$ rpki-client -vvf repo-rpki.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.mft File: FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.mft (raw, json) Hash identifier: sbVzycWxTTtw79B3WGPvbLnJ0VxiX463TZzW0k/biPg= Subject key identifier: B1:34:76:CA:42:6B:70:70:82:7B:03:16:13:E3:DD:8B:BB:9F:91:F5 Authority key identifier: FC:D5:B5:62:FA:ED:9B:9D:67:F9:DE:5D:B7:05:78:BF:DB:00:57:B3 Certificate issuer: /CN=FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3 Certificate serial: 38F0DFC55256E053679AB688D6844498A5F433E9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.mft Manifest number: 0395 Signing time: Sun 19 Apr 2026 01:02:46 +0000 Manifest this update: Sun 19 Apr 2026 00:57:46 +0000 Manifest next update: Wed 22 Apr 2026 09:46:46 +0000 Files and hashes: 1: 3130332e3135312e3134302e302f32332d3234203d3e20313430343137.roa (hash: mr9oJkqJu33cE+sO1xTJ5/yRhuztRXByZdlSuqYyA6I=) 2: FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.crl (hash: aaoH1liQZHS5fd0/ZY1aQT49sTqwDuC3Opbk6VA2jX0=) 3: 3130332e3135312e3134302e302f32332d3233203d3e20313430343137.roa (hash: 86RSH82ovhKhsP6+isstgOwmm7AlHldLUkgwqqf5iMI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.crl rsync://repo-rpki.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 09:46:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:f0:df:c5:52:56:e0:53:67:9a:b6:88:d6:84:44:98:a5:f4:33:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3 Validity Not Before: Apr 19 00:57:46 2026 GMT Not After : Apr 22 09:46:46 2026 GMT Subject: CN=B13476CA426B7070827B031613E3DD8BBB9F91F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:5d:db:4c:47:b3:c0:37:da:6f:a0:d7:c7:3f: 37:14:f6:a2:3e:cc:ce:e8:1d:91:57:60:45:55:19: 7c:58:d5:4c:b4:96:2e:1d:3b:fd:83:8b:e6:7b:16: 31:f5:ac:58:50:ff:2c:9c:6c:8f:e0:4e:7c:ea:c0: 74:94:77:dc:5f:68:a5:dd:be:fc:43:20:28:44:a4: 97:fe:44:c0:27:d5:85:28:9f:10:c8:46:e8:03:60: a6:eb:d5:0f:c2:e5:87:1a:8e:4e:d6:96:8a:23:ab: f3:0d:44:ba:d4:46:ee:d5:9a:a3:2c:a8:4a:23:a6: 82:12:8a:d7:43:ec:23:66:27:6e:ee:9c:88:82:ba: c8:c8:d8:37:c2:ab:73:71:de:ff:4e:d9:a9:2d:25: 8e:31:31:8b:41:b3:08:11:8f:8d:2a:85:f8:1f:88: d0:0d:20:12:3a:7d:1f:3e:97:e7:bc:13:f4:f6:13: a9:33:7f:ae:1f:16:fc:7c:9c:20:91:18:38:68:59: f2:9e:88:f3:a1:78:3c:80:f5:97:c2:55:c4:d7:57: 9c:b0:85:55:c9:90:72:a1:f0:50:f3:33:7d:9d:82: 9a:aa:13:7a:f4:58:e4:01:52:b8:45:28:e8:33:8a: 42:4c:a2:9f:11:43:26:11:43:79:6f:0d:75:ea:02: 4e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:34:76:CA:42:6B:70:70:82:7B:03:16:13:E3:DD:8B:BB:9F:91:F5 X509v3 Authority Key Identifier: