$ rpki-client -vvf repo-rpki.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/FC2E85BE9AC0A6BE53B792A489D50609F924187F.mft File: FC2E85BE9AC0A6BE53B792A489D50609F924187F.mft (raw, json) Hash identifier: /T7HjDBVA9VcRDiNhVDcZRF2417liiMthKXa03DmRzk= Subject key identifier: D5:F9:99:E3:4B:6B:A0:F2:CE:9A:6B:F7:13:0B:38:DB:AD:38:CA:94 Authority key identifier: FC:2E:85:BE:9A:C0:A6:BE:53:B7:92:A4:89:D5:06:09:F9:24:18:7F Certificate issuer: /CN=FC2E85BE9AC0A6BE53B792A489D50609F924187F Certificate serial: 50913C7F53D2FB942085642D45D2FD9B97EA346D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC2E85BE9AC0A6BE53B792A489D50609F924187F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/FC2E85BE9AC0A6BE53B792A489D50609F924187F.mft Manifest number: 055D Signing time: Wed 25 Mar 2026 12:51:15 +0000 Manifest this update: Wed 25 Mar 2026 12:46:15 +0000 Manifest next update: Sat 28 Mar 2026 16:59:15 +0000 Files and hashes: 1: FC2E85BE9AC0A6BE53B792A489D50609F924187F.crl (hash: M+3C8eQbbg+bqGZHIhBhPt8aspsoFl+N/53jj5aF2Y4=) 2: 3130332e3131322e3138392e302f32342d3234203d3e20313337333332.roa (hash: fTPWv2oiJIx2qSggb2hiWiOmKdtYeAQZFu4dr/E9CSA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/FC2E85BE9AC0A6BE53B792A489D50609F924187F.crl rsync://repo-rpki.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/FC2E85BE9AC0A6BE53B792A489D50609F924187F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC2E85BE9AC0A6BE53B792A489D50609F924187F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 16:59:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:91:3c:7f:53:d2:fb:94:20:85:64:2d:45:d2:fd:9b:97:ea:34:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC2E85BE9AC0A6BE53B792A489D50609F924187F Validity Not Before: Mar 25 12:46:15 2026 GMT Not After : Mar 28 16:59:15 2026 GMT Subject: CN=D5F999E34B6BA0F2CE9A6BF7130B38DBAD38CA94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b9:2a:11:a5:10:0c:70:b4:b6:7d:8b:96:fd: fa:f6:99:08:4f:13:a6:05:a7:ae:bc:6f:f1:0e:90: 36:60:b1:a1:7e:e6:69:b2:f9:f7:70:86:10:db:49: ad:0d:f4:b8:04:5d:41:a7:4e:c9:f7:f7:d2:c2:a9: 15:2a:45:a0:dc:56:61:0c:0d:bf:bf:3b:f7:42:4b: cc:7e:3c:49:77:56:7a:2f:92:eb:55:7b:a6:99:8f: dc:02:d4:60:de:c4:31:55:2b:d3:73:c4:bd:fb:16: 73:9e:c9:ff:a3:8e:03:1a:66:37:93:af:9b:33:79: 70:66:e5:51:dd:e2:82:8b:10:a3:02:93:6d:98:58: 35:af:70:e6:fd:fb:20:5e:6b:fa:d9:ac:fc:7a:14: 6d:0c:cc:67:1d:c6:04:8b:7e:96:c5:ad:b8:7b:0b: 1d:02:6b:6a:f5:47:d0:49:fe:55:b7:30:6e:3a:71: 25:d1:1a:bf:5d:21:54:c8:17:5d:7a:3c:f0:ce:38: 31:95:0c:17:15:74:1f:da:94:f8:59:6e:b7:ac:0d: 86:4e:61:a3:d9:d5:9e:52:5a:39:d6:04:9a:ae:0a: 6b:29:42:48:78:df:b3:a4:06:ae:d5:16:7c:c4:5c: 83:27:49:d3:25:89:58:f9:eb:b8:d9:b0:99:e5:81: 10:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:F9:99:E3:4B:6B:A0:F2:CE:9A:6B:F7:13:0B:38:DB:AD:38:CA:94 X509v3 Authority Key Identifier: