$ rpki-client -vvf repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.mft File: FC2DAAA409BA60DE33EC91F3A861D1A00719D426.mft (raw, json) Hash identifier: 8FuDMuxSNbw7jMAUMvxzD8iBNU2IYyH5+utdigPg68w= Subject key identifier: 0E:FF:97:43:F0:E0:F1:0A:3F:4E:EC:DD:0C:9B:8B:6D:93:60:3E:1F Authority key identifier: FC:2D:AA:A4:09:BA:60:DE:33:EC:91:F3:A8:61:D1:A0:07:19:D4:26 Certificate issuer: /CN=FC2DAAA409BA60DE33EC91F3A861D1A00719D426 Certificate serial: 170688671C84D39D3A599188DF45BBDC8F6E15A9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.mft Manifest number: E6 Signing time: Sun 19 Oct 2025 08:10:50 +0000 Manifest this update: Sun 19 Oct 2025 08:05:50 +0000 Manifest next update: Wed 22 Oct 2025 17:22:50 +0000 Files and hashes: 1: FC2DAAA409BA60DE33EC91F3A861D1A00719D426.crl (hash: NmC8lTVsW94IXnXtjtnBwwWBVkvyQRRMW8rtj6l7PQ0=) 2: 3135372e36362e322e302f32332d3234203d3e20313532343430.roa (hash: 3ZS5/0NJnXKv4Pk0J4oSOH1r1VKtA3mh1qb3WAlsXUw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.crl rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 17:22:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:06:88:67:1c:84:d3:9d:3a:59:91:88:df:45:bb:dc:8f:6e:15:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC2DAAA409BA60DE33EC91F3A861D1A00719D426 Validity Not Before: Oct 19 08:05:50 2025 GMT Not After : Oct 22 17:22:50 2025 GMT Subject: CN=0EFF9743F0E0F10A3F4EECDD0C9B8B6D93603E1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c2:17:9c:7b:e8:71:5f:0f:df:2e:16:89:99: df:e3:33:12:9b:f2:a5:9e:c2:d5:53:0d:64:71:35: 8a:9a:f8:dd:11:b2:8b:fa:92:0d:03:8c:f9:99:7f: 2b:fb:b9:da:d2:ba:69:1e:08:9c:3b:da:92:a6:69: 81:25:ce:78:d1:5b:19:10:a3:ba:f7:28:f6:46:c8: 6a:86:13:73:07:3b:8c:a1:eb:f2:36:80:38:94:46: db:5d:43:dd:bb:fa:a7:23:11:92:dd:09:f6:1d:6c: e6:95:b9:05:3c:0f:3c:fb:37:cc:23:29:71:2b:b7: e6:c4:6b:e7:6b:de:95:b5:e5:fe:81:73:24:01:25: 30:f4:c9:c7:f2:ac:1b:9f:03:24:30:5a:58:a0:22: fb:50:1e:4d:a3:11:84:ef:b5:59:28:c9:79:8f:49: 40:5f:e9:3a:5d:3f:97:7d:7b:cc:e2:37:f7:56:d0: 8b:36:1e:ff:31:ed:ea:9b:f6:43:3c:f2:bc:5d:6b: 87:de:ee:43:99:bf:20:30:af:f8:5c:15:7f:98:ca: 0f:ef:df:b2:7c:a8:87:e1:1f:4c:e9:d0:21:ed:96: bd:1b:9a:8c:e9:1f:73:a1:c9:8f:9b:f0:8c:76:fe: 0d:f8:7f:60:01:d2:f3:32:47:0a:b0:57:59:13:80: bb:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:FF:97:43:F0:E0:F1:0A:3F:4E:EC:DD:0C:9B:8B:6D:93:60:3E:1F X509v3 Authority Key Identifier: keyid:FC:2D:AA:A4:09:BA:60:DE:33:EC:91:F3:A8:61:D1:A0:07:19:D4:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:83:78:ea:94:bb:3a:17:a0:c0:1b:0d:f5:d2:80:8e:db:ed: 