$ rpki-client -vvf repo-rpki.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/FC2E85BE9AC0A6BE53B792A489D50609F924187F.mft File: FC2E85BE9AC0A6BE53B792A489D50609F924187F.mft (raw, json) Hash identifier: /QXRFY32oTzpOXgeDzz9pWYXQJxN9IvymzLthnAMt4U= Subject key identifier: 07:DC:A4:1D:D3:1C:B4:43:DA:69:D3:0E:BA:EB:52:05:37:EC:FE:AA Authority key identifier: FC:2E:85:BE:9A:C0:A6:BE:53:B7:92:A4:89:D5:06:09:F9:24:18:7F Certificate issuer: /CN=FC2E85BE9AC0A6BE53B792A489D50609F924187F Certificate serial: 17FF74069404F21D27666793AECFD900B2466A3F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC2E85BE9AC0A6BE53B792A489D50609F924187F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/FC2E85BE9AC0A6BE53B792A489D50609F924187F.mft Manifest number: 04F7 Signing time: Thu 07 Aug 2025 11:11:05 +0000 Manifest this update: Thu 07 Aug 2025 11:06:05 +0000 Manifest next update: Sun 10 Aug 2025 18:32:05 +0000 Files and hashes: 1: FC2E85BE9AC0A6BE53B792A489D50609F924187F.crl (hash: N11sALYfLh7JhTC1/xwdC4Xeaw5U85uSESnIuOPpeXY=) 2: 3130332e3131322e3138392e302f32342d3234203d3e20313337333332.roa (hash: fTPWv2oiJIx2qSggb2hiWiOmKdtYeAQZFu4dr/E9CSA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/FC2E85BE9AC0A6BE53B792A489D50609F924187F.crl rsync://repo-rpki.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/FC2E85BE9AC0A6BE53B792A489D50609F924187F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC2E85BE9AC0A6BE53B792A489D50609F924187F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 18:32:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:ff:74:06:94:04:f2:1d:27:66:67:93:ae:cf:d9:00:b2:46:6a:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC2E85BE9AC0A6BE53B792A489D50609F924187F Validity Not Before: Aug 7 11:06:05 2025 GMT Not After : Aug 10 18:32:05 2025 GMT Subject: CN=07DCA41DD31CB443DA69D30EBAEB520537ECFEAA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:dd:25:89:b4:a6:c5:01:35:dd:bf:59:1b:fe: 0d:a2:3b:cb:13:fa:1b:f3:e2:45:12:40:e4:4c:59: 11:ad:50:d2:6c:20:de:51:cc:9f:a7:3f:5a:bd:c6: ee:1d:3e:67:b8:db:a1:4e:f9:bb:30:bc:91:f2:8f: bd:43:89:a3:5b:b8:ba:1a:2b:a8:d8:34:5a:c8:68: 3b:52:67:20:ae:df:10:88:d0:88:26:19:10:c4:6a: 93:83:03:7a:32:ab:72:cb:7d:7a:3b:52:14:2b:c9: 9b:9c:36:9d:d6:41:9f:b8:91:78:e7:91:0c:9c:10: 76:55:66:62:14:5b:e1:af:3e:69:6a:75:35:3a:08: 18:92:30:59:b5:c5:ba:96:34:af:0c:74:f4:0e:0a: 54:ff:65:c7:46:24:fa:c5:80:8a:c9:f1:fe:9f:03: f0:e8:a6:84:76:d2:e2:89:88:74:b8:35:90:38:ad: 3b:d5:dc:8e:93:85:0c:a7:59:30:7e:c2:57:b3:ad: cb:f3:73:e8:ba:2f:b8:50:ec:df:ec:d7:4d:d6:e6: b6:dd:a2:e4:75:90:f0:a4:ef:cc:40:56:24:c7:7a: 69:c1:7d:26:d3:8f:27:c9:fc:11:f9:90:19:3c:be: 2e:db:e4:63:2a:aa:fc:7c:0d:00:6b:1e:1e:95:6d: 2d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:DC:A4:1D:D3:1C:B4:43:DA:69:D3:0E:BA:EB:52:05:37:EC:FE:AA X509v3 Authority Key Identifier: keyid:FC:2E:85:BE:9A:C0:A6:BE:53:B7:92:A4:89:D5:06:09:F9:24:18:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/FC2E85BE9AC0A6BE53B792A489D50609F924187F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC2E85BE9AC0A6BE53B792A489D50609F924187F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/FC2E85BE9AC0A6BE53B792A489D50609F924187F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:17:8c:e1:72:51:08:38:63:6d:2b:e5:ba:da:0f:02:87:14: 60:f1:a3:19:5c:ca:08:f5:60:34:f8:a3:42:ec:6a:6e:e2:22: c5:f2:bc:2c:9b:de:d2:52:98:3c:4d:5e:ce:59:3b:a6:0d:89: 65:36:b3:1f:ec:4a:34:e0:9a:f5:ed:f2:9c:a0:55:90:94:17: 49:3b:1b:08:a9:88:40:93:83:7f:ba:d3:a2:64:23:67:fa:77: 38:fe:da:b8:13:70:98:dc:ee:ab:3c:dc:c1:b4:78:a4:88:de: 38:82:a3:c0:d7:e3:a8:37:9a:25:6f:ff:8f:7d:4b:f3:b7:c7: 27:1a:fb:2f:30:a4:ed:aa:16:cd:db:e4:08:e0:35:4e:a8:28: be:f9:ac:de:c2:7b:f6:0d:85:e4:5c:6c:c6:03:02:d9:ed:d1: c7:c3:5a:a0:11:10:00:14:66:0c:99:c5:3d:e0:f7:ef:35:23: fa:25:d3:28:4a:1a:60:bb:ea:6e:8b:4e:11:a8:2a:ae:be:4b: 9d:4c:2d:19:c7:3c:9c:e9:b6:6b:4c:73:08:d0:57:23:c5:97: 39:59:22:dd:97:09:81:b3:3b:3e:a9:fe:32:e8:d3:09:56:c3: 71:1e:38:c9:8c:df:6b:a1:9b:9f:b8:d9:7a:af:b4:11:52:08: bf:77:bb:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF/90BpQE8h0nZmeTrs/ZALJGaj8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkMyRTg1QkU5QUMwQTZCRTUzQjc5MkE0ODlENTA2MDlG OTI0MTg3RjAeFw0yNTA4MDcxMTA2MDVaFw0yNTA4MTAxODMyMDVaMDMxMTAvBgNV BAMTKDA3RENBNDFERDMxQ0I0NDNEQTY5RDMwRUJBRUI1MjA1MzdFQ0ZFQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx3SWJtKbFATXdv1kb/g2iO8sT +hvz4kUSQORMWRGtUNJsIN5RzJ+nP1q9xu4dPme426FO+bswvJHyj71DiaNbuLoa K6jYNFrIaDtSZyCu3xCI0IgmGRDEapODA3oyq3LLfXo7UhQryZucNp3WQZ+4kXjn kQycEHZVZmIUW+GvPmlqdTU6CBiSMFm1xbqWNK8MdPQOClT/ZcdGJPrFgIrJ8f6f A/DopoR20uKJiHS4NZA4rTvV3I6ThQynWTB+wlezrcvzc+i6L7hQ7N/s103W5rbd ouR1kPCk78xAViTHemnBfSbTjyfJ/BH5kBk8vi7b5GMqqvx8DQBrHh6VbS19AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUB9ykHdMctEPaadMOuutSBTfs/qowHwYDVR0j BBgwFoAU/C6FvprApr5Tt5KkidUGCfkkGH8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZjVjZmJhMy1lMDE3LTRlOGEtOWFjNS1mMmQzMDQzMTczNjUvMC9GQzJFODVCRTlB QzBBNkJFNTNCNzkyQTQ4OUQ1MDYwOUY5MjQxODdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkMyRTg1QkU5QUMwQTZCRTUzQjc5MkE0ODlENTA2MDlGOTI0 MTg3Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWY1Y2ZiYTMtZTAxNy00ZThhLTlh YzUtZjJkMzA0MzE3MzY1LzAvRkMyRTg1QkU5QUMwQTZCRTUzQjc5MkE0ODlENTA2 MDlGOTI0MTg3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALoXjOFyUQg4Y20r5braDwKHFGDxoxlcygj1 YDT4o0Lsam7iIsXyvCyb3tJSmDxNXs5ZO6YNiWU2sx/sSjTgmvXt8pygVZCUF0k7 GwipiECTg3+606JkI2f6dzj+2rgTcJjc7qs83MG0eKSI3jiCo8DX46g3miVv/499 S/O3xyca+y8wpO2qFs3b5AjgNU6oKL75rN7Ce/YNheRcbMYDAtnt0cfDWqAREAAU ZgyZxT3g9+81I/ol0yhKGmC76m6LThGoKq6+S51MLRnHPJzptmtMcwjQVyPFlzlZ It2XCYGzOz6p/jLo0wlWw3EeOMmM32uhm5+42XqvtBFSCL93uxw= -----END CERTIFICATE-----Generated at Sat Aug 9 05:52:00 2025 by rpki-client