$ rpki-client -vvf repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.mft File: FC2DAAA409BA60DE33EC91F3A861D1A00719D426.mft (raw, json) Hash identifier: cMt7JmmOAHL3HNc+yZlCKZ3+WcKe3N8WQtR5qhnvOP0= Subject key identifier: 92:86:F8:9F:33:4F:3C:8E:BE:04:B7:8A:1E:B3:14:01:90:B3:2E:E7 Authority key identifier: FC:2D:AA:A4:09:BA:60:DE:33:EC:91:F3:A8:61:D1:A0:07:19:D4:26 Certificate issuer: /CN=FC2DAAA409BA60DE33EC91F3A861D1A00719D426 Certificate serial: 3D0A658ED2D6F4BD887E7B47CB6FF73A4ED6FAAB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.mft Manifest number: 0137 Signing time: Mon 20 Apr 2026 10:00:59 +0000 Manifest this update: Mon 20 Apr 2026 09:55:59 +0000 Manifest next update: Thu 23 Apr 2026 10:24:59 +0000 Files and hashes: 1: FC2DAAA409BA60DE33EC91F3A861D1A00719D426.crl (hash: awRlPJVl+O+s6XcZfFsEv0Qv8ZqNrpvdjhghdmTjaxI=) 2: 3135372e36362e322e302f32332d3234203d3e20313532343430.roa (hash: zcAed+U0LIMKkO2m1wb6BGRlQ4YM9y2CMvt4q2VNLq8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.crl rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 10:24:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:0a:65:8e:d2:d6:f4:bd:88:7e:7b:47:cb:6f:f7:3a:4e:d6:fa:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC2DAAA409BA60DE33EC91F3A861D1A00719D426 Validity Not Before: Apr 20 09:55:59 2026 GMT Not After : Apr 23 10:24:59 2026 GMT Subject: CN=9286F89F334F3C8EBE04B78A1EB3140190B32EE7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ac:5d:93:0e:0b:2d:b8:46:95:49:76:fc:ba: f3:0c:98:4f:a2:45:f8:df:eb:4a:6f:50:30:83:d5: 00:ca:78:58:09:03:61:28:2a:eb:5c:c7:d3:b3:1f: 0d:01:06:2e:59:84:00:73:03:f6:6d:33:4d:12:e2: b3:dd:0e:3e:9e:ce:71:10:33:bc:c0:3c:07:90:0a: 94:7e:9a:8f:03:e4:31:9b:7d:d3:ea:33:78:c3:29: 63:c5:de:a3:b2:25:de:92:dd:f2:ff:d4:4f:57:3d: 05:c3:25:03:0c:2a:a1:6c:8f:b2:b4:1b:5f:34:f1: 23:b7:a6:ab:c8:92:43:05:bc:ad:78:54:47:7b:62: 10:02:89:d1:d8:e8:30:dd:1a:2f:b5:5a:25:eb:8b: bb:30:3c:7e:da:a2:7e:54:b9:59:30:e7:68:69:fd: 4a:a3:e6:be:f8:b6:68:d4:ca:a6:9a:a9:24:22:25: 47:9a:8b:80:56:c1:56:7d:a0:e7:ba:22:b4:48:79: 80:0a:d0:46:61:44:00:14:29:3b:78:8d:10:09:7e: a1:b2:fd:92:13:c9:42:53:63:15:1b:10:ff:71:d0: 96:44:b8:8d:31:f4:07:42:07:4e:0c:63:bb:7b:b5: 7b:48:70:3c:c5:80:87:f1:76:6c:10:e8:4b:f5:4e: ab:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:86:F8:9F:33:4F:3C:8E:BE:04:B7:8A:1E:B3:14:01:90:B3:2E:E7 X509v3 Authority Key Identifier: keyid:FC:2D:AA:A4:09:BA:60:DE:33:EC:91:F3:A8:61:D1:A0:07:19:D4:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:c3:48:d7:04:45:ac:bb:d4:2a:d2:38:45:b4:86:87:81:ce: 