$ rpki-client -vvf repo-rpki.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/FB138C203D8A14318A87CA5B1BC5A19CA221F056.mft File: FB138C203D8A14318A87CA5B1BC5A19CA221F056.mft (raw, json) Hash identifier: jKGLabk1U1RY6ULTqiBeKEnsnQVbWmvBIa+/6GsiDwk= Subject key identifier: DF:60:26:7E:9C:05:18:03:14:F1:CA:11:21:A2:02:DA:66:71:90:7C Authority key identifier: FB:13:8C:20:3D:8A:14:31:8A:87:CA:5B:1B:C5:A1:9C:A2:21:F0:56 Certificate issuer: /CN=FB138C203D8A14318A87CA5B1BC5A19CA221F056 Certificate serial: 027905A35EC484165F09ED690094883A8E9BDC49 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB138C203D8A14318A87CA5B1BC5A19CA221F056.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/FB138C203D8A14318A87CA5B1BC5A19CA221F056.mft Manifest number: 022B Signing time: Sat 23 Aug 2025 01:32:07 +0000 Manifest this update: Sat 23 Aug 2025 01:27:07 +0000 Manifest next update: Tue 26 Aug 2025 01:50:07 +0000 Files and hashes: 1: FB138C203D8A14318A87CA5B1BC5A19CA221F056.crl (hash: fD3SCwqQ/3SfuDWrz9m0kZ2WRHLM+upkOpF0l3h7xGw=) 2: 3130332e3138352e34342e302f32332d3234203d3e20313339343536.roa (hash: n6d81yOcWUfTqWq3gPGmFsJ5Gf5N6Vzjiwj6FeqOedY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/FB138C203D8A14318A87CA5B1BC5A19CA221F056.crl rsync://repo-rpki.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/FB138C203D8A14318A87CA5B1BC5A19CA221F056.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB138C203D8A14318A87CA5B1BC5A19CA221F056.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 01:50:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:79:05:a3:5e:c4:84:16:5f:09:ed:69:00:94:88:3a:8e:9b:dc:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB138C203D8A14318A87CA5B1BC5A19CA221F056 Validity Not Before: Aug 23 01:27:07 2025 GMT Not After : Aug 26 01:50:07 2025 GMT Subject: CN=DF60267E9C05180314F1CA1121A202DA6671907C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9c:d4:74:81:e0:be:50:34:b9:7a:ba:79:38: 26:cf:86:ef:c3:40:8a:ed:f8:ff:d1:4e:eb:d2:21: 0b:a3:a0:c8:23:c4:b7:f4:f3:62:d8:4c:9c:46:a1: cb:cb:d6:5e:b0:6d:16:0b:79:d0:63:72:80:43:0c: 76:3e:fe:e9:8c:fd:c2:fb:66:bb:bb:4a:cc:31:69: d5:7a:be:39:d8:78:a3:c4:d2:39:74:3a:4a:90:09: 9e:f7:10:a1:5a:f7:ca:1e:11:3b:1d:aa:1f:20:25: 93:a6:f1:27:38:17:a0:38:21:0b:dd:4e:60:25:ba: ee:8a:65:55:d6:38:7c:cf:88:67:76:01:19:19:0a: 3a:1e:70:25:1b:26:60:8e:e4:ab:b3:3c:d7:53:92: d7:04:7e:d6:88:8c:9c:8d:9e:8c:30:41:fe:fb:7f: 09:94:cf:1f:e8:c2:3c:cf:ad:ac:8d:ea:fb:f5:f3: 96:3f:c9:de:1f:bb:56:39:30:d1:77:99:83:7b:db: 4b:84:48:e8:5f:81:29:48:52:81:f9:a3:fb:22:1d: 4a:95:e8:6a:15:80:b7:9c:83:60:a3:bb:f2:78:63: 08:73:15:8c:47:e5:95:ba:4e:68:c2:d2:dd:1c:85: d0:ba:b0:5d:cf:e2:70:95:8a:8e:91:9d:7d:e3:27: 48:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:60:26:7E:9C:05:18:03:14:F1:CA:11:21:A2:02:DA:66:71:90:7C X509v3 Authority Key Identifier: keyid:FB:13:8C:20:3D:8A:14:31:8A:87:CA:5B:1B:C5:A1:9C:A2:21:F0:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/FB138C203D8A14318A87CA5B1BC5A19CA221F056.