$ rpki-client -vvf repo-rpki.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/FC2E85BE9AC0A6BE53B792A489D50609F924187F.mft File: FC2E85BE9AC0A6BE53B792A489D50609F924187F.mft (raw, json) Hash identifier: ykYVsK3gzEnopU40XyhFtkPE/JF0OLjUyJHwvMLRn3I= Subject key identifier: F6:E8:6F:4A:6E:8E:BE:AE:D7:BA:56:75:28:8C:D4:B5:A3:BB:3A:B8 Authority key identifier: FC:2E:85:BE:9A:C0:A6:BE:53:B7:92:A4:89:D5:06:09:F9:24:18:7F Certificate issuer: /CN=FC2E85BE9AC0A6BE53B792A489D50609F924187F Certificate serial: 73ED386F6FD571E0A9B61AF03CB1D3CD5947CDFA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC2E85BE9AC0A6BE53B792A489D50609F924187F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/FC2E85BE9AC0A6BE53B792A489D50609F924187F.mft Manifest number: 051E Signing time: Mon 03 Nov 2025 08:21:06 +0000 Manifest this update: Mon 03 Nov 2025 08:16:05 +0000 Manifest next update: Thu 06 Nov 2025 10:37:05 +0000 Files and hashes: 1: FC2E85BE9AC0A6BE53B792A489D50609F924187F.crl (hash: JpWJozppgqWo9wsYDIiuIILAa8MMB0u1AFxwMn2g3D0=) 2: 3130332e3131322e3138392e302f32342d3234203d3e20313337333332.roa (hash: fTPWv2oiJIx2qSggb2hiWiOmKdtYeAQZFu4dr/E9CSA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/FC2E85BE9AC0A6BE53B792A489D50609F924187F.crl rsync://repo-rpki.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/FC2E85BE9AC0A6BE53B792A489D50609F924187F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC2E85BE9AC0A6BE53B792A489D50609F924187F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 10:37:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:ed:38:6f:6f:d5:71:e0:a9:b6:1a:f0:3c:b1:d3:cd:59:47:cd:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC2E85BE9AC0A6BE53B792A489D50609F924187F Validity Not Before: Nov 3 08:16:05 2025 GMT Not After : Nov 6 10:37:05 2025 GMT Subject: CN=F6E86F4A6E8EBEAED7BA5675288CD4B5A3BB3AB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:ec:7b:e8:4e:78:5b:c5:09:07:39:f1:1c:76: b9:be:be:0c:da:ad:01:ec:72:94:3c:eb:11:ad:1b: 36:5e:7c:1b:0f:96:ec:16:ef:54:e7:48:7c:93:b4: 2e:ff:b5:59:c7:5f:62:0e:d3:a0:bc:22:fe:da:7f: d9:62:10:dd:3b:df:8b:51:10:0a:23:00:ed:da:0e: 7f:f6:64:54:29:a1:be:d5:77:f8:46:ba:a7:fb:35: 9a:b2:03:76:15:d0:3c:d6:4c:4e:e8:30:59:d4:36: 30:03:4e:86:96:57:c4:31:9b:2c:59:46:1f:03:5b: 75:1b:2d:c4:8a:2e:d6:f0:e0:db:ab:b5:80:87:52: 78:80:02:73:9a:d2:e9:d6:7b:db:f9:96:1e:91:61: 15:91:dd:9a:97:02:81:c2:d6:2a:69:00:ef:56:66: 62:bf:36:c5:25:d4:8f:f6:18:e9:15:ea:63:fb:6a: da:8e:68:13:56:f9:62:19:ca:ff:53:d3:0f:a5:89: 94:37:7c:3e:71:e2:ad:75:7f:dd:ef:8d:a4:7c:73: ea:7b:34:b0:6c:6d:ca:af:2a:66:f0:2b:8b:18:e4: e5:b4:eb:8e:f3:3a:97:c5:93:95:65:44:4a:4b:ec: 95:53:46:f7:85:ca:2e:6c:86:48:2f:8d:a5:94:cc: 02:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:E8:6F:4A:6E:8E:BE:AE:D7:BA:56:75:28:8C:D4:B5:A3:BB:3A:B8 X509v3 Authority Key Identifier: keyid:FC:2E:85:BE:9A:C0:A6:BE:53:B7:92:A4:89:D5:06:09:F9:24:18:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/FC2E85BE9AC0A6BE53B792A489D50609F924187F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC2E85BE9AC0A6BE53B792A489D50609F924187F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/FC2E85BE9AC0A6BE53B792A489D50609F924187F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:19:b9:3f:cd:47:86:3d:81:6d:21:56:b5:1d:29:2d:04:9e: 68:94:42:7d:60:de:e2:6b:87:ab:8d:5d:63:42:29:31:2b:7d: 01:8a:d1:f8:0d:a5:3f:b0:65:59:57:58:bd:24:e3:e8:8f:2a: cd:cb:1f:89:c3:5f:64:d3:d3:a2:19:e3:20:dd:8c:7b:45:83: b3:69:3a:d2:cb:39:94:03:59:a6:99:05:f5:95:2c:a3:6f:7a: 9a:ec:85:a0:e4:96:29:3b:9e:b9:88:10:12:bf:0f:7e:81:c6: 0b:a0:ab:d7:9c:5a:1a:50:ac:76:6c:d5:f2:25:79:46:30:a8: c0:a3:3d:78:c9:31:85:01:75:11:e2:74:a3:4f:f2:fe:01:9b: a8:0f:2c:26:25:2e:76:ba:33:99:27:00:6d:84:c4:08:5b:42: 88:df:d2:11:7a:8a:98:b7:64:35:23:b3:c7:22:1c:e2:19:c6: 07:09:92:9c:96:a5:76:6d:60:d0:42:a3:aa:de:25:91:77:0b: 3a:e7:f4:6e:3e:cc:f2:d3:2b:18:a8:bd:7d:14:1f:99:b2:67: 9f:82:97:7f:71:f0:6e:62:0b:86:b3:45:64:14:1e:c6:94:f5: e2:55:d6:ed:03:99:06:02:ce:df:42:49:02:31:1c:8f:61:87: 0d:e4:a6:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc+04b2/VceCpthrwPLHTzVlHzfowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkMyRTg1QkU5QUMwQTZCRTUzQjc5MkE0ODlENTA2MDlG OTI0MTg3RjAeFw0yNTExMDMwODE2MDVaFw0yNTExMDYxMDM3MDVaMDMxMTAvBgNV BAMTKEY2RTg2RjRBNkU4RUJFQUVEN0JBNTY3NTI4OENENEI1QTNCQjNBQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg7HvoTnhbxQkHOfEcdrm+vgza rQHscpQ86xGtGzZefBsPluwW71TnSHyTtC7/tVnHX2IO06C8Iv7af9liEN0734tR EAojAO3aDn/2ZFQpob7Vd/hGuqf7NZqyA3YV0DzWTE7oMFnUNjADToaWV8QxmyxZ Rh8DW3UbLcSKLtbw4NurtYCHUniAAnOa0unWe9v5lh6RYRWR3ZqXAoHC1ippAO9W ZmK/NsUl1I/2GOkV6mP7atqOaBNW+WIZyv9T0w+liZQ3fD5x4q11f93vjaR8c+p7 NLBsbcqvKmbwK4sY5OW0647zOpfFk5VlREpL7JVTRveFyi5shkgvjaWUzALvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9uhvSm6Ovq7XulZ1KIzUtaO7OrgwHwYDVR0j BBgwFoAU/C6FvprApr5Tt5KkidUGCfkkGH8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZjVjZmJhMy1lMDE3LTRlOGEtOWFjNS1mMmQzMDQzMTczNjUvMC9GQzJFODVCRTlB QzBBNkJFNTNCNzkyQTQ4OUQ1MDYwOUY5MjQxODdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkMyRTg1QkU5QUMwQTZCRTUzQjc5MkE0ODlENTA2MDlGOTI0 MTg3Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWY1Y2ZiYTMtZTAxNy00ZThhLTlh YzUtZjJkMzA0MzE3MzY1LzAvRkMyRTg1QkU5QUMwQTZCRTUzQjc5MkE0ODlENTA2 MDlGOTI0MTg3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEgZuT/NR4Y9gW0hVrUdKS0EnmiUQn1g3uJr h6uNXWNCKTErfQGK0fgNpT+wZVlXWL0k4+iPKs3LH4nDX2TT06IZ4yDdjHtFg7Np OtLLOZQDWaaZBfWVLKNveprshaDklik7nrmIEBK/D36Bxgugq9ecWhpQrHZs1fIl eUYwqMCjPXjJMYUBdRHidKNP8v4Bm6gPLCYlLna6M5knAG2ExAhbQojf0hF6ipi3 ZDUjs8ciHOIZxgcJkpyWpXZtYNBCo6reJZF3Czrn9G4+zPLTKxiovX0UH5myZ5+C l39x8G5iC4azRWQUHsaU9eJV1u0DmQYCzt9CSQIxHI9hhw3kpqI= -----END CERTIFICATE-----Generated at Tue Nov 4 16:30:12 2025 by rpki-client