$ rpki-client -vvf repo-rpki.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/FC2E85BE9AC0A6BE53B792A489D50609F924187F.mft File: FC2E85BE9AC0A6BE53B792A489D50609F924187F.mft (raw, json) Hash identifier: QDcW3vTf3abZbwM7OSuRY3fnPv/wo00EwtfvB7XohV8= Subject key identifier: 32:DE:D7:99:82:9E:3C:A3:3B:4E:4A:B4:DA:5F:65:85:72:33:AA:9A Authority key identifier: FC:2E:85:BE:9A:C0:A6:BE:53:B7:92:A4:89:D5:06:09:F9:24:18:7F Certificate issuer: /CN=FC2E85BE9AC0A6BE53B792A489D50609F924187F Certificate serial: 3BA20038C66E31F26A5F5B290C6BB9AC5B3B639B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC2E85BE9AC0A6BE53B792A489D50609F924187F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/FC2E85BE9AC0A6BE53B792A489D50609F924187F.mft Manifest number: 0503 Signing time: Wed 03 Sep 2025 19:31:06 +0000 Manifest this update: Wed 03 Sep 2025 19:26:06 +0000 Manifest next update: Sat 06 Sep 2025 20:04:06 +0000 Files and hashes: 1: 3130332e3131322e3138392e302f32342d3234203d3e20313337333332.roa (hash: fTPWv2oiJIx2qSggb2hiWiOmKdtYeAQZFu4dr/E9CSA=) 2: FC2E85BE9AC0A6BE53B792A489D50609F924187F.crl (hash: MbvF47ZqClqwbgbzDccZ8qZgd7afzX819x7UFNPk0W4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/FC2E85BE9AC0A6BE53B792A489D50609F924187F.crl rsync://repo-rpki.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/FC2E85BE9AC0A6BE53B792A489D50609F924187F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC2E85BE9AC0A6BE53B792A489D50609F924187F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 20:04:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:a2:00:38:c6:6e:31:f2:6a:5f:5b:29:0c:6b:b9:ac:5b:3b:63:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC2E85BE9AC0A6BE53B792A489D50609F924187F Validity Not Before: Sep 3 19:26:06 2025 GMT Not After : Sep 6 20:04:06 2025 GMT Subject: CN=32DED799829E3CA33B4E4AB4DA5F65857233AA9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:5d:c4:e3:48:81:be:02:f7:93:f2:d6:86:69: 2f:fc:16:d6:16:ff:13:f5:3b:00:44:9a:7a:19:80: e6:ef:3a:dd:df:43:e1:31:32:8b:c5:0d:f0:93:df: 17:c7:48:82:a1:86:47:f6:03:bc:36:6c:33:8e:f8: f1:83:45:d9:87:62:4c:36:8f:66:48:94:44:27:e6: d6:45:e4:7a:b0:31:03:7f:3a:03:1e:a0:f9:0d:ac: b4:31:24:d3:19:a0:f9:93:c9:99:a3:65:68:c8:4f: 7e:6c:06:b8:8c:ba:50:bf:db:c6:5e:2b:7b:76:b5: 0e:34:b1:79:12:a4:0e:f7:39:c8:ce:b0:8a:e7:fb: 9e:0d:0e:bb:52:83:b2:bf:e1:ce:c6:7b:99:32:f9: de:f9:ba:73:46:0c:64:78:54:45:f4:a6:f7:f3:3b: 73:60:8a:91:b2:d3:2e:7c:63:65:0f:44:e3:b6:1d: 87:eb:65:a2:d4:ad:bd:3a:6d:9e:64:98:2b:20:c6: bb:ce:64:99:58:48:0c:a2:49:5a:b4:e7:1c:4c:1d: cf:96:d0:de:d3:8b:94:59:18:2a:a3:42:b4:cd:f8: 86:86:a8:6a:91:bf:67:38:f1:35:2a:0d:f4:c0:ff: a0:f3:c1:f9:26:7e:cc:7c:20:9f:22:91:fe:da:ad: 22:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:DE:D7:99:82:9E:3C:A3:3B:4E:4A:B4:DA:5F:65:85:72:33:AA:9A X509v3 Authority Key Identifier: keyid:FC:2E:85:BE:9A:C0:A6:BE:53:B7:92:A4:89:D5:06:09:F9:24:18:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/FC2E85BE9AC0A6BE53B792A489D50609F924187F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC2E85BE9AC0A6BE53B792A489D50609F924187F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/FC2E85BE9AC0A6BE53B792A489D50609F924187F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:9e:ee:fb:59:e6:73:f2:f9:07:d3:db:64:fd:40:7a:91:7e: 4d:00:ab:2b:02:29:4e:11:6b:bf:bd:36:26:27:a5:27:47:f6: 4d:b3:8f:74:32:cd:4d:69:15:44:5c:ca:43:7c:e6:ff:13:f8: c9:68:a9:61:db:0c:61:d5:1d:b6:e3:fd:33:e4:a2:c6:c8:9b: 45:98:57:a2:a1:50:91:fa:1e:f5:64:ab:db:e3:4f:1e:4a:96: 35:a3:fd:46:f6:be:59:de:7e:db:46:94:76:15:68:b7:0f:ec: f8:a9:46:30:c1:d5:1b:c8:e4:f9:b3:f7:e1:9e:36:6a:b0:a2: 23:1b:5d:ae:d2:84:36:a5:c5:e0:55:06:16:4b:50:17:82:ef: 91:4c:58:cc:00:db:0a:54:4d:6b:64:ec:3b:0a:bb:d8:b5:b8: b4:03:58:9d:10:b8:2c:a8:9d:45:17:e2:b0:9a:21:25:f8:ad: 4c:49:9d:a5:a2:3b:eb:cc:58:91:b2:e5:26:01:0f:11:d8:2a: 7e:ef:57:95:88:e0:a7:ae:42:0f:e8:90:f4:a1:e9:16:ac:3e: 51:18:67:1c:17:78:40:cf:4b:7e:d6:59:6a:2d:72:4e:69:d8: 49:b8:47:b3:f0:4a:74:0d:c2:3c:f3:93:bb:52:43:46:be:81: 4d:fb:64:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO6IAOMZuMfJqX1spDGu5rFs7Y5swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkMyRTg1QkU5QUMwQTZCRTUzQjc5MkE0ODlENTA2MDlG OTI0MTg3RjAeFw0yNTA5MDMxOTI2MDZaFw0yNTA5MDYyMDA0MDZaMDMxMTAvBgNV BAMTKDMyREVENzk5ODI5RTNDQTMzQjRFNEFCNERBNUY2NTg1NzIzM0FBOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkXcTjSIG+AveT8taGaS/8FtYW /xP1OwBEmnoZgObvOt3fQ+ExMovFDfCT3xfHSIKhhkf2A7w2bDOO+PGDRdmHYkw2 j2ZIlEQn5tZF5HqwMQN/OgMeoPkNrLQxJNMZoPmTyZmjZWjIT35sBriMulC/28Ze K3t2tQ40sXkSpA73OcjOsIrn+54NDrtSg7K/4c7Ge5ky+d75unNGDGR4VEX0pvfz O3NgipGy0y58Y2UPROO2HYfrZaLUrb06bZ5kmCsgxrvOZJlYSAyiSVq05xxMHc+W 0N7Ti5RZGCqjQrTN+IaGqGqRv2c48TUqDfTA/6Dzwfkmfsx8IJ8ikf7arSKtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMt7XmYKePKM7Tkq02l9lhXIzqpowHwYDVR0j BBgwFoAU/C6FvprApr5Tt5KkidUGCfkkGH8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZjVjZmJhMy1lMDE3LTRlOGEtOWFjNS1mMmQzMDQzMTczNjUvMC9GQzJFODVCRTlB QzBBNkJFNTNCNzkyQTQ4OUQ1MDYwOUY5MjQxODdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkMyRTg1QkU5QUMwQTZCRTUzQjc5MkE0ODlENTA2MDlGOTI0 MTg3Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWY1Y2ZiYTMtZTAxNy00ZThhLTlh YzUtZjJkMzA0MzE3MzY1LzAvRkMyRTg1QkU5QUMwQTZCRTUzQjc5MkE0ODlENTA2 MDlGOTI0MTg3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFie7vtZ5nPy+QfT22T9QHqRfk0AqysCKU4R a7+9NiYnpSdH9k2zj3QyzU1pFURcykN85v8T+MloqWHbDGHVHbbj/TPkosbIm0WY V6KhUJH6HvVkq9vjTx5KljWj/Ub2vlnefttGlHYVaLcP7PipRjDB1RvI5Pmz9+Ge NmqwoiMbXa7ShDalxeBVBhZLUBeC75FMWMwA2wpUTWtk7DsKu9i1uLQDWJ0QuCyo nUUX4rCaISX4rUxJnaWiO+vMWJGy5SYBDxHYKn7vV5WI4KeuQg/okPSh6RasPlEY ZxwXeEDPS37WWWotck5p2Em4R7PwSnQNwjzzk7tSQ0a+gU37ZFQ= -----END CERTIFICATE-----Generated at Fri Sep 5 10:34:21 2025 by rpki-client