$ rpki-client -vvf repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.mft File: FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.mft (raw, json) Hash identifier: J9dzFIUbNFLbfwYu+Bb1F3aWT23rHUOjZVllBAVdYwI= Subject key identifier: A4:FE:68:EE:62:7B:DC:66:02:1F:8B:EB:FE:BC:11:5F:E8:B5:70:36 Authority key identifier: FA:5B:CA:98:4E:EB:AF:FD:CE:D8:41:90:C7:07:56:DB:EB:3B:FF:39 Certificate issuer: /CN=FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39 Certificate serial: 54249E4D5718E164151D70DD0856959FE508109A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.mft Manifest number: 0324 Signing time: Tue 24 Mar 2026 18:21:03 +0000 Manifest this update: Tue 24 Mar 2026 18:16:03 +0000 Manifest next update: Sat 28 Mar 2026 06:07:03 +0000 Files and hashes: 1: 323430323a653130303a33383a3a2f34382d3438203d3e203538343835.roa (hash: ZcG33pBZTzSD/OyfUqiIR26pFQTz1ZHq/I2vKc5L2Lk=) 2: 323430323a653130303a38303a3a2f34382d3438203d3e203538343835.roa (hash: f/URrW3I6+5vkW0D1aSS1Bkh+i2+LjuWyAbPuExcRpQ=) 3: 323430323a653130303a38313a3a2f34382d3438203d3e203538343835.roa (hash: QYoY/WJkKnag3eKK6TqUfAN2/yGtdFRAxKAtoXHhjqo=) 4: 323430323a653130303a323030303a3a2f34382d3438203d3e203538343835.roa (hash: d1PRG5I24wLp0nZlSGZqsXMdn4LUKyh3+Rp9QJBPdWU=) 5: 323430323a653130303a3330353a3a2f34382d3438203d3e203538343835.roa (hash: jMXfHZ5G6a1+HMzwB17/q65yvup/Qxz3sZvzBsrsAlg=) 6: 323430323a653130303a32303a3a2f34382d3438203d3e203538343835.roa (hash: JQBV4LZ7vr6myTyNSsVnH8wkRJsd1to3z2hSNW0KGDU=) 7: 323430323a653130303a61633a3a2f34382d3438203d3e203538343835.roa (hash: PJK40q7WUwTW88oYuOeJRlP3deJscpLSdiVo4TnCchE=) 8: 3130332e3234372e32302e302f32342d3234203d3e203538343835.roa (hash: Z1gDiN/X+uv2C5f6v1h8WInw2+lPzjHj0oFTtpIP6pA=) 9: 3130332e3234372e32332e302f32342d3234203d3e203538343835.roa (hash: b0tZZmtH36HTqeaBkAZXbgB/S56o/yJRyQaRIiw9gxU=) 10: 3130332e3234372e32302e302f32322d3234203d3e203538343835.roa (hash: 0yw7rRpcNLCQkltZhjGJL1siB8HST2OMsTJXjD26O8w=) 11: FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.crl (hash: 0FZzd7PWlIVZ7lBr7eo4dxkcwWmHezoiwnj5rKhIJlM=) 12: 3130332e3234372e32312e302f32342d3234203d3e203538343835.roa (hash: J7nzxQoOQZd+f5FsS1z2JuLaZuo8BSYFqnL/f85DF9g=) 13: 323430323a653130303a3a2f33322d3438203d3e203538343835.roa (hash: JJglB/VlfiSRwxyeiN2g4JH/b5q2RqTOfEL3QFxIRWk=) 14: 323430323a653130303a37353a3a2f34382d3438203d3e203538343835.roa (hash: aHRt+E7BWGdjFLNGN2g9IGuN7mQDThteOWR07k+3Phs=) 15: 3130332e3234372e32322e302f32342d3234203d3e203538343835.roa (hash: hoYxuGi8Dbg0+tKgNZ2iCXdlBeXd35+Q9Oyp2SGgsUw=) 16: 323430323a653130303a61653a3a2f34382d3438203d3e203538343835.roa (hash: jn8YvD6TNkp1LaERG+YoqpArjIVwe5+hvrSaozXb0+E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.crl rsync://repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 06:07:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:24:9e:4d:57:18:e1:64:15:1d:70:dd:08:56:95:9f:e5:08:10:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39 Validity Not Before: Mar 24 18:16:03 2026 GMT Not After : Mar 28 06:07:03 2026 GMT Subject: CN=A4FE68EE627BDC66021F8BEBFEBC115FE8B57036 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:35:08:16:a9:9b:dc:99:0a:24:d6:79:5c:79: 08:d2:95:76:db:13:ab:5e:42:54:0a:9f:df:24:81: e8:6f:69:61:77:4e:8d:f7:b6:bf:e6:ef:34:0c:d4: a0:7f:81:9f:f5:23:8b:1a:85:01:92:fe:6a:e4:71: 