$ rpki-client -vvf repo-rpki.idnic.net/repo/0546183c-d9ef-4c33-be99-e84bedb10b68/0/FC4A38DAAF15E8284373FD82AE59B27383D4A68F.mft File: FC4A38DAAF15E8284373FD82AE59B27383D4A68F.mft (raw, json) Hash identifier: Hz4XdVl1dWhWBJvlWWB933L12C7URxaQzohZaFz1Rq8= Subject key identifier: 26:BF:DF:85:3F:ED:15:02:82:71:A5:64:DA:97:EB:AD:9E:0A:9E:1D Authority key identifier: FC:4A:38:DA:AF:15:E8:28:43:73:FD:82:AE:59:B2:73:83:D4:A6:8F Certificate issuer: /CN=FC4A38DAAF15E8284373FD82AE59B27383D4A68F Certificate serial: 3C95E8AFADBE400E29051CF6DE5AF23FC4FFD28E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC4A38DAAF15E8284373FD82AE59B27383D4A68F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0546183c-d9ef-4c33-be99-e84bedb10b68/0/FC4A38DAAF15E8284373FD82AE59B27383D4A68F.mft Manifest number: 0568 Signing time: Fri 17 Apr 2026 20:51:30 +0000 Manifest this update: Fri 17 Apr 2026 20:46:30 +0000 Manifest next update: Tue 21 Apr 2026 05:42:30 +0000 Files and hashes: 1: FC4A38DAAF15E8284373FD82AE59B27383D4A68F.crl (hash: lB43cqWygj07SurVvPLGQEOMP2T14BOsR26Ic6kgBjQ=) 2: 3130332e3133372e3134342e302f32332d3234203d3e20313338383439.roa (hash: UgrkGIb65avdk0c9bxD0Hl16cvFjKtiPVw8WTE1xwNs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0546183c-d9ef-4c33-be99-e84bedb10b68/0/FC4A38DAAF15E8284373FD82AE59B27383D4A68F.crl rsync://repo-rpki.idnic.net/repo/0546183c-d9ef-4c33-be99-e84bedb10b68/0/FC4A38DAAF15E8284373FD82AE59B27383D4A68F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC4A38DAAF15E8284373FD82AE59B27383D4A68F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 05:42:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:95:e8:af:ad:be:40:0e:29:05:1c:f6:de:5a:f2:3f:c4:ff:d2:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC4A38DAAF15E8284373FD82AE59B27383D4A68F Validity Not Before: Apr 17 20:46:30 2026 GMT Not After : Apr 21 05:42:30 2026 GMT Subject: CN=26BFDF853FED15028271A564DA97EBAD9E0A9E1D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:8c:9f:6d:58:1f:29:71:1f:6a:e3:a8:4d:23: b0:70:43:8c:a4:82:3e:8f:f8:07:38:ee:00:a8:b6: ff:42:a6:68:d3:1a:e5:6f:37:87:3f:9c:fd:64:e7: 31:e8:01:09:cd:55:73:75:42:18:0e:62:bb:b6:5d: 2b:35:92:24:59:1f:37:30:de:e0:2b:e7:2c:7b:05: b0:dc:b8:f6:25:d7:e3:23:f6:2d:b9:dd:6a:28:bb: b2:86:59:0f:ee:9c:7e:e4:03:86:6a:c2:9b:f4:82: e1:e7:1c:bf:ec:1c:3e:9a:69:bf:6f:4e:cd:fa:d1: b3:0d:26:04:31:1b:41:45:a7:5f:ec:02:c0:e7:e6: c5:21:40:d1:4b:8d:8e:4a:8b:2b:e7:29:42:da:28: 7e:7c:41:d1:63:78:9b:9e:77:9c:23:c7:7e:1f:8d: f6:c8:84:94:80:02:7f:2d:06:d1:36:cd:87:f2:43: 94:f1:2f:04:d2:0e:3d:c6:ab:82:d6:4b:ab:95:df: 08:08:8d:aa:d9:ff:d5:7c:72:d3:38:fb:e5:15:0d: ab:4b:27:a2:b3:ec:ba:50:46:a4:7c:48:4b:18:d8: 17:fa:27:5b:f4:19:e7:65:05:09:69:fa:24:3d:89: 5e:d8:ba:79:18:ff:f5:dd:1d:e7:07:5c:8b:84:0b: 1d:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:BF:DF:85:3F:ED:15:02:82:71:A5:64:DA:97:EB:AD:9E:0A:9E:1D X509v3 Authority Key Identifier: keyid:FC:4A:38:DA:AF:15:E8:28:43:73:FD:82:AE:59:B2:73:83:D4:A6:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0546183c-d9ef-4c33-be99-e84bedb10b68/0/FC4A38DAAF15E8284373FD82AE59B27383D4A68F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC4A38DAAF15E8284373FD82AE59B27383D4A68F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0546183c-d9ef-4c33-be99-e84bedb10b68/0/FC4A38DAAF15E8284373FD82AE59B27383D4A68F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:e3:c0:6e:47:c3:9d:7c:49:cd:6f:19:fb:74:95:d2:7b:8b: 9b:25:08:80:98:68:eb:3a:4c:fc:f1:9c:3f:05:e7:73:0d:1a: 73:04:44:f4:81:85:c6:89:f8:ef:7c:26:07:1e:a9:42:c3:9f: 16:3f:26:03:f0:f2:7b:49:5f:7a:2a:bf:88:ee:a7:54:2e:d9: 82:11:db:57:ba:8f:85:66:32:c9:73:ab:0c:40:3e:5f:b9:d0: c6:46:bf:02:f5:c2:73:ac:6c:9b:fc:6d:18:28:c9:bd:7a:ef: b6:f5:74:bc:08:9d:b9:b6:bb:63:13:f9:ab:c9:31:d5:2b:6f: 6e:0f:df:c1:d6:5d:be:0d:d0:33:1c:c0:0e:1d:32:37:85:39: ba:42:00:d0:9c:ae:f6:42:94:1e:5f:24:a5:23:80:a6:33:39: b1:8c:09:4f:5d:24:b8:1b:29:a9:49:e5:32:1e:08:28:0a:95: ef:ed:0f:38:86:e5:ca:25:33:80:26:ce:cb:cd:1c:33:ce:34: 06:79:4e:6a:43:88:53:0e:b9:9d:34:b0:8f:bf:0f:12:18:bc: 35:12:88:b3:3f:bd:d6:a2:d8:0c:2e:84:82:a6:cb:b3:6c:f8: 04:5b:be:7e:da:15:ce:5a:9e:47:5e:d8:e4:21:b0:20:10:3d: 90:47:99:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPJXor62+QA4pBRz23lryP8T/0o4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkM0QTM4REFBRjE1RTgyODQzNzNGRDgyQUU1OUIyNzM4 M0Q0QTY4RjAeFw0yNjA0MTcyMDQ2MzBaFw0yNjA0MjEwNTQyMzBaMDMxMTAvBgNV BAMTKDI2QkZERjg1M0ZFRDE1MDI4MjcxQTU2NERBOTdFQkFEOUUwQTlFMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD8jJ9tWB8pcR9q46hNI7BwQ4yk gj6P+Ac47gCotv9CpmjTGuVvN4c/nP1k5zHoAQnNVXN1QhgOYru2XSs1kiRZHzcw 3uAr5yx7BbDcuPYl1+Mj9i253Woou7KGWQ/unH7kA4Zqwpv0guHnHL/sHD6aab9v Ts360bMNJgQxG0FFp1/sAsDn5sUhQNFLjY5KiyvnKULaKH58QdFjeJued5wjx34f jfbIhJSAAn8tBtE2zYfyQ5TxLwTSDj3Gq4LWS6uV3wgIjarZ/9V8ctM4++UVDatL J6Kz7LpQRqR8SEsY2Bf6J1v0GedlBQlp+iQ9iV7YunkY//XdHecHXIuECx17AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJr/fhT/tFQKCcaVk2pfrrZ4Knh0wHwYDVR0j BBgwFoAU/Eo42q8V6ChDc/2Crlmyc4PUpo8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NTQ2MTgzYy1kOWVmLTRjMzMtYmU5OS1lODRiZWRiMTBiNjgvMC9GQzRBMzhEQUFG MTVFODI4NDM3M0ZEODJBRTU5QjI3MzgzRDRBNjhGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkM0QTM4REFBRjE1RTgyODQzNzNGRDgyQUU1OUIyNzM4M0Q0 QTY4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDU0NjE4M2MtZDllZi00YzMzLWJl OTktZTg0YmVkYjEwYjY4LzAvRkM0QTM4REFBRjE1RTgyODQzNzNGRDgyQUU1OUIy NzM4M0Q0QTY4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMTjwG5Hw518Sc1vGft0ldJ7i5slCICYaOs6 TPzxnD8F53MNGnMERPSBhcaJ+O98JgceqULDnxY/JgPw8ntJX3oqv4jup1Qu2YIR 21e6j4VmMslzqwxAPl+50MZGvwL1wnOsbJv8bRgoyb1677b1dLwInbm2u2MT+avJ MdUrb24P38HWXb4N0DMcwA4dMjeFObpCANCcrvZClB5fJKUjgKYzObGMCU9dJLgb KalJ5TIeCCgKle/tDziG5colM4AmzsvNHDPONAZ5TmpDiFMOuZ00sI+/DxIYvDUS iLM/vdai2AwuhIKmy7Ns+ARbvn7aFc5ankde2OQhsCAQPZBHmZc= -----END CERTIFICATE-----Generated at Sun Apr 19 10:16:17 2026 by rpki-client