$ rpki-client -vvf repo-rpki.idnic.net/repo/7d68500c-49f8-4f01-8774-f7c3164a0a58/0/FD0F38979237143A0D44165912E79E2FACD5A3BA.mft File: FD0F38979237143A0D44165912E79E2FACD5A3BA.mft (raw, json) Hash identifier: 6QgRpp9mPwtwqJwvMt+TOGxbMvXd5Xk0lsNNvJIpMOI= Subject key identifier: AC:F7:A5:D0:34:5B:59:47:03:FF:A7:5B:0D:F9:60:39:7C:D5:6F:0E Authority key identifier: FD:0F:38:97:92:37:14:3A:0D:44:16:59:12:E7:9E:2F:AC:D5:A3:BA Certificate issuer: /CN=FD0F38979237143A0D44165912E79E2FACD5A3BA Certificate serial: 60E32E97D15DA134B87A9E47E14959821E7EF18D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FD0F38979237143A0D44165912E79E2FACD5A3BA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d68500c-49f8-4f01-8774-f7c3164a0a58/0/FD0F38979237143A0D44165912E79E2FACD5A3BA.mft Manifest number: 052F Signing time: Tue 24 Mar 2026 18:40:56 +0000 Manifest this update: Tue 24 Mar 2026 18:35:56 +0000 Manifest next update: Sat 28 Mar 2026 00:47:56 +0000 Files and hashes: 1: 323430363a623734303a3a2f33322d3332203d3e20313431313235.roa (hash: QqT8D5lkBG4hSbXhFLTMPSoaBkT256vJUAYJ7NnLOL4=) 2: FD0F38979237143A0D44165912E79E2FACD5A3BA.crl (hash: R/Eop1OlMJikEmbzdgXs7f69/y8gwFNEuaZ6tF64pEE=) 3: 3130332e3135382e39382e302f32332d3234203d3e20313431313235.roa (hash: SOkxDu78tXfJl/igqr9RzKPCr0bIXcHmyK6/S8XprpU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d68500c-49f8-4f01-8774-f7c3164a0a58/0/FD0F38979237143A0D44165912E79E2FACD5A3BA.crl rsync://repo-rpki.idnic.net/repo/7d68500c-49f8-4f01-8774-f7c3164a0a58/0/FD0F38979237143A0D44165912E79E2FACD5A3BA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FD0F38979237143A0D44165912E79E2FACD5A3BA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 00:47:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:e3:2e:97:d1:5d:a1:34:b8:7a:9e:47:e1:49:59:82:1e:7e:f1:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FD0F38979237143A0D44165912E79E2FACD5A3BA Validity Not Before: Mar 24 18:35:56 2026 GMT Not After : Mar 28 00:47:56 2026 GMT Subject: CN=ACF7A5D0345B594703FFA75B0DF960397CD56F0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:30:c7:0f:b0:3c:55:a0:60:af:c1:84:b5:fa: ad:b0:8a:3b:f4:90:b3:fd:37:bf:35:86:b8:30:04: c1:4b:eb:11:bb:d6:ae:c7:5c:ae:8d:c2:7c:fb:f0: 4c:db:f8:8a:a5:ca:b9:de:ce:37:f5:d6:35:e3:ee: af:6f:ff:a5:36:28:c7:69:43:28:be:aa:75:13:6c: be:87:8f:7d:c0:bf:f6:72:c9:9d:c0:b1:f1:08:06: 8b:53:bc:b3:97:f9:8e:46:c0:0e:a0:9f:af:ba:59: 72:e6:40:fa:c8:d2:a4:67:4e:01:6a:60:70:bc:9f: 87:41:d9:fe:45:b0:66:b1:e0:e0:52:6f:d0:91:1a: ed:e5:e4:f7:05:a1:5f:8b:5d:c4:f8:9b:0a:7d:c4: 93:aa:15:74:99:e5:bd:f3:a7:01:56:6e:9e:83:e1: c2:3d:c8:78:b5:aa:45:e8:6b:f2:6c:dc:a2:e5:74: 13:32:13:f5:cb:ff:a1:45:c4:2c:6a:9b:e4:ca:8b: f9:62:eb:38:b3:09:d6:9a:b3:74:f5:22:c7:0f:86: ed:a9:6f:52:f1:a1:b2:f8:b6:67:10:b9:07:5c:a2: 1f:09:a2:f9:f8:05:ae:18:1f:56:6f:02:5c:0e:cd: 13:4d:68:63:92:4e:20:38:c1:0f:7b:6d:29:e2:0e: bf:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:F7:A5:D0:34:5B:59:47:03:FF:A7:5B:0D:F9:60:39:7C:D5:6F:0E X509v3 Authority