$ rpki-client -vvf repo-rpki.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.mft File: FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.mft (raw, json) Hash identifier: K7sTJ+Iqke0z1EQPpcbh8nAjhXGYvJyu2J7SmAOYQ/M= Subject key identifier: 9D:C1:D6:63:5B:8D:54:3A:24:52:10:08:AD:BE:DA:31:C2:5F:D4:DB Authority key identifier: FA:62:D8:28:54:4F:70:BE:AD:8B:3C:04:A8:61:75:E4:FB:07:C4:B6 Certificate issuer: /CN=FA62D828544F70BEAD8B3C04A86175E4FB07C4B6 Certificate serial: 714C4B3F8DD0CFDCDA62DBDC520B68C51E02219F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.mft Manifest number: 011D Signing time: Wed 25 Mar 2026 16:30:50 +0000 Manifest this update: Wed 25 Mar 2026 16:25:50 +0000 Manifest next update: Sat 28 Mar 2026 17:13:50 +0000 Files and hashes: 1: 3135372e36362e33372e302f32342d3234203d3e20313338383034.roa (hash: elAlykoINKnAZ1hNxzJ7Wy9Qz4JU3YMP6UNvlutp4wU=) 2: FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.crl (hash: /DW3LCOEq2NQoTQeWPaWUIDCvgLq2tFw8yDfBHcEUN8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.crl rsync://repo-rpki.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 17:13:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:4c:4b:3f:8d:d0:cf:dc:da:62:db:dc:52:0b:68:c5:1e:02:21:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA62D828544F70BEAD8B3C04A86175E4FB07C4B6 Validity Not Before: Mar 25 16:25:50 2026 GMT Not After : Mar 28 17:13:50 2026 GMT Subject: CN=9DC1D6635B8D543A24521008ADBEDA31C25FD4DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:f5:4f:08:e3:74:c4:7e:1a:8a:a2:7c:51:a7: c9:ec:78:b4:39:00:3f:f2:ee:8b:e7:15:5e:d9:9a: ce:20:a1:3e:20:0c:c2:44:55:f8:a5:35:db:11:23: 94:35:18:35:00:48:e4:cb:28:de:3e:f8:25:7d:4c: 4f:e1:a5:5b:96:f8:5a:d7:81:62:dd:97:a9:4b:d1: a1:2e:57:92:ec:43:ee:5f:b0:e9:f0:66:80:7d:fb: 90:01:1f:21:52:de:39:27:48:a4:89:25:2d:3d:6d: f5:cd:24:5c:df:1f:fb:3e:da:fd:b9:2c:2f:b1:25: 27:37:dc:df:23:66:6a:bd:8b:d9:49:db:e7:12:e4: d4:ae:23:65:13:fb:e7:a9:11:e0:ba:cb:26:c6:0d: d8:2a:d2:5f:a3:bf:1c:3a:8b:25:06:56:60:85:99: 74:6e:6e:cb:66:bd:ff:25:a6:c7:f8:6c:e7:6c:3a: 4a:74:0f:41:9d:1c:51:b7:46:97:50:3b:ba:d9:2d: ea:dc:31:a4:14:7e:4f:c4:bd:48:50:40:40:c3:f5: 2f:0d:e1:ab:73:b2:cc:26:8c:38:e2:c4:6e:62:64: 75:ca:3e:b3:99:2e:3b:b4:c3:4b:ad:1d:05:ac:d9: cd:2a:12:f2:8d:89:9e:ff:78:bf:f7:c7:4b:84:bc: 21:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:C1:D6:63:5B:8D:54:3A:24:52:10:08:AD:BE:DA:31:C2:5F:D4:DB X509v3 Authority Key Identifier: keyid:FA:62:D8:28:54:4F:70:BE:AD:8B:3C:04:A8:61:75:E4:FB:07:C4:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dc:06:34:62:13:d8:ac:68:1b:62:9d:5d:1f:f3:51:06:eb:b0: 