keyid:FC:D5:B5:62:FA:ED:9B:9D:67:F9:DE:5D:B7:05:78:BF:DB:00:57:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:6f:b6:fb:f7:6a:65:a0:ac:43:80:1b:50:83:f6:be:ed:15: 6e:5e:5a:45:96:e9:f1:b0:59:51:ce:01:8e:43:32:a3:d8:66: 0b:ea:58:ad:2e:26:9d:0f:c0:09:ec:5a:e1:f6:84:8b:e8:9f: fc:8e:66:0f:44:bc:3c:cc:92:46:5e:6c:17:63:0f:01:06:09: c9:5a:7e:63:86:14:89:cb:84:67:f1:85:7c:c5:65:14:10:18: aa:1a:79:d3:40:83:d9:bb:39:39:bf:90:04:19:37:c7:d0:c2: 37:19:8f:6f:fd:1d:e0:90:08:ed:21:fa:2f:b1:84:61:9e:42: 95:c9:61:d0:18:00:7c:a9:b6:dc:b5:69:30:aa:be:73:fe:3d: 36:39:a9:6f:7c:f5:bf:92:07:85:84:5f:3a:a7:10:44:d2:d3: c8:b6:71:0d:40:30:a5:fe:55:53:aa:85:e3:4e:70:6f:26:39: 99:39:d5:3e:54:bc:fc:6a:65:54:a6:ba:e7:63:44:28:d5:96: c6:13:80:ef:f7:35:d1:84:82:74:f2:66:c2:b7:31:e8:09:2f: f0:77:e6:d0:94:8a:7f:50:49:9e:2e:a2:71:70:d3:62:5b:ae: 55:61:68:e0:60:1f:3d:02:5d:2f:fe:ab:76:df:ae:95:91:00: ee:bd:fb:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOPDfxVJW4FNnmraI1oREmKX0M+kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkNENUI1NjJGQUVEOUI5RDY3RjlERTVEQjcwNTc4QkZE QjAwNTdCMzAeFw0yNjA0MTkwMDU3NDZaFw0yNjA0MjIwOTQ2NDZaMDMxMTAvBgNV BAMTKEIxMzQ3NkNBNDI2QjcwNzA4MjdCMDMxNjEzRTNERDhCQkI5RjkxRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOXdtMR7PAN9pvoNfHPzcU9qI+ zM7oHZFXYEVVGXxY1Uy0li4dO/2Di+Z7FjH1rFhQ/yycbI/gTnzqwHSUd9xfaKXd vvxDIChEpJf+RMAn1YUonxDIRugDYKbr1Q/C5Ycajk7Wloojq/MNRLrURu7VmqMs qEojpoISitdD7CNmJ27unIiCusjI2DfCq3Nx3v9O2aktJY4xMYtBswgRj40qhfgf iNANIBI6fR8+l+e8E/T2E6kzf64fFvx8nCCRGDhoWfKeiPOheDyA9ZfCVcTXV5yw hVXJkHKh8FDzM32dgpqqE3r0WOQBUrhFKOgzikJMop8RQyYRQ3lvDXXqAk6rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsTR2ykJrcHCCewMWE+Pdi7ufkfUwHwYDVR0j BBgwFoAU/NW1Yvrtm51n+d5dtwV4v9sAV7MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NDcwMjZhOS0wYzlhLTRkNzktYWQ2Ny0yYzlkYmQzNjZkMGIvMC9GQ0Q1QjU2MkZB RUQ5QjlENjdGOURFNURCNzA1NzhCRkRCMDA1N0IzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkNENUI1NjJGQUVEOUI5RDY3RjlERTVEQjcwNTc4QkZEQjAw NTdCMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDQ3MDI2YTktMGM5YS00ZDc5LWFk NjctMmM5ZGJkMzY2ZDBiLzAvRkNENUI1NjJGQUVEOUI5RDY3RjlERTVEQjcwNTc4 QkZEQjAwNTdCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK5vtvv3amWgrEOAG1CD9r7tFW5eWkWW6fGw WVHOAY5DMqPYZgvqWK0uJp0PwAnsWuH2hIvon/yOZg9EvDzMkkZebBdjDwEGCcla fmOGFInLhGfxhXzFZRQQGKoaedNAg9m7OTm/kAQZN8fQwjcZj2/9HeCQCO0h+i+x hGGeQpXJYdAYAHyptty1aTCqvnP+PTY5qW989b+SB4WEXzqnEETS08i2cQ1AMKX+ VVOqheNOcG8mOZk51T5UvPxqZVSmuudjRCjVlsYTgO/3NdGEgnTyZsK3MegJL/B3 5tCUin9QSZ4uonFw02JbrlVhaOBgHz0CXS/+q3bfrpWRAO69+wk= -----END CERTIFICATE-----Generated at Sun Apr 19 13:43:00 2026 by rpki-client