$ rpki-client -vvf repo-rpki.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/FC2E85BE9AC0A6BE53B792A489D50609F924187F.mft File: FC2E85BE9AC0A6BE53B792A489D50609F924187F.mft (raw, json) Hash identifier: HTMiP2OTEjKOkh59YeNx64nUg9EFTNU2CmZZVS1WFd8= Subject key identifier: 17:C0:53:C7:87:DD:17:95:C3:88:57:B9:CD:D7:6D:98:12:03:DA:43 Authority key identifier: FC:2E:85:BE:9A:C0:A6:BE:53:B7:92:A4:89:D5:06:09:F9:24:18:7F Certificate issuer: /CN=FC2E85BE9AC0A6BE53B792A489D50609F924187F Certificate serial: 65E9F819586D58DD5DB2658FB169EDF0483E0C12 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC2E85BE9AC0A6BE53B792A489D50609F924187F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/FC2E85BE9AC0A6BE53B792A489D50609F924187F.mft Manifest number: 04FE Signing time: Sat 23 Aug 2025 04:41:06 +0000 Manifest this update: Sat 23 Aug 2025 04:36:06 +0000 Manifest next update: Tue 26 Aug 2025 12:02:06 +0000 Files and hashes: 1: FC2E85BE9AC0A6BE53B792A489D50609F924187F.crl (hash: +OAGeQKRGaRoa21gt6Z85VESC1lyODIj0tSAiJ+E2QA=) 2: 3130332e3131322e3138392e302f32342d3234203d3e20313337333332.roa (hash: fTPWv2oiJIx2qSggb2hiWiOmKdtYeAQZFu4dr/E9CSA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/FC2E85BE9AC0A6BE53B792A489D50609F924187F.crl rsync://repo-rpki.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/FC2E85BE9AC0A6BE53B792A489D50609F924187F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC2E85BE9AC0A6BE53B792A489D50609F924187F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:19:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:e9:f8:19:58:6d:58:dd:5d:b2:65:8f:b1:69:ed:f0:48:3e:0c:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC2E85BE9AC0A6BE53B792A489D50609F924187F Validity Not Before: Aug 23 04:36:06 2025 GMT Not After : Aug 26 12:02:06 2025 GMT Subject: CN=17C053C787DD1795C38857B9CDD76D981203DA43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:2d:48:f3:a7:25:94:58:f1:92:55:94:1f:50: 7c:da:94:b6:49:c9:85:5a:11:1a:2d:1b:ed:ec:42: b0:d5:cd:4a:98:98:74:e6:ce:a9:19:6b:18:51:62: b6:b8:c5:78:4b:41:11:43:6b:26:76:7e:8b:56:d9: 8b:ec:c8:aa:26:85:88:c1:fd:6a:b0:9c:08:bd:9e: 81:54:51:f6:f8:a5:62:ae:f2:04:c9:c7:b5:bb:17: 85:df:7b:aa:8d:1c:5d:54:77:56:95:a3:39:1d:94: 97:65:6e:00:94:1a:df:53:53:4d:98:f4:a1:52:96: 84:fc:f9:ac:97:f6:5b:ae:b9:fc:d1:bb:ee:bb:37: dd:a9:03:cc:49:5b:cb:a7:3d:d3:b7:3a:cc:fc:e8: e9:d2:3c:cc:4b:09:65:b7:b0:70:23:83:eb:01:56: fd:ba:6f:88:3f:da:88:2b:b6:b8:f9:17:25:91:4e: 75:98:b2:e8:b6:ed:06:e9:92:54:da:82:c9:99:58: ef:06:46:d5:bf:2c:e2:89:b4:31:f6:7f:ce:f2:07: b6:7c:a3:54:25:ce:b1:cc:62:83:02:6d:fd:27:a7: 9e:31:54:44:11:d8:1a:eb:fc:24:47:f2:f3:5e:65: 7f:2c:c1:a8:20:94:e4:c5:fe:eb:1f:60:90:f2:e0: b3:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:C0:53:C7:87:DD:17:95:C3:88:57:B9:CD:D7:6D:98:12:03:DA:43 X509v3 Authority Key Identifier: keyid:FC:2E:85:BE:9A:C0:A6:BE:53:B7:92:A4:89:D5:06:09:F9:24:18:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/FC2E85BE9AC0A6BE53B792A489D50609F924187F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC2E85BE9AC0A6BE53B792A489D50609F924187F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/FC2E85BE9AC0A6BE53B792A489D50609F924187F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:22:c4:66:60:e9:f3:70:75:00:63:b9:31:ba:a1:bc:9a:dc: e5:6d:b3:93:07:e2:35:f9:45:09:27:9c:d2:6d:ee:7e:01:cb: c2:57:70:d7:75:6c:c0:4c:17:90:eb:c3:7a:f9:59:f9:ed:74: eb:a7:18:8a:48:db:c8:13:45:06:d5:09:7a:be:61:27:7a:6a: 2b:78:94:a3:be:e9:5c:78:d6:e7:e4:a3:c7:3b:55:10:9f:9f: 06:69:a2:9d:71:a8:81:b3:44:b1:d0:27:9a:f8:db:15:39:9c: 9a:6b:ff:37:8b:95:f3:66:6f:6f:83:ba:fb:bd:45:12:4d:13: 1d:44:8f:7f:9f:82:03:94:e0:33:8f:e7:09:07:ab:66:d0:5b: 23:1a:e6:fc:8a:d4:60:37:6c:f7:f9:d1:7e:91:3d:67:b6:c8: cd:96:34:28:ee:59:46:62:e2:3e:fb:97:e0:cc:8e:68:fc:af: 42:a9:e6:e0:54:84:ef:6d:bb:3f:2e:fb:fa:43:31:29:7b:da: 35:b4:ca:91:38:ba:16:ce:24:64:4c:70:17:7d:3a:8b:b2:77: f0:2d:8a:9f:e8:64:ab:51:9a:92:1d:59:77:d7:40:14:4e:22: aa:25:50:43:4a:b4:3c:c7:52:33:f9:27:dc:ef:e5:b7:93:94: e5:07:ae:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZen4GVhtWN1dsmWPsWnt8Eg+DBIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkMyRTg1QkU5QUMwQTZCRTUzQjc5MkE0ODlENTA2MDlG OTI0MTg3RjAeFw0yNTA4MjMwNDM2MDZaFw0yNTA4MjYxMjAyMDZaMDMxMTAvBgNV BAMTKDE3QzA1M0M3ODdERDE3OTVDMzg4NTdCOUNERDc2RDk4MTIwM0RBNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjLUjzpyWUWPGSVZQfUHzalLZJ yYVaERotG+3sQrDVzUqYmHTmzqkZaxhRYra4xXhLQRFDayZ2fotW2YvsyKomhYjB /WqwnAi9noFUUfb4pWKu8gTJx7W7F4Xfe6qNHF1Ud1aVozkdlJdlbgCUGt9TU02Y 9KFSloT8+ayX9luuufzRu+67N92pA8xJW8unPdO3Osz86OnSPMxLCWW3sHAjg+sB Vv26b4g/2ogrtrj5FyWRTnWYsui27QbpklTagsmZWO8GRtW/LOKJtDH2f87yB7Z8 o1QlzrHMYoMCbf0np54xVEQR2Brr/CRH8vNeZX8swagglOTF/usfYJDy4LOFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUF8BTx4fdF5XDiFe5zddtmBID2kMwHwYDVR0j BBgwFoAU/C6FvprApr5Tt5KkidUGCfkkGH8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZjVjZmJhMy1lMDE3LTRlOGEtOWFjNS1mMmQzMDQzMTczNjUvMC9GQzJFODVCRTlB QzBBNkJFNTNCNzkyQTQ4OUQ1MDYwOUY5MjQxODdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkMyRTg1QkU5QUMwQTZCRTUzQjc5MkE0ODlENTA2MDlGOTI0 MTg3Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWY1Y2ZiYTMtZTAxNy00ZThhLTlh YzUtZjJkMzA0MzE3MzY1LzAvRkMyRTg1QkU5QUMwQTZCRTUzQjc5MkE0ODlENTA2 MDlGOTI0MTg3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEIixGZg6fNwdQBjuTG6obya3OVts5MH4jX5 RQknnNJt7n4By8JXcNd1bMBMF5Drw3r5WfntdOunGIpI28gTRQbVCXq+YSd6ait4 lKO+6Vx41ufko8c7VRCfnwZpop1xqIGzRLHQJ5r42xU5nJpr/zeLlfNmb2+Duvu9 RRJNEx1Ej3+fggOU4DOP5wkHq2bQWyMa5vyK1GA3bPf50X6RPWe2yM2WNCjuWUZi 4j77l+DMjmj8r0Kp5uBUhO9tuz8u+/pDMSl72jW0ypE4uhbOJGRMcBd9Oouyd/At ip/oZKtRmpIdWXfXQBROIqolUENKtDzHUjP5J9zv5beTlOUHrps= -----END CERTIFICATE-----Generated at Sat Aug 23 12:29:01 2025 by rpki-client