$ rpki-client -vvf repo-rpki.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.mft File: FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.mft (raw, json) Hash identifier: HhzhslvXuiFkBhbEYBKqtCoi85JhPZ0QUXRZV5pcw7o= Subject key identifier: 25:FE:60:89:32:33:3E:39:3D:D8:9B:BF:5F:E1:7C:FC:E3:1C:7E:1A Authority key identifier: FE:79:E5:6C:BE:99:C7:73:CD:72:1D:F7:AB:0E:5C:A2:80:9D:07:39 Certificate issuer: /CN=FE79E56CBE99C773CD721DF7AB0E5CA2809D0739 Certificate serial: 038097522EF80C59511389F8F9ED66AEDF0B4A88 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.mft Manifest number: 0138 Signing time: Sun 01 Mar 2026 02:01:26 +0000 Manifest this update: Sun 01 Mar 2026 01:56:26 +0000 Manifest next update: Wed 04 Mar 2026 10:03:26 +0000 Files and hashes: 1: 3135372e32302e3232332e302f32342d3234203d3e20313532343337.roa (hash: wm/OwjMJ3Mw2kK4LX3m4F0/jsfG1NixZfT/MRVx2gUc=) 2: FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.crl (hash: Tb1MWHQBSkS+ybxKZ54aODzhhhgqIFyz8FOn9xyXKYI=) 3: 3135372e32302e3232322e302f32342d3234203d3e20313532343337.roa (hash: xA0yIhK/pel57ulFN3HOQ4z99q0P1jOo4pSKaz4ovzA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.crl rsync://repo-rpki.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 10:03:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:80:97:52:2e:f8:0c:59:51:13:89:f8:f9:ed:66:ae:df:0b:4a:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FE79E56CBE99C773CD721DF7AB0E5CA2809D0739 Validity Not Before: Mar 1 01:56:26 2026 GMT Not After : Mar 4 10:03:26 2026 GMT Subject: CN=25FE608932333E393DD89BBF5FE17CFCE31C7E1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:56:7b:23:48:6d:3e:17:83:84:3b:aa:ca:91: 5d:b5:4e:27:d5:41:54:d2:0f:fb:ad:2e:db:0f:3c: 7b:50:c6:86:a5:95:66:65:1e:fe:3c:ac:ae:8e:1d: 75:af:f8:fe:50:60:c0:86:29:a3:40:a7:45:14:0b: 51:14:ff:ea:53:16:9a:a8:93:b3:60:40:84:81:45: 43:be:5f:c8:0a:d0:da:d7:b0:24:8c:74:f6:0d:9a: 48:62:6d:2b:27:af:82:25:f0:00:c4:12:8b:0c:c1: 6d:ef:7c:0e:11:6a:96:11:2e:6d:03:99:15:34:58: d4:cc:de:4d:be:a9:d3:b0:11:4b:85:7f:66:c4:19: 69:eb:c5:8a:c5:0e:d8:8d:7d:ff:42:b4:f0:31:84: 5d:b8:a8:ba:55:d8:61:46:76:6f:d6:71:6f:5b:0a: bd:1e:ea:8a:c6:79:63:ca:21:2c:08:77:9a:e4:8b: cb:81:85:46:53:5e:fa:8b:60:4e:ff:80:24:66:f1: a8:c4:8d:83:93:11:3f:3d:92:1e:14:52:2b:ac:c5: c0:b6:c0:55:f3:35:8e:dc:db:93:85:11:55:64:a0: e1:29:46:09:33:f2:34:48:e0:39:4b:19:f4:ef:63: a2:89:11:ba:29:75:83:69:00:e8:09:17:4c:ac:38: b4:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:FE:60:89:32:33:3E:39:3D:D8:9B:BF:5F:E1:7C:FC:E3:1C:7E:1A X509v3 Authority Key Identifier: keyid:FE:79:E5:6C:BE:99:C7:73:CD:72:1D:F7:AB:0E:5C:A2:80:9D:07:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:de:2a:85:53:7b:c4:35:a1:7e:b1:c4:60:a4:95:62:19:70: 46:3e:f9:36:6a:82:41:0f:d9:d2:56:fb:3f:aa:e1:c2:4b:fa: cc:0f:94:39:dd:0c:ba:59:36:ad:90:cf:68:55:55:96:62:ef: 27:67:14:f9:a4:d7:91:c6:cd:fa:ae:bb:ae:3d:18:ae:68:34: db:73:2a:14:d6:7b:4e:e8:4e:bd:e6:74:60:24:2e:01:78:75: 35:f7:38:f7:f0:d7:e5:bf:9c:ed:6e:38:1a:0e:47:cd:ef:7c: f1:a4:97:3c:85:cb:51:4a:45:76:d4:af:d2:a8:a5:a2:8f:6a: d1:d7:f0:2c:d2:a3:df:f3:5a:a0:26:9a:c8:69:c6:1b:bd:94: 95:06:91:e8:dc:b1:42:cd:73:6c:5e:9a:08:ed:8b:cc:36:43: 8e:61:fb:c0:ee:3f:e7:b0:ad:12:59:d4:8c:a0:a3:e3:c6:0a: 9d:5f:a0:cc:31:14:06:7c:8f:a1:04:8b:76:4f:9a:ab:12:1b: dc:01:de:f9:8e:26:10:4f:5d:81:d3:48:09:9e:02:21:49:22: 7f:b3:7e:e8:ad:f6:17:3c:ea:6f:57:47:a5:0f:54:5b:58:c8: c7:98:8b:17:89:dc:9b:b4:c2:26:f7:36:58:7a:e2:00:2b:f8: 23:de:6d:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA4CXUi74DFlRE4n4+e1mrt8LSogwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkU3OUU1NkNCRTk5Qzc3M0NENzIxREY3QUIwRTVDQTI4 MDlEMDczOTAeFw0yNjAzMDEwMTU2MjZaFw0yNjAzMDQxMDAzMjZaMDMxMTAvBgNV BAMTKDI1RkU2MDg5MzIzMzNFMzkzREQ4OUJCRjVGRTE3Q0ZDRTMxQzdFMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoVnsjSG0+F4OEO6rKkV21TifV QVTSD/utLtsPPHtQxoallWZlHv48rK6OHXWv+P5QYMCGKaNAp0UUC1EU/+pTFpqo k7NgQISBRUO+X8gK0NrXsCSMdPYNmkhibSsnr4Il8ADEEosMwW3vfA4RapYRLm0D mRU0WNTM3k2+qdOwEUuFf2bEGWnrxYrFDtiNff9CtPAxhF24qLpV2GFGdm/WcW9b Cr0e6orGeWPKISwId5rki8uBhUZTXvqLYE7/gCRm8ajEjYOTET89kh4UUiusxcC2 wFXzNY7c25OFEVVkoOEpRgkz8jRI4DlLGfTvY6KJEbopdYNpAOgJF0ysOLQZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJf5giTIzPjk92Ju/X+F8/OMcfhowHwYDVR0j BBgwFoAU/nnlbL6Zx3PNch33qw5cooCdBzkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MWYxNWExZC01ZGFjLTRjYzktODExYS1lNDljYjRlN2JjZTEvMC9GRTc5RTU2Q0JF OTlDNzczQ0Q3MjFERjdBQjBFNUNBMjgwOUQwNzM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkU3OUU1NkNCRTk5Qzc3M0NENzIxREY3QUIwRTVDQTI4MDlE MDczOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTFmMTVhMWQtNWRhYy00Y2M5LTgx MWEtZTQ5Y2I0ZTdiY2UxLzAvRkU3OUU1NkNCRTk5Qzc3M0NENzIxREY3QUIwRTVD QTI4MDlEMDczOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABDeKoVTe8Q1oX6xxGCklWIZcEY++TZqgkEP 2dJW+z+q4cJL+swPlDndDLpZNq2Qz2hVVZZi7ydnFPmk15HGzfquu649GK5oNNtz KhTWe07oTr3mdGAkLgF4dTX3OPfw1+W/nO1uOBoOR83vfPGklzyFy1FKRXbUr9Ko paKPatHX8CzSo9/zWqAmmshpxhu9lJUGkejcsULNc2xemgjti8w2Q45h+8DuP+ew rRJZ1Iygo+PGCp1foMwxFAZ8j6EEi3ZPmqsSG9wB3vmOJhBPXYHTSAmeAiFJIn+z fuit9hc86m9XR6UPVFtYyMeYixeJ3Ju0wib3Nlh64gAr+CPebcI= -----END CERTIFICATE-----Generated at Mon Mar 2 11:35:34 2026 by rpki-client