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB138C203D8A14318A87CA5B1BC5A19CA221F056.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/FB138C203D8A14318A87CA5B1BC5A19CA221F056.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:27:10:4d:41:93:98:97:01:31:2f:32:e3:84:11:fe:26:e7: 57:78:10:24:89:59:b4:9d:9d:b6:f2:a7:c9:f3:27:c0:5d:dc: b7:3b:d0:89:00:70:e5:a5:2e:53:7f:12:ea:de:4a:08:8d:de: eb:40:4f:d9:c4:33:ec:3a:fc:91:6b:36:ae:65:20:87:6b:58: ab:cc:fe:71:e1:cd:4d:e6:5f:75:e0:9d:da:3e:f3:cd:87:f8: 8e:5f:a5:43:9a:c7:5c:63:3f:14:67:49:c5:c9:cc:6c:5f:26: 98:58:90:14:34:c9:7e:e8:65:59:a0:05:8b:ea:97:21:e5:c9: e7:76:c9:3e:2a:8c:be:d3:48:aa:32:04:97:58:3a:6b:6c:65: dc:62:50:92:7f:f9:9e:e7:80:a8:8b:4d:39:3f:41:a6:ae:12: 4d:ac:9e:11:5b:47:49:ac:f2:24:3a:e1:33:f2:cc:99:34:26: 08:4b:5c:b5:bd:9a:f9:be:41:93:d2:b0:b7:af:b4:86:fd:b2: 96:26:fb:10:62:9f:67:d5:84:02:cb:56:b1:f8:03:17:3e:ab: a8:2c:23:56:5b:09:40:b7:f9:9a:56:f6:dd:3a:9d:49:f9:1f: e8:02:69:d9:92:d9:38:32:d3:c6:9f:f4:4b:72:7e:3d:85:47: 7c:23:78:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAnkFo17EhBZfCe1pAJSIOo6b3EkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkIxMzhDMjAzRDhBMTQzMThBODdDQTVCMUJDNUExOUNB MjIxRjA1NjAeFw0yNTA4MjMwMTI3MDdaFw0yNTA4MjYwMTUwMDdaMDMxMTAvBgNV BAMTKERGNjAyNjdFOUMwNTE4MDMxNEYxQ0ExMTIxQTIwMkRBNjY3MTkwN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0nNR0geC+UDS5erp5OCbPhu/D QIrt+P/RTuvSIQujoMgjxLf082LYTJxGocvL1l6wbRYLedBjcoBDDHY+/umM/cL7 Zru7SswxadV6vjnYeKPE0jl0OkqQCZ73EKFa98oeETsdqh8gJZOm8Sc4F6A4IQvd TmAluu6KZVXWOHzPiGd2ARkZCjoecCUbJmCO5KuzPNdTktcEftaIjJyNnowwQf77 fwmUzx/owjzPrayN6vv185Y/yd4fu1Y5MNF3mYN720uESOhfgSlIUoH5o/siHUqV 6GoVgLecg2Cju/J4YwhzFYxH5ZW6TmjC0t0chdC6sF3P4nCVio6RnX3jJ0grAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU32AmfpwFGAMU8coRIaIC2mZxkHwwHwYDVR0j BBgwFoAU+xOMID2KFDGKh8pbG8WhnKIh8FYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YzVmMmU0Zi00NWQ0LTRkNjItOTJjZi1kNzhiNWM1NDFhMWMvMC9GQjEzOEMyMDNE OEExNDMxOEE4N0NBNUIxQkM1QTE5Q0EyMjFGMDU2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkIxMzhDMjAzRDhBMTQzMThBODdDQTVCMUJDNUExOUNBMjIx RjA1Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWM1ZjJlNGYtNDVkNC00ZDYyLTky Y2YtZDc4YjVjNTQxYTFjLzAvRkIxMzhDMjAzRDhBMTQzMThBODdDQTVCMUJDNUEx OUNBMjIxRjA1Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB8nEE1Bk5iXATEvMuOEEf4m51d4ECSJWbSd nbbyp8nzJ8Bd3Lc70IkAcOWlLlN/EureSgiN3utAT9nEM+w6/JFrNq5lIIdrWKvM /nHhzU3mX3Xgndo+882H+I5fpUOax1xjPxRnScXJzGxfJphYkBQ0yX7oZVmgBYvq lyHlyed2yT4qjL7TSKoyBJdYOmtsZdxiUJJ/+Z7ngKiLTTk/QaauEk2snhFbR0ms 8iQ64TPyzJk0JghLXLW9mvm+QZPSsLevtIb9spYm+xBin2fVhALLVrH4Axc+q6gs I1ZbCUC3+ZpW9t06nUn5H+gCadmS2Tgy08af9Etyfj2FR3wjeF8= -----END CERTIFICATE-----Generated at Sat Aug 23 12:59:55 2025 by rpki-client