$ rpki-client -vvf repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/FED855DD505D24B6FE25BD8656297329F7EF4785.mft File: FED855DD505D24B6FE25BD8656297329F7EF4785.mft (raw, json) Hash identifier: eFsT0pKxy8gJbEpqvtPBgTKs4CVjwD+ILgS4os/FFM8= Subject key identifier: 63:F6:93:F2:77:94:D3:20:67:C6:0E:66:D1:16:2E:8E:18:BF:8C:1B Authority key identifier: FE:D8:55:DD:50:5D:24:B6:FE:25:BD:86:56:29:73:29:F7:EF:47:85 Certificate issuer: /CN=FED855DD505D24B6FE25BD8656297329F7EF4785 Certificate serial: 50336DE3A60AAA18113870267889ED7F9CE2B0CE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FED855DD505D24B6FE25BD8656297329F7EF4785.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/FED855DD505D24B6FE25BD8656297329F7EF4785.mft Manifest number: 04D3 Signing time: Sat 14 Mar 2026 12:21:40 +0000 Manifest this update: Sat 14 Mar 2026 12:16:40 +0000 Manifest next update: Tue 17 Mar 2026 14:57:40 +0000 Files and hashes: 1: 3130332e3130352e3133302e302f32342d3234203d3e203137373237.roa (hash: yMrj8AoB/ixjd6PVgwO256Xjq06xuds8sgMBoLkTbyM=) 2: FED855DD505D24B6FE25BD8656297329F7EF4785.crl (hash: CM7A/Sje4uNYqIu+kd9kZ9tbtWcAWA36aubLVqXdBME=) 3: 3130332e3130352e3132382e302f32342d3234203d3e203137373237.roa (hash: X2PEKknjtTcnLsrGiadMk08xxZNciTvdVjNrgOP4sHk=) 4: 3130332e3130352e3132382e302f32322d3232203d3e203137373237.roa (hash: IhDRQtUCQIm4IOPr5vP9tEfWgB4QjIXQlUOAr7HBNq4=) 5: 3130332e3130352e3132392e302f32342d3234203d3e203137373237.roa (hash: hPyIxp0hj3k+joStahsmifFKwjq2yL5rkOsyq1Wlc34=) 6: 3130332e3130352e3133312e302f32342d3234203d3e203137373237.roa (hash: MeNQV5B+OerhDUDBOkfR5BHmeZ2GFCk+XtpnzmEeM9I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/FED855DD505D24B6FE25BD8656297329F7EF4785.crl rsync://repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/FED855DD505D24B6FE25BD8656297329F7EF4785.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FED855DD505D24B6FE25BD8656297329F7EF4785.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Mar 2026 14:57:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:33:6d:e3:a6:0a:aa:18:11:38:70:26:78:89:ed:7f:9c:e2:b0:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FED855DD505D24B6FE25BD8656297329F7EF4785 Validity Not Before: Mar 14 12:16:40 2026 GMT Not After : Mar 17 14:57:40 2026 GMT Subject: CN=63F693F27794D32067C60E66D1162E8E18BF8C1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:fa:0c:cd:d4:c7:15:03:3b:58:bb:c1:a5:1d: c7:69:9e:2b:ad:a2:66:e5:04:fe:58:59:5f:9f:2c: 30:a5:8a:3e:d6:aa:b0:af:1e:af:32:78:d2:f6:1b: 54:2c:69:5f:09:9a:bf:69:d0:ec:15:34:13:78:7c: 82:3e:1c:51:fc:fe:20:49:fe:f6:aa:ad:49:ff:22: de:ca:a2:1b:4b:60:9c:fe:a5:eb:12:60:97:b9:fd: c4:ce:d5:9d:29:7f:35:a4:fb:78:8b:fb:8d:c9:83: e1:c3:c5:67:02:47:e1:eb:f5:f1:8e:5d:b7:f0:69: e4:df:8c:24:85:94:d0:e7:2d:f1:17:6b:0a:c5:63: ff:03:c3:fd:3e:a1:0f:55:1c:ad:e6:43:86:d8:8f: e2:55:87:b9:6b:a0:6d:95:a6:88:19:cb:83:2b:f4: 06:66:3d:ce:9d:d3:67:44:16:54:f0:43:41:1d:b1: 43:23:fb:63:36:fd:62:d2:71:be:5a:75:29:3a:d9: ff:7f:92:07:f7:61:96:3d:73:3c:40:e6:a4:7a:b3: 5e:38:9a:69:f8:ec:5f:2a:b3:33:fb:0d:69:5b:e9: 99:7f:35:59:51:2f:d5:4f:90:e4:4c:4e:22:b9:23: 43:89:73:4c:94:ed:e3:be:77:43:d3:25:78:78:21: 15:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:F6:93:F2:77:94:D3:20:67:C6:0E:66:D1:16:2E:8E:18:BF:8C:1B X509v3 Authority Key Identifier: keyid:FE:D8:55:DD:50:5D:24:B6:FE:25:BD:86:56:29:73:29:F7:EF:47:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/FED855DD505D24B6FE25BD8656297329F7EF4785.