$ rpki-client -vvf repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.mft File: FC2DAAA409BA60DE33EC91F3A861D1A00719D426.mft (raw, json) Hash identifier: fJ3Z7DKL5H1w7mMy57iXmsBUOdH/ZmKe/skY8WAyMJY= Subject key identifier: 55:CF:A8:3B:76:1A:87:6A:5D:24:47:EC:5A:D4:6B:56:D6:7F:BF:70 Authority key identifier: FC:2D:AA:A4:09:BA:60:DE:33:EC:91:F3:A8:61:D1:A0:07:19:D4:26 Certificate issuer: /CN=FC2DAAA409BA60DE33EC91F3A861D1A00719D426 Certificate serial: 7300BCF58AB55BE2C2F3C09FA8FEF0DD8309950B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.mft Manifest number: ED Signing time: Tue 04 Nov 2025 06:00:51 +0000 Manifest this update: Tue 04 Nov 2025 05:55:51 +0000 Manifest next update: Fri 07 Nov 2025 11:15:51 +0000 Files and hashes: 1: FC2DAAA409BA60DE33EC91F3A861D1A00719D426.crl (hash: oqq29S31t1xGmuf5tfTHaMazhXqLG+W4NYB2tj1Ly6U=) 2: 3135372e36362e322e302f32332d3234203d3e20313532343430.roa (hash: 3ZS5/0NJnXKv4Pk0J4oSOH1r1VKtA3mh1qb3WAlsXUw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.crl rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 10:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:00:bc:f5:8a:b5:5b:e2:c2:f3:c0:9f:a8:fe:f0:dd:83:09:95:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC2DAAA409BA60DE33EC91F3A861D1A00719D426 Validity Not Before: Nov 4 05:55:51 2025 GMT Not After : Nov 7 11:15:51 2025 GMT Subject: CN=55CFA83B761A876A5D2447EC5AD46B56D67FBF70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:d1:5b:4a:66:1b:66:38:88:35:7b:58:1c:dc: 27:09:98:bf:5d:49:e8:ca:a4:38:c5:15:bb:dd:eb: e1:ca:8c:b6:1e:58:24:d0:0e:c3:fb:12:5b:bd:98: 16:f1:d9:ba:b4:8b:75:ab:41:4f:8e:42:65:c3:5b: 1d:b7:10:1c:4a:d9:5e:d1:d3:16:10:4b:da:34:67: d1:4c:b9:a2:28:9b:ac:50:8e:4c:dd:46:64:49:0f: 17:c9:90:d8:50:59:a0:38:45:fa:7b:1d:81:50:9d: 50:2a:13:05:51:34:62:d9:0f:9b:45:d6:41:73:9b: c2:98:9d:4d:c7:b9:44:40:a5:75:7f:a8:26:8c:7f: 66:7f:28:5a:36:64:ed:36:38:9d:31:e9:e8:55:22: fb:8f:bf:d9:e1:94:52:98:32:28:4d:78:d6:3c:41: e3:e5:07:53:34:3a:36:e5:19:c7:ee:4e:50:88:6d: 0d:9a:80:59:0b:37:2a:56:63:c7:b8:53:a4:aa:6d: c9:3a:68:87:9a:42:f7:c5:db:c1:56:db:6a:77:f5: 92:c5:ab:f4:18:32:bb:02:df:1e:32:67:d9:9f:7d: 44:eb:c3:10:8b:e6:91:19:5a:0a:f5:50:b8:ca:05: cd:cf:38:d2:10:4c:99:8e:07:47:9f:64:9d:41:c2: 81:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:CF:A8:3B:76:1A:87:6A:5D:24:47:EC:5A:D4:6B:56:D6:7F:BF:70 X509v3 Authority Key Identifier: keyid:FC:2D:AA:A4:09:BA:60:DE:33:EC:91:F3:A8:61:D1:A0:07:19:D4:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:a6:f8:71:90:ad:54:47:0a:e2:db:b9:0b:cc:9e:2d:11:1a: b0:18:11:ea:d9:aa:12:e4:ca:e2:28:b8:f3:e8:58:8c:74:e7: 64:31:56:e5:ae:42:1c:d8:7d:19:56:c2:ee:ab:85:b4:55:2a: dd:7c:21:43:bf:54:87:14:44:4f:83:98:a9:15:4d:c6:8f:d2: 1a:40:b8:07:41:d2:17:04:7b:3a:f7:a7:a7:17:73:91:e8:ae: 5c:a9:f7:76:7b:0e:73:69:e2:eb:39:d6:45:16:c8:a4:9e:ea: 8f:4a:2e:1d:dd:a4:cd:0a:33:2c:a0:6c:df:67:1c:a7:0f:71: e2:b4:05:4a:1e:d8:05:ec:17:20:15:58:28:28:d6:b9:b5:0f: 8c:8f:e4:7c:a9:fe:29:68:07:e0:2d:db:b7:7d:1a:5b:a2:b1: 60:1d:88:ff:5f:11:56:0e:f5:fc:ed:66:2d:90:e8:e5:99:ea: 34:1d:e0:df:07:3d:b8:0b:26:1e:77:0d:88:97:67:90:ea:88: b6:ad:5c:94:0f:d1:ba:c0:c9:04:05:ed:49:f5:a1:d5:2a:76: 4b:89:0b:9e:43:b0:f8:5f:be:eb:94:53:02:5b:4f:8d:cb:f7: 75:c2:99:0c:c5:46:68:8c:a1:25:53:a9:4c:80:c2:07:44:dc: 10:e5:8f:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcwC89Yq1W+LC88CfqP7w3YMJlQswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkMyREFBQTQwOUJBNjBERTMzRUM5MUYzQTg2MUQxQTAw NzE5RDQyNjAeFw0yNTExMDQwNTU1NTFaFw0yNTExMDcxMTE1NTFaMDMxMTAvBgNV BAMTKDU1Q0ZBODNCNzYxQTg3NkE1RDI0NDdFQzVBRDQ2QjU2RDY3RkJGNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW0VtKZhtmOIg1e1gc3CcJmL9d SejKpDjFFbvd6+HKjLYeWCTQDsP7Elu9mBbx2bq0i3WrQU+OQmXDWx23EBxK2V7R 0xYQS9o0Z9FMuaIom6xQjkzdRmRJDxfJkNhQWaA4Rfp7HYFQnVAqEwVRNGLZD5tF 1kFzm8KYnU3HuURApXV/qCaMf2Z/KFo2ZO02OJ0x6ehVIvuPv9nhlFKYMihNeNY8 QePlB1M0OjblGcfuTlCIbQ2agFkLNypWY8e4U6Sqbck6aIeaQvfF28FW22p39ZLF q/QYMrsC3x4yZ9mffUTrwxCL5pEZWgr1ULjKBc3PONIQTJmOB0efZJ1BwoGNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVc+oO3Yah2pdJEfsWtRrVtZ/v3AwHwYDVR0j BBgwFoAU/C2qpAm6YN4z7JHzqGHRoAcZ1CYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZmI4MDhlYi1jOThlLTQwMzYtYmU5YS0xOTNiYmNjNjQ4OTIvMC9GQzJEQUFBNDA5 QkE2MERFMzNFQzkxRjNBODYxRDFBMDA3MTlENDI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkMyREFBQTQwOUJBNjBERTMzRUM5MUYzQTg2MUQxQTAwNzE5 RDQyNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWZiODA4ZWItYzk4ZS00MDM2LWJl OWEtMTkzYmJjYzY0ODkyLzAvRkMyREFBQTQwOUJBNjBERTMzRUM5MUYzQTg2MUQx QTAwNzE5RDQyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIOm+HGQrVRHCuLbuQvMni0RGrAYEerZqhLk yuIouPPoWIx052QxVuWuQhzYfRlWwu6rhbRVKt18IUO/VIcURE+DmKkVTcaP0hpA uAdB0hcEezr3p6cXc5Horlyp93Z7DnNp4us51kUWyKSe6o9KLh3dpM0KMyygbN9n HKcPceK0BUoe2AXsFyAVWCgo1rm1D4yP5Hyp/iloB+At27d9GluisWAdiP9fEVYO 9fztZi2Q6OWZ6jQd4N8HPbgLJh53DYiXZ5DqiLatXJQP0brAyQQF7Un1odUqdkuJ C55DsPhfvuuUUwJbT43L93XCmQzFRmiMoSVTqUyAwgdE3BDljwE= -----END CERTIFICATE-----Generated at Wed Nov 5 03:38:27 2025 by rpki-client