$ rpki-client -vvf repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.mft File: FC2DAAA409BA60DE33EC91F3A861D1A00719D426.mft (raw, json) Hash identifier: moLGwAS7xHoe3LF9hKOj8Pufy9ss9PRbPH2hzAd8k9w= Subject key identifier: 44:98:11:E4:6F:6A:48:2A:90:60:47:00:CB:A8:A3:6F:2D:DB:0D:18 Authority key identifier: FC:2D:AA:A4:09:BA:60:DE:33:EC:91:F3:A8:61:D1:A0:07:19:D4:26 Certificate issuer: /CN=FC2DAAA409BA60DE33EC91F3A861D1A00719D426 Certificate serial: 2443F6BFAA63AD5A905C5FC62B7085856F343B86 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.mft Manifest number: 012B Signing time: Thu 26 Mar 2026 04:41:53 +0000 Manifest this update: Thu 26 Mar 2026 04:36:53 +0000 Manifest next update: Sun 29 Mar 2026 15:50:53 +0000 Files and hashes: 1: FC2DAAA409BA60DE33EC91F3A861D1A00719D426.crl (hash: 5fBeiKAQdg5XTqD2OQAbtREt/L10VGE4GXHlouJfQnQ=) 2: 3135372e36362e322e302f32332d3234203d3e20313532343430.roa (hash: 3ZS5/0NJnXKv4Pk0J4oSOH1r1VKtA3mh1qb3WAlsXUw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.crl rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 15:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:43:f6:bf:aa:63:ad:5a:90:5c:5f:c6:2b:70:85:85:6f:34:3b:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC2DAAA409BA60DE33EC91F3A861D1A00719D426 Validity Not Before: Mar 26 04:36:53 2026 GMT Not After : Mar 29 15:50:53 2026 GMT Subject: CN=449811E46F6A482A90604700CBA8A36F2DDB0D18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5a:1b:8d:59:2c:02:c1:9a:02:eb:a4:2a:2a: ab:84:6f:43:95:45:77:3d:0b:e4:3e:8f:d2:14:f5: 0c:93:1a:d3:0b:f9:fe:dc:ef:41:48:6b:6b:e9:b4: 8e:79:19:d5:0e:57:52:56:6f:a1:93:2c:d0:be:0a: a0:e8:72:1e:bd:0d:9d:26:cb:eb:36:06:49:a5:b1: ac:45:b8:86:18:16:d4:fd:55:a2:bc:f8:c4:7b:25: 21:61:1f:5b:dd:b3:d6:18:6d:83:d5:e1:2d:df:3c: 18:b5:8c:b4:9f:ff:fb:10:ec:93:d8:f2:3a:60:02: c6:a5:c1:c2:5c:55:f4:ff:2a:a6:fd:e4:9e:b8:13: e4:fc:ab:83:e9:a1:8d:4c:1f:1f:7f:1d:e1:6c:7b: 5b:5f:de:b8:0c:3b:44:27:71:3d:f6:64:55:6b:40: a0:62:b1:06:ca:65:c1:48:e4:2a:c5:1d:fc:57:40: ad:4c:44:5e:23:6a:ba:fe:24:a6:f5:18:94:af:7b: 08:d8:99:f3:2f:96:18:64:36:e5:96:00:20:f8:e3: 9a:3a:aa:71:f4:59:54:14:a8:8f:95:fd:c5:74:a0: f6:fc:41:a2:89:62:ca:db:d5:10:97:e9:2c:cf:aa: af:9f:71:c8:ee:99:cf:09:2d:13:a9:6f:9f:d4:8c: 6a:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:98:11:E4:6F:6A:48:2A:90:60:47:00:CB:A8:A3:6F:2D:DB:0D:18 X509v3 Authority Key Identifier: keyid:FC:2D:AA:A4:09:BA:60:DE:33:EC:91:F3:A8:61:D1:A0:07:19:D4:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:01:1e:7d:f5:6d:35:14:e4:ae:09:75:3f:2e:23:9d:0a:7f: 