6f:5a:7f:a2:7e:a8:f6:4b:b9:48:a6:7d:6c:5c:4f:c9: cc:de:44:e9:93:b2:73:f3:ea:86:b8:fb:5c:d4:97:46:67:2c: a2:8f:a7:ec:92:40:b9:d6:26:a6:87:6c:c4:ec:33:c3:1d:74: ee:ad:3b:07:d8:e6:f5:fa:2f:83:22:08:6b:f3:38:f1:76:e7: 3c:98:63:76:4a:33:84:8f:5f:9d:0b:e8:91:9e:dc:c1:8d:9d: 04:35:33:e3:66:ee:26:5b:29:0a:ac:fc:38:5d:a7:84:7b:82: e8:fd:b3:ae:8d:b7:81:ab:53:0a:f7:5c:e4:3b:b6:92:38:b2: 09:03:7c:46:32:a7:07:d9:0a:fd:57:7b:ea:6b:d0:c3:3c:58: 2a:c5:ed:8c:1a:18:0d:c8:37:a8:62:64:5a:cb:73:78:c4:0e: 67:44:77:3c:d9:01:5b:da:e0:32:ed:dc:8a:f7:5f:18:fb:be: 63:36:db:36:92:bc:af:23:06:03:c5:ff:4e:89:bf:7e:18:a9: 7d:43:bc:f4:2e:4a:0a:ea:66:cb:be:84:3c:13:a1:3a:02:f6: b6:bd:11:ea:06:c8:f2:94:0a:cc:73:12:4b:f9:98:4e:6a:ac: 52:1e:0c:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeCIalsv5P/+PP4y5/XsrahG5Qx8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkJGOTc5RkQ1QjZEMUFGNjkwMzM4QzQwNkJCNjU3MjA4 RDk4RjNERTAeFw0yNTEwMjAwNTI3MTVaFw0yNTEwMjMwNjAyMTVaMDMxMTAvBgNV BAMTKDYxRTQxQTIzQzBBMDJDOUZBQTE1M0I3Qzk1NzM4NkJCNjA1M0IwQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqHzrrVDa8SvILi2E93mGEIyuq iT1bvtIFOLOoVlGiHk4/Jf2KjOwnLawjH2elEtCYrfjyUfFNVcIfN8hJYMnHeBFA 2nRZvy5QiKB8W8NCCGeeEE/7Yd3x4+W+4vm1apEdpzRDNEkvZPYZGf9aLeGDG/JZ znZW5KRFxbUK31eyPkPk0iWknZgPLAczLPLECQHt0zNUm4whshIJ8l7MfW06cRFv 42kUg7H97CZiCK9f4wJE+Wq6xfgkJUlW6uYkJDmntUQIt7cLCJszPiLZDi8udbr7 4F1GDw3UBOlQMaO1MkAfFMIGIwFVAVNnNS9R/zz17Fjr8zMx1vaJGtmXxsDDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYeQaI8CgLJ+qFTt8lXOGu2BTsLkwHwYDVR0j BBgwFoAU+/l5/VttGvaQM4xAa7ZXII2Y894wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MzJkNzYyNy00N2Q3LTRmZDAtYWUwZi02M2I4NzNmZTJjODgvMC9GQkY5NzlGRDVC NkQxQUY2OTAzMzhDNDA2QkI2NTcyMDhEOThGM0RFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkJGOTc5RkQ1QjZEMUFGNjkwMzM4QzQwNkJCNjU3MjA4RDk4 RjNERS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjMyZDc2MjctNDdkNy00ZmQwLWFl MGYtNjNiODczZmUyYzg4LzAvRkJGOTc5RkQ1QjZEMUFGNjkwMzM4QzQwNkJCNjU3 MjA4RDk4RjNERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKjwGDjXDlTzBGQuVQIOFaQm22L3b1p/on6o 9ku5SKZ9bFxPyczeROmTsnPz6oa4+1zUl0ZnLKKPp+ySQLnWJqaHbMTsM8MddO6t OwfY5vX6L4MiCGvzOPF25zyYY3ZKM4SPX50L6JGe3MGNnQQ1M+Nm7iZbKQqs/Dhd p4R7guj9s66Nt4GrUwr3XOQ7tpI4sgkDfEYypwfZCv1Xe+pr0MM8WCrF7YwaGA3I N6hiZFrLc3jEDmdEdzzZAVva4DLt3Ir3Xxj7vmM22zaSvK8jBgPF/06Jv34YqX1D vPQuSgrqZsu+hDwToToC9ra9EeoGyPKUCsxzEkv5mE5qrFIeDK8= -----END CERTIFICATE-----Generated at Mon Oct 20 19:07:17 2025 by rpki-client