$ rpki-client -vvf repo-rpki.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/FB138C203D8A14318A87CA5B1BC5A19CA221F056.mft File: FB138C203D8A14318A87CA5B1BC5A19CA221F056.mft (raw, json) Hash identifier: 1dSd3K5iNi8CQGIbv15H8nyRs+I1CJ06wU/eoshamVg= Subject key identifier: C8:2B:F4:BF:8D:CA:4A:16:84:89:1B:88:1E:9E:F7:A9:32:23:FB:0B Authority key identifier: FB:13:8C:20:3D:8A:14:31:8A:87:CA:5B:1B:C5:A1:9C:A2:21:F0:56 Certificate issuer: /CN=FB138C203D8A14318A87CA5B1BC5A19CA221F056 Certificate serial: 15AB0C7351A297BFF25A100CFDC2F3A62185FB58 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB138C203D8A14318A87CA5B1BC5A19CA221F056.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/FB138C203D8A14318A87CA5B1BC5A19CA221F056.mft Manifest number: 0213 Signing time: Mon 30 Jun 2025 12:52:01 +0000 Manifest this update: Mon 30 Jun 2025 12:47:01 +0000 Manifest next update: Thu 03 Jul 2025 20:22:01 +0000 Files and hashes: 1: 3130332e3138352e34342e302f32332d3234203d3e20313339343536.roa (hash: n6d81yOcWUfTqWq3gPGmFsJ5Gf5N6Vzjiwj6FeqOedY=) 2: FB138C203D8A14318A87CA5B1BC5A19CA221F056.crl (hash: M01MwGvgU4aCYDjWLzTScRdUvFjc1xdhnOHX3jrUj18=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/FB138C203D8A14318A87CA5B1BC5A19CA221F056.crl rsync://repo-rpki.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/FB138C203D8A14318A87CA5B1BC5A19CA221F056.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB138C203D8A14318A87CA5B1BC5A19CA221F056.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 20:22:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:ab:0c:73:51:a2:97:bf:f2:5a:10:0c:fd:c2:f3:a6:21:85:fb:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB138C203D8A14318A87CA5B1BC5A19CA221F056 Validity Not Before: Jun 30 12:47:01 2025 GMT Not After : Jul 3 20:22:01 2025 GMT Subject: CN=C82BF4BF8DCA4A1684891B881E9EF7A93223FB0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ec:dd:4a:3d:8d:21:7f:30:38:29:8a:9e:b0: 89:22:36:fc:c8:61:75:c5:7f:50:6b:28:c6:53:37: 20:4e:38:2c:d6:fc:55:79:b2:56:6e:9e:52:ec:eb: a2:c3:bb:ab:cb:aa:f0:6d:b3:86:af:f3:db:78:05: ff:88:90:6a:bf:b7:15:74:ce:b2:70:b7:2d:f1:f3: 9e:9c:ba:98:96:e9:15:c1:e2:14:2e:73:bc:81:65: ce:fe:ec:ca:f8:92:f3:46:6f:05:36:25:b1:55:58: 15:49:f5:5b:3a:2b:04:90:d9:ba:cb:f7:bb:d1:7a: e4:8d:2b:ee:cc:6d:bd:26:0c:da:85:b1:dc:57:2b: a6:10:5e:88:79:bd:6c:ba:3e:bd:6e:f7:2e:b0:1f: 19:3c:6b:39:09:46:e0:00:30:6b:cc:5b:7d:0c:46: c1:d7:96:8e:db:4c:53:99:86:a9:a6:46:a7:25:d8: c5:24:c8:06:f7:01:15:a4:e5:a5:79:ca:eb:05:6a: 16:e6:90:ae:af:34:9c:e7:56:15:00:6c:51:1a:56: 2e:04:2c:bc:9f:5e:20:c7:42:84:96:4b:0b:76:f1: e7:4c:16:a9:30:b6:b7:5d:4e:a8:04:95:2b:cc:47: 79:ed:30:f1:55:77:f1:3e:10:03:70:9b:fc:8b:04: cb:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:2B:F4:BF:8D:CA:4A:16:84:89:1B:88:1E:9E:F7:A9:32:23:FB:0B X509v3 Authority Key Identifier: keyid:FB:13:8C:20:3D:8A:14:31:8A:87:CA:5B:1B:C5:A1:9C:A2:21:F0:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/FB138C203D8A14318A87CA5B1BC5A19CA221F056.