$ rpki-client -vvf repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/FA479894B4849679EBB9029580F04B8BD74CE048.mft File: FA479894B4849679EBB9029580F04B8BD74CE048.mft (raw, json) Hash identifier: g7gxfjoo93b32wEDHi2J6xBD25T+x00wke5YmHJRCHU= Subject key identifier: 00:B6:93:71:D7:68:DF:07:DD:3F:4D:8E:AA:E4:6C:70:9F:E7:0C:41 Authority key identifier: FA:47:98:94:B4:84:96:79:EB:B9:02:95:80:F0:4B:8B:D7:4C:E0:48 Certificate issuer: /CN=FA479894B4849679EBB9029580F04B8BD74CE048 Certificate serial: 42730BFA6FB9123A89F7DFB8ED16BFD97347E173 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA479894B4849679EBB9029580F04B8BD74CE048.cer Subject info access: rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/FA479894B4849679EBB9029580F04B8BD74CE048.mft Manifest number: FF Signing time: Mon 20 Apr 2026 00:11:44 +0000 Manifest this update: Mon 20 Apr 2026 00:06:44 +0000 Manifest next update: Thu 23 Apr 2026 11:44:44 +0000 Files and hashes: 1: 323030313a6466343a343463303a3a2f34382d3438203d3e20313533313137.roa (hash: TN7coRRv7ozdQ4MBQjtVExbapiKpR2cs6McrqrVZTKc=) 2: FA479894B4849679EBB9029580F04B8BD74CE048.crl (hash: qAguUlOP1KRGcESArFLkDJFfG2uylPopN1yV6bLFqr0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/FA479894B4849679EBB9029580F04B8BD74CE048.crl rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/FA479894B4849679EBB9029580F04B8BD74CE048.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA479894B4849679EBB9029580F04B8BD74CE048.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 11:44:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:73:0b:fa:6f:b9:12:3a:89:f7:df:b8:ed:16:bf:d9:73:47:e1:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA479894B4849679EBB9029580F04B8BD74CE048 Validity Not Before: Apr 20 00:06:44 2026 GMT Not After : Apr 23 11:44:44 2026 GMT Subject: CN=00B69371D768DF07DD3F4D8EAAE46C709FE70C41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:09:79:04:83:fc:1a:83:1f:da:0a:d7:f0:2c: cc:e5:3b:52:14:51:48:af:55:ae:65:00:c4:8c:30: e8:ca:3b:0e:7a:d6:da:a4:93:a8:70:96:52:74:2f: 49:92:a9:c1:d4:60:21:12:9b:87:b7:a9:ad:41:51: a4:ee:e0:11:ad:3e:98:e3:c5:d1:14:a9:92:a4:96: 0f:0f:1e:be:c8:48:b4:4f:09:23:d6:52:11:ae:ce: 1e:25:61:e6:ce:bf:bf:20:60:1a:6a:23:d9:fe:27: e8:7b:5d:d4:8a:f9:0d:66:08:88:8b:23:5b:23:65: 31:ac:90:9f:75:59:f2:4a:fa:d3:f4:fe:8b:8c:84: e7:2e:41:a1:e4:bd:56:9e:50:e5:5b:d9:49:8c:a7: 37:7f:78:36:2e:43:58:ed:04:92:89:d1:4e:03:56: 85:08:28:48:a2:42:3c:ed:5d:d6:33:08:dc:15:a4: b5:89:b8:f2:15:53:74:17:3f:bd:19:99:ea:10:24: 27:a0:b8:94:34:31:5c:0e:c8:a1:d2:80:82:a0:9b: af:1f:3a:2e:50:7a:ae:01:aa:d1:76:d3:2f:87:b1: c6:2c:79:d4:01:d5:ac:4a:f0:e4:c2:52:c9:d1:6b: bc:ef:86:37:f9:1d:1e:fa:01:0e:12:06:bf:bc:d7: da:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:B6:93:71:D7:68:DF:07:DD:3F:4D:8E:AA:E4:6C:70:9F:E7:0C:41 X509v3 Authority Key Identifier: keyid:FA:47:98:94:B4:84:96:79:EB:B9:02:95:80:F0:4B:8B:D7:4C:E0:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/FA479894B4849679EBB9029580F04B8BD74CE048.