$ rpki-client -vvf repo-rpki.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/FC2E85BE9AC0A6BE53B792A489D50609F924187F.mft File: FC2E85BE9AC0A6BE53B792A489D50609F924187F.mft (raw, json) Hash identifier: QCYOSas6RTbOz/7+Rw0C5o1TlthoJWYAViwjtPJPD5g= Subject key identifier: F2:65:62:2E:10:2C:85:BD:A0:33:28:C0:68:37:3E:57:9C:C6:0C:8C Authority key identifier: FC:2E:85:BE:9A:C0:A6:BE:53:B7:92:A4:89:D5:06:09:F9:24:18:7F Certificate issuer: /CN=FC2E85BE9AC0A6BE53B792A489D50609F924187F Certificate serial: 3B74C52F449E1F99322DD3E80F8DB706B7BCBEC5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC2E85BE9AC0A6BE53B792A489D50609F924187F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/FC2E85BE9AC0A6BE53B792A489D50609F924187F.mft Manifest number: 04E6 Signing time: Tue 01 Jul 2025 03:21:04 +0000 Manifest this update: Tue 01 Jul 2025 03:16:04 +0000 Manifest next update: Fri 04 Jul 2025 10:21:04 +0000 Files and hashes: 1: FC2E85BE9AC0A6BE53B792A489D50609F924187F.crl (hash: JrKlbiuh0CGz79Nhd8ILhtSQNJY1PSO137fhnX9nV9Y=) 2: 3130332e3131322e3138392e302f32342d3234203d3e20313337333332.roa (hash: fTPWv2oiJIx2qSggb2hiWiOmKdtYeAQZFu4dr/E9CSA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/FC2E85BE9AC0A6BE53B792A489D50609F924187F.crl rsync://repo-rpki.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/FC2E85BE9AC0A6BE53B792A489D50609F924187F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC2E85BE9AC0A6BE53B792A489D50609F924187F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 10:21:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:74:c5:2f:44:9e:1f:99:32:2d:d3:e8:0f:8d:b7:06:b7:bc:be:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC2E85BE9AC0A6BE53B792A489D50609F924187F Validity Not Before: Jul 1 03:16:04 2025 GMT Not After : Jul 4 10:21:04 2025 GMT Subject: CN=F265622E102C85BDA03328C068373E579CC60C8C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f9:5a:97:37:a0:66:22:4b:26:fe:10:b3:ad: 99:06:0a:54:c9:a4:e8:b9:c2:83:45:1d:15:41:ee: 63:93:80:c2:f9:5a:de:fb:8b:ed:37:26:73:55:a3: 9e:c4:09:98:b3:73:de:df:31:24:b0:e3:de:32:9f: 74:a0:27:da:ed:4c:e7:13:eb:0c:27:46:a1:f2:72: 95:35:3d:d1:59:41:4a:1e:95:0f:11:63:ea:2d:3f: 35:91:96:6f:b6:dd:61:1e:3f:e8:69:1f:8a:23:c4: 55:d4:04:da:48:0a:3e:41:ce:82:50:e3:01:d1:1b: 6c:a9:f1:da:51:bf:50:af:aa:85:0a:ed:0d:58:05: 06:bd:87:9d:09:6d:65:e9:e0:39:87:77:90:10:37: 9b:b2:0c:99:74:50:03:ca:5c:4c:84:67:ea:2e:49: f2:cf:6d:00:11:b2:a3:10:f8:72:fd:e8:4d:8d:83: 2e:51:f4:91:74:e1:ee:c3:c7:22:81:28:3c:0d:a7: 3a:82:df:ba:ce:1f:65:56:b2:ac:02:8f:b0:08:1b: 60:9a:b4:b0:a2:c6:39:a3:bd:7c:05:64:3c:96:50: 3e:51:1f:4f:55:38:8e:89:52:67:d4:c6:02:e3:f9: 40:3e:bf:d1:e5:02:7e:f2:6f:cd:2a:60:a8:95:48: 4f:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:65:62:2E:10:2C:85:BD:A0:33:28:C0:68:37:3E:57:9C:C6:0C:8C X509v3 Authority Key Identifier: