$ rpki-client -vvf repo-rpki.idnic.net/repo/3cf0a77c-3928-4130-a098-b437572d722c/0/FC4AE05C1547B778063F91C4687D12E8D6978309.mft File: FC4AE05C1547B778063F91C4687D12E8D6978309.mft (raw, json) Hash identifier: gU7cjWLrOOCljtrWFo56Z4/mzIN9fxC4mtu6rj2SuKY= Subject key identifier: 03:D4:34:E8:E5:D5:70:C9:4C:3C:22:C9:71:18:75:3E:6F:7A:65:7D Authority key identifier: FC:4A:E0:5C:15:47:B7:78:06:3F:91:C4:68:7D:12:E8:D6:97:83:09 Certificate issuer: /CN=FC4AE05C1547B778063F91C4687D12E8D6978309 Certificate serial: 4AEE1638D13FE160FBEAF3814B1F168FF94709B8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FC4AE05C1547B778063F91C4687D12E8D6978309.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3cf0a77c-3928-4130-a098-b437572d722c/0/FC4AE05C1547B778063F91C4687D12E8D6978309.mft Manifest number: 0143 Signing time: Wed 22 Apr 2026 01:51:59 +0000 Manifest this update: Wed 22 Apr 2026 01:46:59 +0000 Manifest next update: Sat 25 Apr 2026 11:32:59 +0000 Files and hashes: 1: 3135372e32302e3233302e302f32332d3234203d3e20313532343331.roa (hash: MiCuVN4SxcxFJUJwH2xFaeavryVuebxNjnAGwlD3h5w=) 2: FC4AE05C1547B778063F91C4687D12E8D6978309.crl (hash: +7CrlZBnfkxLwdMBqg4SeRXdKDvUGKzjS4n4fzqFWDA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3cf0a77c-3928-4130-a098-b437572d722c/0/FC4AE05C1547B778063F91C4687D12E8D6978309.crl rsync://repo-rpki.idnic.net/repo/3cf0a77c-3928-4130-a098-b437572d722c/0/FC4AE05C1547B778063F91C4687D12E8D6978309.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FC4AE05C1547B778063F91C4687D12E8D6978309.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 13:19:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:ee:16:38:d1:3f:e1:60:fb:ea:f3:81:4b:1f:16:8f:f9:47:09:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC4AE05C1547B778063F91C4687D12E8D6978309 Validity Not Before: Apr 22 01:46:59 2026 GMT Not After : Apr 25 11:32:59 2026 GMT Subject: CN=03D434E8E5D570C94C3C22C97118753E6F7A657D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:60:c3:24:53:c1:c8:a4:31:13:71:14:5e:0d: 25:21:b8:e5:b1:f2:8c:6f:83:f8:92:85:74:85:fd: a3:5a:d6:0c:a6:db:c7:5f:34:84:da:60:f9:ee:51: 56:8e:ee:ae:62:78:d5:fa:04:e4:16:05:8e:ca:21: e9:09:fa:c4:a9:b3:65:d0:79:7b:6e:04:a5:b6:9b: e0:34:ff:1b:87:2e:47:6f:ed:90:23:e5:98:24:d4: 1d:d5:56:7f:d0:b3:ab:ac:17:ed:6b:1e:69:aa:43: 6c:64:e3:ad:50:82:09:94:dc:a9:e1:cc:fd:28:42: 7c:20:8f:75:63:0d:e7:c3:c7:e6:1f:19:94:c9:a7: 57:24:31:4e:a9:9f:fc:c5:48:98:95:74:04:6d:5e: 0c:b9:f5:e0:65:ce:70:bb:16:9f:69:4a:f7:b1:47: 4e:ac:26:f9:42:f8:f0:f8:c7:ec:73:2b:92:c9:57: 74:7b:6a:e4:c3:2f:cb:97:5c:6a:7e:d2:1b:32:ec: bb:73:9d:a2:ff:95:75:8a:4e:25:22:96:bd:ee:91: 88:53:d0:9e:db:d6:f6:75:07:17:dc:9b:17:43:0a: 64:c6:f3:73:98:b4:6d:a4:27:47:24:af:88:03:dc: 51:f6:4d:ca:9e:89:a7:6d:93:5c:af:a2:cb:02:e9: 1e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:D4:34:E8:E5:D5:70:C9:4C:3C:22:C9:71:18:75:3E:6F:7A:65:7D X509v3 Authority Key Identifier: keyid:FC:4A:E0:5C:15:47:B7:78:06:3F:91:C4:68:7D:12:E8:D6:97:83:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3cf0a77c-3928-4130-a098-b437572d722c/0/FC4AE05C1547B778063F91C4687D12E8D6978309.