$ rpki-client -vvf repo-rpki.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.mft File: FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.mft (raw, json) Hash identifier: zsTEIswkzdO10PfVMHWO5djDjF9uRI0WZHgF7JBICtE= Subject key identifier: 61:46:AE:3B:79:77:E5:A2:DA:1E:58:09:0E:1C:1F:69:D4:63:A7:CC Authority key identifier: FC:D5:B5:62:FA:ED:9B:9D:67:F9:DE:5D:B7:05:78:BF:DB:00:57:B3 Certificate issuer: /CN=FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3 Certificate serial: 69989100716D05BBA0CD53183E26DB3C49F13E87 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.mft Manifest number: 037F Signing time: Mon 02 Mar 2026 14:21:20 +0000 Manifest this update: Mon 02 Mar 2026 14:16:20 +0000 Manifest next update: Thu 05 Mar 2026 19:45:20 +0000 Files and hashes: 1: 3130332e3135312e3134302e302f32332d3234203d3e20313430343137.roa (hash: maLwNGdhj2YMExFHAn5+1Sop9522GuyaLGRVR2YiAsA=) 2: FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.crl (hash: mPm8+4u35NxWh1sblwBipCt849L22j7ORRDGhHDM3pg=) 3: 3130332e3135312e3134302e302f32332d3233203d3e20313430343137.roa (hash: 8NA8ztqKmdQKSo6VJIi8+Ky4DaNAGzE3fau0y6GTEzI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.crl rsync://repo-rpki.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:98:91:00:71:6d:05:bb:a0:cd:53:18:3e:26:db:3c:49:f1:3e:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3 Validity Not Before: Mar 2 14:16:20 2026 GMT Not After : Mar 5 19:45:20 2026 GMT Subject: CN=6146AE3B7977E5A2DA1E58090E1C1F69D463A7CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e3:f5:80:a6:3e:46:38:d4:72:11:cb:d9:d6: 73:dc:ef:71:c9:f8:a7:0d:23:f9:1e:91:cc:e2:fe: 2d:2a:41:f2:58:f9:0e:0d:8a:4f:a7:0a:70:d8:8c: 88:0d:9a:65:3c:b7:38:8a:94:a4:c9:b1:3f:ba:66: 5f:0b:2a:31:f5:96:cd:22:f5:d5:93:3e:bc:95:56: 0b:a8:4e:fc:b7:24:ff:e9:a0:c8:9e:c8:93:51:65: 87:b6:bc:18:eb:c3:fb:82:78:3e:9e:3b:37:8f:86: 2e:73:42:ca:87:8c:6f:d9:80:53:78:62:85:d0:9a: 5f:f8:c0:df:55:48:b2:52:55:99:41:4e:24:37:c5: 38:38:62:6b:48:f5:29:80:62:79:5e:8f:33:7f:56: 49:3c:d3:1d:f2:d8:01:29:aa:eb:26:5c:f4:6a:71: 34:61:84:02:aa:4c:41:76:31:f8:66:2d:c7:51:6b: 2b:74:a6:86:ca:41:ab:ee:d8:b1:6f:49:a1:71:71: 8e:7c:26:b7:a0:a2:31:b0:69:d1:12:00:76:8a:77: 92:dd:f2:ba:a7:5d:89:7b:19:74:72:a3:24:02:dd: 70:7b:7a:db:5e:31:74:60:12:ec:08:cb:93:75:97: cc:f7:70:b1:4c:a0:88:92:f7:e3:14:00:9c:95:fd: e9:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:46:AE:3B:79:77:E5:A2:DA:1E:58:09:0E:1C:1F:69:D4:63:A7:CC X509v3 Authority Key Identifier: