$ rpki-client -vvf repo-rpki.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/FC2E85BE9AC0A6BE53B792A489D50609F924187F.mft File: FC2E85BE9AC0A6BE53B792A489D50609F924187F.mft (raw, json) Hash identifier: 9nz1ivn9+VGClVY/hfCfN7Mtw4IWSbih8nrB824AmKA= Subject key identifier: 65:76:85:7E:4F:00:35:88:BF:0C:E9:8D:6B:38:05:15:DD:2F:67:4E Authority key identifier: FC:2E:85:BE:9A:C0:A6:BE:53:B7:92:A4:89:D5:06:09:F9:24:18:7F Certificate issuer: /CN=FC2E85BE9AC0A6BE53B792A489D50609F924187F Certificate serial: 69000183DE1637E2A2E6F5689B061F4580092708 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC2E85BE9AC0A6BE53B792A489D50609F924187F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/FC2E85BE9AC0A6BE53B792A489D50609F924187F.mft Manifest number: 0552 Signing time: Sun 01 Mar 2026 12:01:13 +0000 Manifest this update: Sun 01 Mar 2026 11:56:13 +0000 Manifest next update: Wed 04 Mar 2026 14:42:13 +0000 Files and hashes: 1: FC2E85BE9AC0A6BE53B792A489D50609F924187F.crl (hash: IP41GbQ7p9tZ4r5b0qOmjC6Xgs+89mHJvAoZHK5DTe4=) 2: 3130332e3131322e3138392e302f32342d3234203d3e20313337333332.roa (hash: fTPWv2oiJIx2qSggb2hiWiOmKdtYeAQZFu4dr/E9CSA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/FC2E85BE9AC0A6BE53B792A489D50609F924187F.crl rsync://repo-rpki.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/FC2E85BE9AC0A6BE53B792A489D50609F924187F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC2E85BE9AC0A6BE53B792A489D50609F924187F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 14:42:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:00:01:83:de:16:37:e2:a2:e6:f5:68:9b:06:1f:45:80:09:27:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC2E85BE9AC0A6BE53B792A489D50609F924187F Validity Not Before: Mar 1 11:56:13 2026 GMT Not After : Mar 4 14:42:13 2026 GMT Subject: CN=6576857E4F003588BF0CE98D6B380515DD2F674E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:2d:bd:97:fb:c1:46:b5:cc:93:74:7a:84:fd: 6a:04:17:8e:7a:f0:29:5f:8c:a7:02:0e:fc:f5:5d: 0c:1d:8e:d0:12:b5:54:be:d4:6c:cb:0b:ed:90:30: 6f:ff:10:7f:8b:27:af:c2:b2:8b:3c:3f:39:aa:eb: 4c:d2:79:95:6a:50:59:64:d8:27:bd:46:ea:f6:95: 02:b3:dc:3d:04:97:24:80:22:cc:cd:1b:fb:6f:4b: f3:ef:6e:0d:1c:3a:9f:07:04:ed:ac:4c:13:9c:c6: 91:8d:63:bb:a2:5a:a6:45:9f:e9:70:a4:64:9d:48: a7:77:d3:af:31:8d:43:5a:d5:58:c1:8c:dd:a6:a9: fe:41:d6:78:47:3e:01:4e:e2:a5:90:1e:ef:73:4e: ba:f9:55:cb:bb:2b:e9:8d:38:53:6e:72:f5:da:46: ac:6e:6f:a7:25:a5:4d:7e:eb:ed:a6:ab:e0:41:eb: df:98:f3:ba:c4:d2:3e:97:d5:83:68:49:bc:61:4a: 19:92:ba:62:d0:04:6b:c5:e3:46:16:14:a8:e5:df: 0c:05:04:1a:05:6e:93:4b:20:4c:c5:3c:36:c9:c1: af:c4:6b:32:7c:f0:fb:6e:6a:5f:5a:08:84:5a:14: 3d:f5:88:9f:63:e7:39:97:21:8a:4f:79:fe:89:fe: 36:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:76:85:7E:4F:00:35:88:BF:0C:E9:8D:6B:38:05:15:DD:2F:67:4E X509v3 Authority Key Identifier: keyid:FC:2E:85:BE:9A:C0:A6:BE:53:B7:92:A4:89:D5:06:09:F9:24:18:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/FC2E85BE9AC0A6BE53B792A489D50609F924187F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC2E85BE9AC0A6BE53B792A489D50609F924187F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/FC2E85BE9AC0A6BE53B792A489D50609F924187F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:5b:47:27:4d:d7:7f:10:43:21:8d:e6:a6:c9:a6:ae:26:d8: 42:fa:84:53:5e:66:dd:c1:1b:bf:50:bd:63:8b:59:42:91:32: 94:ea:1d:75:84:fe:6d:6b:04:43:65:71:d2:29:52:28:be:32: 3a:66:85:75:31:af:e0:8b:d4:fc:2b:ae:60:a3:49:d0:2d:21: e5:93:7e:de:60:bd:88:b1:00:83:e6:48:88:f1:09:35:a5:bf: 13:49:45:4b:cd:78:29:40:b4:d1:f9:91:f6:1a:42:65:3e:b5: ea:29:88:e0:5c:bc:74:e2:0d:f4:bf:e7:70:e6:fe:a4:99:77: c4:a6:f9:a0:00:c7:77:51:67:9e:15:17:ec:e6:95:ab:f2:58: a0:b4:51:82:f5:15:25:bf:16:ae:1e:4a:9c:ae:a6:7e:db:b9: 8b:81:31:92:a1:86:fe:dd:dc:3a:18:05:c5:b1:87:78:fe:21: 05:a0:5c:c3:62:2c:65:a4:e2:3a:b9:d7:17:f2:ef:24:c6:16: c7:d8:50:aa:d7:6a:40:32:33:77:81:5e:b5:92:92:1f:0f:ca: fa:31:ae:f4:24:6b:d7:54:67:f8:06:c2:90:eb:19:d7:ea:eb: e6:6c:20:19:90:00:cf:56:f7:ce:87:dc:4e:ef:81:75:f0:11: ba:73:ae:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaQABg94WN+Ki5vVomwYfRYAJJwgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkMyRTg1QkU5QUMwQTZCRTUzQjc5MkE0ODlENTA2MDlG OTI0MTg3RjAeFw0yNjAzMDExMTU2MTNaFw0yNjAzMDQxNDQyMTNaMDMxMTAvBgNV BAMTKDY1NzY4NTdFNEYwMDM1ODhCRjBDRTk4RDZCMzgwNTE1REQyRjY3NEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwLb2X+8FGtcyTdHqE/WoEF456 8ClfjKcCDvz1XQwdjtAStVS+1GzLC+2QMG//EH+LJ6/Csos8Pzmq60zSeZVqUFlk 2Ce9Rur2lQKz3D0ElySAIszNG/tvS/Pvbg0cOp8HBO2sTBOcxpGNY7uiWqZFn+lw pGSdSKd3068xjUNa1VjBjN2mqf5B1nhHPgFO4qWQHu9zTrr5Vcu7K+mNOFNucvXa Rqxub6clpU1+6+2mq+BB69+Y87rE0j6X1YNoSbxhShmSumLQBGvF40YWFKjl3wwF BBoFbpNLIEzFPDbJwa/EazJ88Ptual9aCIRaFD31iJ9j5zmXIYpPef6J/jYLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZXaFfk8ANYi/DOmNazgFFd0vZ04wHwYDVR0j BBgwFoAU/C6FvprApr5Tt5KkidUGCfkkGH8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZjVjZmJhMy1lMDE3LTRlOGEtOWFjNS1mMmQzMDQzMTczNjUvMC9GQzJFODVCRTlB QzBBNkJFNTNCNzkyQTQ4OUQ1MDYwOUY5MjQxODdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkMyRTg1QkU5QUMwQTZCRTUzQjc5MkE0ODlENTA2MDlGOTI0 MTg3Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWY1Y2ZiYTMtZTAxNy00ZThhLTlh YzUtZjJkMzA0MzE3MzY1LzAvRkMyRTg1QkU5QUMwQTZCRTUzQjc5MkE0ODlENTA2 MDlGOTI0MTg3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABFbRydN138QQyGN5qbJpq4m2EL6hFNeZt3B G79QvWOLWUKRMpTqHXWE/m1rBENlcdIpUii+MjpmhXUxr+CL1PwrrmCjSdAtIeWT ft5gvYixAIPmSIjxCTWlvxNJRUvNeClAtNH5kfYaQmU+teopiOBcvHTiDfS/53Dm /qSZd8Sm+aAAx3dRZ54VF+zmlavyWKC0UYL1FSW/Fq4eSpyupn7buYuBMZKhhv7d 3DoYBcWxh3j+IQWgXMNiLGWk4jq51xfy7yTGFsfYUKrXakAyM3eBXrWSkh8Pyvox rvQka9dUZ/gGwpDrGdfq6+ZsIBmQAM9W986H3E7vgXXwEbpzrnE= -----END CERTIFICATE-----Generated at Mon Mar 2 04:13:35 2026 by rpki-client