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FC4AE05C1547B778063F91C4687D12E8D6978309.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3cf0a77c-3928-4130-a098-b437572d722c/0/FC4AE05C1547B778063F91C4687D12E8D6978309.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:79:c2:26:06:a9:a8:aa:05:12:2c:ee:c5:e1:32:fd:b7:c2: 5f:cf:e8:a8:57:37:2f:c3:57:e0:ab:f3:41:3c:bc:2b:06:2a: d8:a5:3f:9e:68:0f:5c:f6:af:60:a9:15:c9:08:f2:34:ac:5f: 76:c7:92:1a:07:2d:fb:8f:ea:76:99:66:f3:3d:12:fb:5a:33: 81:9b:4d:bc:cb:9c:4c:1d:03:01:9f:06:c7:62:ed:de:41:bb: 59:6c:26:d8:e6:d7:4b:26:24:b2:0c:84:99:eb:de:44:a5:ea: bd:af:19:5b:f2:15:e4:b7:3d:82:4c:58:5c:3f:f2:ff:e0:fc: f4:07:48:e2:93:4b:ab:55:83:84:81:27:5d:e4:8c:41:b7:64: 56:00:c2:12:4d:55:82:db:b5:23:6d:2f:44:82:a1:d6:46:9d: 74:e4:45:4e:5b:11:bb:5e:9a:2d:8a:cb:8d:7b:42:ae:cd:3f: c2:77:e7:8f:5c:8a:17:42:60:af:35:0c:fc:41:cd:79:77:55: fb:1f:75:bf:e1:b5:d7:b6:8f:ba:aa:3f:c2:02:42:70:5c:a0: 19:a1:76:74:fd:c0:04:a2:ed:2e:c4:78:a3:97:cd:ac:60:2b: c2:3a:49:16:cb:90:02:4b:0d:91:8d:5a:a6:27:86:5f:39:5b: 47:4b:d4:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSu4WONE/4WD76vOBSx8Wj/lHCbgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkM0QUUwNUMxNTQ3Qjc3ODA2M0Y5MUM0Njg3RDEyRThE Njk3ODMwOTAeFw0yNjA0MjIwMTQ2NTlaFw0yNjA0MjUxMTMyNTlaMDMxMTAvBgNV BAMTKDAzRDQzNEU4RTVENTcwQzk0QzNDMjJDOTcxMTg3NTNFNkY3QTY1N0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAYMMkU8HIpDETcRReDSUhuOWx 8oxvg/iShXSF/aNa1gym28dfNITaYPnuUVaO7q5ieNX6BOQWBY7KIekJ+sSps2XQ eXtuBKW2m+A0/xuHLkdv7ZAj5Zgk1B3VVn/Qs6usF+1rHmmqQ2xk461QggmU3Knh zP0oQnwgj3VjDefDx+YfGZTJp1ckMU6pn/zFSJiVdARtXgy59eBlznC7Fp9pSvex R06sJvlC+PD4x+xzK5LJV3R7auTDL8uXXGp+0hsy7LtznaL/lXWKTiUilr3ukYhT 0J7b1vZ1BxfcmxdDCmTG83OYtG2kJ0ckr4gD3FH2Tcqeiadtk1yvossC6R6HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA9Q06OXVcMlMPCLJcRh1Pm96ZX0wHwYDVR0j BBgwFoAU/ErgXBVHt3gGP5HEaH0S6NaXgwkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Y2YwYTc3Yy0zOTI4LTQxMzAtYTA5OC1iNDM3NTcyZDcyMmMvMC9GQzRBRTA1QzE1 NDdCNzc4MDYzRjkxQzQ2ODdEMTJFOEQ2OTc4MzA5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkM0QUUwNUMxNTQ3Qjc3ODA2M0Y5MUM0Njg3RDEyRThENjk3 ODMwOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2NmMGE3N2MtMzkyOC00MTMwLWEw OTgtYjQzNzU3MmQ3MjJjLzAvRkM0QUUwNUMxNTQ3Qjc3ODA2M0Y5MUM0Njg3RDEy RThENjk3ODMwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEV5wiYGqaiqBRIs7sXhMv23wl/P6KhXNy/D V+Cr80E8vCsGKtilP55oD1z2r2CpFckI8jSsX3bHkhoHLfuP6naZZvM9EvtaM4Gb TbzLnEwdAwGfBsdi7d5Bu1lsJtjm10smJLIMhJnr3kSl6r2vGVvyFeS3PYJMWFw/ 8v/g/PQHSOKTS6tVg4SBJ13kjEG3ZFYAwhJNVYLbtSNtL0SCodZGnXTkRU5bEbte mi2Ky417Qq7NP8J3549cihdCYK81DPxBzXl3Vfsfdb/htde2j7qqP8ICQnBcoBmh dnT9wASi7S7EeKOXzaxgK8I6SRbLkAJLDZGNWqYnhl85W0dL1KA= -----END CERTIFICATE-----Generated at Wed Apr 22 04:54:43 2026 by rpki-client