$ rpki-client -vvf repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/FA479894B4849679EBB9029580F04B8BD74CE048.mft File: FA479894B4849679EBB9029580F04B8BD74CE048.mft (raw, json) Hash identifier: x6GhXPLm82xMDKwJZZ3uzoVPNBaboB6d3sVSQh4IqBE= Subject key identifier: 11:04:78:69:CC:33:D5:86:37:72:7F:09:9F:92:86:CC:A4:40:76:04 Authority key identifier: FA:47:98:94:B4:84:96:79:EB:B9:02:95:80:F0:4B:8B:D7:4C:E0:48 Certificate issuer: /CN=FA479894B4849679EBB9029580F04B8BD74CE048 Certificate serial: 13D7DC9BB274485C08C977ECDB43B4FAC4B1448B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA479894B4849679EBB9029580F04B8BD74CE048.cer Subject info access: rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/FA479894B4849679EBB9029580F04B8BD74CE048.mft Manifest number: F4 Signing time: Thu 26 Mar 2026 04:31:42 +0000 Manifest this update: Thu 26 Mar 2026 04:26:42 +0000 Manifest next update: Sun 29 Mar 2026 09:35:42 +0000 Files and hashes: 1: FA479894B4849679EBB9029580F04B8BD74CE048.crl (hash: XoO3j2o+S5VUVwJDMOgkpjxESD6PdnwyYZu8i6jEVhw=) 2: 323030313a6466343a343463303a3a2f34382d3438203d3e20313533313137.roa (hash: TN7coRRv7ozdQ4MBQjtVExbapiKpR2cs6McrqrVZTKc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/FA479894B4849679EBB9029580F04B8BD74CE048.crl rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/FA479894B4849679EBB9029580F04B8BD74CE048.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA479894B4849679EBB9029580F04B8BD74CE048.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 09:35:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:d7:dc:9b:b2:74:48:5c:08:c9:77:ec:db:43:b4:fa:c4:b1:44:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA479894B4849679EBB9029580F04B8BD74CE048 Validity Not Before: Mar 26 04:26:42 2026 GMT Not After : Mar 29 09:35:42 2026 GMT Subject: CN=11047869CC33D58637727F099F9286CCA4407604 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ee:6d:a5:98:90:ac:d4:ff:cb:9d:99:47:a5: ec:5f:33:20:f8:58:23:9f:7b:81:76:51:3a:54:a7: de:7f:33:c7:04:00:7f:b7:76:3b:c4:a5:15:b7:ce: 61:76:4b:0e:da:87:98:3a:e1:43:b6:74:3f:72:68: 77:06:41:8b:05:2d:34:8a:59:e5:9e:1e:71:38:ed: f4:2f:59:ca:39:44:8d:4d:c7:75:b0:31:ed:36:2e: b2:ab:de:11:58:ee:8b:6b:25:77:3e:b5:a4:ab:ec: a0:e0:e9:60:ce:98:5f:c9:d0:25:7e:e4:65:d2:30: 48:ad:a9:07:5f:8c:60:e1:2d:d6:05:16:d7:5b:31: b8:18:33:4e:bd:0e:03:bb:63:99:ec:4f:41:c9:84: f6:ba:54:ca:45:41:ec:38:d5:b9:4b:59:c9:28:af: 63:3d:3e:d1:f6:4b:2b:70:35:8e:3f:03:39:e6:b8: cd:8b:26:c8:d1:ad:af:51:24:f4:38:51:81:39:1d: ba:f4:cc:33:83:84:cd:d7:e2:a9:48:d8:4e:98:20: 26:2b:89:ad:52:8a:94:c5:51:0a:01:c2:a9:37:96: fb:d6:d9:93:65:86:9d:5f:4a:4c:95:6b:1d:43:e6: cf:0f:63:1c:36:0a:31:53:66:fd:ae:9e:63:12:65: 62:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:04:78:69:CC:33:D5:86:37:72:7F:09:9F:92:86:CC:A4:40:76:04 X509v3 Authority Key Identifier: keyid:FA:47:98:94:B4:84:96:79:EB:B9:02:95:80:F0:4B:8B:D7:4C:E0:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/FA479894B4849679EBB9029580F04B8BD74CE048.