$ rpki-client -vvf repo-rpki.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/FC2E85BE9AC0A6BE53B792A489D50609F924187F.mft File: FC2E85BE9AC0A6BE53B792A489D50609F924187F.mft (raw, json) Hash identifier: b7y93HV2oHUZWbMX4tmS4EbIaG6eHed8nHFbyJsjb30= Subject key identifier: 66:D1:33:99:4D:6D:6C:50:AC:B4:D3:C1:70:5B:4D:FF:43:BF:31:F6 Authority key identifier: FC:2E:85:BE:9A:C0:A6:BE:53:B7:92:A4:89:D5:06:09:F9:24:18:7F Certificate issuer: /CN=FC2E85BE9AC0A6BE53B792A489D50609F924187F Certificate serial: 43FFB61FCEC4BC943C3181BBBB7C5870B76E6508 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC2E85BE9AC0A6BE53B792A489D50609F924187F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/FC2E85BE9AC0A6BE53B792A489D50609F924187F.mft Manifest number: 0567 Signing time: Fri 17 Apr 2026 15:51:15 +0000 Manifest this update: Fri 17 Apr 2026 15:46:15 +0000 Manifest next update: Tue 21 Apr 2026 01:49:15 +0000 Files and hashes: 1: FC2E85BE9AC0A6BE53B792A489D50609F924187F.crl (hash: vtuhhFVEYyk0tQWX2FNk7e4J/GjPcmwn2eYtHS3XhHI=) 2: 3130332e3131322e3138392e302f32342d3234203d3e20313337333332.roa (hash: fTPWv2oiJIx2qSggb2hiWiOmKdtYeAQZFu4dr/E9CSA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/FC2E85BE9AC0A6BE53B792A489D50609F924187F.crl rsync://repo-rpki.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/FC2E85BE9AC0A6BE53B792A489D50609F924187F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC2E85BE9AC0A6BE53B792A489D50609F924187F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 01:49:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:ff:b6:1f:ce:c4:bc:94:3c:31:81:bb:bb:7c:58:70:b7:6e:65:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC2E85BE9AC0A6BE53B792A489D50609F924187F Validity Not Before: Apr 17 15:46:15 2026 GMT Not After : Apr 21 01:49:15 2026 GMT Subject: CN=66D133994D6D6C50ACB4D3C1705B4DFF43BF31F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:88:85:76:ec:b9:23:c3:de:e6:c7:98:4b:2b: c9:93:db:d0:97:e3:09:b2:5b:96:53:e8:7a:de:27: 5b:37:83:61:55:44:e9:7f:98:d5:62:80:1a:89:b0: d8:ca:80:75:e0:c6:91:66:4c:0d:81:33:a8:c5:6d: 13:85:58:ef:b0:1e:17:85:43:28:62:ad:a6:a6:e4: 96:ef:52:f5:4f:a1:cc:05:80:50:81:54:8e:47:12: 3f:67:f2:71:1a:71:6b:d1:7f:19:8b:41:20:7d:8d: fd:51:00:aa:36:82:50:90:2a:11:5a:9d:5b:92:cd: 48:ac:81:8a:0c:f7:1a:69:53:21:4f:42:bf:03:5a: f9:9d:48:8f:95:31:0f:fc:4d:2d:5c:10:26:22:3e: 3d:46:f5:13:59:0e:c2:10:48:b1:88:24:83:ff:e7: 19:f2:fb:06:4a:0d:61:8e:ab:92:c7:6b:c0:1f:8d: bf:e1:f6:e9:32:61:af:a1:dc:39:4f:1b:7b:19:e9: ba:af:d6:b0:53:f5:26:4d:94:ad:33:18:ed:74:88: 97:78:b9:d1:3a:18:5d:23:f8:91:1b:97:9c:06:d5: 5f:cd:ab:9d:4d:35:8a:43:41:59:43:25:81:da:12: ae:a8:fb:6c:4f:34:3f:41:20:49:22:c1:cb:f7:2e: 75:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:D1:33:99:4D:6D:6C:50:AC:B4:D3:C1:70:5B:4D:FF:43:BF:31:F6 X509v3 Authority Key Identifier: