$ rpki-client -vvf repo-rpki.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.mft File: FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.mft (raw, json) Hash identifier: JKkGMbIV6SSSBm1SuYYeuZsbzuoRvo0nEeAyeFKzhfg= Subject key identifier: 27:2F:CB:0E:1C:D5:FC:8C:19:E8:44:2D:75:61:E8:12:5A:B5:C0:EF Authority key identifier: FD:7C:5A:44:A3:CA:AF:7C:D1:40:CF:D1:C6:16:22:BA:5E:A2:E6:23 Certificate issuer: /CN=FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623 Certificate serial: 79F815B843589FF6EDF61E04C2CEC61E9FC6F428 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.mft Manifest number: 0151 Signing time: Thu 16 Apr 2026 12:32:36 +0000 Manifest this update: Thu 16 Apr 2026 12:27:36 +0000 Manifest next update: Sun 19 Apr 2026 12:58:36 +0000 Files and hashes: 1: FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.crl (hash: 2KAdAdjVzJC1EGt7WCUiDixWP2JcloMR8vZyTBZjRD4=) 2: 3135372e32302e3132362e302f32332d3234203d3e20313532343130.roa (hash: JACumO3VAE1t5FuWuqXfdX1npziOW8EOlg7XX4OQbh8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.crl rsync://repo-rpki.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 12:58:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:f8:15:b8:43:58:9f:f6:ed:f6:1e:04:c2:ce:c6:1e:9f:c6:f4:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623 Validity Not Before: Apr 16 12:27:36 2026 GMT Not After : Apr 19 12:58:36 2026 GMT Subject: CN=272FCB0E1CD5FC8C19E8442D7561E8125AB5C0EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b3:91:eb:ca:89:f4:f9:9f:6f:e1:f1:91:2b: 9d:9a:01:84:22:4b:31:69:e2:60:2b:7a:e3:e3:1f: 46:2e:bf:c2:5a:1c:18:34:39:be:0e:d0:87:2a:46: 68:bd:ef:24:4b:78:14:f9:7b:f6:37:a5:fc:fd:24: 05:b0:db:69:aa:03:66:f1:2f:16:65:4b:d7:0d:69: a4:b9:10:59:0f:98:4f:bf:38:da:75:2f:f6:99:49: 70:16:f0:97:42:fc:f5:0b:c8:da:98:eb:d0:7a:ef: 49:69:bc:8b:25:94:ac:54:ac:a5:31:a7:e7:0f:9c: 28:5f:18:77:7c:0c:7d:a2:5c:56:c0:ba:84:e2:77: e7:01:a3:b5:00:a4:a6:4f:99:c5:20:9b:b2:a2:76: 6d:54:b9:b1:87:3f:a3:64:38:08:8d:e9:43:4c:cd: 6b:82:56:f0:96:09:e2:e4:da:35:6d:db:d1:83:86: 38:c1:18:65:e5:fc:2e:b0:cd:fa:33:54:45:15:e9: e9:82:eb:32:a3:a8:37:b6:5c:63:66:08:2e:fa:37: 7e:2b:be:95:8c:48:b6:5e:bc:65:47:6b:37:3a:45: 41:c5:1b:28:82:d5:62:c3:d5:3d:1b:34:85:30:d9: e4:c1:86:0f:32:aa:57:78:1c:06:f3:8f:8b:20:99: 5c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:2F:CB:0E:1C:D5:FC:8C:19:E8:44:2D:75:61:E8:12:5A:B5:C0:EF X509v3 Authority Key Identifier: keyid:FD:7C:5A:44:A3:CA:AF:7C:D1:40:CF:D1:C6:16:22:BA:5E:A2:E6:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:da:ee:33:03:23:7d:9e:ec:82:b0:4e:98:3f:d3:a7:5c:68: 