$ rpki-client -vvf repo-rpki.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.mft File: FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.mft (raw, json) Hash identifier: j7QyA4oOoLmRfYGIiwK5wq9nv+rzB5jAGdJW2eUBlvY= Subject key identifier: DD:3E:E6:8E:EE:39:66:0B:40:6E:45:D4:57:EA:7C:41:AA:02:1F:E4 Authority key identifier: FA:BD:B6:E4:44:51:B7:F0:37:8A:E9:2C:27:50:EB:FE:5A:3C:FA:38 Certificate issuer: /CN=FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38 Certificate serial: 4C0D9262D7E74F6D6D0E36268E7C57C9643F49D7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.mft Manifest number: 0544 Signing time: Tue 24 Mar 2026 02:41:55 +0000 Manifest this update: Tue 24 Mar 2026 02:36:55 +0000 Manifest next update: Fri 27 Mar 2026 11:33:55 +0000 Files and hashes: 1: 3130332e3135372e3131362e302f32332d3234203d3e20313337333331.roa (hash: gepyqAbuiPaUA1F4qNan63WSMqffSkJDQ7owW86Bv/s=) 2: 323430363a613063303a3a2f33322d3332203d3e20313337333331.roa (hash: tFWtX8RfN2Vy0+tsRYH9QMC9vNTQT9OCKTZt0DbC3q4=) 3: FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.crl (hash: i5Y3EYzCY6njQ1kpYqBE6I4xIlyWa4Iu07ZS21iPQ8U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.crl rsync://repo-rpki.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 11:33:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:0d:92:62:d7:e7:4f:6d:6d:0e:36:26:8e:7c:57:c9:64:3f:49:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38 Validity Not Before: Mar 24 02:36:55 2026 GMT Not After : Mar 27 11:33:55 2026 GMT Subject: CN=DD3EE68EEE39660B406E45D457EA7C41AA021FE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:92:68:e7:23:a5:56:3b:7a:e0:06:c5:a4:a5: 31:a9:2a:5e:04:08:7d:d5:31:97:b7:df:78:be:fa: 1f:0b:cb:a9:72:45:f8:7f:3f:df:50:30:83:14:bc: c0:ae:9e:54:a2:bd:db:50:46:f5:f9:88:7f:c5:e0: cf:57:52:ef:06:a3:75:62:52:70:21:8a:9a:79:43: 1f:59:c8:6d:e3:41:58:ee:a4:1d:71:ef:f7:8d:4d: 51:04:aa:05:dc:39:44:71:55:10:d9:01:56:b2:20: 17:e9:55:61:bc:fb:be:0a:1b:62:de:1f:e7:3e:13: fa:c0:40:8f:f7:09:e8:5f:c3:86:55:5e:4c:42:56: a4:25:7f:b6:55:48:63:73:fb:de:78:27:33:6a:92: 4a:d5:74:67:e5:4d:f4:48:7c:98:86:27:31:95:dd: ca:d9:da:32:48:87:9a:d6:3f:63:c9:e4:f3:b7:d7: e1:42:4f:e8:42:3e:8d:b5:84:1b:e3:ce:4b:15:88: c6:e0:1a:c5:1e:07:0a:97:be:27:0e:c1:a8:97:a0: df:26:f2:b1:67:f4:ed:d5:28:bc:34:5e:72:ad:44: f7:31:7d:39:e8:bb:b8:ad:5d:d0:0f:08:b6:e7:07: 7a:29:bf:50:20:d8:36:51:45:c9:b6:7f:f5:47:5c: 8d:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:3E:E6:8E:EE:39:66:0B:40:6E:45:D4:57:EA:7C:41:AA:02:1F:E4 X509v3 Authority Key Identifier: keyid:FA:BD:B6:E4:44:51:B7:F0:37:8A:E9:2C:27:50:EB:FE:5A:3C:FA:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d5:1a:d1:3a:b6:f6:2d:23:93:45:41:49:00:ef:cf:e7:4b:5f: b7:c1:9d:4b:72:d4:09:7e:25:2c:86:be:71:33:8f:ba:e0:cb: 0e:7e:f5:96:9e:1a:cc:e6:8d:37:f0:3f:be:a8:df:2f:b7:52: 0b:84:28:04:94:94:27:4b:a0:5a:64:a4:8b:56:38:48:6f:a0: 2a:70:ae:00:ec:94:c4:a2:af:e8:ef:de:66:16:36:7c:14:ee: ab:61:d7:b9:07:e3:74:11:2d:bc:b8:50:7e:e7:ec:bd:15:25: 34:27:4b:6a:ab:4d:31:bb:02:60:0d:dc:e1:cc:b8:40:b7:67: 17:60:0a:a1:1b:cf:e8:43:80:c0:c3:66:bf:e3:16:31:14:76: e4:34:44:41:a0:50:9e:32:ea:1b:a8:bd:9e:45:8d:0b:6e:6e: d6:62:4d:7a:aa:1a:9a:77:e7:89:46:19:97:bc:d0:d8:6f:f3: 59:b3:23:c0:d4:14:e4:3c:2a:ee:98:39:b5:b2:8d:95:2d:18: 43:0b:92:a6:d1:62:e4:70:9c:e4:f6:a1:5d:a5:d8:e9:b0:f2: 6a:27:32:0e:31:13:44:b0:c8:8b:06:5f:73:37:b7:d4:81:5a: bd:cd:6d:26:e0:58:00:52:e0:43:34:9f:c8:95:46:df:84:d8: 9a:17:c2:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTA2SYtfnT21tDjYmjnxXyWQ/SdcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkFCREI2RTQ0NDUxQjdGMDM3OEFFOTJDMjc1MEVCRkU1 QTNDRkEzODAeFw0yNjAzMjQwMjM2NTVaFw0yNjAzMjcxMTMzNTVaMDMxMTAvBgNV BAMTKEREM0VFNjhFRUUzOTY2MEI0MDZFNDVENDU3RUE3QzQxQUEwMjFGRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCakmjnI6VWO3rgBsWkpTGpKl4E CH3VMZe333i++h8Ly6lyRfh/P99QMIMUvMCunlSivdtQRvX5iH/F4M9XUu8Go3Vi UnAhipp5Qx9ZyG3jQVjupB1x7/eNTVEEqgXcOURxVRDZAVayIBfpVWG8+74KG2Le H+c+E/rAQI/3Cehfw4ZVXkxCVqQlf7ZVSGNz+954JzNqkkrVdGflTfRIfJiGJzGV 3crZ2jJIh5rWP2PJ5PO31+FCT+hCPo21hBvjzksViMbgGsUeBwqXvicOwaiXoN8m 8rFn9O3VKLw0XnKtRPcxfTnou7itXdAPCLbnB3opv1Ag2DZRRcm2f/VHXI0FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3T7mju45ZgtAbkXUV+p8QaoCH+QwHwYDVR0j BBgwFoAU+r225ERRt/A3iuksJ1Dr/lo8+jgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZDA3ZTNkOC05YmZjLTQ0ODMtYTJkZC1hZmE0NTkzODExZTUvMC9GQUJEQjZFNDQ0 NTFCN0YwMzc4QUU5MkMyNzUwRUJGRTVBM0NGQTM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkFCREI2RTQ0NDUxQjdGMDM3OEFFOTJDMjc1MEVCRkU1QTND RkEzOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWQwN2UzZDgtOWJmYy00NDgzLWEy ZGQtYWZhNDU5MzgxMWU1LzAvRkFCREI2RTQ0NDUxQjdGMDM3OEFFOTJDMjc1MEVC RkU1QTNDRkEzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANUa0Tq29i0jk0VBSQDvz+dLX7fBnUty1Al+ JSyGvnEzj7rgyw5+9ZaeGszmjTfwP76o3y+3UguEKASUlCdLoFpkpItWOEhvoCpw rgDslMSir+jv3mYWNnwU7qth17kH43QRLby4UH7n7L0VJTQnS2qrTTG7AmAN3OHM uEC3ZxdgCqEbz+hDgMDDZr/jFjEUduQ0REGgUJ4y6huovZ5FjQtubtZiTXqqGpp3 54lGGZe80Nhv81mzI8DUFOQ8Ku6YObWyjZUtGEMLkqbRYuRwnOT2oV2l2Omw8mon Mg4xE0SwyIsGX3M3t9SBWr3NbSbgWABS4EM0n8iVRt+E2JoXwos= -----END CERTIFICATE-----Generated at Thu Mar 26 11:58:01 2026 by rpki-client