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA479894B4849679EBB9029580F04B8BD74CE048.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/FA479894B4849679EBB9029580F04B8BD74CE048.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:82:e1:1a:28:b3:2c:45:5f:bc:6b:4f:9d:42:42:c8:02:7e: 66:ef:1d:32:e6:2a:38:6d:e5:3e:e7:d3:4c:5b:3d:9b:8f:d7: 85:ae:e8:5f:d0:44:6e:d2:ef:82:38:e4:82:b4:d1:1c:02:1a: 31:3a:1e:03:0d:54:78:2d:9f:7c:d1:5c:67:c6:5b:90:dc:62: ed:6f:59:0d:bb:00:e2:eb:20:df:76:af:a6:88:ee:fd:fd:67: 2a:ee:03:bd:3c:a3:a4:f8:08:81:e3:2f:2e:fc:c9:ca:12:bb: a6:1a:0b:06:30:3e:ae:cc:5f:d6:c9:99:f2:05:b8:83:5f:c9: 37:27:e0:b8:0f:98:2a:46:dd:fd:7f:5a:55:44:e8:55:8d:68: ef:71:92:f9:4b:28:09:c8:06:75:de:c3:9e:21:21:93:42:20: 7a:51:51:5d:34:16:22:81:6e:57:d9:b9:4a:21:c0:51:89:8f: 95:ea:20:b5:0d:bb:35:f0:90:ee:cc:96:8e:48:04:d9:2a:42: 1f:7d:01:32:db:7e:9f:b6:a7:b1:dd:80:95:95:63:e7:31:3b: d9:ca:e6:81:ab:83:f4:7d:19:aa:36:dd:8a:59:a7:73:9c:47: 9f:82:ef:f8:73:f1:8c:d6:dc:e8:82:b5:e2:b8:86:d2:5f:2b: c3:24:7b:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQnML+m+5EjqJ99+47Ra/2XNH4XMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE0Nzk4OTRCNDg0OTY3OUVCQjkwMjk1ODBGMDRCOEJE NzRDRTA0ODAeFw0yNjA0MjAwMDA2NDRaFw0yNjA0MjMxMTQ0NDRaMDMxMTAvBgNV BAMTKDAwQjY5MzcxRDc2OERGMDdERDNGNEQ4RUFBRTQ2QzcwOUZFNzBDNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQCXkEg/wagx/aCtfwLMzlO1IU UUivVa5lAMSMMOjKOw561tqkk6hwllJ0L0mSqcHUYCESm4e3qa1BUaTu4BGtPpjj xdEUqZKklg8PHr7ISLRPCSPWUhGuzh4lYebOv78gYBpqI9n+J+h7XdSK+Q1mCIiL I1sjZTGskJ91WfJK+tP0/ouMhOcuQaHkvVaeUOVb2UmMpzd/eDYuQ1jtBJKJ0U4D VoUIKEiiQjztXdYzCNwVpLWJuPIVU3QXP70ZmeoQJCeguJQ0MVwOyKHSgIKgm68f Oi5Qeq4BqtF20y+HscYsedQB1axK8OTCUsnRa7zvhjf5HR76AQ4SBr+819qRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUALaTcddo3wfdP02OquRscJ/nDEEwHwYDVR0j BBgwFoAU+keYlLSElnnruQKVgPBLi9dM4EgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OWIwN2E5ZS02MmRmLTQ4MDgtOWQyYS1hNmU2ODg0YmNiYmIvMS9GQTQ3OTg5NEI0 ODQ5Njc5RUJCOTAyOTU4MEYwNEI4QkQ3NENFMDQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkE0Nzk4OTRCNDg0OTY3OUVCQjkwMjk1ODBGMDRCOEJENzRD RTA0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTliMDdhOWUtNjJkZi00ODA4LTlk MmEtYTZlNjg4NGJjYmJiLzEvRkE0Nzk4OTRCNDg0OTY3OUVCQjkwMjk1ODBGMDRC OEJENzRDRTA0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGqC4RoosyxFX7xrT51CQsgCfmbvHTLmKjht 5T7n00xbPZuP14Wu6F/QRG7S74I45IK00RwCGjE6HgMNVHgtn3zRXGfGW5DcYu1v WQ27AOLrIN92r6aI7v39ZyruA708o6T4CIHjLy78ycoSu6YaCwYwPq7MX9bJmfIF uINfyTcn4LgPmCpG3f1/WlVE6FWNaO9xkvlLKAnIBnXew54hIZNCIHpRUV00FiKB blfZuUohwFGJj5XqILUNuzXwkO7Mlo5IBNkqQh99ATLbfp+2p7HdgJWVY+cxO9nK 5oGrg/R9Gao23YpZp3OcR5+C7/hz8YzW3OiCteK4htJfK8Mke+Q= -----END CERTIFICATE-----Generated at Wed Apr 22 09:59:52 2026 by rpki-client