$ rpki-client -vvf repo-rpki.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/FA86E23853549D2EF1D9F9C9222147A550E36A38.mft File: FA86E23853549D2EF1D9F9C9222147A550E36A38.mft (raw, json) Hash identifier: Wk56zw4Xy68NGWGJLxI9gpRGLu+DI/KBiqoB2GsPgYc= Subject key identifier: A6:43:97:A8:90:39:FA:BA:37:CC:5B:C3:FB:5B:D3:6A:5E:1A:57:B0 Authority key identifier: FA:86:E2:38:53:54:9D:2E:F1:D9:F9:C9:22:21:47:A5:50:E3:6A:38 Certificate issuer: /CN=FA86E23853549D2EF1D9F9C9222147A550E36A38 Certificate serial: 78D784594B131CD120A851211F7CB550EC06D762 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA86E23853549D2EF1D9F9C9222147A550E36A38.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/FA86E23853549D2EF1D9F9C9222147A550E36A38.mft Manifest number: 0230 Signing time: Thu 16 Apr 2026 11:10:50 +0000 Manifest this update: Thu 16 Apr 2026 11:05:50 +0000 Manifest next update: Sun 19 Apr 2026 18:40:50 +0000 Files and hashes: 1: FA86E23853549D2EF1D9F9C9222147A550E36A38.crl (hash: w+yzLgrVdisTaW3cEoe5Y8R9BIpW+fXm7IdoGBA51Eo=) 2: 3130332e35352e32382e302f32332d3234203d3e20313530343837.roa (hash: 8iSBjCuogDhcUBYZIPXuvYllDkYyp+uiEvzE8S7/ER4=) 3: 3130332e35352e32382e302f32342d3234203d3e20313530343837.roa (hash: s4D3k54ePgFL3DJuO1+sPM7ighm+hIZ0dRBFdpACJIQ=) 4: 3130332e35352e32392e302f32342d3234203d3e20313530343837.roa (hash: Zcui17ZIB7y9MI9lypagYjRYe4mnYqSwkXUNcZtsFwo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/FA86E23853549D2EF1D9F9C9222147A550E36A38.crl rsync://repo-rpki.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/FA86E23853549D2EF1D9F9C9222147A550E36A38.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA86E23853549D2EF1D9F9C9222147A550E36A38.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 18:40:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:d7:84:59:4b:13:1c:d1:20:a8:51:21:1f:7c:b5:50:ec:06:d7:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA86E23853549D2EF1D9F9C9222147A550E36A38 Validity Not Before: Apr 16 11:05:50 2026 GMT Not After : Apr 19 18:40:50 2026 GMT Subject: CN=A64397A89039FABA37CC5BC3FB5BD36A5E1A57B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:39:e5:c1:da:96:4d:dc:d2:9c:86:5e:73:a4: ac:46:00:23:4a:25:7a:c1:04:fc:cc:54:1c:23:f2: a2:92:ee:bf:06:ba:6a:49:57:7b:63:ab:66:90:35: ef:d3:83:ad:da:4e:62:1e:36:70:e5:19:09:54:dd: 3f:66:43:a7:0c:8c:1a:da:90:32:c6:34:c9:69:79: 5e:d9:6b:26:5d:19:f2:2f:e5:29:41:94:fe:4c:5c: 8a:28:e4:37:7d:a9:19:65:14:59:ea:47:a7:11:07: a8:06:71:4e:15:fb:42:35:2e:7b:d9:e4:55:8c:6d: 89:a0:e7:b2:ea:a4:81:f9:14:bc:64:94:45:3b:9e: 74:4f:dd:27:0b:1a:14:62:08:c9:f9:ed:e0:ae:dc: 22:01:26:67:c9:82:3c:4a:2a:5a:29:73:58:83:3c: 79:e6:6b:1c:f7:44:75:2c:79:fa:7a:4a:dd:3a:8c: a6:ed:d5:23:11:d8:d0:3a:16:01:20:a8:04:ce:9e: d1:83:9d:b4:5c:04:77:f3:16:07:33:7e:a8:6f:83: bf:cc:7c:ad:27:76:f9:c8:ec:5e:ec:9a:b4:22:3f: 07:91:c7:ac:78:e2:a0:da:f5:cb:ac:29:a5:dd:5d: bd:8f:ba:45:64:05:c6:c9:cc:2a:26:ae:15:cd:9c: 40:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:43:97:A8:90:39:FA:BA:37:CC:5B:C3:FB:5B:D3:6A:5E:1A:57:B0 X509v3 Authority Key Identifier: keyid:FA:86:E2:38:53:54:9D:2E:F1:D9:F9:C9:22:21:47:A5:50:E3:6A:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/FA86E23853549D2EF1D9F9C9222147A550E36A38.