$ rpki-client -vvf repo-rpki.idnic.net/repo/5b9752f6-6066-4b38-87cc-9ba63d19e22c/0/FC1C6395AD65E53AB9BC4BBD451AE79234BF63D7.mft File: FC1C6395AD65E53AB9BC4BBD451AE79234BF63D7.mft (raw, json) Hash identifier: XjcEQSwAd4THZ6GsOCOngOYeV6pYoNtnomBeNIQUOlc= Subject key identifier: C9:B2:93:58:7D:61:22:9C:1D:BD:82:40:A2:13:FA:23:E6:80:E0:05 Authority key identifier: FC:1C:63:95:AD:65:E5:3A:B9:BC:4B:BD:45:1A:E7:92:34:BF:63:D7 Certificate issuer: /CN=FC1C6395AD65E53AB9BC4BBD451AE79234BF63D7 Certificate serial: 2240E1172143A83AE82F130EC52D326A8D7DFCAD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC1C6395AD65E53AB9BC4BBD451AE79234BF63D7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5b9752f6-6066-4b38-87cc-9ba63d19e22c/0/FC1C6395AD65E53AB9BC4BBD451AE79234BF63D7.mft Manifest number: 0512 Signing time: Sun 01 Mar 2026 20:52:20 +0000 Manifest this update: Sun 01 Mar 2026 20:47:20 +0000 Manifest next update: Wed 04 Mar 2026 22:40:20 +0000 Files and hashes: 1: FC1C6395AD65E53AB9BC4BBD451AE79234BF63D7.crl (hash: jiXt4iNWJcR3o9dD5+HtedbPga6OW4QxDpJSeXETCgo=) 2: 3130332e33392e35322e302f32342d3234203d3e203633353033.roa (hash: Bw5xJfUWgUnZZKn8O2MlqxKM9AFTPxg86d/p/QbMwfs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5b9752f6-6066-4b38-87cc-9ba63d19e22c/0/FC1C6395AD65E53AB9BC4BBD451AE79234BF63D7.crl rsync://repo-rpki.idnic.net/repo/5b9752f6-6066-4b38-87cc-9ba63d19e22c/0/FC1C6395AD65E53AB9BC4BBD451AE79234BF63D7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC1C6395AD65E53AB9BC4BBD451AE79234BF63D7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 22:40:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:40:e1:17:21:43:a8:3a:e8:2f:13:0e:c5:2d:32:6a:8d:7d:fc:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC1C6395AD65E53AB9BC4BBD451AE79234BF63D7 Validity Not Before: Mar 1 20:47:20 2026 GMT Not After : Mar 4 22:40:20 2026 GMT Subject: CN=C9B293587D61229C1DBD8240A213FA23E680E005 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:3b:33:e3:ad:19:79:89:57:39:15:8e:09:0e: 6b:0f:57:f1:c2:20:9e:a1:db:01:ed:50:55:4f:3f: 29:d4:db:12:87:20:db:ae:6d:39:58:74:34:35:2f: 96:e2:eb:62:96:b3:4c:15:b4:6d:5e:67:73:91:24: a2:2d:80:5a:a2:b0:0f:0e:35:d0:f6:65:5a:88:40: 9c:0a:dd:45:a6:e6:2d:bd:6e:18:bb:16:7d:ba:67: a8:d6:db:d8:3f:84:c9:55:f5:ea:77:8a:e3:6c:5b: 16:48:12:38:7a:77:ea:7b:a8:a4:d0:0d:37:2d:4a: 66:fb:e1:23:e0:cb:fc:15:9d:77:2a:ab:47:41:7d: d4:f9:02:b7:89:13:4a:bf:f8:74:9f:45:51:52:e7: bf:0b:9a:43:5e:aa:80:a9:fd:fc:8e:13:16:fb:93: 5b:16:9d:55:29:56:11:79:23:7d:8b:4e:14:3b:94: c3:a8:ac:eb:f8:09:6b:b7:c2:bb:e1:6e:40:94:25: d2:c6:e0:af:bc:b5:42:b2:38:49:c0:8c:89:51:6d: 8b:f5:da:21:85:54:17:a0:fb:d1:ba:51:72:c5:d9: 99:e0:cb:e9:ac:3e:ac:84:6a:1c:ab:3e:55:b4:2a: 78:b2:56:f9:c9:33:eb:c1:59:cd:55:de:35:68:ef: 63:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:B2:93:58:7D:61:22:9C:1D:BD:82:40:A2:13:FA:23:E6:80:E0:05 X509v3 Authority Key Identifier: