$ rpki-client -vvf repo-rpki.idnic.net/repo/a7afd57a-e6de-4a5f-b5c6-10865d5a8c98/0/FE5652AD4702104DB082C396B05EE5D04542E7D7.mft File: FE5652AD4702104DB082C396B05EE5D04542E7D7.mft (raw, json) Hash identifier: HkHn0iD6y8uCYj5A77V0pyQJ9Yc/OEIiACkM2G17PKA= Subject key identifier: C2:C0:7E:36:73:D8:3B:70:00:75:3D:42:BC:68:9C:8A:D3:CE:B8:77 Authority key identifier: FE:56:52:AD:47:02:10:4D:B0:82:C3:96:B0:5E:E5:D0:45:42:E7:D7 Certificate issuer: /CN=FE5652AD4702104DB082C396B05EE5D04542E7D7 Certificate serial: 1256DD51E4F0C3FAD0DB0BD009866ABC99B97374 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE5652AD4702104DB082C396B05EE5D04542E7D7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a7afd57a-e6de-4a5f-b5c6-10865d5a8c98/0/FE5652AD4702104DB082C396B05EE5D04542E7D7.mft Manifest number: 01BE Signing time: Sat 18 Apr 2026 07:02:12 +0000 Manifest this update: Sat 18 Apr 2026 06:57:12 +0000 Manifest next update: Tue 21 Apr 2026 16:26:12 +0000 Files and hashes: 1: 3130332e3233392e32302e302f32342d3234203d3e20313531353139.roa (hash: 20qa29YtuQDpydBxT+l3i2qfQTa2+tFQJ7mFZgoSVhk=) 2: 3130332e3233392e32302e302f32332d3234203d3e20313531353139.roa (hash: J6vL2iPNUwb9fYjqqj1vv1gpk3+iSC5RPrrqhYMFLI8=) 3: 3130332e3233392e32312e302f32342d3234203d3e20313531353139.roa (hash: 03BXaxAzi9VaO+DQQ6QWjZsMJ2gPh3wF9aEYxb1vAPc=) 4: FE5652AD4702104DB082C396B05EE5D04542E7D7.crl (hash: aTyBiawncxYSrzkzEb6brA6Ys4D743NXByNr9wVsJzs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a7afd57a-e6de-4a5f-b5c6-10865d5a8c98/0/FE5652AD4702104DB082C396B05EE5D04542E7D7.crl rsync://repo-rpki.idnic.net/repo/a7afd57a-e6de-4a5f-b5c6-10865d5a8c98/0/FE5652AD4702104DB082C396B05EE5D04542E7D7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE5652AD4702104DB082C396B05EE5D04542E7D7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 16:26:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:56:dd:51:e4:f0:c3:fa:d0:db:0b:d0:09:86:6a:bc:99:b9:73:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FE5652AD4702104DB082C396B05EE5D04542E7D7 Validity Not Before: Apr 18 06:57:12 2026 GMT Not After : Apr 21 16:26:12 2026 GMT Subject: CN=C2C07E3673D83B7000753D42BC689C8AD3CEB877 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2b:9b:36:1c:2f:83:ef:74:d8:73:61:c2:ea: 8e:a6:13:2d:63:8d:5a:40:05:1c:8c:04:0e:61:4b: 67:0f:f8:96:a0:2d:8d:8c:02:cc:9f:f7:57:68:75: f5:d3:94:e6:5a:76:ac:93:bb:40:fe:89:9d:43:da: fa:dd:a4:1f:47:4a:b2:66:b3:76:b4:56:20:94:39: 69:7a:b3:7b:64:46:89:64:08:0c:52:3a:d5:be:9d: 5f:89:c7:b2:16:18:f3:c5:34:e1:3c:87:53:5f:d3: 90:16:c2:cd:89:7c:ca:0a:3f:7d:2c:ef:28:6e:15: ee:38:8b:2c:01:79:5a:43:74:ad:f1:cb:d7:d5:4c: 7b:7f:42:88:c8:37:cc:3f:7d:a8:e0:0c:61:f2:4e: e6:79:36:e1:66:63:11:20:e0:d7:db:b8:15:b8:35: cb:ab:c1:83:e3:d0:ed:15:1b:1a:23:d9:d4:4a:45: fe:f9:55:ac:3d:5a:78:e7:20:d3:4c:d4:98:89:46: 90:2e:85:f4:9a:f5:da:e1:68:8b:8d:21:3c:30:03: ac:7d:a2:e9:6b:b8:e4:46:6e:07:46:9c:03:5f:1c: 44:4d:12:40:5d:fa:f9:32:75:f4:11:ed:dd:f3:be: 14:ef:da:a1:81:8e:d4:6a:be:09:89:5d:51:5a:e3: 63:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:C0:7E:36:73:D8:3B:70:00:75:3D:42:BC:68:9C:8A:D3:CE:B8:77 