$ rpki-client -vvf repo-rpki.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.mft File: FC4F8762524C3EBF98126E5F579CCB30C37EEF63.mft (raw, json) Hash identifier: kFLjodT1zCYiJe4M+mYKqVDNmbhupTUJZBamfYprHu8= Subject key identifier: B1:EF:B6:D6:9A:6E:52:93:93:3B:D9:18:DC:36:66:33:08:B9:3C:75 Authority key identifier: FC:4F:87:62:52:4C:3E:BF:98:12:6E:5F:57:9C:CB:30:C3:7E:EF:63 Certificate issuer: /CN=FC4F8762524C3EBF98126E5F579CCB30C37EEF63 Certificate serial: 3F1BA8D5650413A5A34446527F5B3878B7121065 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.cer Subject info access: rsync://repo-rpki.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.mft Manifest number: 0166 Signing time: Tue 24 Mar 2026 04:10:46 +0000 Manifest this update: Tue 24 Mar 2026 04:05:46 +0000 Manifest next update: Fri 27 Mar 2026 07:46:46 +0000 Files and hashes: 1: FC4F8762524C3EBF98126E5F579CCB30C37EEF63.crl (hash: ZQaI7zH3Yq0rAPJPmlYjzQqpft33zF8US8v8r38eN1s=) 2: 323030313a6466373a616630303a3a2f34382d3438203d3e20313338313432.roa (hash: +lfpXVJZZB7mX5EhQPkK63ZYtoy/YmVZrC57zXFlQBc=) 3: 3130332e3133342e31362e302f32342d3234203d3e20313338313432.roa (hash: ZuDG3oqhW0+APEzfCML43aRTTIhVqjXyjhsrMxTrLWg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.crl rsync://repo-rpki.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 07:46:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:1b:a8:d5:65:04:13:a5:a3:44:46:52:7f:5b:38:78:b7:12:10:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC4F8762524C3EBF98126E5F579CCB30C37EEF63 Validity Not Before: Mar 24 04:05:46 2026 GMT Not After : Mar 27 07:46:46 2026 GMT Subject: CN=B1EFB6D69A6E5293933BD918DC36663308B93C75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:df:2e:f5:d2:f5:94:c8:88:a6:eb:5f:ee:f4: 68:66:3a:41:6a:02:d9:4c:ba:01:e3:f8:a4:da:a1: 4c:e7:d9:3f:c4:b4:50:f5:64:9d:43:44:a2:a3:ab: 53:3b:c1:b3:02:35:e3:ce:6a:79:30:d3:84:66:9d: 18:8e:15:07:13:4e:6a:e3:f5:46:30:a0:ca:6b:3c: c5:9f:9b:33:ef:0f:22:18:0f:bc:af:4f:b2:c1:99: 13:38:d8:56:df:82:ad:76:f7:98:d9:83:a8:51:36: 27:1c:ab:6d:66:92:d3:59:d7:97:08:56:24:b0:ed: 5c:90:19:ab:fd:d9:c8:00:a2:bc:cc:2e:20:15:8d: 2e:4e:e6:f4:74:d1:ce:d5:a3:64:59:8a:56:87:3f: da:70:54:25:9b:03:c7:43:11:7e:91:ef:a3:b9:66: 2a:f1:72:2e:cb:f4:03:87:c4:78:b4:ad:cd:4e:cc: 57:08:4f:a7:e8:85:29:1b:05:85:a2:d0:33:ea:c7: 3b:be:41:2d:ef:cb:eb:94:01:77:21:1a:09:4d:69: f5:8e:8d:1f:80:48:20:e5:d3:21:94:20:7a:9d:6c: c5:61:21:5c:48:c1:d2:2c:52:4d:3a:90:1a:6a:ae: 7a:b1:64:6a:b2:d4:64:f0:49:68:d3:ac:ea:22:96: 1b:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:EF:B6:D6:9A:6E:52:93:93:3B:D9:18:DC:36:66:33:08:B9:3C:75 X509v3 Authority Key