keyid:FC:1C:63:95:AD:65:E5:3A:B9:BC:4B:BD:45:1A:E7:92:34:BF:63:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5b9752f6-6066-4b38-87cc-9ba63d19e22c/0/FC1C6395AD65E53AB9BC4BBD451AE79234BF63D7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC1C6395AD65E53AB9BC4BBD451AE79234BF63D7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5b9752f6-6066-4b38-87cc-9ba63d19e22c/0/FC1C6395AD65E53AB9BC4BBD451AE79234BF63D7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:1c:07:cb:4e:ce:29:89:fa:19:be:bf:39:a1:f8:17:8b:79: 98:ba:f0:73:3d:69:4d:3c:5b:77:06:0a:7a:dd:0b:89:71:f0: d4:13:8a:84:1c:65:d5:3c:b3:0c:04:ba:b5:c4:53:85:86:14: e8:f7:c2:b5:7e:50:fd:19:71:a2:7e:71:37:74:74:13:af:85: 30:07:af:8a:83:9c:11:da:81:dd:d2:ba:16:bd:7e:76:29:f1: 82:97:19:68:0e:1a:2c:df:ae:a2:f8:a3:8e:2b:22:bc:66:73: 8a:c5:98:bf:75:d9:8a:8a:96:da:0c:f9:a7:98:41:73:9e:23: be:28:f9:c0:d3:78:49:7d:fa:30:69:a1:fd:67:ea:61:3c:20: e1:50:bf:7c:b0:72:6c:28:90:c7:ae:69:8b:60:97:81:1e:06: 0f:f6:d5:06:01:ec:30:bf:07:c2:c4:a8:c7:21:0a:39:ca:59: a0:12:de:75:c0:90:e2:d6:bc:9f:06:48:55:e3:7e:7a:66:17: f1:a9:c2:5c:24:49:2b:bd:e5:77:32:3c:c5:1b:90:5e:b8:55: d8:fb:49:be:06:a3:8f:26:45:ed:d4:7b:d3:44:f4:6b:c9:25: 6f:34:f0:fe:1e:72:bc:fc:f4:de:80:66:c5:35:fb:1d:e3:9b: 89:7c:b4:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIkDhFyFDqDroLxMOxS0yao19/K0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkMxQzYzOTVBRDY1RTUzQUI5QkM0QkJENDUxQUU3OTIz NEJGNjNENzAeFw0yNjAzMDEyMDQ3MjBaFw0yNjAzMDQyMjQwMjBaMDMxMTAvBgNV BAMTKEM5QjI5MzU4N0Q2MTIyOUMxREJEODI0MEEyMTNGQTIzRTY4MEUwMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHOzPjrRl5iVc5FY4JDmsPV/HC IJ6h2wHtUFVPPynU2xKHINuubTlYdDQ1L5bi62KWs0wVtG1eZ3ORJKItgFqisA8O NdD2ZVqIQJwK3UWm5i29bhi7Fn26Z6jW29g/hMlV9ep3iuNsWxZIEjh6d+p7qKTQ DTctSmb74SPgy/wVnXcqq0dBfdT5AreJE0q/+HSfRVFS578LmkNeqoCp/fyOExb7 k1sWnVUpVhF5I32LThQ7lMOorOv4CWu3wrvhbkCUJdLG4K+8tUKyOEnAjIlRbYv1 2iGFVBeg+9G6UXLF2Zngy+msPqyEahyrPlW0KniyVvnJM+vBWc1V3jVo72M5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUybKTWH1hIpwdvYJAohP6I+aA4AUwHwYDVR0j BBgwFoAU/Bxjla1l5Tq5vEu9RRrnkjS/Y9cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Yjk3NTJmNi02MDY2LTRiMzgtODdjYy05YmE2M2QxOWUyMmMvMC9GQzFDNjM5NUFE NjVFNTNBQjlCQzRCQkQ0NTFBRTc5MjM0QkY2M0Q3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkMxQzYzOTVBRDY1RTUzQUI5QkM0QkJENDUxQUU3OTIzNEJG NjNENy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWI5NzUyZjYtNjA2Ni00YjM4LTg3 Y2MtOWJhNjNkMTllMjJjLzAvRkMxQzYzOTVBRDY1RTUzQUI5QkM0QkJENDUxQUU3 OTIzNEJGNjNENy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACscB8tOzimJ+hm+vzmh+BeLeZi68HM9aU08 W3cGCnrdC4lx8NQTioQcZdU8swwEurXEU4WGFOj3wrV+UP0ZcaJ+cTd0dBOvhTAH r4qDnBHagd3Suha9fnYp8YKXGWgOGizfrqL4o44rIrxmc4rFmL912YqKltoM+aeY QXOeI74o+cDTeEl9+jBpof1n6mE8IOFQv3ywcmwokMeuaYtgl4EeBg/21QYB7DC/ B8LEqMchCjnKWaAS3nXAkOLWvJ8GSFXjfnpmF/GpwlwkSSu95XcyPMUbkF64Vdj7 Sb4Go48mRe3Ue9NE9GvJJW808P4ecrz89N6AZsU1+x3jm4l8tNs= -----END CERTIFICATE-----Generated at Mon Mar 2 13:41:21 2026 by rpki-client