$ rpki-client -vvf repo-rpki.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.mft File: FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.mft (raw, json) Hash identifier: PwaBwsKEj+mo8B91OkBbViIsztMOw/v/2DUm74ql1jo= Subject key identifier: FE:CF:2E:43:87:DF:7D:70:19:F3:B8:11:EB:BB:A5:D1:41:9A:AB:E3 Authority key identifier: FE:79:E5:6C:BE:99:C7:73:CD:72:1D:F7:AB:0E:5C:A2:80:9D:07:39 Certificate issuer: /CN=FE79E56CBE99C773CD721DF7AB0E5CA2809D0739 Certificate serial: 24C02616A805D444C9D275FFDFBE59325AA30601 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.mft Manifest number: 014D Signing time: Wed 15 Apr 2026 05:00:04 +0000 Manifest this update: Wed 15 Apr 2026 04:55:04 +0000 Manifest next update: Sat 18 Apr 2026 16:40:04 +0000 Files and hashes: 1: FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.crl (hash: AlU0MkTrfg8z0sSDHp0UZupwrx1d2ih0jONokIhxE9o=) 2: 3135372e32302e3232332e302f32342d3234203d3e20313532343337.roa (hash: 9A66PZraqcmsbI8344W/oWr1IDY31DvKsi1wtNyTQV4=) 3: 3135372e32302e3232322e302f32342d3234203d3e20313532343337.roa (hash: OOjJfYQzXEKhK2PsvdUi53OrQVdbEHySPQl3Ehl0Q8g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.crl rsync://repo-rpki.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 16:40:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:c0:26:16:a8:05:d4:44:c9:d2:75:ff:df:be:59:32:5a:a3:06:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FE79E56CBE99C773CD721DF7AB0E5CA2809D0739 Validity Not Before: Apr 15 04:55:04 2026 GMT Not After : Apr 18 16:40:04 2026 GMT Subject: CN=FECF2E4387DF7D7019F3B811EBBBA5D1419AABE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:82:bf:65:1b:f1:77:80:f0:9c:08:88:09:96: ce:f2:c6:8b:4b:68:9d:9c:50:73:44:25:39:b2:3d: c0:75:e1:48:6a:99:f7:f7:f2:a2:34:3a:a0:bb:b1: 97:fd:2f:04:ba:17:99:91:2e:82:c2:1d:e3:71:bb: c2:74:d2:88:58:8b:c5:be:85:2b:09:f4:9c:1a:d2: 90:8c:7e:e9:3b:69:df:2a:b5:44:df:52:41:5e:bd: 31:bb:01:06:7b:ee:d5:d8:e8:84:eb:69:c7:79:c4: 14:85:ab:2c:53:b9:f3:f1:99:51:66:3f:62:97:98: 5b:7d:14:f9:5d:d9:8e:90:23:00:c8:e1:29:d5:02: bf:3d:b5:7d:06:77:f8:9e:3f:b9:78:93:71:7c:38: 5e:ba:23:01:a9:8e:b8:3a:2a:98:b2:32:f3:49:db: 5b:98:cf:66:00:4a:b2:9c:d4:c6:9b:d6:f1:ff:05: 0f:4f:14:d1:32:fe:c8:15:fb:11:45:1a:51:d1:1f: 30:fb:27:00:cc:b9:a4:e7:59:9c:00:92:9b:07:d2: c9:a3:68:61:d1:98:07:bd:4d:3a:34:32:ec:02:71: d7:9f:7f:08:5d:e0:ba:d3:01:7a:3a:1c:d4:18:74: 5c:10:ed:0b:3d:0b:1c:8b:21:db:fb:71:cb:2b:52: eb:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:CF:2E:43:87:DF:7D:70:19:F3:B8:11:EB:BB:A5:D1:41:9A:AB:E3 X509v3 Authority Key Identifier: keyid:FE:79:E5:6C:BE:99:C7:73:CD:72:1D:F7:AB:0E:5C:A2:80:9D:07:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:77:4b:4e:32:80:da:c7:3a:7c:c0:0d:23:6a:65:ae:c6:d0: bc:ae:c4:d9:a0:f8:af:82:49:dd:a3:21:a8:c4:49:bd:b8:68: 7b:ee:f1:c4:a1:22:82:54:fc:27:24:b1:f3:07:16:a1:f3:7b: 9b:e7:d9:7a:29:89:14:92:ae:03:20:4b:5e:7c:33:8a:48:b3: 36:d4:87:79:99:3d:af:ac:84:e2:b5:33:e5:fe:08:7d:d5:4e: 1e:27:9f:d6:e9:08:35:f2:80:24:0a:ea:5b:a8:16:6b:81:2b: 08:e0:cc:18:41:e9:29:8e:88:80:15:42:f5:63:df:8a:c1:35: 12:2a:3a:d8:21:99:52:02:bb:e6:4c:01:60:e9:91:83:b4:23: c3:7a:ad:5a:28:a3:0f:f5:29:3e:2b:7f:bb:cc:4e:f2:71:76: fa:6d:4a:97:5d:b0:fc:3e:ce:05:5f:b5:a7:3d:b8:8c:d1:5a: fb:39:7d:e2:94:13:f2:c7:43:fa:b7:90:56:20:55:ed:e4:11: d0:cf:6c:b1:ba:e3:48:da:66:99:9e:8e:13:90:ad:a0:c9:f1: 53:4c:a7:b8:a3:e8:22:d1:5d:4b:1c:f0:46:67:a8:27:69:5e: c0:ee:e0:63:16:8a:70:96:4a:90:b0:21:14:70:51:65:35:09: e2:30:bd:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJMAmFqgF1ETJ0nX/375ZMlqjBgEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkU3OUU1NkNCRTk5Qzc3M0NENzIxREY3QUIwRTVDQTI4 MDlEMDczOTAeFw0yNjA0MTUwNDU1MDRaFw0yNjA0MTgxNjQwMDRaMDMxMTAvBgNV BAMTKEZFQ0YyRTQzODdERjdENzAxOUYzQjgxMUVCQkJBNUQxNDE5QUFCRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUgr9lG/F3gPCcCIgJls7yxotL aJ2cUHNEJTmyPcB14Uhqmff38qI0OqC7sZf9LwS6F5mRLoLCHeNxu8J00ohYi8W+ hSsJ9Jwa0pCMfuk7ad8qtUTfUkFevTG7AQZ77tXY6ITracd5xBSFqyxTufPxmVFm P2KXmFt9FPld2Y6QIwDI4SnVAr89tX0Gd/ieP7l4k3F8OF66IwGpjrg6KpiyMvNJ 21uYz2YASrKc1Mab1vH/BQ9PFNEy/sgV+xFFGlHRHzD7JwDMuaTnWZwAkpsH0smj aGHRmAe9TTo0MuwCcdeffwhd4LrTAXo6HNQYdFwQ7Qs9CxyLIdv7ccsrUuvhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/s8uQ4fffXAZ87gR67ul0UGaq+MwHwYDVR0j BBgwFoAU/nnlbL6Zx3PNch33qw5cooCdBzkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MWYxNWExZC01ZGFjLTRjYzktODExYS1lNDljYjRlN2JjZTEvMC9GRTc5RTU2Q0JF OTlDNzczQ0Q3MjFERjdBQjBFNUNBMjgwOUQwNzM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkU3OUU1NkNCRTk5Qzc3M0NENzIxREY3QUIwRTVDQTI4MDlE MDczOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTFmMTVhMWQtNWRhYy00Y2M5LTgx MWEtZTQ5Y2I0ZTdiY2UxLzAvRkU3OUU1NkNCRTk5Qzc3M0NENzIxREY3QUIwRTVD QTI4MDlEMDczOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABB3S04ygNrHOnzADSNqZa7G0LyuxNmg+K+C Sd2jIajESb24aHvu8cShIoJU/CcksfMHFqHze5vn2XopiRSSrgMgS158M4pIszbU h3mZPa+shOK1M+X+CH3VTh4nn9bpCDXygCQK6luoFmuBKwjgzBhB6SmOiIAVQvVj 34rBNRIqOtghmVICu+ZMAWDpkYO0I8N6rVooow/1KT4rf7vMTvJxdvptSpddsPw+ zgVftac9uIzRWvs5feKUE/LHQ/q3kFYgVe3kEdDPbLG640jaZpmejhOQraDJ8VNM p7ij6CLRXUsc8EZnqCdpXsDu4GMWinCWSpCwIRRwUWU1CeIwvcM= -----END CERTIFICATE-----Generated at Fri Apr 17 12:29:26 2026 by rpki-client