4b:2f:79:e3:94:dd:63:95:2c:f8:98:df:73:15:f0:85:4c:a1: 22:b2:22:f0:16:59:c1:7d:9d:a3:ae:4f:d7:b5:81:6e:2f:f8: 81:72:b2:8a:2f:cd:38:38:90:4a:95:b6:15:f7:83:bd:4f:04: 11:3c:2b:80:10:2d:29:dc:1d:b1:9a:75:55:d4:f0:d6:68:7c: b7:2f:b5:01:69:42:c3:25:0d:d5:5d:95:81:7a:f5:83:e5:1b: ba:e4:04:9f:45:fa:ec:b0:4e:85:4d:8e:88:53:70:e0:7f:8a: d9:2a:f1:7e:3a:06:e5:3e:8a:6f:d9:c0:08:9c:ac:60:61:7f: 0b:1e:95:ff:9c:ba:90:b6:60:5b:fb:93:5d:7a:86:ea:f0:07: f8:8a:27:05:81:3e:e4:d7:2e:10:dd:78:13:55:ec:92:35:0d: d5:39:38:bb:e4:21:14:e5:34:c8:1c:3d:4d:25:0a:ff:6f:06: 3b:6c:eb:8b:36:40:ec:0d:5c:b2:74:43:41:e5:3b:c2:c4:ea: 04:89:67:6e:31:e2:00:86:c9:84:64:dc:0b:3e:25:2c:87:44: a8:82:17:6b:a4:34:47:fb:1d:b7:85:84:b0:c6:a7:72:80:70: a1:4f:d3:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPQpljtLW9L2IfntHy2/3Ok7W+qswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkMyREFBQTQwOUJBNjBERTMzRUM5MUYzQTg2MUQxQTAw NzE5RDQyNjAeFw0yNjA0MjAwOTU1NTlaFw0yNjA0MjMxMDI0NTlaMDMxMTAvBgNV BAMTKDkyODZGODlGMzM0RjNDOEVCRTA0Qjc4QTFFQjMxNDAxOTBCMzJFRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLrF2TDgstuEaVSXb8uvMMmE+i Rfjf60pvUDCD1QDKeFgJA2EoKutcx9OzHw0BBi5ZhABzA/ZtM00S4rPdDj6eznEQ M7zAPAeQCpR+mo8D5DGbfdPqM3jDKWPF3qOyJd6S3fL/1E9XPQXDJQMMKqFsj7K0 G1808SO3pqvIkkMFvK14VEd7YhACidHY6DDdGi+1WiXri7swPH7aon5UuVkw52hp /Uqj5r74tmjUyqaaqSQiJUeai4BWwVZ9oOe6IrRIeYAK0EZhRAAUKTt4jRAJfqGy /ZITyUJTYxUbEP9x0JZEuI0x9AdCB04MY7t7tXtIcDzFgIfxdmwQ6Ev1TqvXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkob4nzNPPI6+BLeKHrMUAZCzLucwHwYDVR0j BBgwFoAU/C2qpAm6YN4z7JHzqGHRoAcZ1CYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZmI4MDhlYi1jOThlLTQwMzYtYmU5YS0xOTNiYmNjNjQ4OTIvMC9GQzJEQUFBNDA5 QkE2MERFMzNFQzkxRjNBODYxRDFBMDA3MTlENDI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkMyREFBQTQwOUJBNjBERTMzRUM5MUYzQTg2MUQxQTAwNzE5 RDQyNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWZiODA4ZWItYzk4ZS00MDM2LWJl OWEtMTkzYmJjYzY0ODkyLzAvRkMyREFBQTQwOUJBNjBERTMzRUM5MUYzQTg2MUQx QTAwNzE5RDQyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFnDSNcERay71CrSOEW0hoeBzksveeOU3WOV LPiY33MV8IVMoSKyIvAWWcF9naOuT9e1gW4v+IFysoovzTg4kEqVthX3g71PBBE8 K4AQLSncHbGadVXU8NZofLcvtQFpQsMlDdVdlYF69YPlG7rkBJ9F+uywToVNjohT cOB/itkq8X46BuU+im/ZwAicrGBhfwself+cupC2YFv7k116hurwB/iKJwWBPuTX LhDdeBNV7JI1DdU5OLvkIRTlNMgcPU0lCv9vBjts64s2QOwNXLJ0Q0HlO8LE6gSJ Z24x4gCGyYRk3As+JSyHRKiCF2ukNEf7HbeFhLDGp3KAcKFP0yo= -----END CERTIFICATE-----Generated at Wed Apr 22 04:52:14 2026 by rpki-client