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB138C203D8A14318A87CA5B1BC5A19CA221F056.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/FB138C203D8A14318A87CA5B1BC5A19CA221F056.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:51:1c:f2:32:b2:81:5e:db:64:a2:e9:c8:68:23:19:3f:76: 56:41:a6:b1:c6:83:9a:43:9e:26:8a:de:b7:e4:4f:4c:d6:37: 90:c2:aa:ce:aa:b0:59:ae:1d:b7:82:dc:27:a2:74:90:f7:63: 7e:5b:62:84:24:c0:74:6b:f3:4d:88:ed:ee:9d:eb:5e:5f:13: e4:ba:ae:0b:7e:dc:86:95:4d:18:e4:06:5e:24:60:27:27:db: 09:bc:f0:43:1f:d3:8b:18:ef:93:6c:94:b9:9b:e0:cc:5e:cb: 28:79:3a:c9:e9:47:7d:e9:1b:41:23:08:0b:7d:90:fb:fc:01: b4:4c:23:9d:b9:91:a4:ef:41:c3:9c:84:3a:d1:a8:e6:13:c3: 29:93:eb:40:1f:5e:7a:21:17:17:31:5b:97:7e:ce:4b:a5:01: 1b:1c:b5:e6:d6:fe:63:3b:8b:0a:d1:dd:c5:b5:31:28:20:d2: 86:c9:26:d0:16:cd:dd:90:45:1e:e7:ad:3d:63:ea:c1:29:5b: 32:cd:a3:fb:b7:4d:68:18:2e:d3:35:4d:8b:82:6b:e1:b3:05: 4d:9a:02:bc:25:78:e1:47:a1:ec:81:f0:aa:82:bf:54:79:3e: 61:b2:e9:26:41:46:25:12:3c:a0:cb:81:32:23:5a:e6:26:e7: 7e:07:2e:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFasMc1Gil7/yWhAM/cLzpiGF+1gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkIxMzhDMjAzRDhBMTQzMThBODdDQTVCMUJDNUExOUNB MjIxRjA1NjAeFw0yNTA2MzAxMjQ3MDFaFw0yNTA3MDMyMDIyMDFaMDMxMTAvBgNV BAMTKEM4MkJGNEJGOERDQTRBMTY4NDg5MUI4ODFFOUVGN0E5MzIyM0ZCMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC97N1KPY0hfzA4KYqesIkiNvzI YXXFf1BrKMZTNyBOOCzW/FV5slZunlLs66LDu6vLqvBts4av89t4Bf+IkGq/txV0 zrJwty3x856cupiW6RXB4hQuc7yBZc7+7Mr4kvNGbwU2JbFVWBVJ9Vs6KwSQ2brL 97vReuSNK+7Mbb0mDNqFsdxXK6YQXoh5vWy6Pr1u9y6wHxk8azkJRuAAMGvMW30M RsHXlo7bTFOZhqmmRqcl2MUkyAb3ARWk5aV5yusFahbmkK6vNJznVhUAbFEaVi4E LLyfXiDHQoSWSwt28edMFqkwtrddTqgElSvMR3ntMPFVd/E+EANwm/yLBMvzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyCv0v43KShaEiRuIHp73qTIj+wswHwYDVR0j BBgwFoAU+xOMID2KFDGKh8pbG8WhnKIh8FYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YzVmMmU0Zi00NWQ0LTRkNjItOTJjZi1kNzhiNWM1NDFhMWMvMC9GQjEzOEMyMDNE OEExNDMxOEE4N0NBNUIxQkM1QTE5Q0EyMjFGMDU2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkIxMzhDMjAzRDhBMTQzMThBODdDQTVCMUJDNUExOUNBMjIx RjA1Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWM1ZjJlNGYtNDVkNC00ZDYyLTky Y2YtZDc4YjVjNTQxYTFjLzAvRkIxMzhDMjAzRDhBMTQzMThBODdDQTVCMUJDNUEx OUNBMjIxRjA1Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC5RHPIysoFe22Si6choIxk/dlZBprHGg5pD niaK3rfkT0zWN5DCqs6qsFmuHbeC3CeidJD3Y35bYoQkwHRr802I7e6d615fE+S6 rgt+3IaVTRjkBl4kYCcn2wm88EMf04sY75NslLmb4Mxeyyh5OsnpR33pG0EjCAt9 kPv8AbRMI525kaTvQcOchDrRqOYTwymT60AfXnohFxcxW5d+zkulARsctebW/mM7 iwrR3cW1MSgg0obJJtAWzd2QRR7nrT1j6sEpWzLNo/u3TWgYLtM1TYuCa+GzBU2a ArwleOFHoeyB8KqCv1R5PmGy6SZBRiUSPKDLgTIjWuYm534HLuA= -----END CERTIFICATE-----Generated at Tue Jul 1 05:04:06 2025 by rpki-client