$ rpki-client -vvf repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.mft File: FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.mft (raw, json) Hash identifier: XeIFdibsg2mFF0slQSnx8DPdFIPkVh6CiahAwHVvYDc= Subject key identifier: C4:B7:F5:09:E0:68:E9:C3:2B:3F:6F:E7:7F:2A:0B:F6:9C:C5:71:C2 Authority key identifier: FB:D3:B2:8C:90:75:52:9D:EE:81:51:C4:E4:4B:0C:BC:13:FF:DA:91 Certificate issuer: /CN=FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91 Certificate serial: 1507BF4523F2BA724AA13551EA297BED04DFFF9F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.cer Subject info access: rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.mft Manifest number: 0561 Signing time: Tue 24 Mar 2026 22:31:27 +0000 Manifest this update: Tue 24 Mar 2026 22:26:27 +0000 Manifest next update: Sat 28 Mar 2026 08:17:27 +0000 Files and hashes: 1: 3130332e3139382e3132302e302f32332d3234203d3e203436303535.roa (hash: Rkqt5EaL5SlKX5GmTTNQMVHFRYt3xFbyKGI2eZYOOAk=) 2: 3130332e3139382e3132322e302f32332d3234203d3e203436303535.roa (hash: LRTGK+GW9A0RpTs3Gv4UsfHpkx7owdE7KVjUD93I+Vo=) 3: 3230322e35322e34382e302f32332d3234203d3e203436303535.roa (hash: cBKI91E82619dGXlbZQsR3kG8PLRa84sQYxG51fCSE0=) 4: FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.crl (hash: hH734osNVkYfTt4uDHBkVMIDpfV8z8awnMh0I8TCqpg=) 5: 323430333a313838303a3a2f33322d3332203d3e203436303535.roa (hash: 5E43YVmj6Z7OGECRV0xvOsTql9Kqf+2yG0vKEkPwlDE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.crl rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 08:17:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:07:bf:45:23:f2:ba:72:4a:a1:35:51:ea:29:7b:ed:04:df:ff:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91 Validity Not Before: Mar 24 22:26:27 2026 GMT Not After : Mar 28 08:17:27 2026 GMT Subject: CN=C4B7F509E068E9C32B3F6FE77F2A0BF69CC571C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8a:71:8e:68:25:20:04:8f:43:91:66:91:36: 58:44:ae:b6:22:0e:6d:42:ae:62:b6:2d:13:b3:1b: b5:95:f5:7a:0c:ad:95:7a:ec:6e:fa:a3:c0:ea:c4: d7:48:e5:39:fa:7a:15:61:8b:1a:f8:68:cc:0d:e6: c3:a5:04:cf:60:13:31:96:4e:48:3e:e3:be:2c:55: 7d:12:1a:86:94:3b:28:14:98:ad:f5:da:0c:c3:1f: b9:df:93:3d:cd:6a:18:8a:1c:25:63:f4:f8:bf:fa: 12:b4:31:7d:00:b7:30:93:78:9f:f3:c1:e9:3b:26: c4:a7:27:af:fc:e2:b3:0b:07:77:13:e4:91:9d:92: 2e:3d:1f:62:d7:25:f3:9c:20:df:3f:d0:b3:ba:0d: 09:c8:9f:33:37:e9:8b:19:fb:7c:86:3e:93:1f:7f: 53:71:0c:9a:ad:38:79:a2:3f:e2:f3:1f:af:0e:5f: 8d:28:a0:99:1e:90:f3:49:05:a0:f2:ab:97:dc:c9: 97:e4:33:f2:da:6a:6f:43:ce:44:4b:4b:84:c6:b6: 51:1b:35:19:64:9e:e8:9b:9f:27:83:92:12:97:15: a8:aa:30:9a:c9:78:f4:cd:92:51:63:05:d5:ea:e7: 69:cf:e7:78:be:45:0e:5e:c0:4e:bc:27:1a:26:9e: 63:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:B7:F5:09:E0:68:E9:C3:2B:3F:6F:E7:7F:2A:0B:F6:9C:C5:71:C2 X509v3 Authority Key Identifier: keyid:FB:D3:B2:8C:90:75:52:9D:EE:81:51:C4:E4:4B:0C:BC:13:FF:DA:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:3c:5f:0e:3e:73:08:05:bc:13:2a:c8:4e:d0:d9:24:49:d3: a4:93:aa:7f:bc:4b:a3:87:93:7a:cd:08:74:6c:65:49:0c:b8: b7:aa:3f:d8:a4:59:82:de:e8:9c:6f:7a:9f:f4:f8:42:53:e8: b5:24:37:34:9e:10:8b:e5:1c:8c:bd:ce:5d:90:4a:81:b0:dc: 8e:41:66:58:d4:c6:f8:97:b2:ab:ab:78:3b:07:75:7e:87:67: 07:fe:e3:b4:85:aa:9f:b7:e0:4e:49:a2:ed:e0:e5:7d:96:98: 5f:2d:cb:4a:72:09:1e:af:2c:a5:e8:4c:6a:17:1a:92:7e:64: cd:c8:e0:b0:e0:2f:00:47:7c:da:b1:bc:3f:fa:b1:32:2e:d1: be:b6:66:6b:bd:66:2b:e4:23:ff:fd:dc:87:e8:7b:5a:aa:4c: 8c:e3:35:f5:88:64:61:03:a7:fd:30:fc:8a:b7:9c:cc:89:a7: 15:9c:5e:c8:af:5a:d1:d3:12:73:a7:40:28:f8:2d:f8:9b:bc: f8:0b:07:8a:14:cc:b0:9a:c0:a5:d8:df:96:c4:02:e3:d5:e3: 4c:2c:65:35:21:4d:4f:fc:cd:f6:c1:3b:e0:19:d1:30:b7:f2: ff:f7:44:3c:67:b7:59:26:24:84:47:53:d8:b7:49:2b:8d:85: 6f:8f:7a:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFQe/RSPyunJKoTVR6il77QTf/58wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkJEM0IyOEM5MDc1NTI5REVFODE1MUM0RTQ0QjBDQkMx M0ZGREE5MTAeFw0yNjAzMjQyMjI2MjdaFw0yNjAzMjgwODE3MjdaMDMxMTAvBgNV BAMTKEM0QjdGNTA5RTA2OEU5QzMyQjNGNkZFNzdGMkEwQkY2OUNDNTcxQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyinGOaCUgBI9DkWaRNlhErrYi Dm1CrmK2LROzG7WV9XoMrZV67G76o8DqxNdI5Tn6ehVhixr4aMwN5sOlBM9gEzGW Tkg+474sVX0SGoaUOygUmK312gzDH7nfkz3NahiKHCVj9Pi/+hK0MX0AtzCTeJ/z wek7JsSnJ6/84rMLB3cT5JGdki49H2LXJfOcIN8/0LO6DQnInzM36YsZ+3yGPpMf f1NxDJqtOHmiP+LzH68OX40ooJkekPNJBaDyq5fcyZfkM/Laam9DzkRLS4TGtlEb NRlknuibnyeDkhKXFaiqMJrJePTNklFjBdXq52nP53i+RQ5ewE68JxomnmOrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxLf1CeBo6cMrP2/nfyoL9pzFccIwHwYDVR0j BBgwFoAU+9OyjJB1Up3ugVHE5EsMvBP/2pEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ODM5NzdmNC04YzJkLTRlYjEtYjRjZC0zNWI0OTIxNmUwNzMvMC9GQkQzQjI4Qzkw NzU1MjlERUU4MTUxQzRFNDRCMENCQzEzRkZEQTkxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkJEM0IyOEM5MDc1NTI5REVFODE1MUM0RTQ0QjBDQkMxM0ZG REE5MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDgzOTc3ZjQtOGMyZC00ZWIxLWI0 Y2QtMzViNDkyMTZlMDczLzAvRkJEM0IyOEM5MDc1NTI5REVFODE1MUM0RTQ0QjBD QkMxM0ZGREE5MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH08Xw4+cwgFvBMqyE7Q2SRJ06STqn+8S6OH k3rNCHRsZUkMuLeqP9ikWYLe6Jxvep/0+EJT6LUkNzSeEIvlHIy9zl2QSoGw3I5B ZljUxviXsqureDsHdX6HZwf+47SFqp+34E5Jou3g5X2WmF8ty0pyCR6vLKXoTGoX GpJ+ZM3I4LDgLwBHfNqxvD/6sTIu0b62Zmu9ZivkI//93Ifoe1qqTIzjNfWIZGED p/0w/Iq3nMyJpxWcXsivWtHTEnOnQCj4LfibvPgLB4oUzLCawKXY35bEAuPV40ws ZTUhTU/8zfbBO+AZ0TC38v/3RDxnt1kmJIRHU9i3SSuNhW+Peo4= -----END CERTIFICATE-----Generated at Thu Mar 26 13:55:28 2026 by rpki-client