96:97:91:54:ff:8a:87:b8:89:4c:cd:44:9e:43:4b:d7:aa:d1: 2d:34:c6:20:c5:30:d3:71:92:d8:13:bf:99:35:c8:8a:bc:9e: e4:0d:6b:c9:82:86:51:81:3d:e3:2e:6a:d2:0a:c4:6c:ea:76: 5d:fe:f2:dd:f2:fa:d9:5d:11:e0:28:5b:9f:c6:03:e3:a7:f1: b5:e3:3e:2e:3d:bf:ea:b5:be:56:02:fe:92:0c:de:92:63:4d: 83:50:73:ca:fe:ce:e6:16:23:de:15:f5:99:07:ed:22:6b:4e: 43:9a:70:64:50:4c:13:49:3f:fd:48:54:06:f4:58:7f:99:c1: ad:7d:72:e8:e9:6b:fd:77:19:61:a0:ec:f8:55:61:95:29:87: ac:a5:a3:d1:ca:ad:06:33:7e:e9:7b:c7:ba:e2:a1:67:9c:ff: 62:69:bc:2b:f4:55:84:a9:b4:74:6c:31:78:ab:29:28:aa:80: 49:6f:93:cc:4c:1b:5e:84:39:2e:55:20:d4:bb:5f:74:92:6d: e7:ef:50:b2:dc:ec:9d:c6:79:aa:40:36:26:5c:b9:97:82:2c: 11:d2:27:95:a5:ec:97:9d:e6:38:6f:64:9f:3c:a5:1e:ed:55: 95:0a:45:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUefgVuENYn/bt9h4Ews7GHp/G9CgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkQ3QzVBNDRBM0NBQUY3Q0QxNDBDRkQxQzYxNjIyQkE1 RUEyRTYyMzAeFw0yNjA0MTYxMjI3MzZaFw0yNjA0MTkxMjU4MzZaMDMxMTAvBgNV BAMTKDI3MkZDQjBFMUNENUZDOEMxOUU4NDQyRDc1NjFFODEyNUFCNUMwRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+s5Hryon0+Z9v4fGRK52aAYQi SzFp4mAreuPjH0Yuv8JaHBg0Ob4O0IcqRmi97yRLeBT5e/Y3pfz9JAWw22mqA2bx LxZlS9cNaaS5EFkPmE+/ONp1L/aZSXAW8JdC/PULyNqY69B670lpvIsllKxUrKUx p+cPnChfGHd8DH2iXFbAuoTid+cBo7UApKZPmcUgm7Kidm1UubGHP6NkOAiN6UNM zWuCVvCWCeLk2jVt29GDhjjBGGXl/C6wzfozVEUV6emC6zKjqDe2XGNmCC76N34r vpWMSLZevGVHazc6RUHFGyiC1WLD1T0bNIUw2eTBhg8yqld4HAbzj4sgmVy5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJy/LDhzV/IwZ6EQtdWHoElq1wO8wHwYDVR0j BBgwFoAU/XxaRKPKr3zRQM/RxhYiul6i5iMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MGY3OGJkNC1jMTliLTRkNDAtYWE1NC1lZDhkN2JjNzcyY2EvMC9GRDdDNUE0NEEz Q0FBRjdDRDE0MENGRDFDNjE2MjJCQTVFQTJFNjIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkQ3QzVBNDRBM0NBQUY3Q0QxNDBDRkQxQzYxNjIyQkE1RUEy RTYyMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTBmNzhiZDQtYzE5Yi00ZDQwLWFh NTQtZWQ4ZDdiYzc3MmNhLzAvRkQ3QzVBNDRBM0NBQUY3Q0QxNDBDRkQxQzYxNjIy QkE1RUEyRTYyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFna7jMDI32e7IKwTpg/06dcaJaXkVT/ioe4 iUzNRJ5DS9eq0S00xiDFMNNxktgTv5k1yIq8nuQNa8mChlGBPeMuatIKxGzqdl3+ 8t3y+tldEeAoW5/GA+On8bXjPi49v+q1vlYC/pIM3pJjTYNQc8r+zuYWI94V9ZkH 7SJrTkOacGRQTBNJP/1IVAb0WH+Zwa19cujpa/13GWGg7PhVYZUph6ylo9HKrQYz ful7x7rioWec/2JpvCv0VYSptHRsMXirKSiqgElvk8xMG16EOS5VINS7X3SSbefv ULLc7J3GeapANiZcuZeCLBHSJ5Wl7Jed5jhvZJ88pR7tVZUKRYg= -----END CERTIFICATE-----Generated at Fri Apr 17 13:34:33 2026 by rpki-client