$ rpki-client -vvf repo-rpki.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.mft File: FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.mft (raw, json) Hash identifier: WqDU+R+NBJ4EopOHyMRVD4D0TBKc148liC/aE/41U6Q= Subject key identifier: FC:55:C6:51:05:8C:E8:25:D6:9B:6F:8F:B0:F3:1A:A0:97:29:2D:E9 Authority key identifier: FE:79:E5:6C:BE:99:C7:73:CD:72:1D:F7:AB:0E:5C:A2:80:9D:07:39 Certificate issuer: /CN=FE79E56CBE99C773CD721DF7AB0E5CA2809D0739 Certificate serial: 2256072522958199BE8B03B86D2E2EAB20A7B879 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.mft Manifest number: 0143 Signing time: Thu 26 Mar 2026 05:21:26 +0000 Manifest this update: Thu 26 Mar 2026 05:16:26 +0000 Manifest next update: Sun 29 Mar 2026 10:24:26 +0000 Files and hashes: 1: 3135372e32302e3232332e302f32342d3234203d3e20313532343337.roa (hash: wm/OwjMJ3Mw2kK4LX3m4F0/jsfG1NixZfT/MRVx2gUc=) 2: FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.crl (hash: jxTjvJkT4Tuog8AvDhkbAbC3YXrt5UmiRXnh2N1Xh28=) 3: 3135372e32302e3232322e302f32342d3234203d3e20313532343337.roa (hash: xA0yIhK/pel57ulFN3HOQ4z99q0P1jOo4pSKaz4ovzA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.crl rsync://repo-rpki.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 10:24:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:56:07:25:22:95:81:99:be:8b:03:b8:6d:2e:2e:ab:20:a7:b8:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FE79E56CBE99C773CD721DF7AB0E5CA2809D0739 Validity Not Before: Mar 26 05:16:26 2026 GMT Not After : Mar 29 10:24:26 2026 GMT Subject: CN=FC55C651058CE825D69B6F8FB0F31AA097292DE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:35:a8:88:61:b4:78:f6:55:08:99:c0:84:ef: 40:cf:b6:fc:ac:86:9f:c5:c9:1d:4f:4a:88:90:54: 04:06:70:33:90:c6:77:ab:dc:fa:79:f8:7e:c2:2f: c9:be:9c:6b:38:67:fb:a2:ac:50:8f:52:40:f0:ba: 00:e8:4b:b9:e0:ce:27:98:ce:4d:7c:10:6d:9e:ef: f1:3c:aa:d3:b2:ed:51:ce:2f:f4:74:fc:21:0f:8d: 51:fc:b5:27:6a:14:ef:13:47:ba:2e:09:48:5c:23: 4d:b6:6d:76:1d:bd:8c:18:66:0b:33:67:b6:e7:7e: a7:06:a7:7e:2a:3d:1e:0d:bd:97:75:f0:85:b1:03: 3b:3b:50:a0:db:60:07:ff:86:97:62:07:b9:56:54: 04:d8:7a:d7:2f:87:4c:23:a2:6a:09:38:1b:aa:18: c9:1e:74:51:33:1b:2b:93:36:da:87:db:8b:44:e5: dd:ba:4c:ce:4f:46:a6:c9:69:88:9b:80:e2:ac:fe: 08:95:fb:a0:bd:c1:e1:67:11:50:9b:b6:38:d0:11: 27:97:03:38:3f:bb:90:86:6b:7a:9f:d7:cc:39:ce: bb:54:a7:b6:8e:a4:90:35:f6:b1:5c:08:5a:f4:4e: b9:68:9c:33:3a:86:0e:9e:28:a2:2f:84:da:a5:3a: 46:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:55:C6:51:05:8C:E8:25:D6:9B:6F:8F:B0:F3:1A:A0:97:29:2D:E9 X509v3 Authority Key Identifier: keyid:FE:79:E5:6C:BE:99:C7:73:CD:72:1D:F7:AB:0E:5C:A2:80:9D:07:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:09:59:38:a5:2d:94:ac:30:34:e8:cf:c5:2c:80:6d:30:55: 6d:9f:6b:99:40:be:c9:b6:e2:d0:ce:09:ce:e6:69:dd:6c:51: eb:26:3c:2b:2c:49:c5:e2:02:8c:10:3d:b9:b9:37:65:1a:12: 4a:dc:1b:98:64:41:16:67:13:3f:cd:55:44:e7:3f:7b:00:88: 06:cf:46:2e:1e:67:d2:88:be:4d:dc:ad:d0:6c:1a:f8:6a:d0: 86:14:eb:28:2a:73:4e:0e:d5:f3:b1:49:a0:0f:19:db:42:79: 79:16:e0:88:3c:38:5f:b1:62:09:3e:07:32:7d:50:83:7b:e3: 00:53:eb:2d:30:ca:16:0c:c1:bc:12:93:e6:45:2f:e0:88:c1: e7:cd:80:79:35:54:4c:7b:28:96:f3:cb:35:f4:6d:c9:8f:12: 86:da:34:e4:5e:14:13:12:cb:da:0f:60:11:bf:ec:fc:64:c8: d9:95:97:14:45:c1:a5:46:fb:31:08:49:84:03:a3:5b:6d:31: 14:52:32:4c:78:11:3f:9c:92:96:e1:6a:b3:40:6f:ef:dc:6d: 59:65:d3:89:f5:a5:99:85:1e:d8:70:c5:11:a0:41:82:a7:de: 0a:bc:d7:d7:5a:ea:fa:0e:98:7a:29:c7:44:4e:8d:b9:0f:7b: fa:44:58:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIlYHJSKVgZm+iwO4bS4uqyCnuHkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkU3OUU1NkNCRTk5Qzc3M0NENzIxREY3QUIwRTVDQTI4 MDlEMDczOTAeFw0yNjAzMjYwNTE2MjZaFw0yNjAzMjkxMDI0MjZaMDMxMTAvBgNV BAMTKEZDNTVDNjUxMDU4Q0U4MjVENjlCNkY4RkIwRjMxQUEwOTcyOTJERTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoNaiIYbR49lUImcCE70DPtvys hp/FyR1PSoiQVAQGcDOQxner3Pp5+H7CL8m+nGs4Z/uirFCPUkDwugDoS7ngzieY zk18EG2e7/E8qtOy7VHOL/R0/CEPjVH8tSdqFO8TR7ouCUhcI022bXYdvYwYZgsz Z7bnfqcGp34qPR4NvZd18IWxAzs7UKDbYAf/hpdiB7lWVATYetcvh0wjomoJOBuq GMkedFEzGyuTNtqH24tE5d26TM5PRqbJaYibgOKs/giV+6C9weFnEVCbtjjQESeX Azg/u5CGa3qf18w5zrtUp7aOpJA19rFcCFr0TrlonDM6hg6eKKIvhNqlOkZBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/FXGUQWM6CXWm2+PsPMaoJcpLekwHwYDVR0j BBgwFoAU/nnlbL6Zx3PNch33qw5cooCdBzkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MWYxNWExZC01ZGFjLTRjYzktODExYS1lNDljYjRlN2JjZTEvMC9GRTc5RTU2Q0JF OTlDNzczQ0Q3MjFERjdBQjBFNUNBMjgwOUQwNzM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkU3OUU1NkNCRTk5Qzc3M0NENzIxREY3QUIwRTVDQTI4MDlE MDczOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTFmMTVhMWQtNWRhYy00Y2M5LTgx MWEtZTQ5Y2I0ZTdiY2UxLzAvRkU3OUU1NkNCRTk5Qzc3M0NENzIxREY3QUIwRTVD QTI4MDlEMDczOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFgJWTilLZSsMDToz8UsgG0wVW2fa5lAvsm2 4tDOCc7mad1sUesmPCssScXiAowQPbm5N2UaEkrcG5hkQRZnEz/NVUTnP3sAiAbP Ri4eZ9KIvk3crdBsGvhq0IYU6ygqc04O1fOxSaAPGdtCeXkW4Ig8OF+xYgk+BzJ9 UIN74wBT6y0wyhYMwbwSk+ZFL+CIwefNgHk1VEx7KJbzyzX0bcmPEobaNOReFBMS y9oPYBG/7PxkyNmVlxRFwaVG+zEISYQDo1ttMRRSMkx4ET+ckpbharNAb+/cbVll 04n1pZmFHthwxRGgQYKn3gq819da6voOmHopx0ROjbkPe/pEWCs= -----END CERTIFICATE-----Generated at Thu Mar 26 13:59:46 2026 by rpki-client