$ rpki-client -vvf repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/FED855DD505D24B6FE25BD8656297329F7EF4785.mft File: FED855DD505D24B6FE25BD8656297329F7EF4785.mft (raw, json) Hash identifier: dGAk98V7mjT/2fcIHlztGc3WlSC1+Z0BavRgiTRvhWg= Subject key identifier: EC:08:41:06:5D:01:89:DE:3D:46:E0:AA:B5:75:B9:18:46:17:A6:30 Authority key identifier: FE:D8:55:DD:50:5D:24:B6:FE:25:BD:86:56:29:73:29:F7:EF:47:85 Certificate issuer: /CN=FED855DD505D24B6FE25BD8656297329F7EF4785 Certificate serial: 7650C375632868FD3700CD987EBED320D3E713C9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FED855DD505D24B6FE25BD8656297329F7EF4785.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/FED855DD505D24B6FE25BD8656297329F7EF4785.mft Manifest number: 04D8 Signing time: Wed 25 Mar 2026 14:01:35 +0000 Manifest this update: Wed 25 Mar 2026 13:56:35 +0000 Manifest next update: Sat 28 Mar 2026 20:31:35 +0000 Files and hashes: 1: FED855DD505D24B6FE25BD8656297329F7EF4785.crl (hash: UxdI36XIv8fUGpv1vA7XdsuU9lwtGlpZTHD3qBRQtUc=) 2: 3130332e3130352e3133302e302f32342d3234203d3e203137373237.roa (hash: yMrj8AoB/ixjd6PVgwO256Xjq06xuds8sgMBoLkTbyM=) 3: 3130332e3130352e3132382e302f32342d3234203d3e203137373237.roa (hash: X2PEKknjtTcnLsrGiadMk08xxZNciTvdVjNrgOP4sHk=) 4: 3130332e3130352e3132382e302f32322d3232203d3e203137373237.roa (hash: IhDRQtUCQIm4IOPr5vP9tEfWgB4QjIXQlUOAr7HBNq4=) 5: 3130332e3130352e3132392e302f32342d3234203d3e203137373237.roa (hash: hPyIxp0hj3k+joStahsmifFKwjq2yL5rkOsyq1Wlc34=) 6: 3130332e3130352e3133312e302f32342d3234203d3e203137373237.roa (hash: MeNQV5B+OerhDUDBOkfR5BHmeZ2GFCk+XtpnzmEeM9I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/FED855DD505D24B6FE25BD8656297329F7EF4785.crl rsync://repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/FED855DD505D24B6FE25BD8656297329F7EF4785.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FED855DD505D24B6FE25BD8656297329F7EF4785.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 20:31:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:50:c3:75:63:28:68:fd:37:00:cd:98:7e:be:d3:20:d3:e7:13:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FED855DD505D24B6FE25BD8656297329F7EF4785 Validity Not Before: Mar 25 13:56:35 2026 GMT Not After : Mar 28 20:31:35 2026 GMT Subject: CN=EC0841065D0189DE3D46E0AAB575B9184617A630 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:e3:4c:45:bd:7d:29:a2:8b:bc:40:72:d6:d8: 1e:72:04:5a:22:95:6e:36:d8:2a:b3:70:cf:c9:f2: 83:3b:7c:9f:2e:03:42:34:7c:e8:d7:d9:33:68:95: b1:ad:7a:1f:6c:b0:8d:9d:6d:12:42:f7:00:87:61: 5f:79:98:c6:c8:e4:4f:6a:10:bc:35:10:f2:6c:af: 2b:4a:f5:19:82:b2:1e:8c:89:6d:9f:99:f9:1f:a6: 63:a0:06:22:24:21:02:90:51:18:7c:9d:08:93:40: ee:89:a3:69:00:1e:dc:e0:19:9d:3b:66:1d:76:cc: 23:a0:61:95:b1:89:72:59:f1:cc:8b:bc:a3:9c:90: ea:01:85:5d:29:35:ea:d2:b9:6d:15:1b:54:ed:f3: f6:4a:22:d1:03:50:bf:3b:4f:fd:99:a9:c3:3e:65: f9:10:37:4d:b7:e0:0f:c7:ad:fb:a7:77:a3:90:3e: 75:e8:78:f9:12:a7:60:a0:2c:d7:9a:a3:bb:03:8e: 63:d5:88:48:df:e3:67:87:e0:bd:40:bf:92:c6:e3: 45:ca:7c:b5:55:0c:34:f5:25:f9:13:16:b3:8f:69: 07:b9:30:11:30:39:66:79:fb:dd:32:5b:5f:ff:38: c0:19:41:12:4f:e3:20:08:23:79:20:79:3a:4f:3a: df:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:08:41:06:5D:01:89:DE:3D:46:E0:AA:B5:75:B9:18:46:17:A6:30 X509v3 Authority Key Identifier: keyid:FE:D8:55:DD:50:5D:24:B6:FE:25:BD:86:56:29:73:29:F7:EF:47:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/FED855DD505D24B6FE25BD8656297329F7EF4785.