keyid:FC:D5:B5:62:FA:ED:9B:9D:67:F9:DE:5D:B7:05:78:BF:DB:00:57:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:d2:d3:f3:90:02:76:15:ae:5d:cd:c9:09:b6:36:be:4c:25: 16:53:c3:b1:5d:61:10:cd:80:37:ae:c7:48:56:ea:c0:11:67: 04:52:4b:8a:1b:1a:fe:2f:b7:b5:47:8c:38:fa:33:29:72:65: 06:28:7f:0a:0a:3a:c4:d8:af:57:26:34:f9:ee:1c:85:42:c9: fa:8a:7c:92:b0:51:c7:9f:d1:b7:ca:21:e1:c2:6d:97:e7:d4: 4e:aa:79:19:c1:21:87:ce:a9:4a:7e:d9:e5:25:a6:d7:cb:c2: 06:ac:1f:f1:d0:e7:67:78:11:d0:56:cc:17:c7:c1:d3:27:e9: 83:6c:41:0f:f0:e7:f4:a1:c1:cc:17:ad:b8:f1:63:44:51:f4: d0:69:3b:98:27:1d:62:77:20:70:03:8c:c0:1a:00:8c:7f:7e: bd:6f:cc:1b:b0:62:65:9f:6a:07:22:97:9b:e9:9c:e6:1b:70: cf:24:1f:ae:d3:fc:c7:12:7c:ce:ab:35:3f:9d:6b:fd:49:c0: 58:d9:b1:f9:b8:c9:67:4a:c8:e0:9e:94:5b:b0:af:07:87:66: 54:b3:ae:2b:34:71:22:42:77:42:d1:f3:63:b4:4d:af:0c:7d: 25:26:91:95:1e:a8:a9:2e:fe:ea:3b:29:17:99:25:a5:f3:41: f4:c3:b7:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaZiRAHFtBbugzVMYPibbPEnxPocwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkNENUI1NjJGQUVEOUI5RDY3RjlERTVEQjcwNTc4QkZE QjAwNTdCMzAeFw0yNjAzMDIxNDE2MjBaFw0yNjAzMDUxOTQ1MjBaMDMxMTAvBgNV BAMTKDYxNDZBRTNCNzk3N0U1QTJEQTFFNTgwOTBFMUMxRjY5RDQ2M0E3Q0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz4/WApj5GONRyEcvZ1nPc73HJ +KcNI/kekczi/i0qQfJY+Q4Nik+nCnDYjIgNmmU8tziKlKTJsT+6Zl8LKjH1ls0i 9dWTPryVVguoTvy3JP/poMieyJNRZYe2vBjrw/uCeD6eOzePhi5zQsqHjG/ZgFN4 YoXQml/4wN9VSLJSVZlBTiQ3xTg4YmtI9SmAYnlejzN/Vkk80x3y2AEpqusmXPRq cTRhhAKqTEF2MfhmLcdRayt0pobKQavu2LFvSaFxcY58JregojGwadESAHaKd5Ld 8rqnXYl7GXRyoyQC3XB7etteMXRgEuwIy5N1l8z3cLFMoIiS9+MUAJyV/elDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYUauO3l35aLaHlgJDhwfadRjp8wwHwYDVR0j BBgwFoAU/NW1Yvrtm51n+d5dtwV4v9sAV7MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NDcwMjZhOS0wYzlhLTRkNzktYWQ2Ny0yYzlkYmQzNjZkMGIvMC9GQ0Q1QjU2MkZB RUQ5QjlENjdGOURFNURCNzA1NzhCRkRCMDA1N0IzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkNENUI1NjJGQUVEOUI5RDY3RjlERTVEQjcwNTc4QkZEQjAw NTdCMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDQ3MDI2YTktMGM5YS00ZDc5LWFk NjctMmM5ZGJkMzY2ZDBiLzAvRkNENUI1NjJGQUVEOUI5RDY3RjlERTVEQjcwNTc4 QkZEQjAwNTdCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALPS0/OQAnYVrl3NyQm2Nr5MJRZTw7FdYRDN gDeux0hW6sARZwRSS4obGv4vt7VHjDj6MylyZQYofwoKOsTYr1cmNPnuHIVCyfqK fJKwUcef0bfKIeHCbZfn1E6qeRnBIYfOqUp+2eUlptfLwgasH/HQ52d4EdBWzBfH wdMn6YNsQQ/w5/ShwcwXrbjxY0RR9NBpO5gnHWJ3IHADjMAaAIx/fr1vzBuwYmWf agcil5vpnOYbcM8kH67T/McSfM6rNT+da/1JwFjZsfm4yWdKyOCelFuwrweHZlSz ris0cSJCd0LR82O0Ta8MfSUmkZUeqKku/uo7KReZJaXzQfTDt6o= -----END CERTIFICATE-----Generated at Mon Mar 2 17:55:51 2026 by rpki-client