$ rpki-client -vvf repo-rpki.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.mft File: FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.mft (raw, json) Hash identifier: gafvUIqAPiF1h6KZ9o20oP9y+NngVwN8UOJEJU5OLr0= Subject key identifier: 30:4A:5A:5F:D3:CD:47:D5:84:D0:49:DF:97:7E:8E:EC:D8:C3:5B:27 Authority key identifier: FD:18:E3:EC:B5:F2:28:5C:07:51:C4:8E:AF:23:EF:21:0B:A8:FD:CC Certificate issuer: /CN=FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC Certificate serial: 6B37C3F3BD98FCF23BFD6FE2303B4FF399BD0764 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.mft Manifest number: 0155 Signing time: Mon 20 Apr 2026 22:01:27 +0000 Manifest this update: Mon 20 Apr 2026 21:56:27 +0000 Manifest next update: Fri 24 Apr 2026 00:17:27 +0000 Files and hashes: 1: 3135372e32302e39352e302f32342d3234203d3e20313431363032.roa (hash: 88y84elDiek3O/IhTaNMS2vLlPQVqlAnqgDoLBdJafc=) 2: FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.crl (hash: znjCaRT690//Jxe6kpUgDOvJVTvQksyPLZxutf3t+4g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.crl rsync://repo-rpki.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 00:17:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:37:c3:f3:bd:98:fc:f2:3b:fd:6f:e2:30:3b:4f:f3:99:bd:07:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC Validity Not Before: Apr 20 21:56:27 2026 GMT Not After : Apr 24 00:17:27 2026 GMT Subject: CN=304A5A5FD3CD47D584D049DF977E8EECD8C35B27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:54:8d:a9:49:4c:19:be:cd:b9:37:14:66:38: f0:77:ce:20:6a:da:e6:a5:8c:98:40:50:db:87:87: e1:0d:98:57:95:bf:16:9b:47:ac:7d:ce:9f:22:a7: a6:fd:5d:34:15:d5:0c:b6:a7:09:1f:9c:74:d9:7f: 5e:f6:89:f4:5d:79:00:90:a7:64:03:7b:62:3b:4f: d6:00:18:5b:b3:c9:83:78:c9:11:8e:64:1b:d6:ca: 9e:45:bc:eb:f7:35:76:42:1c:fb:eb:33:fc:6d:9a: 32:8d:3f:a0:36:5b:1e:71:75:58:bc:44:10:e4:c8: c8:a7:96:19:35:48:e8:3d:e2:96:ad:70:35:51:14: 92:8f:0a:0f:55:1e:b0:31:fd:5a:04:0c:5b:16:42: 70:c4:78:cf:b4:c0:e1:e4:49:6f:a2:98:95:b0:7a: b3:23:7b:5e:35:8c:52:5f:ce:8a:56:15:c0:34:f1: e3:f4:e1:ba:46:4a:37:75:83:cc:f9:18:a9:27:39: 52:8f:08:86:91:b2:57:03:d0:f9:33:59:12:57:a4: 10:9f:28:ad:7a:3d:57:57:2c:fb:9c:ef:c3:01:a4: c2:41:ae:15:f1:aa:1b:d1:f7:61:c5:81:c7:db:99: 3d:0c:be:0e:30:3c:c3:1a:a5:ad:24:9e:af:1b:82: 04:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:4A:5A:5F:D3:CD:47:D5:84:D0:49:DF:97:7E:8E:EC:D8:C3:5B:27 X509v3 Authority Key Identifier: keyid:FD:18:E3:EC:B5:F2:28:5C:07:51:C4:8E:AF:23:EF:21:0B:A8:FD:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:d5:b5:a9:a9:ae:62:15:bf:00:cf:d5:b2:0f:90:a6:ef:1e: a0:1e:2a:e1:94:56:6f:6d:f7:58:00:70:ab:21:90:20:f9:32: 3d:72:bf:38:78:7a:d5:0d:d0:cb:42:6d:59:7c:ee:d2:1c:65: 78:eb:aa:9f:c1:51:cc:f5:8a:61:61:b4:1c:42:2c:8d:ac:b2: e9:a8:cd:30:ff:37:b8:3f:ac:a5:5b:95:14:6f:3d:3f:d8:f3: 80:0b:54:13:b8:15:87:ae:f6:fe:b3:b1:60:f0:e5:aa:75:d7: 01:8b:a4:15:8d:58:4e:e4:9c:c0:ff:e2:7a:d7:38:f3:eb:b6: 33:0a:fb:0e:23:f4:02:a1:22:82:80:d7:ec:4d:8e:a2:60:e8: 02:81:34:89:59:0a:2a:02:38:1f:c6:95:26:2b:13:1b:64:2d: 99:42:52:13:c4:46:69:8e:dc:a8:67:e2:e8:e0:30:8c:3d:91: 53:94:5c:4c:74:74:5e:8d:54:af:f8:4b:93:30:aa:fa:ef:6d: 71:b4:ef:7e:53:e1:4a:96:3a:7f:a2:7c:0a:f4:cd:ad:f2:2d: a6:86:84:c3:92:5d:30:6c:e6:a3:96:15:11:59:60:1b:d9:cf: 9d:00:13:a5:94:3e:d6:9e:a0:a7:6b:3c:f5:45:f5:af:91:d8: 95:9f:0e:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUazfD872Y/PI7/W/iMDtP85m9B2QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkQxOEUzRUNCNUYyMjg1QzA3NTFDNDhFQUYyM0VGMjEw QkE4RkRDQzAeFw0yNjA0MjAyMTU2MjdaFw0yNjA0MjQwMDE3MjdaMDMxMTAvBgNV BAMTKDMwNEE1QTVGRDNDRDQ3RDU4NEQwNDlERjk3N0U4RUVDRDhDMzVCMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzVI2pSUwZvs25NxRmOPB3ziBq 2ualjJhAUNuHh+ENmFeVvxabR6x9zp8ip6b9XTQV1Qy2pwkfnHTZf172ifRdeQCQ p2QDe2I7T9YAGFuzyYN4yRGOZBvWyp5FvOv3NXZCHPvrM/xtmjKNP6A2Wx5xdVi8 RBDkyMinlhk1SOg94patcDVRFJKPCg9VHrAx/VoEDFsWQnDEeM+0wOHkSW+imJWw erMje141jFJfzopWFcA08eP04bpGSjd1g8z5GKknOVKPCIaRslcD0PkzWRJXpBCf KK16PVdXLPuc78MBpMJBrhXxqhvR92HFgcfbmT0Mvg4wPMMapa0knq8bggTNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMEpaX9PNR9WE0Enfl36O7NjDWycwHwYDVR0j BBgwFoAU/Rjj7LXyKFwHUcSOryPvIQuo/cwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YWUxM2JhYy05MWMxLTQ2M2ItODMzMy02NGVlYzZkMjc5N2UvMC9GRDE4RTNFQ0I1 RjIyODVDMDc1MUM0OEVBRjIzRUYyMTBCQThGRENDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkQxOEUzRUNCNUYyMjg1QzA3NTFDNDhFQUYyM0VGMjEwQkE4 RkRDQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGFlMTNiYWMtOTFjMS00NjNiLTgz MzMtNjRlZWM2ZDI3OTdlLzAvRkQxOEUzRUNCNUYyMjg1QzA3NTFDNDhFQUYyM0VG MjEwQkE4RkRDQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGLVtamprmIVvwDP1bIPkKbvHqAeKuGUVm9t 91gAcKshkCD5Mj1yvzh4etUN0MtCbVl87tIcZXjrqp/BUcz1imFhtBxCLI2ssumo zTD/N7g/rKVblRRvPT/Y84ALVBO4FYeu9v6zsWDw5ap11wGLpBWNWE7knMD/4nrX OPPrtjMK+w4j9AKhIoKA1+xNjqJg6AKBNIlZCioCOB/GlSYrExtkLZlCUhPERmmO 3Khn4ujgMIw9kVOUXEx0dF6NVK/4S5MwqvrvbXG0735T4UqWOn+ifAr0za3yLaaG hMOSXTBs5qOWFRFZYBvZz50AE6WUPtaeoKdrPPVF9a+R2JWfDg0= -----END CERTIFICATE-----Generated at Wed Apr 22 04:52:16 2026 by rpki-client