86:14:40:b9:7f:5e:65:c6:76:98:c2:f7:d7:ef:4f: 16:9c:74:22:04:ff:7f:23:23:92:7e:b7:63:74:98: 1c:2a:90:71:15:6f:98:14:19:7e:ac:e5:61:67:3e: 9a:f9:cb:ea:98:41:5f:ab:23:93:e3:03:fd:fb:67: 35:56:a9:a5:51:f6:60:63:ee:5c:ad:0d:91:1b:b7: 53:44:c8:54:72:76:cb:4f:0c:2e:97:73:aa:67:47: b5:3a:63:38:b2:e5:e1:78:56:30:b2:86:54:d9:bb: af:fc:a4:be:e3:e3:04:6d:85:e3:6e:8d:e8:e2:28: 06:25:5a:9f:21:bf:93:a8:b9:05:71:46:71:60:52: 5a:87:e2:d8:7d:59:01:9d:70:aa:44:10:1e:2e:86: b7:d8:d4:67:dc:0d:8d:1e:5a:cf:59:27:39:7e:a0: 8a:12:11:ea:1a:46:13:26:2b:06:70:67:c7:ca:49: 09:b4:99:82:06:46:96:ad:7b:07:5e:fc:24:35:6c: b9:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:FE:68:EE:62:7B:DC:66:02:1F:8B:EB:FE:BC:11:5F:E8:B5:70:36 X509v3 Authority Key Identifier: keyid:FA:5B:CA:98:4E:EB:AF:FD:CE:D8:41:90:C7:07:56:DB:EB:3B:FF:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:ae:23:5a:47:1f:b2:79:c2:4b:78:e1:48:7d:4b:a8:b1:46: e7:cd:36:a9:58:bd:af:b1:01:5e:81:44:5d:95:d4:f5:fd:d4: f5:64:32:18:91:4d:34:5e:63:16:7f:9f:e5:29:0a:76:2b:eb: 7c:1c:61:a9:9b:c6:43:38:a4:67:a2:e5:29:36:f3:76:20:5d: 86:97:6c:7d:75:d9:5a:78:5f:73:40:7d:f0:1d:38:cf:98:ff: 60:3d:76:1d:59:b5:1e:6e:4b:58:ee:e4:11:d4:46:ac:ca:26: 0b:cd:69:e6:1b:04:ae:56:bb:ec:16:9f:2a:fb:0b:fd:d6:26: 49:58:4e:29:1a:15:40:46:eb:5e:ec:99:1a:ca:20:81:57:66: 3e:d1:a1:b5:90:48:f8:89:67:b3:c7:b6:9e:f4:9e:1a:5c:7a: d0:42:e6:0f:e7:55:e3:54:20:53:65:7c:8f:67:f1:9a:8f:fd: 22:9c:ca:78:c0:98:7e:a7:5e:0e:0b:5f:2f:d6:dc:e9:40:1c: c9:e5:d4:43:f1:30:9d:44:c5:33:76:b0:0e:b5:6c:36:d7:ef: 9c:59:8b:03:49:3b:f3:9c:aa:16:1f:32:da:d9:50:46:53:56: f3:09:60:65:75:2a:da:74:c3:1d:64:fd:4f:70:a6:76:8c:66: 9a:fe:88:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVCSeTVcY4WQVHXDdCFaVn+UIEJowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE1QkNBOTg0RUVCQUZGRENFRDg0MTkwQzcwNzU2REJF QjNCRkYzOTAeFw0yNjAzMjQxODE2MDNaFw0yNjAzMjgwNjA3MDNaMDMxMTAvBgNV BAMTKEE0RkU2OEVFNjI3QkRDNjYwMjFGOEJFQkZFQkMxMTVGRThCNTcwMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYNQgWqZvcmQok1nlceQjSlXbb E6teQlQKn98kgehvaWF3To33tr/m7zQM1KB/gZ/1I4sahQGS/mrkcYYUQLl/XmXG dpjC99fvTxacdCIE/38jI5J+t2N0mBwqkHEVb5gUGX6s5WFnPpr5y+qYQV+rI5Pj A/37ZzVWqaVR9mBj7lytDZEbt1NEyFRydstPDC6Xc6pnR7U6Yziy5eF4VjCyhlTZ u6/8pL7j4wRtheNujejiKAYlWp8hv5OouQVxRnFgUlqH4th9WQGdcKpEEB4uhrfY 1GfcDY0eWs9ZJzl+oIoSEeoaRhMmKwZwZ8fKSQm0mYIGRpatewde/CQ1bLkFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpP5o7mJ73GYCH4vr/rwRX+i1cDYwHwYDVR0j BBgwFoAU+lvKmE7rr/3O2EGQxwdW2+s7/zkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZWU0N2JiZi1iYTg0LTQ0OGYtOTYyYi0yYWFmNWM3ZGQ2OGQvMC9GQTVCQ0E5ODRF RUJBRkZEQ0VEODQxOTBDNzA3NTZEQkVCM0JGRjM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkE1QkNBOTg0RUVCQUZGRENFRDg0MTkwQzcwNzU2REJFQjNC RkYzOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmVlNDdiYmYtYmE4NC00NDhmLTk2 MmItMmFhZjVjN2RkNjhkLzAvRkE1QkNBOTg0RUVCQUZGRENFRDg0MTkwQzcwNzU2 REJFQjNCRkYzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGSuI1pHH7J5wkt44Uh9S6ixRufNNqlYva+x AV6BRF2V1PX91PVkMhiRTTReYxZ/n+UpCnYr63wcYambxkM4pGei5Sk283YgXYaX bH112Vp4X3NAffAdOM+Y/2A9dh1ZtR5uS1ju5BHURqzKJgvNaeYbBK5Wu+wWnyr7 C/3WJklYTikaFUBG617smRrKIIFXZj7RobWQSPiJZ7PHtp70nhpcetBC5g/nVeNU IFNlfI9n8ZqP/SKcynjAmH6nXg4LXy/W3OlAHMnl1EPxMJ1ExTN2sA61bDbX75xZ iwNJO/OcqhYfMtrZUEZTVvMJYGV1Ktp0wx1k/U9wpnaMZpr+iAY= -----END CERTIFICATE-----Generated at Thu Mar 26 09:06:12 2026 by rpki-client