$ rpki-client -vvf repo-rpki.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.mft File: FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.mft (raw, json) Hash identifier: JiErvyQTy+RpMqq5pzWkPhnMP9ZwB6ThUTqOYltWQGM= Subject key identifier: CC:EF:E4:20:36:59:0E:D0:2B:38:03:D7:66:BF:60:EE:55:BB:B8:5A Authority key identifier: FC:D5:B5:62:FA:ED:9B:9D:67:F9:DE:5D:B7:05:78:BF:DB:00:57:B3 Certificate issuer: /CN=FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3 Certificate serial: 1F3BE9EFCF43ECCC1CD8581FB81A391A112AD753 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.mft Manifest number: 0389 Signing time: Wed 25 Mar 2026 00:11:19 +0000 Manifest this update: Wed 25 Mar 2026 00:06:19 +0000 Manifest next update: Sat 28 Mar 2026 02:23:19 +0000 Files and hashes: 1: 3130332e3135312e3134302e302f32332d3233203d3e20313430343137.roa (hash: 8NA8ztqKmdQKSo6VJIi8+Ky4DaNAGzE3fau0y6GTEzI=) 2: FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.crl (hash: 5z5UpUprgGgaHjOHO6SIzuU3gfwyb25kiaetiJw/yGo=) 3: 3130332e3135312e3134302e302f32332d3234203d3e20313430343137.roa (hash: maLwNGdhj2YMExFHAn5+1Sop9522GuyaLGRVR2YiAsA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.crl rsync://repo-rpki.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 02:23:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:3b:e9:ef:cf:43:ec:cc:1c:d8:58:1f:b8:1a:39:1a:11:2a:d7:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3 Validity Not Before: Mar 25 00:06:19 2026 GMT Not After : Mar 28 02:23:19 2026 GMT Subject: CN=CCEFE42036590ED02B3803D766BF60EE55BBB85A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ec:92:be:ee:2e:de:aa:d4:14:91:84:5a:6e: 9e:a4:35:d1:34:83:23:70:6e:49:2c:1c:55:e0:fb: 31:d4:e7:12:a5:d2:66:e4:b3:04:0b:c4:51:1b:67: 6e:22:95:e1:9b:52:7b:bd:32:29:6e:25:79:33:7a: 98:3c:49:95:9e:43:c4:d2:a5:4e:8f:f9:30:74:3c: 94:89:b2:56:5a:70:f6:70:7a:49:17:c8:e5:4e:9f: cf:6a:04:5f:15:8b:60:ea:11:b6:aa:92:d2:43:cf: ba:18:63:14:b6:15:46:94:d5:0c:22:77:5c:dd:ac: 00:11:73:e2:d7:28:95:04:cf:c1:9c:68:40:dc:65: 31:ef:98:5b:ae:02:00:af:b2:60:f2:9e:67:71:64: 3e:da:23:96:86:d9:f3:e2:04:17:87:b5:3c:52:6d: 4f:49:ef:76:bc:8e:81:48:3f:15:48:11:f7:58:e1: 6b:4e:80:03:09:65:f0:04:2a:b8:ae:ce:a0:f8:74: c4:50:48:7d:1e:28:26:bd:ef:2c:c7:00:af:a4:fb: 7f:5a:a2:8c:fb:62:28:60:46:d2:e4:a9:64:c8:79: 09:7c:7f:c1:66:70:2d:4c:a4:10:f8:7a:91:c8:78: 7d:92:3d:49:c8:62:50:ce:97:c5:c7:77:8e:9d:13: 27:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:EF:E4:20:36:59:0E:D0:2B:38:03:D7:66:BF:60:EE:55:BB:B8:5A X509v3 Authority Key Identifier: keyid:FC:D5:B5:62:FA:ED:9B:9D:67:F9:DE:5D:B7:05:78:BF:DB:00:57:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:e6:47:0e:04:15:bf:c3:13:19:0a:72:4b:9e:a0:bc:55:fa: 41:94:a4:60:dd:92:b5:d4:a2:78:91:52:ec:2d:2a:1a:11:69: 64:6b:4c:68:19:44:10:d7:51:fa:10:9a:e0:82:b7:77:8c:75: 47:ab:e6:e4:75:61:66:56:e7:97:66:50:6b:2a:99:70:e9:b5: fd:fe:ed:1f:86:1c:a8:f2:51:4a:5e:7e:87:53:99:60:b3:fa: f0:01:14:4b:5f:a9:b6:d8:cc:65:7e:1f:44:b0:52:69:e4:e4: e7:43:85:0a:96:ba:f5:71:d9:a4:54:4a:fb:33:de:2c:3b:36: 15:d3:71:a4:b1:85:0d:c2:7e:52:c0:87:77:9f:8b:5d:2a:0c: 0f:96:a1:14:8a:25:f9:02:b9:85:a2:09:b0:46:84:67:3b:88: e8:b6:24:39:82:f4:35:19:fe:6a:6e:75:95:71:f3:63:f7:7b: ef:4b:a4:30:70:ce:37:00:2a:26:b2:c0:a9:e6:b6:9f:ac:85: 3f:3c:b8:3e:3a:df:f5:81:1b:00:17:6b:98:e9:b0:18:25:a7: 00:05:43:d9:49:24:ea:80:5d:a4:ed:5c:4d:a8:72:8d:e1:a6: 98:ce:42:90:e5:99:65:41:84:1c:35:7f:fd:58:4f:f2:ba:a1: d8:f6:18:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHzvp789D7Mwc2FgfuBo5GhEq11MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkNENUI1NjJGQUVEOUI5RDY3RjlERTVEQjcwNTc4QkZE QjAwNTdCMzAeFw0yNjAzMjUwMDA2MTlaFw0yNjAzMjgwMjIzMTlaMDMxMTAvBgNV BAMTKENDRUZFNDIwMzY1OTBFRDAyQjM4MDNENzY2QkY2MEVFNTVCQkI4NUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu7JK+7i7eqtQUkYRabp6kNdE0 gyNwbkksHFXg+zHU5xKl0mbkswQLxFEbZ24ileGbUnu9MiluJXkzepg8SZWeQ8TS pU6P+TB0PJSJslZacPZwekkXyOVOn89qBF8Vi2DqEbaqktJDz7oYYxS2FUaU1Qwi d1zdrAARc+LXKJUEz8GcaEDcZTHvmFuuAgCvsmDynmdxZD7aI5aG2fPiBBeHtTxS bU9J73a8joFIPxVIEfdY4WtOgAMJZfAEKriuzqD4dMRQSH0eKCa97yzHAK+k+39a ooz7YihgRtLkqWTIeQl8f8FmcC1MpBD4epHIeH2SPUnIYlDOl8XHd46dEydvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzO/kIDZZDtArOAPXZr9g7lW7uFowHwYDVR0j BBgwFoAU/NW1Yvrtm51n+d5dtwV4v9sAV7MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NDcwMjZhOS0wYzlhLTRkNzktYWQ2Ny0yYzlkYmQzNjZkMGIvMC9GQ0Q1QjU2MkZB RUQ5QjlENjdGOURFNURCNzA1NzhCRkRCMDA1N0IzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkNENUI1NjJGQUVEOUI5RDY3RjlERTVEQjcwNTc4QkZEQjAw NTdCMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDQ3MDI2YTktMGM5YS00ZDc5LWFk NjctMmM5ZGJkMzY2ZDBiLzAvRkNENUI1NjJGQUVEOUI5RDY3RjlERTVEQjcwNTc4 QkZEQjAwNTdCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC/mRw4EFb/DExkKckueoLxV+kGUpGDdkrXU oniRUuwtKhoRaWRrTGgZRBDXUfoQmuCCt3eMdUer5uR1YWZW55dmUGsqmXDptf3+ 7R+GHKjyUUpefodTmWCz+vABFEtfqbbYzGV+H0SwUmnk5OdDhQqWuvVx2aRUSvsz 3iw7NhXTcaSxhQ3CflLAh3efi10qDA+WoRSKJfkCuYWiCbBGhGc7iOi2JDmC9DUZ /mpudZVx82P3e+9LpDBwzjcAKiaywKnmtp+shT88uD463/WBGwAXa5jpsBglpwAF Q9lJJOqAXaTtXE2oco3hppjOQpDlmWVBhBw1f/1YT/K6odj2GKI= -----END CERTIFICATE-----Generated at Thu Mar 26 07:18:02 2026 by rpki-client