Identifier: keyid:FC:4F:87:62:52:4C:3E:BF:98:12:6E:5F:57:9C:CB:30:C3:7E:EF:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:a3:af:7e:54:db:d9:2f:0b:58:3c:58:a3:d9:34:3d:53:f1: 4a:fd:70:4f:e4:4e:8b:8d:23:95:95:f9:e7:c1:00:ce:89:85: 03:6d:19:71:e5:10:86:5c:9e:70:af:64:bd:2e:de:37:37:a8: 02:d9:4b:98:95:95:2e:ce:42:67:b0:60:08:14:2c:ab:eb:58: 27:00:e7:c9:df:1f:80:5f:72:a5:b6:5e:95:a1:c2:c5:bd:57: 9c:78:2e:5d:71:4a:08:ec:5b:c5:0a:07:e8:df:b8:e3:58:e1: 20:04:ab:88:32:49:2e:3f:cf:9c:f0:67:df:47:e8:55:1a:aa: ae:12:81:35:1c:07:e2:45:34:a1:65:70:5d:a6:19:1f:87:a6: d3:39:cc:65:f4:ff:9c:68:70:e0:29:7d:b8:16:99:70:e5:ce: ed:17:6b:3b:4b:51:e9:31:b3:33:d6:cc:8f:b7:24:d8:cf:fc: 1d:bd:ce:cd:0f:10:c1:c5:6f:e7:cb:51:6e:c8:10:32:a6:c6: f7:88:af:b0:13:e7:c8:23:62:fd:e2:a1:50:0d:a4:ae:b8:cb: c5:f9:48:0b:17:38:b5:01:74:13:e9:28:b5:11:e4:0a:09:86: 02:3d:9e:fc:c6:d3:aa:a6:cc:33:3c:a8:84:47:23:c5:51:38: 76:69:c4:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPxuo1WUEE6WjREZSf1s4eLcSEGUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkM0Rjg3NjI1MjRDM0VCRjk4MTI2RTVGNTc5Q0NCMzBD MzdFRUY2MzAeFw0yNjAzMjQwNDA1NDZaFw0yNjAzMjcwNzQ2NDZaMDMxMTAvBgNV BAMTKEIxRUZCNkQ2OUE2RTUyOTM5MzNCRDkxOERDMzY2NjMzMDhCOTNDNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDt3y710vWUyIim61/u9GhmOkFq AtlMugHj+KTaoUzn2T/EtFD1ZJ1DRKKjq1M7wbMCNePOankw04RmnRiOFQcTTmrj 9UYwoMprPMWfmzPvDyIYD7yvT7LBmRM42Fbfgq1295jZg6hRNiccq21mktNZ15cI ViSw7VyQGav92cgAorzMLiAVjS5O5vR00c7Vo2RZilaHP9pwVCWbA8dDEX6R76O5 Zirxci7L9AOHxHi0rc1OzFcIT6fohSkbBYWi0DPqxzu+QS3vy+uUAXchGglNafWO jR+ASCDl0yGUIHqdbMVhIVxIwdIsUk06kBpqrnqxZGqy1GTwSWjTrOoilhtZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUse+21ppuUpOTO9kY3DZmMwi5PHUwHwYDVR0j BBgwFoAU/E+HYlJMPr+YEm5fV5zLMMN+72MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZTVhYTkzZC03ODdiLTRhMTctODdkMC03ZWY0MWIwZjJkZWYvMC9GQzRGODc2MjUy NEMzRUJGOTgxMjZFNUY1NzlDQ0IzMEMzN0VFRjYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkM0Rjg3NjI1MjRDM0VCRjk4MTI2RTVGNTc5Q0NCMzBDMzdF RUY2My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmU1YWE5M2QtNzg3Yi00YTE3LTg3 ZDAtN2VmNDFiMGYyZGVmLzAvRkM0Rjg3NjI1MjRDM0VCRjk4MTI2RTVGNTc5Q0NC MzBDMzdFRUY2My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADGjr35U29kvC1g8WKPZND1T8Ur9cE/kTouN I5WV+efBAM6JhQNtGXHlEIZcnnCvZL0u3jc3qALZS5iVlS7OQmewYAgULKvrWCcA 58nfH4BfcqW2XpWhwsW9V5x4Ll1xSgjsW8UKB+jfuONY4SAEq4gySS4/z5zwZ99H 6FUaqq4SgTUcB+JFNKFlcF2mGR+HptM5zGX0/5xocOApfbgWmXDlzu0XaztLUekx szPWzI+3JNjP/B29zs0PEMHFb+fLUW7IEDKmxveIr7AT58gjYv3ioVANpK64y8X5 SAsXOLUBdBPpKLUR5AoJhgI9nvzG06qmzDM8qIRHI8VROHZpxMg= -----END CERTIFICATE-----Generated at Thu Mar 26 10:15:49 2026 by rpki-client