$ rpki-client -vvf repo-rpki.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.mft File: FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.mft (raw, json) Hash identifier: DEKNaLExG0T/63TNxPUkmhdI3mzzWRlC+V4cD9HzZ1E= Subject key identifier: C1:E9:EB:83:91:61:5F:27:66:CD:88:52:7A:76:19:0A:BE:DD:9F:AC Authority key identifier: FD:7C:5A:44:A3:CA:AF:7C:D1:40:CF:D1:C6:16:22:BA:5E:A2:E6:23 Certificate issuer: /CN=FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623 Certificate serial: 64F99B05B27932A3A278798605955B1220291C1C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.mft Manifest number: 0147 Signing time: Thu 26 Mar 2026 00:12:33 +0000 Manifest this update: Thu 26 Mar 2026 00:07:33 +0000 Manifest next update: Sun 29 Mar 2026 02:06:33 +0000 Files and hashes: 1: 3135372e32302e3132362e302f32332d3234203d3e20313532343130.roa (hash: JACumO3VAE1t5FuWuqXfdX1npziOW8EOlg7XX4OQbh8=) 2: FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.crl (hash: YaGZiVfluJH1B+mpXkGgEzb3fkVQiMdVYk8CfCGmKs4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.crl rsync://repo-rpki.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 02:06:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:f9:9b:05:b2:79:32:a3:a2:78:79:86:05:95:5b:12:20:29:1c:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623 Validity Not Before: Mar 26 00:07:33 2026 GMT Not After : Mar 29 02:06:33 2026 GMT Subject: CN=C1E9EB8391615F2766CD88527A76190ABEDD9FAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c1:d1:d6:a1:62:d0:96:3c:aa:03:b7:f8:db: 47:5b:0b:12:de:90:38:ee:19:35:3d:dc:84:75:31: 40:d4:9d:25:03:4a:4d:04:d4:4c:6c:17:68:0e:14: 7d:53:0a:68:03:72:6a:27:6e:03:34:72:67:b1:0b: 79:f8:1a:e8:aa:2f:b2:00:c4:b3:de:3f:ab:b1:29: 52:99:01:38:48:b1:60:32:9c:e8:70:9d:32:ef:da: 90:88:77:60:cf:60:c7:ab:0f:4b:9e:49:b7:7e:4b: 85:46:08:39:1d:95:2b:c4:6e:aa:a2:16:44:e1:87: a6:d5:8b:ac:cd:85:db:93:07:84:ea:05:25:21:c4: 63:65:c7:2e:03:73:b8:a9:d1:89:8a:f9:73:2e:60: c1:20:04:d7:20:78:7b:ee:8f:30:22:1e:96:58:a3: 25:aa:38:20:9c:3f:26:c4:fb:7a:dc:c4:78:ed:96: f5:74:1f:92:1c:b0:82:a5:22:86:33:0b:21:79:3f: 30:1f:f1:04:2b:5b:12:57:ee:08:20:2f:d5:97:8c: 61:77:bf:4a:43:43:36:d6:4e:79:de:2c:aa:10:49: 70:2c:53:6a:0d:73:7e:00:46:b1:85:b7:36:1e:cd: 4e:ac:06:18:05:f8:65:47:03:93:b8:1a:d6:ae:2d: 34:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:E9:EB:83:91:61:5F:27:66:CD:88:52:7A:76:19:0A:BE:DD:9F:AC X509v3 Authority Key Identifier: keyid:FD:7C:5A:44:A3:CA:AF:7C:D1:40:CF:D1:C6:16:22:BA:5E:A2:E6:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:cb:1d:10:29:c5:e0:8b:f1:89:b5:a1:f2:52:51:23:e0:a0: ef:c2:9b:47:c7:06:36:3b:9a:09:46:d7:92:ab:8b:ce:93:46: 8a:f2:72:6d:75:e5:5c:36:f1:fa:57:52:50:ab:d4:fe:3c:0c: 0c:a7:3b:37:5d:89:06:f0:7b:76:00:b8:24:07:3e:bf:bf:6e: f0:a1:6b:42:8b:d0:7b:a2:e6:14:ed:9b:1f:47:35:7f:d5:b0: fd:82:f0:59:cc:c5:15:c5:1f:da:70:de:3d:c8:4d:02:90:8c: 41:66:7f:c5:c7:86:b6:ca:cc:0f:76:fb:b9:5c:4e:f8:cb:f1: 58:40:bb:d1:d0:77:85:10:00:17:a4:a8:07:cc:9f:47:aa:df: ba:2a:de:77:02:f6:b3:ff:d0:dd:55:e2:7d:8b:a4:55:f3:a1: 7b:b2:ce:97:e8:4f:43:a1:16:82:31:26:5a:e8:36:b5:0c:ec: 26:08:1c:80:cf:a3:e4:18:4a:1b:26:6e:8f:01:95:fa:d3:b3: 7e:07:34:f5:03:09:dd:7a:3b:ee:a9:90:17:a7:fd:6c:4e:64: b8:24:d2:d8:90:a0:0c:db:a4:16:38:6a:dd:84:97:f5:85:de: 96:92:39:58:cc:68:6c:cc:a6:e3:c6:18:b6:54:18:73:f7:13: e2:40:35:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZPmbBbJ5MqOieHmGBZVbEiApHBwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkQ3QzVBNDRBM0NBQUY3Q0QxNDBDRkQxQzYxNjIyQkE1 RUEyRTYyMzAeFw0yNjAzMjYwMDA3MzNaFw0yNjAzMjkwMjA2MzNaMDMxMTAvBgNV BAMTKEMxRTlFQjgzOTE2MTVGMjc2NkNEODg1MjdBNzYxOTBBQkVERDlGQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGwdHWoWLQljyqA7f420dbCxLe kDjuGTU93IR1MUDUnSUDSk0E1ExsF2gOFH1TCmgDcmonbgM0cmexC3n4GuiqL7IA xLPeP6uxKVKZAThIsWAynOhwnTLv2pCId2DPYMerD0ueSbd+S4VGCDkdlSvEbqqi FkThh6bVi6zNhduTB4TqBSUhxGNlxy4Dc7ip0YmK+XMuYMEgBNcgeHvujzAiHpZY oyWqOCCcPybE+3rcxHjtlvV0H5IcsIKlIoYzCyF5PzAf8QQrWxJX7gggL9WXjGF3 v0pDQzbWTnneLKoQSXAsU2oNc34ARrGFtzYezU6sBhgF+GVHA5O4GtauLTT/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwenrg5FhXydmzYhSenYZCr7dn6wwHwYDVR0j BBgwFoAU/XxaRKPKr3zRQM/RxhYiul6i5iMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MGY3OGJkNC1jMTliLTRkNDAtYWE1NC1lZDhkN2JjNzcyY2EvMC9GRDdDNUE0NEEz Q0FBRjdDRDE0MENGRDFDNjE2MjJCQTVFQTJFNjIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkQ3QzVBNDRBM0NBQUY3Q0QxNDBDRkQxQzYxNjIyQkE1RUEy RTYyMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTBmNzhiZDQtYzE5Yi00ZDQwLWFh NTQtZWQ4ZDdiYzc3MmNhLzAvRkQ3QzVBNDRBM0NBQUY3Q0QxNDBDRkQxQzYxNjIy QkE1RUEyRTYyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIfLHRApxeCL8Ym1ofJSUSPgoO/Cm0fHBjY7 mglG15Kri86TRorycm115Vw28fpXUlCr1P48DAynOzddiQbwe3YAuCQHPr+/bvCh a0KL0Hui5hTtmx9HNX/VsP2C8FnMxRXFH9pw3j3ITQKQjEFmf8XHhrbKzA92+7lc TvjL8VhAu9HQd4UQABekqAfMn0eq37oq3ncC9rP/0N1V4n2LpFXzoXuyzpfoT0Oh FoIxJlroNrUM7CYIHIDPo+QYShsmbo8BlfrTs34HNPUDCd16O+6pkBen/WxOZLgk 0tiQoAzbpBY4at2El/WF3paSOVjMaGzMpuPGGLZUGHP3E+JANX0= -----END CERTIFICATE-----Generated at Thu Mar 26 18:45:38 2026 by rpki-client