Key Identifier: keyid:FD:0F:38:97:92:37:14:3A:0D:44:16:59:12:E7:9E:2F:AC:D5:A3:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d68500c-49f8-4f01-8774-f7c3164a0a58/0/FD0F38979237143A0D44165912E79E2FACD5A3BA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FD0F38979237143A0D44165912E79E2FACD5A3BA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d68500c-49f8-4f01-8774-f7c3164a0a58/0/FD0F38979237143A0D44165912E79E2FACD5A3BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:b7:4f:08:de:36:04:cf:25:88:81:e1:19:2f:a4:cf:18:4b: 0d:e6:cf:89:92:f8:b2:a4:cc:ec:21:60:32:51:6b:68:ae:94: 26:5b:0e:80:53:78:5f:d8:a5:61:12:ca:c3:2e:6f:fb:49:eb: 8f:1a:45:e3:47:5c:a8:5a:12:bb:5b:64:a6:76:fc:86:70:51: 1e:82:1a:ce:91:e6:e5:60:0c:3c:d5:51:cd:3c:6c:73:88:ae: 14:c0:48:d1:78:a2:47:93:bd:21:98:5d:b3:f8:58:93:36:ba: 24:b8:00:07:b0:c5:20:a4:e6:82:b1:af:c3:9f:64:d2:44:d9: f5:67:de:a7:3c:a4:92:74:38:3c:ff:c8:05:80:c9:bd:08:a8: b6:bf:8f:b1:ff:c3:c2:75:41:e6:14:8b:9c:20:5b:2a:d0:8d: af:c3:8a:60:5e:33:4c:3b:b1:78:6a:77:9f:5e:0f:ac:72:6a: ad:6f:57:5d:4a:8a:fd:f2:1e:29:c6:15:23:67:23:94:15:7b: 4e:42:26:58:2d:6c:1c:ec:dc:65:f3:84:0f:0c:8c:da:eb:0a: c6:eb:29:ff:7f:b1:de:06:c4:73:16:82:72:f4:b7:6c:e7:23: 8e:1d:01:af:92:f2:e5:22:b6:f8:f5:2b:b1:a2:e8:8c:2b:54: c1:05:05:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYOMul9FdoTS4ep5H4UlZgh5+8Y0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkQwRjM4OTc5MjM3MTQzQTBENDQxNjU5MTJFNzlFMkZB Q0Q1QTNCQTAeFw0yNjAzMjQxODM1NTZaFw0yNjAzMjgwMDQ3NTZaMDMxMTAvBgNV BAMTKEFDRjdBNUQwMzQ1QjU5NDcwM0ZGQTc1QjBERjk2MDM5N0NENTZGMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeMMcPsDxVoGCvwYS1+q2wijv0 kLP9N781hrgwBMFL6xG71q7HXK6Nwnz78Ezb+Iqlyrnezjf11jXj7q9v/6U2KMdp Qyi+qnUTbL6Hj33Av/ZyyZ3AsfEIBotTvLOX+Y5GwA6gn6+6WXLmQPrI0qRnTgFq YHC8n4dB2f5FsGax4OBSb9CRGu3l5PcFoV+LXcT4mwp9xJOqFXSZ5b3zpwFWbp6D 4cI9yHi1qkXoa/Js3KLldBMyE/XL/6FFxCxqm+TKi/li6zizCdaas3T1IscPhu2p b1LxobL4tmcQuQdcoh8Jovn4Ba4YH1ZvAlwOzRNNaGOSTiA4wQ97bSniDr+HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrPel0DRbWUcD/6dbDflgOXzVbw4wHwYDVR0j BBgwFoAU/Q84l5I3FDoNRBZZEueeL6zVo7owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDY4NTAwYy00OWY4LTRmMDEtODc3NC1mN2MzMTY0YTBhNTgvMC9GRDBGMzg5Nzky MzcxNDNBMEQ0NDE2NTkxMkU3OUUyRkFDRDVBM0JBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkQwRjM4OTc5MjM3MTQzQTBENDQxNjU5MTJFNzlFMkZBQ0Q1 QTNCQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Q2ODUwMGMtNDlmOC00ZjAxLTg3 NzQtZjdjMzE2NGEwYTU4LzAvRkQwRjM4OTc5MjM3MTQzQTBENDQxNjU5MTJFNzlF MkZBQ0Q1QTNCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACe3TwjeNgTPJYiB4RkvpM8YSw3mz4mS+LKk zOwhYDJRa2iulCZbDoBTeF/YpWESysMub/tJ648aReNHXKhaErtbZKZ2/IZwUR6C Gs6R5uVgDDzVUc08bHOIrhTASNF4okeTvSGYXbP4WJM2uiS4AAewxSCk5oKxr8Of ZNJE2fVn3qc8pJJ0ODz/yAWAyb0IqLa/j7H/w8J1QeYUi5wgWyrQja/DimBeM0w7 sXhqd59eD6xyaq1vV11Kiv3yHinGFSNnI5QVe05CJlgtbBzs3GXzhA8MjNrrCsbr Kf9/sd4GxHMWgnL0t2znI44dAa+S8uUitvj1K7Gi6IwrVMEFBZE= -----END CERTIFICATE-----Generated at Thu Mar 26 19:10:46 2026 by rpki-client