1b:92:8e:96:11:e5:16:f8:f7:83:9e:da:b6:0f:c5:1a:b5:4c: 84:47:f1:2e:60:6d:16:00:4d:16:73:d9:6b:2e:ed:53:bd:a8: 56:84:40:a9:78:c5:d2:60:8c:73:72:24:bb:77:aa:70:ac:f1: 5b:e2:34:17:b1:86:25:03:69:4f:d0:e0:4c:d9:b0:43:7f:70: 2d:b1:bb:76:cb:c5:24:84:86:a2:9b:bb:d5:71:53:d0:dc:9a: 01:68:63:26:72:24:0a:e1:a6:bf:31:30:fa:81:9e:2e:98:e8: 90:c7:90:ce:53:4a:f6:b8:fc:50:26:99:3d:1e:18:49:5a:02: a6:05:98:6f:9f:01:df:b6:47:9a:72:6f:22:79:64:87:08:ca: 14:94:89:d0:3e:f6:cc:d5:4d:16:8d:41:54:5e:37:92:ee:94: 79:eb:d4:40:36:89:d6:e9:88:a9:91:28:90:31:9c:4f:24:ae: ca:85:c9:68:3b:7b:7c:bd:ac:90:5b:99:35:4c:f3:d7:2b:17: 60:62:16:a2:80:6c:7c:11:66:83:39:b3:b4:79:68:a3:d4:a8: 44:5f:37:ef:14:1e:79:e6:35:51:0b:1d:a8:29:20:11:99:a1: 2e:63:be:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFwaIZxyE0506WZGI30W73I9uFakwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkMyREFBQTQwOUJBNjBERTMzRUM5MUYzQTg2MUQxQTAw NzE5RDQyNjAeFw0yNTEwMTkwODA1NTBaFw0yNTEwMjIxNzIyNTBaMDMxMTAvBgNV BAMTKDBFRkY5NzQzRjBFMEYxMEEzRjRFRUNERDBDOUI4QjZEOTM2MDNFMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjwhece+hxXw/fLhaJmd/jMxKb 8qWewtVTDWRxNYqa+N0Rsov6kg0DjPmZfyv7udrSumkeCJw72pKmaYElznjRWxkQ o7r3KPZGyGqGE3MHO4yh6/I2gDiURttdQ927+qcjEZLdCfYdbOaVuQU8Dzz7N8wj KXErt+bEa+dr3pW15f6BcyQBJTD0ycfyrBufAyQwWligIvtQHk2jEYTvtVkoyXmP SUBf6TpdP5d9e8ziN/dW0Is2Hv8x7eqb9kM88rxda4fe7kOZvyAwr/hcFX+Yyg/v 37J8qIfhH0zp0CHtlr0bmozpH3OhyY+b8Ix2/g34f2AB0vMyRwqwV1kTgLvpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDv+XQ/Dg8Qo/TuzdDJuLbZNgPh8wHwYDVR0j BBgwFoAU/C2qpAm6YN4z7JHzqGHRoAcZ1CYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZmI4MDhlYi1jOThlLTQwMzYtYmU5YS0xOTNiYmNjNjQ4OTIvMC9GQzJEQUFBNDA5 QkE2MERFMzNFQzkxRjNBODYxRDFBMDA3MTlENDI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkMyREFBQTQwOUJBNjBERTMzRUM5MUYzQTg2MUQxQTAwNzE5 RDQyNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWZiODA4ZWItYzk4ZS00MDM2LWJl OWEtMTkzYmJjYzY0ODkyLzAvRkMyREFBQTQwOUJBNjBERTMzRUM5MUYzQTg2MUQx QTAwNzE5RDQyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABKDeOqUuzoXoMAbDfXSgI7b7RuSjpYR5Rb4 94Oe2rYPxRq1TIRH8S5gbRYATRZz2Wsu7VO9qFaEQKl4xdJgjHNyJLt3qnCs8Vvi NBexhiUDaU/Q4EzZsEN/cC2xu3bLxSSEhqKbu9VxU9DcmgFoYyZyJArhpr8xMPqB ni6Y6JDHkM5TSva4/FAmmT0eGElaAqYFmG+fAd+2R5pybyJ5ZIcIyhSUidA+9szV TRaNQVReN5LulHnr1EA2idbpiKmRKJAxnE8krsqFyWg7e3y9rJBbmTVM89crF2Bi FqKAbHwRZoM5s7R5aKPUqERfN+8UHnnmNVELHagpIBGZoS5jvss= -----END CERTIFICATE-----Generated at Mon Oct 20 20:54:45 2025 by rpki-client