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA479894B4849679EBB9029580F04B8BD74CE048.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/FA479894B4849679EBB9029580F04B8BD74CE048.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:1a:f5:9b:8c:68:03:e9:ca:df:41:b3:19:8c:12:40:ba:6a: 68:9b:4b:9c:78:8f:8f:16:df:50:36:d8:7e:0e:18:4c:d9:d3: d0:ff:75:57:3d:56:14:49:64:6c:3e:f0:71:70:56:5e:35:90: 1e:81:1e:48:7c:38:96:38:29:60:6e:87:0a:18:21:a6:7e:49: d5:8c:1f:f4:e4:06:25:3d:b8:1d:3f:89:3b:04:9c:3a:c0:01: 8a:73:15:97:ab:22:99:43:ea:d5:d8:5b:1a:5c:4f:93:3c:d2: 12:d9:b3:1a:80:58:92:f4:01:47:d3:56:87:4f:6b:ff:b2:47: 49:3f:f1:c6:d0:e2:33:9b:4c:6a:1d:5f:de:1d:4d:d3:3f:4b: 64:c1:87:de:f0:25:c2:7c:07:a5:e2:0d:c1:ea:1e:83:fe:71: ad:cc:31:0b:8a:7f:be:d1:bc:4a:7c:4d:da:da:76:90:a0:cf: bf:02:c2:35:1c:25:8a:f7:49:3d:31:dc:1d:9b:5c:9c:17:41: f2:f1:7e:86:86:9b:f9:87:5e:f4:32:5a:7b:41:f4:9a:cd:15: 4d:bf:bb:2c:59:28:f1:6e:a6:f4:e3:c1:31:d3:e1:c2:c5:6b: 9b:54:1b:bb:6a:f8:09:a9:fa:77:c4:ca:d5:07:9a:de:ff:fb: 57:72:9c:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE9fcm7J0SFwIyXfs20O0+sSxRIswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE0Nzk4OTRCNDg0OTY3OUVCQjkwMjk1ODBGMDRCOEJE NzRDRTA0ODAeFw0yNjAzMjYwNDI2NDJaFw0yNjAzMjkwOTM1NDJaMDMxMTAvBgNV BAMTKDExMDQ3ODY5Q0MzM0Q1ODYzNzcyN0YwOTlGOTI4NkNDQTQ0MDc2MDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC7m2lmJCs1P/LnZlHpexfMyD4 WCOfe4F2UTpUp95/M8cEAH+3djvEpRW3zmF2Sw7ah5g64UO2dD9yaHcGQYsFLTSK WeWeHnE47fQvWco5RI1Nx3WwMe02LrKr3hFY7otrJXc+taSr7KDg6WDOmF/J0CV+ 5GXSMEitqQdfjGDhLdYFFtdbMbgYM069DgO7Y5nsT0HJhPa6VMpFQew41blLWcko r2M9PtH2SytwNY4/AznmuM2LJsjRra9RJPQ4UYE5Hbr0zDODhM3X4qlI2E6YICYr ia1SipTFUQoBwqk3lvvW2ZNlhp1fSkyVax1D5s8PYxw2CjFTZv2unmMSZWKPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEQR4acwz1YY3cn8Jn5KGzKRAdgQwHwYDVR0j BBgwFoAU+keYlLSElnnruQKVgPBLi9dM4EgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OWIwN2E5ZS02MmRmLTQ4MDgtOWQyYS1hNmU2ODg0YmNiYmIvMS9GQTQ3OTg5NEI0 ODQ5Njc5RUJCOTAyOTU4MEYwNEI4QkQ3NENFMDQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkE0Nzk4OTRCNDg0OTY3OUVCQjkwMjk1ODBGMDRCOEJENzRD RTA0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTliMDdhOWUtNjJkZi00ODA4LTlk MmEtYTZlNjg4NGJjYmJiLzEvRkE0Nzk4OTRCNDg0OTY3OUVCQjkwMjk1ODBGMDRC OEJENzRDRTA0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADca9ZuMaAPpyt9BsxmMEkC6amibS5x4j48W 31A22H4OGEzZ09D/dVc9VhRJZGw+8HFwVl41kB6BHkh8OJY4KWBuhwoYIaZ+SdWM H/TkBiU9uB0/iTsEnDrAAYpzFZerIplD6tXYWxpcT5M80hLZsxqAWJL0AUfTVodP a/+yR0k/8cbQ4jObTGodX94dTdM/S2TBh97wJcJ8B6XiDcHqHoP+ca3MMQuKf77R vEp8TdradpCgz78CwjUcJYr3ST0x3B2bXJwXQfLxfoaGm/mHXvQyWntB9JrNFU2/ uyxZKPFupvTjwTHT4cLFa5tUG7tq+Amp+nfEytUHmt7/+1dynCs= -----END CERTIFICATE-----Generated at Thu Mar 26 09:09:21 2026 by rpki-client