$ rpki-client -vvf repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.mft File: FC2DAAA409BA60DE33EC91F3A861D1A00719D426.mft (raw, json) Hash identifier: sPuOK3sto5C5c5XuYF6l2iRaIpNBXwpLpPodMXiqz1Q= Subject key identifier: 9C:DB:A7:8E:01:0E:BA:37:B7:52:57:CB:5C:33:D6:5D:0D:FA:BD:EF Authority key identifier: FC:2D:AA:A4:09:BA:60:DE:33:EC:91:F3:A8:61:D1:A0:07:19:D4:26 Certificate issuer: /CN=FC2DAAA409BA60DE33EC91F3A861D1A00719D426 Certificate serial: 6D5133F32C907DA2B5D868EA521DCA260B6A44A8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.mft Manifest number: 0121 Signing time: Mon 02 Mar 2026 16:20:57 +0000 Manifest this update: Mon 02 Mar 2026 16:15:57 +0000 Manifest next update: Fri 06 Mar 2026 03:00:57 +0000 Files and hashes: 1: FC2DAAA409BA60DE33EC91F3A861D1A00719D426.crl (hash: YARpUs+BJQCfCq3vqc69UnOwKtwAgE3D1HH5TYUtbB4=) 2: 3135372e36362e322e302f32332d3234203d3e20313532343430.roa (hash: 3ZS5/0NJnXKv4Pk0J4oSOH1r1VKtA3mh1qb3WAlsXUw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.crl rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:45:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:51:33:f3:2c:90:7d:a2:b5:d8:68:ea:52:1d:ca:26:0b:6a:44:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC2DAAA409BA60DE33EC91F3A861D1A00719D426 Validity Not Before: Mar 2 16:15:57 2026 GMT Not After : Mar 6 03:00:57 2026 GMT Subject: CN=9CDBA78E010EBA37B75257CB5C33D65D0DFABDEF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b8:58:56:97:89:e5:e6:1b:b3:b6:22:45:db: 37:8e:8a:30:8e:cf:af:3f:ca:ba:3d:e3:06:ce:be: e7:0b:3e:d3:b5:1f:0f:20:d3:69:98:61:df:3a:3b: da:93:b0:89:49:73:2f:4f:c6:f2:1b:90:4b:06:bc: 3d:73:ac:7b:01:be:d8:70:fb:5b:69:5a:3e:9e:1d: 07:0a:e9:dd:1d:8e:4e:61:7b:eb:f5:69:ba:1b:84: d1:2a:8c:47:83:fd:9c:86:a2:62:1e:80:50:a2:b8: de:be:29:9a:a0:7a:3c:46:30:53:cf:56:a7:65:8c: 29:76:f5:df:e2:00:a5:09:e7:57:57:d9:59:ef:3b: c7:f5:a5:eb:fb:66:50:42:10:98:13:15:3a:43:35: 4f:31:da:fc:f5:7f:0c:5a:2b:71:ce:eb:fd:93:70: b5:5a:b4:0e:70:64:d2:34:62:32:d2:98:cf:a6:de: 2f:e7:19:19:cf:09:ad:0b:bb:27:77:91:07:fc:2b: f7:dd:4a:0f:fe:06:84:d5:c3:73:0b:57:1d:cf:b6: 5c:bd:fc:b3:17:04:44:0f:f3:e8:07:20:8c:04:54: 40:57:a5:92:e8:08:82:96:f8:6a:fc:5a:95:39:5f: c1:73:6d:59:1a:36:86:bb:94:67:11:3f:0e:ec:fa: 74:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:DB:A7:8E:01:0E:BA:37:B7:52:57:CB:5C:33:D6:5D:0D:FA:BD:EF X509v3 Authority Key Identifier: keyid:FC:2D:AA:A4:09:BA:60:DE:33:EC:91:F3:A8:61:D1:A0:07:19:D4:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:fe:df:88:cf:9d:1b:d5:38:ee:ab:c9:30:52:31:9f:85:eb: a7:7d:16:3f:e5:30:40:0c:2a:c9:dc:9f:c8:25:83:45:33:fc: 69:f1:ec:e6:64:81:f2:c2:6e:56:8e:98:a4:d6:9d:53:d1:42: 7f:dc:1b:a9:09:1b:44:7f:49:58:bc:5c:d4:69:b9:89:9e:09: 73:25:01:0e:84:25:80:b7:c9:72:92:04:9c:38:fd:c7:76:7b: a1:a9:55:e8:ad:81:b4:3b:94:3d:11:cf:66:af:f2:c8:09:b0: 8a:ec:7e:e7:39:9e:0e:73:50:1d:35:a1:2e:12:78:a7:bf:39: 41:de:0c:d4:0f:87:02:b7:93:0b:3e:4d:ef:03:1b:b8:8c:6a: 24:0d:64:1d:c2:ed:e7:db:74:04:f3:53:39:13:b9:7e:76:93: 06:44:cc:cd:86:17:64:ed:35:83:53:32:3f:60:77:e2:c2:ca: 9f:6b:fb:ba:34:8d:4d:ab:4a:a7:fb:71:fa:c1:ba:9a:6a:6c: 33:36:dd:80:cb:87:b8:82:72:39:72:70:80:50:3f:4e:33:3a: ab:3f:b1:ed:27:19:52:7f:f9:6f:fc:25:33:db:e4:ea:46:de: 5e:41:90:11:a9:43:b2:fe:83:53:bf:9e:db:25:3a:cd:07:19: ea:59:75:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbVEz8yyQfaK12GjqUh3KJgtqRKgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkMyREFBQTQwOUJBNjBERTMzRUM5MUYzQTg2MUQxQTAw NzE5RDQyNjAeFw0yNjAzMDIxNjE1NTdaFw0yNjAzMDYwMzAwNTdaMDMxMTAvBgNV BAMTKDlDREJBNzhFMDEwRUJBMzdCNzUyNTdDQjVDMzNENjVEMERGQUJERUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyuFhWl4nl5huztiJF2zeOijCO z68/yro94wbOvucLPtO1Hw8g02mYYd86O9qTsIlJcy9PxvIbkEsGvD1zrHsBvthw +1tpWj6eHQcK6d0djk5he+v1abobhNEqjEeD/ZyGomIegFCiuN6+KZqgejxGMFPP VqdljCl29d/iAKUJ51dX2VnvO8f1pev7ZlBCEJgTFTpDNU8x2vz1fwxaK3HO6/2T cLVatA5wZNI0YjLSmM+m3i/nGRnPCa0Luyd3kQf8K/fdSg/+BoTVw3MLVx3Ptly9 /LMXBEQP8+gHIIwEVEBXpZLoCIKW+Gr8WpU5X8FzbVkaNoa7lGcRPw7s+nQFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnNunjgEOuje3UlfLXDPWXQ36ve8wHwYDVR0j BBgwFoAU/C2qpAm6YN4z7JHzqGHRoAcZ1CYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZmI4MDhlYi1jOThlLTQwMzYtYmU5YS0xOTNiYmNjNjQ4OTIvMC9GQzJEQUFBNDA5 QkE2MERFMzNFQzkxRjNBODYxRDFBMDA3MTlENDI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkMyREFBQTQwOUJBNjBERTMzRUM5MUYzQTg2MUQxQTAwNzE5 RDQyNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWZiODA4ZWItYzk4ZS00MDM2LWJl OWEtMTkzYmJjYzY0ODkyLzAvRkMyREFBQTQwOUJBNjBERTMzRUM5MUYzQTg2MUQx QTAwNzE5RDQyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACz+34jPnRvVOO6ryTBSMZ+F66d9Fj/lMEAM Ksncn8glg0Uz/Gnx7OZkgfLCblaOmKTWnVPRQn/cG6kJG0R/SVi8XNRpuYmeCXMl AQ6EJYC3yXKSBJw4/cd2e6GpVeitgbQ7lD0Rz2av8sgJsIrsfuc5ng5zUB01oS4S eKe/OUHeDNQPhwK3kws+Te8DG7iMaiQNZB3C7efbdATzUzkTuX52kwZEzM2GF2Tt NYNTMj9gd+LCyp9r+7o0jU2rSqf7cfrBuppqbDM23YDLh7iCcjlycIBQP04zOqs/ se0nGVJ/+W/8JTPb5OpG3l5BkBGpQ7L+g1O/ntslOs0HGepZdQQ= -----END CERTIFICATE-----Generated at Mon Mar 2 20:02:36 2026 by rpki-client