$ rpki-client -vvf repo-rpki.idnic.net/repo/7d68500c-49f8-4f01-8774-f7c3164a0a58/0/FD0F38979237143A0D44165912E79E2FACD5A3BA.mft File: FD0F38979237143A0D44165912E79E2FACD5A3BA.mft (raw, json) Hash identifier: huxGE3DZv5nTrsMRa85XmX8FL01ti8GOO3SGt6L2wog= Subject key identifier: C0:75:38:89:42:C7:8F:44:74:96:83:05:37:84:21:32:3C:28:DD:37 Authority key identifier: FD:0F:38:97:92:37:14:3A:0D:44:16:59:12:E7:9E:2F:AC:D5:A3:BA Certificate issuer: /CN=FD0F38979237143A0D44165912E79E2FACD5A3BA Certificate serial: 7E23730C3579AC261927AF1FE832FBBDACEB189D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FD0F38979237143A0D44165912E79E2FACD5A3BA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d68500c-49f8-4f01-8774-f7c3164a0a58/0/FD0F38979237143A0D44165912E79E2FACD5A3BA.mft Manifest number: 053A Signing time: Sun 19 Apr 2026 01:00:56 +0000 Manifest this update: Sun 19 Apr 2026 00:55:56 +0000 Manifest next update: Wed 22 Apr 2026 10:26:56 +0000 Files and hashes: 1: 323430363a623734303a3a2f33322d3332203d3e20313431313235.roa (hash: QqT8D5lkBG4hSbXhFLTMPSoaBkT256vJUAYJ7NnLOL4=) 2: 3130332e3135382e39382e302f32332d3234203d3e20313431313235.roa (hash: SOkxDu78tXfJl/igqr9RzKPCr0bIXcHmyK6/S8XprpU=) 3: FD0F38979237143A0D44165912E79E2FACD5A3BA.crl (hash: 4/JCg/hYZ9/pXRe5IdGuhn7ayg2e9qjvBIBef1dW+1g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d68500c-49f8-4f01-8774-f7c3164a0a58/0/FD0F38979237143A0D44165912E79E2FACD5A3BA.crl rsync://repo-rpki.idnic.net/repo/7d68500c-49f8-4f01-8774-f7c3164a0a58/0/FD0F38979237143A0D44165912E79E2FACD5A3BA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FD0F38979237143A0D44165912E79E2FACD5A3BA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 20:42:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:23:73:0c:35:79:ac:26:19:27:af:1f:e8:32:fb:bd:ac:eb:18:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FD0F38979237143A0D44165912E79E2FACD5A3BA Validity Not Before: Apr 19 00:55:56 2026 GMT Not After : Apr 22 10:26:56 2026 GMT Subject: CN=C075388942C78F4474968305378421323C28DD37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c5:14:97:64:b3:dd:e7:ff:50:da:fa:8c:0c: da:9d:34:7d:37:0c:14:ae:4a:41:a9:99:86:18:3e: 80:14:18:05:0e:28:9b:16:b9:18:f3:0d:d0:e1:37: 91:3c:1c:06:9e:96:d6:ae:0a:a5:d3:5e:a9:e5:86: 25:ce:21:38:99:bd:29:05:c3:bc:6c:6f:56:17:e6: ee:c9:71:7b:7a:4b:a7:f2:a7:55:68:27:97:8f:b4: 1c:29:83:b6:90:f7:1f:bb:f5:15:c6:3f:16:9c:8f: e4:41:bc:f3:2b:11:a7:b2:69:22:1f:ff:14:f5:17: 33:53:02:fa:8a:b2:ed:4f:0c:a9:41:fc:3c:1a:1f: 5d:ff:81:c9:86:86:34:56:2b:df:1b:fc:2a:46:44: cc:18:c9:7e:dc:8e:07:eb:b7:da:c5:d7:7b:af:dd: 2d:30:6d:13:1a:de:07:41:c2:34:87:d0:96:fa:b3: 1a:91:63:1c:95:33:0e:5d:0e:36:9e:7b:08:a1:6b: 0b:a8:a4:2e:f0:fe:32:33:b9:09:76:48:dc:f2:d4: a6:b6:6f:cf:56:c1:28:fb:30:c9:90:f2:26:9b:b0: f0:e3:c0:e0:f3:0c:0a:7a:df:36:16:cb:d7:70:ee: f6:11:7f:b9:de:66:92:1b:75:d1:5a:64:fc:9f:58: b6:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:75:38:89:42:C7:8F:44:74:96:83:05:37:84:21:32:3C:28:DD:37 X509v3 