$ rpki-client -vvf repo-rpki.idnic.net/repo/1653247a-a56e-424a-a07b-36a2511d7caa/0/FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.mft File: FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.mft (raw, json) Hash identifier: JJS8hcVEFxJIxd5WdHU/y2rMtpnAtUfZ+DCJwtU/yW8= Subject key identifier: 27:A1:08:CD:D5:3D:A3:FC:87:8B:7F:23:88:F9:4B:43:29:23:03:4D Authority key identifier: FE:88:0C:C9:3B:62:84:E6:83:31:06:A5:BE:B7:1A:0C:DD:E5:7C:0B Certificate issuer: /CN=FE880CC93B6284E6833106A5BEB71A0CDDE57C0B Certificate serial: 3E9425230EBE2A6639EA647BE4470FF2613D1CF8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1653247a-a56e-424a-a07b-36a2511d7caa/0/FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.mft Manifest number: 0249 Signing time: Tue 24 Mar 2026 22:52:16 +0000 Manifest this update: Tue 24 Mar 2026 22:47:16 +0000 Manifest next update: Sat 28 Mar 2026 00:34:16 +0000 Files and hashes: 1: 3130332e31332e3133392e302f32342d3234203d3e20313530323135.roa (hash: cU1g8IvJ9xTyNpUSLD7UlYtWkf7YESigdS5w5xzxaBQ=) 2: 3130332e31332e3133382e302f32342d3234203d3e20313530323135.roa (hash: 6ADoYkeIrhNdhv/k4Oyj/4jDcP6VkQMjB86DXlVYGIc=) 3: FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.crl (hash: vFPqP68S8QrmAC2Y2sSdZROubd2qmKLavZr2UoBsSAg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1653247a-a56e-424a-a07b-36a2511d7caa/0/FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.crl rsync://repo-rpki.idnic.net/repo/1653247a-a56e-424a-a07b-36a2511d7caa/0/FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 00:34:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:94:25:23:0e:be:2a:66:39:ea:64:7b:e4:47:0f:f2:61:3d:1c:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FE880CC93B6284E6833106A5BEB71A0CDDE57C0B Validity Not Before: Mar 24 22:47:16 2026 GMT Not After : Mar 28 00:34:16 2026 GMT Subject: CN=27A108CDD53DA3FC878B7F2388F94B432923034D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:4d:0d:67:bf:3b:2c:24:9b:2a:a0:56:61:25: 08:53:8e:ed:b5:83:75:60:ac:77:f7:62:bd:63:dd: 44:ca:60:03:c4:d9:bf:5c:2e:2e:dc:20:5d:20:e2: 97:2c:2c:54:40:f6:39:2a:bd:30:57:ac:5d:71:ad: 00:33:b3:04:06:24:43:15:9e:08:d8:10:d9:b3:6f: ee:18:6d:ec:07:75:ec:02:25:ee:86:cc:21:db:84: 5c:ed:5e:be:ee:78:48:e9:0a:a3:31:4e:a1:cc:f2: 4d:16:84:a5:2c:65:67:a3:27:1a:83:4b:ff:22:e8: ce:d4:cd:e1:ce:48:a8:3f:4f:e8:f8:6d:85:e7:1d: 6a:9d:e6:c8:13:f9:e4:6a:93:ba:6f:9c:b2:0a:77: f6:d5:f6:46:f8:3d:b7:ad:9e:27:c5:e1:f8:20:aa: 42:03:c2:45:b8:96:d8:57:64:89:f8:93:e5:03:3c: 58:50:0a:16:e7:44:c3:c1:b1:f4:e1:0d:76:05:0f: a3:fc:86:05:3e:6e:fe:8e:bb:47:1e:4f:80:97:32: f6:f4:6e:43:8c:9f:47:23:bc:d2:f7:cd:3d:41:50: 8b:41:5b:4b:c0:31:ec:5d:20:3d:64:d6:6c:fc:5a: 07:ec:1e:8c:47:a6:67:9d:2d:d6:fe:b6:b0:f8:7b: 94:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:A1:08:CD:D5:3D:A3:FC:87:8B:7F:23:88:F9:4B:43:29:23:03:4D X509v3 