X509v3 Authority Key Identifier: keyid:FE:56:52:AD:47:02:10:4D:B0:82:C3:96:B0:5E:E5:D0:45:42:E7:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a7afd57a-e6de-4a5f-b5c6-10865d5a8c98/0/FE5652AD4702104DB082C396B05EE5D04542E7D7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE5652AD4702104DB082C396B05EE5D04542E7D7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7afd57a-e6de-4a5f-b5c6-10865d5a8c98/0/FE5652AD4702104DB082C396B05EE5D04542E7D7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:32:0b:55:8e:c9:88:5c:26:95:f5:98:40:8a:57:af:c6:a0: 28:74:7c:6b:4b:a6:13:28:13:a0:af:c9:2e:bc:b8:f5:1a:ce: 74:04:88:4f:33:24:83:7c:db:03:0a:6b:ff:12:40:04:2d:97: 59:ca:5f:39:81:ca:04:a1:b2:4b:ec:d3:0d:af:b2:2f:81:ed: 7b:6c:7b:bd:5a:61:40:42:8a:69:f5:cb:bb:29:38:f9:20:8d: da:db:48:c4:55:4e:4a:ff:d3:ce:19:9b:09:20:b1:54:e0:b5: 8d:60:6f:81:4b:70:df:7d:98:12:1a:56:4f:87:db:6e:d1:b7: c9:6a:80:49:ed:d3:b1:45:ab:66:a9:16:11:89:37:c2:2c:f2: 02:91:32:69:e4:2a:d1:21:3e:ad:fe:c9:7f:71:05:ca:77:ae: 32:63:93:3c:8f:c0:5f:9a:fc:94:31:63:09:8e:da:ea:e4:de: 34:8b:b1:2b:63:b5:04:d5:19:49:28:1b:7b:ee:3a:c1:34:07: eb:29:76:86:0e:8e:b1:39:8d:d0:91:23:40:bb:d7:96:3e:5f: 19:a8:20:5f:0c:f1:34:cc:4f:95:96:3a:05:be:f9:8c:f1:0e: 8f:4e:83:52:9f:c9:ca:1d:3b:8b:f5:16:b4:82:b2:e1:d8:c0: f2:86:3f:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUElbdUeTww/rQ2wvQCYZqvJm5c3QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkU1NjUyQUQ0NzAyMTA0REIwODJDMzk2QjA1RUU1RDA0 NTQyRTdENzAeFw0yNjA0MTgwNjU3MTJaFw0yNjA0MjExNjI2MTJaMDMxMTAvBgNV BAMTKEMyQzA3RTM2NzNEODNCNzAwMDc1M0Q0MkJDNjg5QzhBRDNDRUI4NzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzK5s2HC+D73TYc2HC6o6mEy1j jVpABRyMBA5hS2cP+JagLY2MAsyf91dodfXTlOZadqyTu0D+iZ1D2vrdpB9HSrJm s3a0ViCUOWl6s3tkRolkCAxSOtW+nV+Jx7IWGPPFNOE8h1Nf05AWws2JfMoKP30s 7yhuFe44iywBeVpDdK3xy9fVTHt/QojIN8w/fajgDGHyTuZ5NuFmYxEg4NfbuBW4 NcurwYPj0O0VGxoj2dRKRf75Vaw9WnjnINNM1JiJRpAuhfSa9drhaIuNITwwA6x9 oulruORGbgdGnANfHERNEkBd+vkydfQR7d3zvhTv2qGBjtRqvgmJXVFa42MBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwsB+NnPYO3AAdT1CvGicitPOuHcwHwYDVR0j BBgwFoAU/lZSrUcCEE2wgsOWsF7l0EVC59cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h N2FmZDU3YS1lNmRlLTRhNWYtYjVjNi0xMDg2NWQ1YThjOTgvMC9GRTU2NTJBRDQ3 MDIxMDREQjA4MkMzOTZCMDVFRTVEMDQ1NDJFN0Q3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkU1NjUyQUQ0NzAyMTA0REIwODJDMzk2QjA1RUU1RDA0NTQy RTdENy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTdhZmQ1N2EtZTZkZS00YTVmLWI1 YzYtMTA4NjVkNWE4Yzk4LzAvRkU1NjUyQUQ0NzAyMTA0REIwODJDMzk2QjA1RUU1 RDA0NTQyRTdENy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFwyC1WOyYhcJpX1mECKV6/GoCh0fGtLphMo E6CvyS68uPUaznQEiE8zJIN82wMKa/8SQAQtl1nKXzmBygShskvs0w2vsi+B7Xts e71aYUBCimn1y7spOPkgjdrbSMRVTkr/084ZmwkgsVTgtY1gb4FLcN99mBIaVk+H 227Rt8lqgEnt07FFq2apFhGJN8Is8gKRMmnkKtEhPq3+yX9xBcp3rjJjkzyPwF+a /JQxYwmO2urk3jSLsStjtQTVGUkoG3vuOsE0B+spdoYOjrE5jdCRI0C715Y+Xxmo IF8M8TTMT5WWOgW++YzxDo9Og1KfycodO4v1FrSCsuHYwPKGP5I= -----END CERTIFICATE-----Generated at Sun Apr 19 12:39:10 2026 by rpki-client