keyid:FC:2E:85:BE:9A:C0:A6:BE:53:B7:92:A4:89:D5:06:09:F9:24:18:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/FC2E85BE9AC0A6BE53B792A489D50609F924187F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC2E85BE9AC0A6BE53B792A489D50609F924187F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/FC2E85BE9AC0A6BE53B792A489D50609F924187F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:4e:3a:34:b9:77:11:9d:79:ea:b0:19:33:14:64:33:79:24: 6f:e7:a9:30:70:d4:cc:22:04:96:fd:78:4c:6d:03:b7:73:33: 7c:d6:81:ff:f7:c2:67:4a:1a:09:c4:6e:f6:10:8d:ad:f7:00: b7:92:a0:22:1e:6e:65:77:38:c0:d2:7e:31:e3:11:63:6c:95: 61:61:8f:48:1a:d1:d9:cd:bb:17:39:d4:44:ba:f3:5c:e4:78: 46:a7:99:f2:79:9e:d2:ea:0a:66:5c:4d:d2:b4:00:d4:1b:13: 94:08:32:b2:4b:11:32:69:7f:b3:fe:fd:98:50:27:66:e9:81: 88:46:4f:fc:fd:78:39:de:60:5e:b1:30:e2:a0:6a:b9:0b:e4: e8:c0:3f:16:e1:57:d9:c7:36:30:e2:c6:97:7d:d9:14:d5:7c: fb:90:e7:4a:df:c3:56:e5:63:56:e8:e2:14:24:3c:7b:b2:08: 6b:db:ec:6b:c3:69:c3:4d:7d:d2:33:57:3b:84:77:21:a5:88: 9d:0b:e9:f5:23:36:49:99:aa:1a:62:bb:9d:b0:2b:de:82:80: cb:9c:47:e9:48:f5:b2:35:c3:ef:f1:a2:1b:7e:3f:c6:46:34: cd:2d:b6:2c:a1:cd:8e:28:8b:ee:16:e7:40:57:26:ad:e2:0d: 4e:db:d6:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO3TFL0SeH5kyLdPoD423Bre8vsUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkMyRTg1QkU5QUMwQTZCRTUzQjc5MkE0ODlENTA2MDlG OTI0MTg3RjAeFw0yNTA3MDEwMzE2MDRaFw0yNTA3MDQxMDIxMDRaMDMxMTAvBgNV BAMTKEYyNjU2MjJFMTAyQzg1QkRBMDMzMjhDMDY4MzczRTU3OUNDNjBDOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB+VqXN6BmIksm/hCzrZkGClTJ pOi5woNFHRVB7mOTgML5Wt77i+03JnNVo57ECZizc97fMSSw494yn3SgJ9rtTOcT 6wwnRqHycpU1PdFZQUoelQ8RY+otPzWRlm+23WEeP+hpH4ojxFXUBNpICj5BzoJQ 4wHRG2yp8dpRv1CvqoUK7Q1YBQa9h50JbWXp4DmHd5AQN5uyDJl0UAPKXEyEZ+ou SfLPbQARsqMQ+HL96E2Ngy5R9JF04e7DxyKBKDwNpzqC37rOH2VWsqwCj7AIG2Ca tLCixjmjvXwFZDyWUD5RH09VOI6JUmfUxgLj+UA+v9HlAn7yb80qYKiVSE+DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8mViLhAshb2gMyjAaDc+V5zGDIwwHwYDVR0j BBgwFoAU/C6FvprApr5Tt5KkidUGCfkkGH8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZjVjZmJhMy1lMDE3LTRlOGEtOWFjNS1mMmQzMDQzMTczNjUvMC9GQzJFODVCRTlB QzBBNkJFNTNCNzkyQTQ4OUQ1MDYwOUY5MjQxODdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkMyRTg1QkU5QUMwQTZCRTUzQjc5MkE0ODlENTA2MDlGOTI0 MTg3Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWY1Y2ZiYTMtZTAxNy00ZThhLTlh YzUtZjJkMzA0MzE3MzY1LzAvRkMyRTg1QkU5QUMwQTZCRTUzQjc5MkE0ODlENTA2 MDlGOTI0MTg3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL9OOjS5dxGdeeqwGTMUZDN5JG/nqTBw1Mwi BJb9eExtA7dzM3zWgf/3wmdKGgnEbvYQja33ALeSoCIebmV3OMDSfjHjEWNslWFh j0ga0dnNuxc51ES681zkeEanmfJ5ntLqCmZcTdK0ANQbE5QIMrJLETJpf7P+/ZhQ J2bpgYhGT/z9eDneYF6xMOKgarkL5OjAPxbhV9nHNjDixpd92RTVfPuQ50rfw1bl Y1bo4hQkPHuyCGvb7GvDacNNfdIzVzuEdyGliJ0L6fUjNkmZqhpiu52wK96CgMuc R+lI9bI1w+/xoht+P8ZGNM0ttiyhzY4oi+4W50BXJq3iDU7b1po= -----END CERTIFICATE-----Generated at Wed Jul 2 14:59:16 2025 by rpki-client