$ rpki-client -vvf repo-rpki.idnic.net/repo/0546183c-d9ef-4c33-be99-e84bedb10b68/0/FC4A38DAAF15E8284373FD82AE59B27383D4A68F.mft File: FC4A38DAAF15E8284373FD82AE59B27383D4A68F.mft (raw, json) Hash identifier: dGy3eXK6xRhTE/PYs9ir3d29WH98PmUgsfOqBUtotls= Subject key identifier: 8F:74:35:2A:63:E3:D0:73:20:91:01:F0:72:4C:97:6F:51:10:88:45 Authority key identifier: FC:4A:38:DA:AF:15:E8:28:43:73:FD:82:AE:59:B2:73:83:D4:A6:8F Certificate issuer: /CN=FC4A38DAAF15E8284373FD82AE59B27383D4A68F Certificate serial: 02D0F658646E7132B8ADF043AA9C9A47401D716E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC4A38DAAF15E8284373FD82AE59B27383D4A68F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0546183c-d9ef-4c33-be99-e84bedb10b68/0/FC4A38DAAF15E8284373FD82AE59B27383D4A68F.mft Manifest number: 0553 Signing time: Sun 01 Mar 2026 19:51:25 +0000 Manifest this update: Sun 01 Mar 2026 19:46:25 +0000 Manifest next update: Wed 04 Mar 2026 21:26:25 +0000 Files and hashes: 1: 3130332e3133372e3134342e302f32332d3234203d3e20313338383439.roa (hash: UgrkGIb65avdk0c9bxD0Hl16cvFjKtiPVw8WTE1xwNs=) 2: FC4A38DAAF15E8284373FD82AE59B27383D4A68F.crl (hash: bkCSPgE6pDrPu/+NWjq1TFJ0Uk9mgGzW2SQ2tTVork8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0546183c-d9ef-4c33-be99-e84bedb10b68/0/FC4A38DAAF15E8284373FD82AE59B27383D4A68F.crl rsync://repo-rpki.idnic.net/repo/0546183c-d9ef-4c33-be99-e84bedb10b68/0/FC4A38DAAF15E8284373FD82AE59B27383D4A68F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC4A38DAAF15E8284373FD82AE59B27383D4A68F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 21:26:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:d0:f6:58:64:6e:71:32:b8:ad:f0:43:aa:9c:9a:47:40:1d:71:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC4A38DAAF15E8284373FD82AE59B27383D4A68F Validity Not Before: Mar 1 19:46:25 2026 GMT Not After : Mar 4 21:26:25 2026 GMT Subject: CN=8F74352A63E3D073209101F0724C976F51108845 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:9a:81:33:41:2c:a5:72:ce:67:af:d8:eb:f0: 23:71:91:63:1e:a0:44:90:e6:89:93:27:fa:d9:a0: 63:b6:c2:bb:6e:74:ae:7d:24:ae:b1:41:9b:fa:3d: 71:5a:26:ef:16:9d:d5:c2:9a:15:74:df:6a:c9:36: da:6c:61:94:b1:21:17:23:a6:0e:4b:66:e5:8b:3b: 74:0c:c2:c7:3c:d9:34:82:00:b6:d5:85:09:aa:ff: 6f:96:24:f3:35:c3:60:28:63:38:1b:44:17:87:d7: cd:1f:89:8c:db:dc:7f:27:62:17:16:75:77:09:b9: a2:c3:a9:a2:b5:9a:f1:2a:5f:e8:f8:e7:2e:a9:44: 25:45:b9:f1:1a:e7:db:ec:b9:ad:ec:c7:95:a7:4c: 79:cd:c0:fb:30:39:20:b7:54:57:5b:29:2a:64:37: 0a:25:87:bb:4b:c0:e9:8f:b3:2d:30:c2:a7:b4:f3: 07:23:ca:3b:dd:63:13:0e:45:49:af:e2:9a:06:4b: 9c:9e:0a:3a:7a:c1:5e:6c:5d:dc:c0:df:07:28:10: 72:02:c0:cd:0d:47:94:a1:18:df:27:4e:e7:f6:7d: d9:01:dc:c6:95:c6:47:b7:f1:2b:ba:23:b6:98:a1: 24:e0:86:44:37:ab:31:7b:65:37:62:9a:01:7d:ce: b4:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:74:35:2A:63:E3:D0:73:20:91:01:F0:72:4C:97:6F:51:10:88:45 X509v3 Authority Key Identifier: keyid:FC:4A:38:DA:AF:15:E8:28:43:73:FD:82:AE:59:B2:73:83:D4:A6:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0546183c-d9ef-4c33-be99-e84bedb10b68/0/FC4A38DAAF15E8284373FD82AE59B27383D4A68F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC4A38DAAF15E8284373FD82AE59B27383D4A68F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0546183c-d9ef-4c33-be99-e84bedb10b68/0/FC4A38DAAF15E8284373FD82AE59B27383D4A68F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:68:68:e4:95:43:2d:3a:4d:73:a3:e0:e2:13:97:cb:f5:4c: 05:e6:8a:88:a1:b8:1d:30:bf:59:47:b3:05:d9:50:ba:56:f9: 25:19:52:d5:d6:68:03:48:c8:09:2a:12:f7:87:0d:71:cd:1f: ef:ca:c6:02:db:0f:80:61:0e:d7:ce:7f:23:4d:9a:5e:3e:6f: c4:55:5c:ed:3f:d2:a7:24:8e:2a:d7:a1:03:1f:2b:1c:c4:36: da:33:67:97:3f:ec:94:b7:05:ff:6d:8c:de:6d:3e:b2:bd:69: 1a:2d:ce:78:da:e8:cc:f1:92:79:64:4d:5a:b8:bd:b1:c5:29: 09:88:1b:c5:3c:e2:ea:97:54:e2:6d:bb:63:75:ff:30:29:1f: 4a:3c:57:c8:8a:4b:f4:a6:47:c6:2d:f3:b0:50:9f:fe:a5:a4: cf:e0:43:d2:93:13:a7:58:76:26:a8:dd:1d:63:9b:5c:cf:47: af:b9:6b:3e:b8:d5:cc:36:c0:b0:5b:a2:93:8a:0a:f4:6d:34: 36:e8:69:0d:bd:11:aa:e0:18:04:ed:fb:65:10:4e:6b:59:e9: 7c:45:fb:35:17:d4:90:bc:f5:63:2e:ac:d1:4b:2d:b6:5b:58: c8:ff:39:a4:1d:6a:ec:de:a4:6c:05:32:2e:d2:17:d0:0f:3e: 47:4d:8c:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAtD2WGRucTK4rfBDqpyaR0AdcW4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkM0QTM4REFBRjE1RTgyODQzNzNGRDgyQUU1OUIyNzM4 M0Q0QTY4RjAeFw0yNjAzMDExOTQ2MjVaFw0yNjAzMDQyMTI2MjVaMDMxMTAvBgNV BAMTKDhGNzQzNTJBNjNFM0QwNzMyMDkxMDFGMDcyNEM5NzZGNTExMDg4NDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1moEzQSylcs5nr9jr8CNxkWMe oESQ5omTJ/rZoGO2wrtudK59JK6xQZv6PXFaJu8WndXCmhV032rJNtpsYZSxIRcj pg5LZuWLO3QMwsc82TSCALbVhQmq/2+WJPM1w2AoYzgbRBeH180fiYzb3H8nYhcW dXcJuaLDqaK1mvEqX+j45y6pRCVFufEa59vsua3sx5WnTHnNwPswOSC3VFdbKSpk Nwolh7tLwOmPsy0wwqe08wcjyjvdYxMORUmv4poGS5yeCjp6wV5sXdzA3wcoEHIC wM0NR5ShGN8nTuf2fdkB3MaVxke38Su6I7aYoSTghkQ3qzF7ZTdimgF9zrTVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj3Q1KmPj0HMgkQHwckyXb1EQiEUwHwYDVR0j BBgwFoAU/Eo42q8V6ChDc/2Crlmyc4PUpo8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NTQ2MTgzYy1kOWVmLTRjMzMtYmU5OS1lODRiZWRiMTBiNjgvMC9GQzRBMzhEQUFG MTVFODI4NDM3M0ZEODJBRTU5QjI3MzgzRDRBNjhGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkM0QTM4REFBRjE1RTgyODQzNzNGRDgyQUU1OUIyNzM4M0Q0 QTY4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDU0NjE4M2MtZDllZi00YzMzLWJl OTktZTg0YmVkYjEwYjY4LzAvRkM0QTM4REFBRjE1RTgyODQzNzNGRDgyQUU1OUIy NzM4M0Q0QTY4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAChoaOSVQy06TXOj4OITl8v1TAXmioihuB0w v1lHswXZULpW+SUZUtXWaANIyAkqEveHDXHNH+/KxgLbD4BhDtfOfyNNml4+b8RV XO0/0qckjirXoQMfKxzENtozZ5c/7JS3Bf9tjN5tPrK9aRotznja6MzxknlkTVq4 vbHFKQmIG8U84uqXVOJtu2N1/zApH0o8V8iKS/SmR8Yt87BQn/6lpM/gQ9KTE6dY diao3R1jm1zPR6+5az641cw2wLBbopOKCvRtNDboaQ29EargGATt+2UQTmtZ6XxF +zUX1JC89WMurNFLLbZbWMj/OaQdauzepGwFMi7SF9APPkdNjF4= -----END CERTIFICATE-----Generated at Mon Mar 2 09:14:45 2026 by rpki-client