keyid:FC:2E:85:BE:9A:C0:A6:BE:53:B7:92:A4:89:D5:06:09:F9:24:18:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/FC2E85BE9AC0A6BE53B792A489D50609F924187F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC2E85BE9AC0A6BE53B792A489D50609F924187F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/FC2E85BE9AC0A6BE53B792A489D50609F924187F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:4f:f3:3b:62:b5:67:21:fe:44:83:66:e8:b4:23:ed:25:e9: 48:54:0c:2c:93:82:df:65:45:03:ed:1c:df:68:45:96:2b:b4: b5:25:ac:9a:99:11:f2:d7:dd:10:fa:21:e7:43:5d:dd:e1:cb: 2e:07:f5:82:f5:28:fe:eb:23:61:a5:2f:ed:b9:0f:fc:2d:7a: c6:f2:dd:72:8f:b9:c5:30:99:eb:b6:a3:f6:2f:97:78:8f:29: 28:32:e0:4f:c0:9c:ee:a5:4c:02:7f:d3:9e:71:bc:fe:96:f9: 66:3e:74:75:8d:f6:01:64:03:67:97:f4:66:79:68:4c:d0:8f: a0:0e:d9:38:cb:fe:4e:07:bf:2b:44:ac:04:35:b6:6d:d2:82: 7e:1b:2b:1a:f4:33:16:cd:d0:fc:88:04:55:ba:36:6d:b1:62: 57:81:af:28:39:11:52:b3:7f:e9:f9:d8:1f:9a:35:1c:b2:60: 75:30:e2:fb:fe:ab:d3:39:d0:cf:5f:98:77:e0:8f:c4:5a:cd: af:3b:0b:9f:72:6c:74:fb:bf:e8:07:a8:a3:84:f8:3b:52:aa: bc:b3:a4:0a:c0:7d:d1:fb:9d:d2:13:f5:19:64:9c:d9:08:46: 8c:28:92:6e:42:17:a6:0a:f8:e3:55:fa:e5:25:0d:04:30:fc: f1:30:da:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ/+2H87EvJQ8MYG7u3xYcLduZQgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkMyRTg1QkU5QUMwQTZCRTUzQjc5MkE0ODlENTA2MDlG OTI0MTg3RjAeFw0yNjA0MTcxNTQ2MTVaFw0yNjA0MjEwMTQ5MTVaMDMxMTAvBgNV BAMTKDY2RDEzMzk5NEQ2RDZDNTBBQ0I0RDNDMTcwNUI0REZGNDNCRjMxRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMiIV27Lkjw97mx5hLK8mT29CX 4wmyW5ZT6HreJ1s3g2FVROl/mNVigBqJsNjKgHXgxpFmTA2BM6jFbROFWO+wHheF Qyhiraam5JbvUvVPocwFgFCBVI5HEj9n8nEacWvRfxmLQSB9jf1RAKo2glCQKhFa nVuSzUisgYoM9xppUyFPQr8DWvmdSI+VMQ/8TS1cECYiPj1G9RNZDsIQSLGIJIP/ 5xny+wZKDWGOq5LHa8Afjb/h9ukyYa+h3DlPG3sZ6bqv1rBT9SZNlK0zGO10iJd4 udE6GF0j+JEbl5wG1V/Nq51NNYpDQVlDJYHaEq6o+2xPND9BIEkiwcv3LnU7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZtEzmU1tbFCstNPBcFtN/0O/MfYwHwYDVR0j BBgwFoAU/C6FvprApr5Tt5KkidUGCfkkGH8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZjVjZmJhMy1lMDE3LTRlOGEtOWFjNS1mMmQzMDQzMTczNjUvMC9GQzJFODVCRTlB QzBBNkJFNTNCNzkyQTQ4OUQ1MDYwOUY5MjQxODdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkMyRTg1QkU5QUMwQTZCRTUzQjc5MkE0ODlENTA2MDlGOTI0 MTg3Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWY1Y2ZiYTMtZTAxNy00ZThhLTlh YzUtZjJkMzA0MzE3MzY1LzAvRkMyRTg1QkU5QUMwQTZCRTUzQjc5MkE0ODlENTA2 MDlGOTI0MTg3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAVP8ztitWch/kSDZui0I+0l6UhUDCyTgt9l RQPtHN9oRZYrtLUlrJqZEfLX3RD6IedDXd3hyy4H9YL1KP7rI2GlL+25D/wtesby 3XKPucUwmeu2o/Yvl3iPKSgy4E/AnO6lTAJ/055xvP6W+WY+dHWN9gFkA2eX9GZ5 aEzQj6AO2TjL/k4HvytErAQ1tm3Sgn4bKxr0MxbN0PyIBFW6Nm2xYleBryg5EVKz f+n52B+aNRyyYHUw4vv+q9M50M9fmHfgj8Raza87C59ybHT7v+gHqKOE+DtSqryz pArAfdH7ndIT9RlknNkIRowokm5CF6YK+ONV+uUlDQQw/PEw2gs= -----END CERTIFICATE-----Generated at Sun Apr 19 13:01:39 2026 by rpki-client