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA86E23853549D2EF1D9F9C9222147A550E36A38.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/FA86E23853549D2EF1D9F9C9222147A550E36A38.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:6d:5b:18:27:8f:9a:c1:ad:d6:96:d4:2a:6c:f4:f8:af:fe: c6:bb:9c:a5:ff:a8:6e:7a:d1:9b:c1:d1:4d:b4:cd:cf:48:81: 89:ad:47:6c:5f:96:82:51:da:20:67:e6:da:3c:07:43:35:9b: 57:e5:c1:a7:f2:2c:ff:50:ba:9e:d6:e6:90:af:a7:b1:5e:3b: 4d:9d:f1:ce:03:d2:01:8b:74:bf:3e:1c:2d:c7:fb:f0:d7:0d: 3e:de:c5:47:52:58:88:05:34:22:ad:9d:69:04:85:ad:24:6c: 1e:ca:1a:51:aa:9a:bb:4f:8d:ec:b1:9c:7e:b5:88:ba:f2:d9: ca:b5:73:5b:73:de:66:f0:d0:49:e4:43:09:e3:37:24:19:b8: 36:69:47:39:f1:8c:02:e2:ec:cc:6d:e2:12:95:5b:de:85:b1: e2:07:bc:40:5c:0c:59:b5:f1:33:46:6c:94:8b:33:9f:4b:4b: b2:79:f9:28:84:f3:ba:ec:c7:17:6e:50:00:db:64:02:eb:f1: 85:8c:65:f7:37:2b:c4:1d:b0:c4:3b:86:9c:13:74:36:d7:ca: f8:9f:71:db:61:ca:0b:b7:9f:c9:06:5d:5d:72:20:58:32:3f: 47:54:24:f9:ab:bd:80:d6:75:c9:72:2c:2d:ff:ec:d7:b3:55: 85:e6:fa:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeNeEWUsTHNEgqFEhH3y1UOwG12IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE4NkUyMzg1MzU0OUQyRUYxRDlGOUM5MjIyMTQ3QTU1 MEUzNkEzODAeFw0yNjA0MTYxMTA1NTBaFw0yNjA0MTkxODQwNTBaMDMxMTAvBgNV BAMTKEE2NDM5N0E4OTAzOUZBQkEzN0NDNUJDM0ZCNUJEMzZBNUUxQTU3QjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0OeXB2pZN3NKchl5zpKxGACNK JXrBBPzMVBwj8qKS7r8GumpJV3tjq2aQNe/Tg63aTmIeNnDlGQlU3T9mQ6cMjBra kDLGNMlpeV7ZayZdGfIv5SlBlP5MXIoo5Dd9qRllFFnqR6cRB6gGcU4V+0I1LnvZ 5FWMbYmg57LqpIH5FLxklEU7nnRP3ScLGhRiCMn57eCu3CIBJmfJgjxKKlopc1iD PHnmaxz3RHUsefp6St06jKbt1SMR2NA6FgEgqATOntGDnbRcBHfzFgczfqhvg7/M fK0ndvnI7F7smrQiPweRx6x44qDa9cusKaXdXb2PukVkBcbJzComrhXNnEATAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpkOXqJA5+ro3zFvD+1vTal4aV7AwHwYDVR0j BBgwFoAU+obiOFNUnS7x2fnJIiFHpVDjajgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NTA0NzkzYy1jMjA5LTQ2OWEtOGUzYy1lYjNmNWE4Mzg2M2YvMC9GQTg2RTIzODUz NTQ5RDJFRjFEOUY5QzkyMjIxNDdBNTUwRTM2QTM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkE4NkUyMzg1MzU0OUQyRUYxRDlGOUM5MjIyMTQ3QTU1MEUz NkEzOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTUwNDc5M2MtYzIwOS00NjlhLThl M2MtZWIzZjVhODM4NjNmLzAvRkE4NkUyMzg1MzU0OUQyRUYxRDlGOUM5MjIyMTQ3 QTU1MEUzNkEzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFVtWxgnj5rBrdaW1Cps9Piv/sa7nKX/qG56 0ZvB0U20zc9IgYmtR2xfloJR2iBn5to8B0M1m1flwafyLP9Qup7W5pCvp7FeO02d 8c4D0gGLdL8+HC3H+/DXDT7exUdSWIgFNCKtnWkEha0kbB7KGlGqmrtPjeyxnH61 iLry2cq1c1tz3mbw0EnkQwnjNyQZuDZpRznxjALi7Mxt4hKVW96FseIHvEBcDFm1 8TNGbJSLM59LS7J5+SiE87rsxxduUADbZALr8YWMZfc3K8QdsMQ7hpwTdDbXyvif cdthygu3n8kGXV1yIFgyP0dUJPmrvYDWdclyLC3/7NezVYXm+s0= -----END CERTIFICATE-----Generated at Fri Apr 17 20:35:19 2026 by rpki-client