64:1c:39:81:b1:39:40:a8:8c:c4:6a:c9:03:fe:d3:49:99:52: 36:0e:29:71:43:0f:3d:87:ec:22:ea:a6:7a:d8:32:0e:4a:1f: d3:23:ff:8e:55:88:b9:55:28:90:97:84:4f:7a:04:fc:9f:08: 6b:1a:9c:7e:9b:ed:86:bc:4b:64:c7:b6:6b:ac:65:37:49:de: c2:a9:4e:f3:b1:47:e1:bc:d0:dc:30:8e:5f:45:6b:27:3b:ad: dd:04:ea:93:03:2a:ad:06:3b:5c:30:68:a2:59:51:ff:30:bb: a7:0e:6e:a4:d0:94:e7:60:b3:2c:dc:dd:66:1e:a1:c8:8e:23: 28:bf:58:77:68:c8:b9:74:3d:b6:62:36:a9:b4:2b:3d:91:14: fd:c0:d1:b9:83:5b:be:e2:9e:65:db:0d:e6:1a:ef:62:dd:01: 0d:f0:8c:f2:37:3a:35:f5:9f:54:cf:7e:cd:21:14:d0:6f:c0: c8:05:0c:3c:22:5c:8b:30:13:66:35:76:fb:07:13:e0:73:0c: 71:b4:4c:b8:58:de:aa:ec:58:d4:de:f1:4d:a4:53:a6:6c:d1: 4b:b5:d2:14:d1:d4:b2:a6:99:c4:ba:de:54:ea:88:8f:81:77: 39:89:01:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcUxLP43Qz9zaYtvcUgtoxR4CIZ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE2MkQ4Mjg1NDRGNzBCRUFEOEIzQzA0QTg2MTc1RTRG QjA3QzRCNjAeFw0yNjAzMjUxNjI1NTBaFw0yNjAzMjgxNzEzNTBaMDMxMTAvBgNV BAMTKDlEQzFENjYzNUI4RDU0M0EyNDUyMTAwOEFEQkVEQTMxQzI1RkQ0REIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY9U8I43TEfhqKonxRp8nseLQ5 AD/y7ovnFV7Zms4goT4gDMJEVfilNdsRI5Q1GDUASOTLKN4++CV9TE/hpVuW+FrX gWLdl6lL0aEuV5LsQ+5fsOnwZoB9+5ABHyFS3jknSKSJJS09bfXNJFzfH/s+2v25 LC+xJSc33N8jZmq9i9lJ2+cS5NSuI2UT++epEeC6yybGDdgq0l+jvxw6iyUGVmCF mXRubstmvf8lpsf4bOdsOkp0D0GdHFG3RpdQO7rZLercMaQUfk/EvUhQQEDD9S8N 4atzsswmjDjixG5iZHXKPrOZLju0w0utHQWs2c0qEvKNiZ7/eL/3x0uEvCFXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUncHWY1uNVDokUhAIrb7aMcJf1NswHwYDVR0j BBgwFoAU+mLYKFRPcL6tizwEqGF15PsHxLYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YzA0ZGVkOC1iMGY1LTQ1OTQtOGUwZS05MTFlY2I3N2VlNzMvMC9GQTYyRDgyODU0 NEY3MEJFQUQ4QjNDMDRBODYxNzVFNEZCMDdDNEI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkE2MkQ4Mjg1NDRGNzBCRUFEOEIzQzA0QTg2MTc1RTRGQjA3 QzRCNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWMwNGRlZDgtYjBmNS00NTk0LThl MGUtOTExZWNiNzdlZTczLzAvRkE2MkQ4Mjg1NDRGNzBCRUFEOEIzQzA0QTg2MTc1 RTRGQjA3QzRCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANwGNGIT2KxoG2KdXR/zUQbrsGQcOYGxOUCo jMRqyQP+00mZUjYOKXFDDz2H7CLqpnrYMg5KH9Mj/45ViLlVKJCXhE96BPyfCGsa nH6b7Ya8S2THtmusZTdJ3sKpTvOxR+G80Nwwjl9Fayc7rd0E6pMDKq0GO1wwaKJZ Uf8wu6cObqTQlOdgsyzc3WYeociOIyi/WHdoyLl0PbZiNqm0Kz2RFP3A0bmDW77i nmXbDeYa72LdAQ3wjPI3OjX1n1TPfs0hFNBvwMgFDDwiXIswE2Y1dvsHE+BzDHG0 TLhY3qrsWNTe8U2kU6Zs0Uu10hTR1LKmmcS63lTqiI+BdzmJAUA= -----END CERTIFICATE-----Generated at Thu Mar 26 12:24:26 2026 by rpki-client