$ rpki-client -vvf repo-rpki.idnic.net/repo/ede4719a-ace4-41f2-a070-8de3192b7f49/0/FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.mft File: FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.mft (raw, json) Hash identifier: /EVpoQwPokxDzvVO7I/E2qO0szTqt3eCHT1+JJdg7fA= Subject key identifier: BF:19:55:06:F2:D1:D6:A8:28:61:56:69:11:DA:D5:6E:F0:3A:2B:89 Authority key identifier: FC:31:DB:70:F7:B2:F1:7F:13:E9:2A:2E:7B:AE:55:54:79:2E:FB:BF Certificate issuer: /CN=FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF Certificate serial: 157A367D8B94F819BFAF5E48031458069A5143E4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ede4719a-ace4-41f2-a070-8de3192b7f49/0/FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.mft Manifest number: 0559 Signing time: Wed 25 Mar 2026 19:00:51 +0000 Manifest this update: Wed 25 Mar 2026 18:55:51 +0000 Manifest next update: Sat 28 Mar 2026 23:33:51 +0000 Files and hashes: 1: FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.crl (hash: jzQSH8hwkhEpxqz7fqOzpo4ONttc32f1VmnAKzxMleo=) 2: 3230322e36312e39382e302f32332d3234203d3e203234353337.roa (hash: 7v+UWewpBXKuzE8AR/fYejkKyBNOrEBvR5vrqtJwA4s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ede4719a-ace4-41f2-a070-8de3192b7f49/0/FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.crl rsync://repo-rpki.idnic.net/repo/ede4719a-ace4-41f2-a070-8de3192b7f49/0/FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 23:33:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:7a:36:7d:8b:94:f8:19:bf:af:5e:48:03:14:58:06:9a:51:43:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF Validity Not Before: Mar 25 18:55:51 2026 GMT Not After : Mar 28 23:33:51 2026 GMT Subject: CN=BF195506F2D1D6A82861566911DAD56EF03A2B89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b1:1b:1f:69:e5:e7:fa:5c:17:7a:43:f0:3c: fa:6a:04:63:75:93:fc:db:2c:ed:66:d7:34:64:72: 00:6a:dd:07:80:89:46:13:a7:e1:be:53:91:99:78: 0a:15:e0:a7:98:9b:2b:af:94:c1:0b:61:df:d2:4e: f6:6c:57:fe:8a:75:7b:57:7c:bf:c6:6a:1a:3a:c3: ab:b4:76:a0:d9:35:d2:a6:b8:c2:e6:3f:34:90:f6: 6c:96:d8:40:6a:d6:fa:39:f0:c1:b8:5a:92:ea:df: c0:c4:41:53:47:c2:76:47:8f:fb:76:30:c6:6c:a7: 08:c9:1a:98:7e:1f:bf:77:cb:cd:ef:2e:20:a1:32: 14:da:39:76:f2:60:be:9c:cc:5d:d3:83:97:bb:33: bc:08:60:21:37:3a:77:c1:b0:9e:83:0e:88:2b:4f: 67:f9:ef:68:af:ad:cf:a4:52:fc:40:6b:3f:f9:7c: 85:2f:cc:84:88:ee:ea:10:67:38:34:b2:7b:48:76: c7:dc:18:ee:f8:e7:2a:7a:93:dc:0a:88:85:8a:9f: 9f:e0:66:6f:f6:48:dc:dc:27:bf:f0:38:35:16:52: 8d:23:cd:2d:3a:09:d2:bd:b7:33:04:41:e1:d3:6d: c0:dd:72:61:5f:4a:d4:56:51:f0:8f:84:f1:46:95: 57:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:19:55:06:F2:D1:D6:A8:28:61:56:69:11:DA:D5:6E:F0:3A:2B:89 X509v3 Authority Key Identifier: keyid:FC:31:DB:70:F7:B2:F1:7F:13:E9:2A:2E:7B:AE:55:54:79:2E:FB:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ede4719a-ace4-41f2-a070-8de3192b7f49/0/FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ede4719a-ace4-41f2-a070-8de3192b7f49/0/FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:80:38:9e:85:e4:fc:90:7f:26:ab:36:4f:1b:0b:df:fa:0b: 08:84:4c:80:6b:d3:6c:4b:30:87:88:eb:7f:9a:3f:90:eb:9c: d6:4e:b3:58:0c:58:9f:9e:11:e5:43:06:d5:e6:41:5c:aa:a4: f8:1e:22:7d:98:ee:12:38:71:5c:d2:1c:7a:f8:b7:a4:7e:2c: 67:43:d7:28:dd:09:8c:0d:e9:82:9e:52:35:3c:e8:ee:95:02: e3:23:3f:11:8f:2e:ad:ac:4a:10:87:d9:20:41:02:b6:b8:e4: 7f:94:f9:8c:8f:ee:36:2f:38:bd:05:95:fe:66:90:79:56:ef: ad:08:73:5a:53:c2:70:06:a2:db:ac:bf:d5:11:b9:7f:80:23: 26:07:bd:d0:e3:88:61:e6:55:be:9b:b0:6e:17:e5:50:e4:1b: b1:16:cf:ff:18:99:b2:4d:1f:0e:06:eb:3e:b7:42:b6:7f:fe: bc:9f:26:e5:7d:87:91:4b:81:b6:53:08:97:cc:9e:41:2c:29: 75:70:7e:3a:73:0e:89:39:55:e6:4a:26:44:dc:0c:90:f2:3c: 21:56:9b:72:46:8d:03:16:fb:98:78:80:df:33:2d:4f:7e:c5: 87:50:27:bb:ab:17:ce:69:19:1f:3d:07:56:b7:46:16:5f:da: c0:3a:a1:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFXo2fYuU+Bm/r15IAxRYBppRQ+QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkMzMURCNzBGN0IyRjE3RjEzRTkyQTJFN0JBRTU1NTQ3 OTJFRkJCRjAeFw0yNjAzMjUxODU1NTFaFw0yNjAzMjgyMzMzNTFaMDMxMTAvBgNV BAMTKEJGMTk1NTA2RjJEMUQ2QTgyODYxNTY2OTExREFENTZFRjAzQTJCODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxsRsfaeXn+lwXekPwPPpqBGN1 k/zbLO1m1zRkcgBq3QeAiUYTp+G+U5GZeAoV4KeYmyuvlMELYd/STvZsV/6KdXtX fL/Gaho6w6u0dqDZNdKmuMLmPzSQ9myW2EBq1vo58MG4WpLq38DEQVNHwnZHj/t2 MMZspwjJGph+H793y83vLiChMhTaOXbyYL6czF3Tg5e7M7wIYCE3OnfBsJ6DDogr T2f572ivrc+kUvxAaz/5fIUvzISI7uoQZzg0sntIdsfcGO745yp6k9wKiIWKn5/g Zm/2SNzcJ7/wODUWUo0jzS06CdK9tzMEQeHTbcDdcmFfStRWUfCPhPFGlVfXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvxlVBvLR1qgoYVZpEdrVbvA6K4kwHwYDVR0j BBgwFoAU/DHbcPey8X8T6Soue65VVHku+78wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZGU0NzE5YS1hY2U0LTQxZjItYTA3MC04ZGUzMTkyYjdmNDkvMC9GQzMxREI3MEY3 QjJGMTdGMTNFOTJBMkU3QkFFNTU1NDc5MkVGQkJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkMzMURCNzBGN0IyRjE3RjEzRTkyQTJFN0JBRTU1NTQ3OTJF RkJCRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWRlNDcxOWEtYWNlNC00MWYyLWEw NzAtOGRlMzE5MmI3ZjQ5LzAvRkMzMURCNzBGN0IyRjE3RjEzRTkyQTJFN0JBRTU1 NTQ3OTJFRkJCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMqAOJ6F5PyQfyarNk8bC9/6CwiETIBr02xL MIeI63+aP5DrnNZOs1gMWJ+eEeVDBtXmQVyqpPgeIn2Y7hI4cVzSHHr4t6R+LGdD 1yjdCYwN6YKeUjU86O6VAuMjPxGPLq2sShCH2SBBAra45H+U+YyP7jYvOL0Flf5m kHlW760Ic1pTwnAGotusv9URuX+AIyYHvdDjiGHmVb6bsG4X5VDkG7EWz/8YmbJN Hw4G6z63QrZ//ryfJuV9h5FLgbZTCJfMnkEsKXVwfjpzDok5VeZKJkTcDJDyPCFW m3JGjQMW+5h4gN8zLU9+xYdQJ7urF85pGR89B1a3RhZf2sA6obY= -----END CERTIFICATE-----Generated at Thu Mar 26 08:48:20 2026 by rpki-client