05:d9:9d:9c:a8:8d:82:15:93:f6:f1:dd:df:04:8d:9b:b6:cf: c7:52:57:2f:42:ef:32:18:cc:af:df:10:00:5b:76:f7:dd:2f: f9:ab:92:84:b8:b8:48:d1:12:e7:05:10:4f:0c:ed:9f:b8:ee: d9:77:7f:d5:b2:b2:77:35:28:df:34:16:a6:c6:96:f8:7f:e5: 23:18:5b:c4:94:16:4e:ef:d4:71:c6:1c:a7:f1:22:80:aa:08: b8:ce:d1:8a:8f:af:ac:1f:2e:f2:d8:20:d9:e6:ef:e9:e4:f2: 49:97:84:1e:23:75:98:b1:eb:d7:7c:41:3d:38:99:82:ea:5f: 3a:c2:af:68:47:d5:1e:fe:72:50:1e:b4:3c:35:12:7c:c6:46: 33:c4:e9:f9:c5:4b:a9:75:a5:d7:13:a2:fd:9c:84:3c:1b:e6: 03:52:6e:6b:91:68:de:08:81:5a:b9:d1:a0:1d:45:de:5a:8c: 13:09:ef:bb:76:ce:24:74:5d:92:47:5c:9c:45:c4:f2:fc:82: 14:b9:4b:bf:10:b8:40:c0:85:21:ef:d8:e7:c2:b3:16:51:5c: b8:90:35:97:48:9d:2c:41:3a:61:1f:13:86:bc:ff:a2:e5:16: db:65:92:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJEP2v6pjrVqQXF/GK3CFhW80O4YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkMyREFBQTQwOUJBNjBERTMzRUM5MUYzQTg2MUQxQTAw NzE5RDQyNjAeFw0yNjAzMjYwNDM2NTNaFw0yNjAzMjkxNTUwNTNaMDMxMTAvBgNV BAMTKDQ0OTgxMUU0NkY2QTQ4MkE5MDYwNDcwMENCQThBMzZGMkREQjBEMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9WhuNWSwCwZoC66QqKquEb0OV RXc9C+Q+j9IU9QyTGtML+f7c70FIa2vptI55GdUOV1JWb6GTLNC+CqDoch69DZ0m y+s2BkmlsaxFuIYYFtT9VaK8+MR7JSFhH1vds9YYbYPV4S3fPBi1jLSf//sQ7JPY 8jpgAsalwcJcVfT/Kqb95J64E+T8q4PpoY1MHx9/HeFse1tf3rgMO0QncT32ZFVr QKBisQbKZcFI5CrFHfxXQK1MRF4jarr+JKb1GJSvewjYmfMvlhhkNuWWACD445o6 qnH0WVQUqI+V/cV0oPb8QaKJYsrb1RCX6SzPqq+fccjumc8JLROpb5/UjGqhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURJgR5G9qSCqQYEcAy6ijby3bDRgwHwYDVR0j BBgwFoAU/C2qpAm6YN4z7JHzqGHRoAcZ1CYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZmI4MDhlYi1jOThlLTQwMzYtYmU5YS0xOTNiYmNjNjQ4OTIvMC9GQzJEQUFBNDA5 QkE2MERFMzNFQzkxRjNBODYxRDFBMDA3MTlENDI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkMyREFBQTQwOUJBNjBERTMzRUM5MUYzQTg2MUQxQTAwNzE5 RDQyNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWZiODA4ZWItYzk4ZS00MDM2LWJl OWEtMTkzYmJjYzY0ODkyLzAvRkMyREFBQTQwOUJBNjBERTMzRUM5MUYzQTg2MUQx QTAwNzE5RDQyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACgBHn31bTUU5K4JdT8uI50KfwXZnZyojYIV k/bx3d8EjZu2z8dSVy9C7zIYzK/fEABbdvfdL/mrkoS4uEjREucFEE8M7Z+47tl3 f9Wysnc1KN80FqbGlvh/5SMYW8SUFk7v1HHGHKfxIoCqCLjO0YqPr6wfLvLYINnm 7+nk8kmXhB4jdZix69d8QT04mYLqXzrCr2hH1R7+clAetDw1EnzGRjPE6fnFS6l1 pdcTov2chDwb5gNSbmuRaN4IgVq50aAdRd5ajBMJ77t2ziR0XZJHXJxFxPL8ghS5 S78QuEDAhSHv2OfCsxZRXLiQNZdInSxBOmEfE4a8/6LlFttlksk= -----END CERTIFICATE-----Generated at Thu Mar 26 22:38:32 2026 by rpki-client