$ rpki-client -vvf repo-rpki.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.mft File: FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.mft (raw, json) Hash identifier: lxBBhu7FUoXRHMW13p+tPtd8+KSZPxXndwDbbsDF7Kg= Subject key identifier: F6:2E:A4:CA:EF:B5:4F:19:A6:BF:81:1D:C6:12:BF:A9:9F:BF:10:76 Authority key identifier: FD:18:E3:EC:B5:F2:28:5C:07:51:C4:8E:AF:23:EF:21:0B:A8:FD:CC Certificate issuer: /CN=FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC Certificate serial: 379D2FA2CD8BECDF78F76B9BD8A0195E5E551A21 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.mft Manifest number: 0149 Signing time: Tue 24 Mar 2026 23:11:23 +0000 Manifest this update: Tue 24 Mar 2026 23:06:23 +0000 Manifest next update: Sat 28 Mar 2026 01:05:23 +0000 Files and hashes: 1: FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.crl (hash: CYOyEe6tzLLYmW/72Qn16nWJ8c3jCf85DAdA3586dtA=) 2: 3135372e32302e39352e302f32342d3234203d3e20313431363032.roa (hash: 88y84elDiek3O/IhTaNMS2vLlPQVqlAnqgDoLBdJafc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.crl rsync://repo-rpki.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 01:05:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:9d:2f:a2:cd:8b:ec:df:78:f7:6b:9b:d8:a0:19:5e:5e:55:1a:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC Validity Not Before: Mar 24 23:06:23 2026 GMT Not After : Mar 28 01:05:23 2026 GMT Subject: CN=F62EA4CAEFB54F19A6BF811DC612BFA99FBF1076 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:67:67:c9:34:1a:66:3e:dc:d0:e7:1e:9e:aa: 78:66:ba:74:3e:d8:02:50:d9:88:56:c7:da:79:f8: b3:14:3d:0f:f6:8c:7e:d4:d4:c9:d4:25:eb:52:85: 39:9d:e2:ab:f2:ff:29:22:1e:7f:20:33:53:ec:81: 4c:19:79:85:d4:0b:6c:5e:a0:1b:1f:58:0f:3e:e3: ac:f9:77:51:cd:c1:76:76:8c:4f:f6:ae:01:09:86: 93:69:09:ee:fe:1b:6b:0e:20:4b:01:6c:5a:ea:12: a3:20:b7:d8:79:40:d5:97:af:2b:29:52:20:57:48: c1:8e:b7:35:b9:40:6e:fc:4e:cd:5c:42:7b:9b:04: 89:c6:4a:eb:ed:ad:16:70:6e:13:f4:7e:95:78:09: 5f:9f:bc:84:2d:1c:8d:b0:50:9b:bf:68:60:8e:10: 60:e0:6b:b1:6c:71:fb:ab:0b:c6:e7:8d:49:7c:0b: 37:06:5d:3a:fc:d8:bf:04:30:f2:57:e1:79:06:6a: 75:3d:eb:34:f0:57:06:39:7c:6e:f3:79:58:55:b2: 2f:49:5a:f5:92:e7:c0:ae:8d:78:b1:9c:54:92:93: 86:68:62:fc:5c:2c:5f:8f:43:8a:f9:39:e9:d5:af: d3:5f:7e:ab:88:4b:3a:f1:17:7b:5c:88:3f:b3:4c: 53:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:2E:A4:CA:EF:B5:4F:19:A6:BF:81:1D:C6:12:BF:A9:9F:BF:10:76 X509v3 Authority Key Identifier: keyid:FD:18:E3:EC:B5:F2:28:5C:07:51:C4:8E:AF:23:EF:21:0B:A8:FD:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:ce:cb:b0:b3:1f:23:29:cf:29:22:80:65:08:82:b5:f1:1a: b9:e8:91:a6:48:f7:f3:57:b5:be:01:37:9e:03:58:74:c6:88: 79:4c:e8:f4:8d:93:5b:e7:9c:73:d8:53:bc:bc:62:28:27:9a: c8:63:b9:e7:79:51:c5:20:ef:e3:f7:11:a5:8e:17:11:3d:10: d9:f0:14:73:21:a7:56:79:f0:90:fd:3b:96:86:f9:e9:de:e9: 68:72:96:04:40:bb:80:73:6e:82:22:91:48:75:73:5e:be:ea: 2d:b9:9b:73:8d:b2:05:1b:75:b6:33:65:67:6e:86:7e:f2:a6: e6:4f:b7:ee:ac:34:68:63:15:12:78:a8:a4:90:f2:e8:3f:3d: a0:28:5d:8a:90:b6:9f:0c:d3:b8:fa:10:48:2a:e6:b9:f0:22: 8a:83:b9:47:f4:77:80:81:6d:20:71:b7:53:07:26:c1:8f:12: 6e:06:67:65:b3:24:43:fd:cd:ab:01:e7:a9:47:8b:88:6e:90: c0:ce:7f:5b:59:99:11:7e:4f:b9:d5:92:dd:bd:8f:75:e2:50: 9b:97:92:91:6d:d5:19:f7:48:d9:9b:5a:bc:a0:6d:f0:f9:2d: e2:ac:21:10:9c:6a:78:2e:fa:f1:a8:82:18:76:80:9a:24:a1: 57:94:13:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN50vos2L7N9492ub2KAZXl5VGiEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkQxOEUzRUNCNUYyMjg1QzA3NTFDNDhFQUYyM0VGMjEw QkE4RkRDQzAeFw0yNjAzMjQyMzA2MjNaFw0yNjAzMjgwMTA1MjNaMDMxMTAvBgNV BAMTKEY2MkVBNENBRUZCNTRGMTlBNkJGODExREM2MTJCRkE5OUZCRjEwNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKZ2fJNBpmPtzQ5x6eqnhmunQ+ 2AJQ2YhWx9p5+LMUPQ/2jH7U1MnUJetShTmd4qvy/ykiHn8gM1PsgUwZeYXUC2xe oBsfWA8+46z5d1HNwXZ2jE/2rgEJhpNpCe7+G2sOIEsBbFrqEqMgt9h5QNWXrysp UiBXSMGOtzW5QG78Ts1cQnubBInGSuvtrRZwbhP0fpV4CV+fvIQtHI2wUJu/aGCO EGDga7FscfurC8bnjUl8CzcGXTr82L8EMPJX4XkGanU96zTwVwY5fG7zeVhVsi9J WvWS58CujXixnFSSk4ZoYvxcLF+PQ4r5OenVr9NffquISzrxF3tciD+zTFMDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9i6kyu+1Txmmv4EdxhK/qZ+/EHYwHwYDVR0j BBgwFoAU/Rjj7LXyKFwHUcSOryPvIQuo/cwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YWUxM2JhYy05MWMxLTQ2M2ItODMzMy02NGVlYzZkMjc5N2UvMC9GRDE4RTNFQ0I1 RjIyODVDMDc1MUM0OEVBRjIzRUYyMTBCQThGRENDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkQxOEUzRUNCNUYyMjg1QzA3NTFDNDhFQUYyM0VGMjEwQkE4 RkRDQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGFlMTNiYWMtOTFjMS00NjNiLTgz MzMtNjRlZWM2ZDI3OTdlLzAvRkQxOEUzRUNCNUYyMjg1QzA3NTFDNDhFQUYyM0VG MjEwQkE4RkRDQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJnOy7CzHyMpzykigGUIgrXxGrnokaZI9/NX tb4BN54DWHTGiHlM6PSNk1vnnHPYU7y8Yignmshjued5UcUg7+P3EaWOFxE9ENnw FHMhp1Z58JD9O5aG+ene6WhylgRAu4BzboIikUh1c16+6i25m3ONsgUbdbYzZWdu hn7ypuZPt+6sNGhjFRJ4qKSQ8ug/PaAoXYqQtp8M07j6EEgq5rnwIoqDuUf0d4CB bSBxt1MHJsGPEm4GZ2WzJEP9zasB56lHi4hukMDOf1tZmRF+T7nVkt29j3XiUJuX kpFt1Rn3SNmbWrygbfD5LeKsIRCcangu+vGoghh2gJokoVeUE2s= -----END CERTIFICATE-----Generated at Thu Mar 26 21:14:59 2026 by rpki-client