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FED855DD505D24B6FE25BD8656297329F7EF4785.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/FED855DD505D24B6FE25BD8656297329F7EF4785.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:81:9f:b5:8a:24:42:2c:d3:71:13:ab:c6:81:b3:a6:77:6c: 11:de:62:c4:b0:5c:63:66:ff:a3:00:e4:8d:dc:6a:04:1b:1c: e0:47:51:57:a1:ec:34:e1:2e:00:3b:63:0d:8a:bb:ed:8d:7a: b5:79:c0:a0:e5:52:04:36:fa:8c:cd:41:5d:4c:cc:05:9a:8e: ac:71:64:2f:24:25:06:fe:21:a3:51:ba:3a:5f:10:32:a3:bb: e6:55:a0:e4:07:7c:95:d4:f3:3c:e9:a2:bc:54:f3:bf:39:dd: 1b:a1:b9:fb:20:00:7e:62:f4:5d:0b:e4:62:98:c8:23:8b:2c: e5:4b:09:ca:f0:07:ea:67:81:a3:4c:09:43:0d:1f:66:28:34: 3c:ea:3c:cc:e7:cc:6c:4c:86:5e:54:03:1b:cf:fe:ef:e1:11: eb:d8:1e:7e:c8:47:75:88:88:d6:62:71:b0:9e:be:38:a9:47: d1:52:20:6b:39:f0:3d:71:e6:f8:c3:8a:82:9d:39:ed:a3:64: ee:cb:10:f7:a0:a2:59:78:dd:20:0d:e0:d1:4f:17:62:d8:7a: d5:ba:81:cd:eb:19:17:20:34:84:d1:7b:91:2e:71:d8:e3:33: 84:25:54:cf:4a:ce:32:9d:29:ab:8d:ce:fc:01:31:97:51:fd: be:73:80:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdlDDdWMoaP03AM2Yfr7TINPnE8kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkVEODU1REQ1MDVEMjRCNkZFMjVCRDg2NTYyOTczMjlG N0VGNDc4NTAeFw0yNjAzMjUxMzU2MzVaFw0yNjAzMjgyMDMxMzVaMDMxMTAvBgNV BAMTKEVDMDg0MTA2NUQwMTg5REUzRDQ2RTBBQUI1NzVCOTE4NDYxN0E2MzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf40xFvX0poou8QHLW2B5yBFoi lW422CqzcM/J8oM7fJ8uA0I0fOjX2TNolbGteh9ssI2dbRJC9wCHYV95mMbI5E9q ELw1EPJsrytK9RmCsh6MiW2fmfkfpmOgBiIkIQKQURh8nQiTQO6Jo2kAHtzgGZ07 Zh12zCOgYZWxiXJZ8cyLvKOckOoBhV0pNerSuW0VG1Tt8/ZKItEDUL87T/2ZqcM+ ZfkQN0234A/Hrfund6OQPnXoePkSp2CgLNeao7sDjmPViEjf42eH4L1Av5LG40XK fLVVDDT1JfkTFrOPaQe5MBEwOWZ5+90yW1//OMAZQRJP4yAII3kgeTpPOt+lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7AhBBl0Bid49RuCqtXW5GEYXpjAwHwYDVR0j BBgwFoAU/thV3VBdJLb+Jb2GVilzKffvR4UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDYxZDdhNy1hMTFlLTQwMGItOTE3MC1jNzk3ZWQ4OGQ3MDIvMC9GRUQ4NTVERDUw NUQyNEI2RkUyNUJEODY1NjI5NzMyOUY3RUY0Nzg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkVEODU1REQ1MDVEMjRCNkZFMjVCRDg2NTYyOTczMjlGN0VG NDc4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQ2MWQ3YTctYTExZS00MDBiLTkx NzAtYzc5N2VkODhkNzAyLzAvRkVEODU1REQ1MDVEMjRCNkZFMjVCRDg2NTYyOTcz MjlGN0VGNDc4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJGBn7WKJEIs03ETq8aBs6Z3bBHeYsSwXGNm /6MA5I3cagQbHOBHUVeh7DThLgA7Yw2Ku+2NerV5wKDlUgQ2+ozNQV1MzAWajqxx ZC8kJQb+IaNRujpfEDKju+ZVoOQHfJXU8zzporxU87853RuhufsgAH5i9F0L5GKY yCOLLOVLCcrwB+pngaNMCUMNH2YoNDzqPMznzGxMhl5UAxvP/u/hEevYHn7IR3WI iNZicbCevjipR9FSIGs58D1x5vjDioKdOe2jZO7LEPegoll43SAN4NFPF2LYetW6 gc3rGRcgNITRe5EucdjjM4QlVM9KzjKdKauNzvwBMZdR/b5zgNs= -----END CERTIFICATE-----Generated at Thu Mar 26 14:37:34 2026 by rpki-client