Authority Key Identifier: keyid:FD:0F:38:97:92:37:14:3A:0D:44:16:59:12:E7:9E:2F:AC:D5:A3:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d68500c-49f8-4f01-8774-f7c3164a0a58/0/FD0F38979237143A0D44165912E79E2FACD5A3BA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FD0F38979237143A0D44165912E79E2FACD5A3BA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d68500c-49f8-4f01-8774-f7c3164a0a58/0/FD0F38979237143A0D44165912E79E2FACD5A3BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:ad:52:85:40:ab:b0:fa:9e:58:95:f0:a6:56:04:e1:61:26: f9:8a:ed:24:9e:e5:86:ab:c1:14:67:cc:33:85:b2:27:2a:1e: 2a:d4:77:69:78:8f:c6:23:9b:db:41:e8:32:ca:a2:c9:33:a5: 37:4b:c2:5a:d3:dc:3b:a8:78:3e:bb:1f:7b:a2:a0:a9:03:de: cd:8c:e8:87:9b:a8:15:50:4b:ff:90:e9:21:f0:44:e9:41:41: 64:d8:94:ab:78:a2:49:a6:dc:b0:16:59:7e:c7:e7:47:ca:ec: 19:57:99:9a:1a:2e:84:51:41:56:43:4c:e5:47:29:3f:08:ad: e6:3e:9b:2d:ad:b0:d5:ed:8e:b5:7b:72:4d:00:8b:4f:ce:58: 00:f9:d6:20:b7:76:c1:a5:b8:da:2a:e8:00:18:04:d7:5e:62: b3:38:5a:1d:ac:64:4e:1c:ab:93:fc:1a:35:66:99:e3:1f:c0: 6a:1a:dd:97:9e:21:11:4e:07:0b:b2:d6:c3:e2:c7:b9:fb:6f: 2e:f0:81:9b:6b:9e:d1:a2:b1:b7:99:e9:44:81:e2:ec:43:ec: 2c:ec:84:a6:90:9b:d6:74:21:f6:16:fb:1f:8b:de:80:40:1b: 6d:bb:35:93:c4:55:e8:17:37:48:69:29:11:fc:a4:f3:b0:32: 97:d1:d1:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfiNzDDV5rCYZJ68f6DL7vazrGJ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkQwRjM4OTc5MjM3MTQzQTBENDQxNjU5MTJFNzlFMkZB Q0Q1QTNCQTAeFw0yNjA0MTkwMDU1NTZaFw0yNjA0MjIxMDI2NTZaMDMxMTAvBgNV BAMTKEMwNzUzODg5NDJDNzhGNDQ3NDk2ODMwNTM3ODQyMTMyM0MyOEREMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1xRSXZLPd5/9Q2vqMDNqdNH03 DBSuSkGpmYYYPoAUGAUOKJsWuRjzDdDhN5E8HAaeltauCqXTXqnlhiXOITiZvSkF w7xsb1YX5u7JcXt6S6fyp1VoJ5ePtBwpg7aQ9x+79RXGPxacj+RBvPMrEaeyaSIf /xT1FzNTAvqKsu1PDKlB/DwaH13/gcmGhjRWK98b/CpGRMwYyX7cjgfrt9rF13uv 3S0wbRMa3gdBwjSH0Jb6sxqRYxyVMw5dDjaeewihawuopC7w/jIzuQl2SNzy1Ka2 b89WwSj7MMmQ8iabsPDjwODzDAp63zYWy9dw7vYRf7neZpIbddFaZPyfWLavAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwHU4iULHj0R0loMFN4QhMjwo3TcwHwYDVR0j BBgwFoAU/Q84l5I3FDoNRBZZEueeL6zVo7owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDY4NTAwYy00OWY4LTRmMDEtODc3NC1mN2MzMTY0YTBhNTgvMC9GRDBGMzg5Nzky MzcxNDNBMEQ0NDE2NTkxMkU3OUUyRkFDRDVBM0JBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkQwRjM4OTc5MjM3MTQzQTBENDQxNjU5MTJFNzlFMkZBQ0Q1 QTNCQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Q2ODUwMGMtNDlmOC00ZjAxLTg3 NzQtZjdjMzE2NGEwYTU4LzAvRkQwRjM4OTc5MjM3MTQzQTBENDQxNjU5MTJFNzlF MkZBQ0Q1QTNCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ2tUoVAq7D6nliV8KZWBOFhJvmK7SSe5Yar wRRnzDOFsicqHirUd2l4j8Yjm9tB6DLKoskzpTdLwlrT3DuoeD67H3uioKkD3s2M 6IebqBVQS/+Q6SHwROlBQWTYlKt4okmm3LAWWX7H50fK7BlXmZoaLoRRQVZDTOVH KT8IreY+my2tsNXtjrV7ck0Ai0/OWAD51iC3dsGluNoq6AAYBNdeYrM4Wh2sZE4c q5P8GjVmmeMfwGoa3ZeeIRFOBwuy1sPix7n7by7wgZtrntGisbeZ6USB4uxD7Czs hKaQm9Z0IfYW+x+L3oBAG227NZPEVegXN0hpKRH8pPOwMpfR0dk= -----END CERTIFICATE-----Generated at Sun Apr 19 10:24:34 2026 by rpki-client