keyid:FC:2E:85:BE:9A:C0:A6:BE:53:B7:92:A4:89:D5:06:09:F9:24:18:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/FC2E85BE9AC0A6BE53B792A489D50609F924187F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC2E85BE9AC0A6BE53B792A489D50609F924187F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/FC2E85BE9AC0A6BE53B792A489D50609F924187F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:49:cb:b5:06:24:79:5a:af:95:39:e7:66:d0:b5:0d:0f:29: 70:39:37:99:68:2d:34:90:1c:a1:bd:fb:3e:03:d3:d3:4f:b7: 12:47:ad:2c:c5:6d:b8:98:78:e2:c0:89:e0:79:f1:c1:e7:06: 49:7a:7b:83:23:5f:bc:56:f2:4c:0f:f2:34:c3:0f:03:69:2c: 88:54:ae:60:b4:18:d5:6d:d7:2f:5b:47:26:c8:d2:69:a8:64: 75:bf:a9:77:fc:d7:98:06:ba:e5:fe:30:a7:a6:f8:37:2d:18: bc:cc:47:b7:40:e6:42:51:71:f1:90:e8:42:ee:ed:67:ae:7a: ce:3b:5e:56:1f:ee:ec:e1:16:d6:64:c2:6a:ec:42:5b:bb:bd: 8e:0c:40:19:5d:61:be:eb:45:04:84:be:b2:bd:b6:65:8f:f1: 29:31:93:26:70:70:b9:14:8e:0a:bf:de:15:dc:11:bf:b3:dc: e2:9b:c2:c2:00:c3:4b:26:93:f1:b4:5d:61:e7:91:e0:06:15: ea:f6:3b:e4:09:b7:74:1f:84:c1:1b:15:60:03:64:1c:23:b2: 40:6d:80:fe:80:47:b7:5e:46:21:57:09:a8:34:95:a7:95:a3: 85:4c:d4:08:a6:2e:f7:01:da:ad:39:e9:2a:39:19:aa:0b:7f: 1d:ab:78:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUJE8f1PS+5QghWQtRdL9m5fqNG0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkMyRTg1QkU5QUMwQTZCRTUzQjc5MkE0ODlENTA2MDlG OTI0MTg3RjAeFw0yNjAzMjUxMjQ2MTVaFw0yNjAzMjgxNjU5MTVaMDMxMTAvBgNV BAMTKEQ1Rjk5OUUzNEI2QkEwRjJDRTlBNkJGNzEzMEIzOERCQUQzOENBOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMuSoRpRAMcLS2fYuW/fr2mQhP E6YFp668b/EOkDZgsaF+5mmy+fdwhhDbSa0N9LgEXUGnTsn399LCqRUqRaDcVmEM Db+/O/dCS8x+PEl3VnovkutVe6aZj9wC1GDexDFVK9NzxL37FnOeyf+jjgMaZjeT r5szeXBm5VHd4oKLEKMCk22YWDWvcOb9+yBea/rZrPx6FG0MzGcdxgSLfpbFrbh7 Cx0Ca2r1R9BJ/lW3MG46cSXRGr9dIVTIF116PPDOODGVDBcVdB/alPhZbresDYZO YaPZ1Z5SWjnWBJquCmspQkh437OkBq7VFnzEXIMnSdMliVj567jZsJnlgRCfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1fmZ40troPLOmmv3Ews42604ypQwHwYDVR0j BBgwFoAU/C6FvprApr5Tt5KkidUGCfkkGH8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZjVjZmJhMy1lMDE3LTRlOGEtOWFjNS1mMmQzMDQzMTczNjUvMC9GQzJFODVCRTlB QzBBNkJFNTNCNzkyQTQ4OUQ1MDYwOUY5MjQxODdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkMyRTg1QkU5QUMwQTZCRTUzQjc5MkE0ODlENTA2MDlGOTI0 MTg3Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWY1Y2ZiYTMtZTAxNy00ZThhLTlh YzUtZjJkMzA0MzE3MzY1LzAvRkMyRTg1QkU5QUMwQTZCRTUzQjc5MkE0ODlENTA2 MDlGOTI0MTg3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALVJy7UGJHlar5U552bQtQ0PKXA5N5loLTSQ HKG9+z4D09NPtxJHrSzFbbiYeOLAieB58cHnBkl6e4MjX7xW8kwP8jTDDwNpLIhU rmC0GNVt1y9bRybI0mmoZHW/qXf815gGuuX+MKem+DctGLzMR7dA5kJRcfGQ6ELu 7Weues47XlYf7uzhFtZkwmrsQlu7vY4MQBldYb7rRQSEvrK9tmWP8SkxkyZwcLkU jgq/3hXcEb+z3OKbwsIAw0smk/G0XWHnkeAGFer2O+QJt3QfhMEbFWADZBwjskBt gP6AR7deRiFXCag0laeVo4VM1AimLvcB2q056So5GaoLfx2reAc= -----END CERTIFICATE-----Generated at Thu Mar 26 10:09:56 2026 by rpki-client