$ rpki-client -vvf repo-rpki.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.mft File: FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.mft (raw, json) Hash identifier: 9K4KkcdqqPFu0YXVFhbF9XY2gcUbRM4NtrYkMhQdaA8= Subject key identifier: 54:BF:05:7C:F6:B3:0B:CD:F7:BB:41:1F:2E:4E:74:62:A1:64:6F:DF Authority key identifier: FA:62:D8:28:54:4F:70:BE:AD:8B:3C:04:A8:61:75:E4:FB:07:C4:B6 Certificate issuer: /CN=FA62D828544F70BEAD8B3C04A86175E4FB07C4B6 Certificate serial: 3A9E0A77B8D19821D5BBC6F184EFB6A23E8A6AFF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.mft Manifest number: 0113 Signing time: Mon 02 Mar 2026 10:50:50 +0000 Manifest this update: Mon 02 Mar 2026 10:45:50 +0000 Manifest next update: Thu 05 Mar 2026 19:11:50 +0000 Files and hashes: 1: 3135372e36362e33372e302f32342d3234203d3e20313338383034.roa (hash: elAlykoINKnAZ1hNxzJ7Wy9Qz4JU3YMP6UNvlutp4wU=) 2: FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.crl (hash: vVtURAhCUIWmtPPfZgHBhCX5i0YDhTkI6y79NKgZzlg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.crl rsync://repo-rpki.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:45:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:9e:0a:77:b8:d1:98:21:d5:bb:c6:f1:84:ef:b6:a2:3e:8a:6a:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA62D828544F70BEAD8B3C04A86175E4FB07C4B6 Validity Not Before: Mar 2 10:45:50 2026 GMT Not After : Mar 5 19:11:50 2026 GMT Subject: CN=54BF057CF6B30BCDF7BB411F2E4E7462A1646FDF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:dd:5e:5f:b0:5d:55:49:87:fa:8b:61:58:b7: c2:31:3f:ae:a1:f2:6d:8c:b0:66:d8:5e:e4:ed:43: 21:78:37:17:56:69:63:ce:ee:81:27:a5:33:6b:5a: e0:07:eb:de:d0:44:d6:c8:5a:0b:8d:a0:5e:f0:15: f5:c8:8b:d9:71:af:28:12:08:6a:21:b9:76:99:94: f8:9b:0a:b3:2b:da:2a:53:f1:b1:f8:da:03:bc:72: 04:e4:65:73:d9:1a:87:0d:9f:77:a9:cd:29:64:c4: 33:6c:01:58:13:ff:61:ed:e0:1c:7c:75:2b:56:ce: f4:55:25:2d:e4:d0:46:65:7b:4a:bc:2f:52:7c:d6: db:d0:74:f2:aa:32:3a:45:66:56:34:18:74:07:8a: 75:68:05:e4:e3:ab:96:a2:38:80:bb:9d:dd:8d:3a: 5c:48:3d:83:31:22:34:39:20:2c:a4:9b:24:1f:77: b5:ca:3a:51:89:bb:43:01:58:60:a5:ab:b4:62:08: bc:82:bc:84:e6:bd:fb:97:98:c5:b0:73:25:e3:d8: 21:da:68:11:b0:33:c0:4f:ba:96:df:fb:d8:bb:47: c2:68:a3:2c:cd:19:0b:ec:a0:8f:3e:e1:e6:09:65: 65:b9:e1:5b:bc:c2:dd:98:10:d2:00:66:7d:7c:74: 3e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:BF:05:7C:F6:B3:0B:CD:F7:BB:41:1F:2E:4E:74:62:A1:64:6F:DF X509v3 Authority Key Identifier: keyid:FA:62:D8:28:54:4F:70:BE:AD:8B:3C:04:A8:61:75:E4:FB:07:C4:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:b0:8c:d1:d0:09:5e:40:76:fd:20:72:c7:0f:35:fb:28:db: cb:12:44:8e:84:03:a7:f6:7a:9a:34:2d:50:1e:76:ce:28:83: 86:14:03:c1:eb:30:3c:ca:41:15:91:fa:54:39:04:08:92:0b: da:b2:b1:87:a2:6f:f3:35:7e:f4:f0:e0:d0:db:ad:ab:0b:d3: 9e:f8:c9:87:f1:1d:f7:05:ac:e7:d1:9b:8d:dc:06:2e:8b:4e: 73:a2:05:94:31:e9:bb:db:80:78:49:e3:90:7a:90:5d:20:15: ba:e4:a1:5e:3e:91:05:fe:67:eb:8b:f1:3e:fb:5b:70:c0:24: 2a:30:8b:ff:ca:ff:f0:a9:56:fb:1a:8d:bb:db:4a:0b:50:8b: 20:2a:1b:22:c1:23:10:59:bc:60:16:09:40:f8:19:73:77:cf: b3:63:28:9c:e5:6d:c4:af:fd:d7:3a:f4:d4:d9:f5:4e:5d:95: 34:02:b9:d8:27:32:c8:82:34:7d:5c:65:0f:af:df:cd:e7:3a: 75:b9:64:66:de:99:51:57:cf:e8:3f:5d:05:91:4a:55:83:8a: b2:95:04:b3:0e:88:eb:c7:2d:2e:6b:fe:c7:8d:75:3b:ae:f8: 03:a8:ab:e9:d0:ed:70:b8:46:a4:80:ec:79:50:6b:ae:00:38: 12:4a:51:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOp4Kd7jRmCHVu8bxhO+2oj6Kav8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE2MkQ4Mjg1NDRGNzBCRUFEOEIzQzA0QTg2MTc1RTRG QjA3QzRCNjAeFw0yNjAzMDIxMDQ1NTBaFw0yNjAzMDUxOTExNTBaMDMxMTAvBgNV BAMTKDU0QkYwNTdDRjZCMzBCQ0RGN0JCNDExRjJFNEU3NDYyQTE2NDZGREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/3V5fsF1VSYf6i2FYt8IxP66h 8m2MsGbYXuTtQyF4NxdWaWPO7oEnpTNrWuAH697QRNbIWguNoF7wFfXIi9lxrygS CGohuXaZlPibCrMr2ipT8bH42gO8cgTkZXPZGocNn3epzSlkxDNsAVgT/2Ht4Bx8 dStWzvRVJS3k0EZle0q8L1J81tvQdPKqMjpFZlY0GHQHinVoBeTjq5aiOIC7nd2N OlxIPYMxIjQ5ICykmyQfd7XKOlGJu0MBWGClq7RiCLyCvITmvfuXmMWwcyXj2CHa aBGwM8BPupbf+9i7R8JooyzNGQvsoI8+4eYJZWW54Vu8wt2YENIAZn18dD4XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVL8FfPazC833u0EfLk50YqFkb98wHwYDVR0j BBgwFoAU+mLYKFRPcL6tizwEqGF15PsHxLYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YzA0ZGVkOC1iMGY1LTQ1OTQtOGUwZS05MTFlY2I3N2VlNzMvMC9GQTYyRDgyODU0 NEY3MEJFQUQ4QjNDMDRBODYxNzVFNEZCMDdDNEI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkE2MkQ4Mjg1NDRGNzBCRUFEOEIzQzA0QTg2MTc1RTRGQjA3 QzRCNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWMwNGRlZDgtYjBmNS00NTk0LThl MGUtOTExZWNiNzdlZTczLzAvRkE2MkQ4Mjg1NDRGNzBCRUFEOEIzQzA0QTg2MTc1 RTRGQjA3QzRCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC6wjNHQCV5Adv0gcscPNfso28sSRI6EA6f2 epo0LVAeds4og4YUA8HrMDzKQRWR+lQ5BAiSC9qysYeib/M1fvTw4NDbrasL0574 yYfxHfcFrOfRm43cBi6LTnOiBZQx6bvbgHhJ45B6kF0gFbrkoV4+kQX+Z+uL8T77 W3DAJCowi//K//CpVvsajbvbSgtQiyAqGyLBIxBZvGAWCUD4GXN3z7NjKJzlbcSv /dc69NTZ9U5dlTQCudgnMsiCNH1cZQ+v383nOnW5ZGbemVFXz+g/XQWRSlWDirKV BLMOiOvHLS5r/seNdTuu+AOoq+nQ7XC4RqSA7HlQa64AOBJKUY4= -----END CERTIFICATE-----Generated at Mon Mar 2 18:48:58 2026 by rpki-client