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FED855DD505D24B6FE25BD8656297329F7EF4785.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/FED855DD505D24B6FE25BD8656297329F7EF4785.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:7b:7c:b2:0b:93:3b:25:ea:a8:dd:15:8b:f4:4b:19:37:ed: 0f:96:c1:91:77:e1:ac:23:e9:3b:aa:9e:c8:8e:e4:4f:ca:65: a2:7f:12:e5:c4:8d:55:19:b1:56:f1:5a:31:3f:46:d2:97:69: 36:dc:f3:00:8a:9e:fe:0b:c9:c6:9c:73:77:1c:f5:7c:ee:f2: 34:1b:13:ff:14:09:eb:fe:d6:32:f6:dd:5f:3a:18:6b:26:65: e9:e2:45:62:31:4f:56:b2:03:d5:37:50:be:bc:72:dc:ea:b4: 62:23:cc:b3:aa:a9:60:e2:b6:3c:15:62:8a:d6:79:e4:b7:fa: b5:ae:d9:11:21:4c:ab:4d:21:33:1c:05:bc:3e:01:78:91:78: 5a:66:9e:29:cd:ea:27:f2:0a:a9:4a:d2:94:df:07:d7:70:a6: 85:8e:e8:12:81:53:6b:46:43:34:91:aa:c0:04:4f:b1:7b:22: 57:cb:c7:18:2f:03:31:e1:aa:ba:d8:ab:e1:b1:ff:bc:42:c5: 99:25:80:5f:05:b7:f8:97:de:70:fa:57:4f:c8:3b:c5:1c:1e: 66:41:97:26:9f:5a:ce:9c:73:81:41:77:63:a2:2d:a2:d9:a8: ca:43:73:16:50:68:ae:1a:e0:de:07:d1:e0:7f:42:ec:e4:5c: e9:51:68:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUDNt46YKqhgROHAmeIntf5zisM4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkVEODU1REQ1MDVEMjRCNkZFMjVCRDg2NTYyOTczMjlG N0VGNDc4NTAeFw0yNjAzMTQxMjE2NDBaFw0yNjAzMTcxNDU3NDBaMDMxMTAvBgNV BAMTKDYzRjY5M0YyNzc5NEQzMjA2N0M2MEU2NkQxMTYyRThFMThCRjhDMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc+gzN1McVAztYu8GlHcdpniut omblBP5YWV+fLDClij7WqrCvHq8yeNL2G1QsaV8Jmr9p0OwVNBN4fII+HFH8/iBJ /vaqrUn/It7KohtLYJz+pesSYJe5/cTO1Z0pfzWk+3iL+43Jg+HDxWcCR+Hr9fGO XbfwaeTfjCSFlNDnLfEXawrFY/8Dw/0+oQ9VHK3mQ4bYj+JVh7lroG2VpogZy4Mr 9AZmPc6d02dEFlTwQ0EdsUMj+2M2/WLScb5adSk62f9/kgf3YZY9czxA5qR6s144 mmn47F8qszP7DWlb6Zl/NVlRL9VPkORMTiK5I0OJc0yU7eO+d0PTJXh4IRUfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY/aT8neU0yBnxg5m0RYujhi/jBswHwYDVR0j BBgwFoAU/thV3VBdJLb+Jb2GVilzKffvR4UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDYxZDdhNy1hMTFlLTQwMGItOTE3MC1jNzk3ZWQ4OGQ3MDIvMC9GRUQ4NTVERDUw NUQyNEI2RkUyNUJEODY1NjI5NzMyOUY3RUY0Nzg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkVEODU1REQ1MDVEMjRCNkZFMjVCRDg2NTYyOTczMjlGN0VG NDc4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQ2MWQ3YTctYTExZS00MDBiLTkx NzAtYzc5N2VkODhkNzAyLzAvRkVEODU1REQ1MDVEMjRCNkZFMjVCRDg2NTYyOTcz MjlGN0VGNDc4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFh7fLILkzsl6qjdFYv0Sxk37Q+WwZF34awj 6TuqnsiO5E/KZaJ/EuXEjVUZsVbxWjE/RtKXaTbc8wCKnv4Lycacc3cc9Xzu8jQb E/8UCev+1jL23V86GGsmZeniRWIxT1ayA9U3UL68ctzqtGIjzLOqqWDitjwVYorW eeS3+rWu2REhTKtNITMcBbw+AXiReFpmninN6ifyCqlK0pTfB9dwpoWO6BKBU2tG QzSRqsAET7F7IlfLxxgvAzHhqrrYq+Gx/7xCxZklgF8Ft/iX3nD6V0/IO8UcHmZB lyafWs6cc4FBd2OiLaLZqMpDcxZQaK4a4N4H0eB/QuzkXOlRaKQ= -----END CERTIFICATE-----Generated at Sat Mar 14 21:58:58 2026 by rpki-client