Authority Key Identifier: keyid:FE:88:0C:C9:3B:62:84:E6:83:31:06:A5:BE:B7:1A:0C:DD:E5:7C:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1653247a-a56e-424a-a07b-36a2511d7caa/0/FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1653247a-a56e-424a-a07b-36a2511d7caa/0/FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:61:48:76:66:3c:77:f7:c7:55:90:30:bc:cb:8e:38:3f:09: e7:af:07:6d:65:da:21:95:f0:19:45:ab:53:bf:c0:c0:5f:73: 8a:80:6b:de:ee:e4:6e:52:15:89:ba:c1:68:86:71:4f:b3:78: 22:fb:ba:bb:70:33:35:b9:6d:ee:ed:ca:fa:b8:60:b0:f4:77: 43:64:42:80:1a:8e:f9:d5:96:de:ae:01:33:30:65:e2:28:1b: bc:15:32:7f:fb:c9:e7:1c:40:18:f4:0a:a3:8e:02:d7:67:5d: bc:75:f5:de:78:8d:a9:06:b0:a4:94:c6:69:a4:e2:04:b3:d5: 5b:90:36:09:59:ee:7d:bd:a1:23:fb:20:66:48:b4:59:c1:1b: 09:04:1f:b1:d3:60:0f:9a:27:57:0a:40:42:4d:01:e6:a3:cc: 4c:5d:7b:9c:93:5f:63:2c:3f:04:73:95:e5:99:e8:0b:83:a4: e2:0f:04:88:41:5a:d1:95:ef:0e:ad:ba:69:40:67:d5:bf:db: 3d:eb:d7:86:44:a4:29:fa:2e:3a:54:e0:57:0e:66:d6:74:27: 10:10:b6:e7:06:51:59:90:bf:84:20:f9:80:55:b4:81:c7:95: f7:92:8d:ea:8c:b3:2e:5d:62:0b:7b:a1:20:bb:fd:49:e1:6b: 57:d2:e9:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPpQlIw6+KmY56mR75EcP8mE9HPgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkU4ODBDQzkzQjYyODRFNjgzMzEwNkE1QkVCNzFBMENE REU1N0MwQjAeFw0yNjAzMjQyMjQ3MTZaFw0yNjAzMjgwMDM0MTZaMDMxMTAvBgNV BAMTKDI3QTEwOENERDUzREEzRkM4NzhCN0YyMzg4Rjk0QjQzMjkyMzAzNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvTQ1nvzssJJsqoFZhJQhTju21 g3VgrHf3Yr1j3UTKYAPE2b9cLi7cIF0g4pcsLFRA9jkqvTBXrF1xrQAzswQGJEMV ngjYENmzb+4YbewHdewCJe6GzCHbhFztXr7ueEjpCqMxTqHM8k0WhKUsZWejJxqD S/8i6M7UzeHOSKg/T+j4bYXnHWqd5sgT+eRqk7pvnLIKd/bV9kb4PbetnifF4fgg qkIDwkW4lthXZIn4k+UDPFhQChbnRMPBsfThDXYFD6P8hgU+bv6Ou0ceT4CXMvb0 bkOMn0cjvNL3zT1BUItBW0vAMexdID1k1mz8WgfsHoxHpmedLdb+trD4e5RrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJ6EIzdU9o/yHi38jiPlLQykjA00wHwYDVR0j BBgwFoAU/ogMyTtihOaDMQalvrcaDN3lfAswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NjUzMjQ3YS1hNTZlLTQyNGEtYTA3Yi0zNmEyNTExZDdjYWEvMC9GRTg4MENDOTNC NjI4NEU2ODMzMTA2QTVCRUI3MUEwQ0RERTU3QzBCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkU4ODBDQzkzQjYyODRFNjgzMzEwNkE1QkVCNzFBMENEREU1 N0MwQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTY1MzI0N2EtYTU2ZS00MjRhLWEw N2ItMzZhMjUxMWQ3Y2FhLzAvRkU4ODBDQzkzQjYyODRFNjgzMzEwNkE1QkVCNzFB MENEREU1N0MwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMlhSHZmPHf3x1WQMLzLjjg/CeevB21l2iGV 8BlFq1O/wMBfc4qAa97u5G5SFYm6wWiGcU+zeCL7urtwMzW5be7tyvq4YLD0d0Nk QoAajvnVlt6uATMwZeIoG7wVMn/7yeccQBj0CqOOAtdnXbx19d54jakGsKSUxmmk 4gSz1VuQNglZ7n29oSP7IGZItFnBGwkEH7HTYA+aJ1cKQEJNAeajzExde5yTX2Ms PwRzleWZ6AuDpOIPBIhBWtGV7w6tumlAZ9W/2z3r14ZEpCn6LjpU4FcOZtZ0JxAQ tucGUVmQv4Qg+YBVtIHHlfeSjeqMsy5dYgt7oSC7/Unha1fS6TM= -----END CERTIFICATE-----Generated at Thu Mar 26 14:15:02 2026 by rpki-client