$ rpki-client -vvf repo-rpki.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/FC2E85BE9AC0A6BE53B792A489D50609F924187F.mft File: FC2E85BE9AC0A6BE53B792A489D50609F924187F.mft (raw, json) Hash identifier: HV5FJJgp38OVGVd8cksUUJRpmeCLuZqDTbU4gLnemG0= Subject key identifier: 7F:F2:81:7E:CD:90:C7:B6:B2:42:33:B4:B6:97:A8:FF:8A:42:A1:76 Authority key identifier: FC:2E:85:BE:9A:C0:A6:BE:53:B7:92:A4:89:D5:06:09:F9:24:18:7F Certificate issuer: /CN=FC2E85BE9AC0A6BE53B792A489D50609F924187F Certificate serial: 34BED09D7EA3EF3564BE138A4D1FFBE4D3D72667 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC2E85BE9AC0A6BE53B792A489D50609F924187F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/FC2E85BE9AC0A6BE53B792A489D50609F924187F.mft Manifest number: 04E0 Signing time: Tue 17 Jun 2025 14:31:04 +0000 Manifest this update: Tue 17 Jun 2025 14:26:04 +0000 Manifest next update: Fri 20 Jun 2025 16:26:04 +0000 Files and hashes: 1: 3130332e3131322e3138392e302f32342d3234203d3e20313337333332.roa (hash: fTPWv2oiJIx2qSggb2hiWiOmKdtYeAQZFu4dr/E9CSA=) 2: FC2E85BE9AC0A6BE53B792A489D50609F924187F.crl (hash: M8lhcOIMWMh23orsDHfwDVfdqF9LQaBwvhXtb3P64ww=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/FC2E85BE9AC0A6BE53B792A489D50609F924187F.crl rsync://repo-rpki.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/FC2E85BE9AC0A6BE53B792A489D50609F924187F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC2E85BE9AC0A6BE53B792A489D50609F924187F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 13:46:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:be:d0:9d:7e:a3:ef:35:64:be:13:8a:4d:1f:fb:e4:d3:d7:26:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC2E85BE9AC0A6BE53B792A489D50609F924187F Validity Not Before: Jun 17 14:26:04 2025 GMT Not After : Jun 20 16:26:04 2025 GMT Subject: CN=7FF2817ECD90C7B6B24233B4B697A8FF8A42A176 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:63:83:fb:82:fc:2f:9a:f5:d2:27:30:eb:c4: 57:22:37:d0:44:fd:e2:44:7f:9f:90:7d:72:a4:c0: 18:e6:03:1c:aa:5b:2c:f7:87:69:9a:88:47:cb:92: 32:22:3e:75:7f:26:a5:be:47:b6:8b:fa:87:71:0e: 02:5d:d6:79:55:ae:73:e0:f0:e7:a5:a9:40:7e:20: 54:75:f7:56:98:a4:7a:63:e0:ef:a4:6e:56:cc:37: c7:38:09:f4:41:d2:a5:bf:13:a8:f0:dc:17:9a:a8: 48:ef:a1:fc:c8:58:3c:80:05:62:27:0c:03:6b:ca: d1:b9:47:96:f7:f8:7b:d7:74:8a:20:c4:7a:ee:a6: 8c:0f:18:49:a0:65:e2:c4:fe:ac:66:8f:e2:87:60: be:d8:22:85:52:6a:c8:3d:ea:f4:7b:b1:3c:02:21: aa:1b:7d:72:42:02:ce:9b:e5:a7:ac:ee:2e:d2:32: 63:41:77:21:44:62:17:99:87:1b:55:4a:d3:4a:57: d6:e9:58:d2:86:c1:b0:be:24:b9:bd:34:3f:b0:40: d4:30:3e:2a:93:9d:f4:0e:d8:57:9a:6c:25:79:57: 6e:40:e6:d0:03:be:6d:6f:07:3c:86:32:c5:61:df: b1:ac:1a:14:8e:f6:9c:3e:e8:6b:f2:d0:ae:3d:29: 36:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:F2:81:7E:CD:90:C7:B6:B2:42:33:B4:B6:97:A8:FF:8A:42:A1:76 X509v3 Authority Key Identifier: keyid:FC:2E:85:BE:9A:C0:A6:BE:53:B7:92:A4:89:D5:06:09:F9:24:18:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/FC2E85BE9AC0A6BE53B792A489D50609F924187F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC2E85BE9AC0A6BE53B792A489D50609F924187F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/FC2E85BE9AC0A6BE53B792A489D50609F924187F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:1b:72:ed:09:35:3b:dd:0a:88:21:0a:93:16:58:bb:c2:49: bb:20:b1:77:db:2f:b0:82:3d:bd:22:b4:ab:12:8f:53:12:e4: 3c:b3:dd:ff:f6:6c:9b:90:40:ae:b6:64:9e:6c:14:44:17:07: 7e:46:78:32:b8:18:2e:11:91:55:83:4e:31:68:2d:a8:e4:b8: cc:0e:d4:48:1a:1f:9f:06:c4:bf:b1:c1:01:27:9b:26:11:86: 77:85:e8:70:76:b4:04:2e:75:35:9d:6a:19:23:30:ad:4f:a3: 2f:7c:4f:5f:42:90:8d:33:1a:1f:4a:93:45:f4:c7:d1:20:e8: 76:fe:6c:b1:56:b0:fc:a2:4e:7e:d5:df:55:33:e4:53:09:56: be:7d:3f:3e:d0:2b:fa:be:b1:56:fd:98:61:f8:7a:33:5a:53: fd:2b:41:ef:63:40:1f:cb:21:5d:d7:85:76:e7:e9:da:5b:06: 93:a8:e2:f2:e2:35:63:2b:e6:03:50:5f:11:ad:96:3e:31:c0: 40:e8:78:f8:7a:7b:92:cf:38:ee:81:5f:df:94:c9:ee:cc:75: 89:0f:ed:91:4f:5d:f9:b2:a3:52:4d:8b:00:c8:ec:e5:08:d0: f1:b0:84:f3:aa:1b:f6:11:64:a2:0f:54:2c:c8:f9:9e:94:f1: cf:a8:00:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNL7QnX6j7zVkvhOKTR/75NPXJmcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkMyRTg1QkU5QUMwQTZCRTUzQjc5MkE0ODlENTA2MDlG OTI0MTg3RjAeFw0yNTA2MTcxNDI2MDRaFw0yNTA2MjAxNjI2MDRaMDMxMTAvBgNV BAMTKDdGRjI4MTdFQ0Q5MEM3QjZCMjQyMzNCNEI2OTdBOEZGOEE0MkExNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmY4P7gvwvmvXSJzDrxFciN9BE /eJEf5+QfXKkwBjmAxyqWyz3h2maiEfLkjIiPnV/JqW+R7aL+odxDgJd1nlVrnPg 8OelqUB+IFR191aYpHpj4O+kblbMN8c4CfRB0qW/E6jw3BeaqEjvofzIWDyABWIn DANrytG5R5b3+HvXdIogxHrupowPGEmgZeLE/qxmj+KHYL7YIoVSasg96vR7sTwC IaobfXJCAs6b5aes7i7SMmNBdyFEYheZhxtVStNKV9bpWNKGwbC+JLm9ND+wQNQw PiqTnfQO2FeabCV5V25A5tADvm1vBzyGMsVh37GsGhSO9pw+6Gvy0K49KTblAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUf/KBfs2Qx7ayQjO0tpeo/4pCoXYwHwYDVR0j BBgwFoAU/C6FvprApr5Tt5KkidUGCfkkGH8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZjVjZmJhMy1lMDE3LTRlOGEtOWFjNS1mMmQzMDQzMTczNjUvMC9GQzJFODVCRTlB QzBBNkJFNTNCNzkyQTQ4OUQ1MDYwOUY5MjQxODdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkMyRTg1QkU5QUMwQTZCRTUzQjc5MkE0ODlENTA2MDlGOTI0 MTg3Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWY1Y2ZiYTMtZTAxNy00ZThhLTlh YzUtZjJkMzA0MzE3MzY1LzAvRkMyRTg1QkU5QUMwQTZCRTUzQjc5MkE0ODlENTA2 MDlGOTI0MTg3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHMbcu0JNTvdCoghCpMWWLvCSbsgsXfbL7CC Pb0itKsSj1MS5Dyz3f/2bJuQQK62ZJ5sFEQXB35GeDK4GC4RkVWDTjFoLajkuMwO 1EgaH58GxL+xwQEnmyYRhneF6HB2tAQudTWdahkjMK1Poy98T19CkI0zGh9Kk0X0 x9Eg6Hb+bLFWsPyiTn7V31Uz5FMJVr59Pz7QK/q+sVb9mGH4ejNaU/0rQe9jQB/L IV3XhXbn6dpbBpOo4vLiNWMr5gNQXxGtlj4xwEDoePh6e5LPOO6BX9+Uye7MdYkP 7ZFPXfmyo1JNiwDI7OUI0PGwhPOqG/YRZKIPVCzI+Z6U8c+oAOQ= -----END CERTIFICATE-----Generated at Tue Jun 17 18:04:52 2025 by rpki-client