$ rpki-client -vvf repo-rpki.idnic.net/repo/47ad0a3a-26b8-449a-88ec-bf0398ea53a6/0/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.mft File: FBC39A6E177F8DD7BA5E257D4489C57574C07E81.mft (raw, json) Hash identifier: ud7qrZl9qggCi6sEP3ZK4Dz3sd3bOW95u2c+87uGAo4= Subject key identifier: 2E:35:2C:86:0D:51:A0:B8:07:D8:B0:8C:3E:4C:B7:B4:0F:DD:BE:EF Authority key identifier: FB:C3:9A:6E:17:7F:8D:D7:BA:5E:25:7D:44:89:C5:75:74:C0:7E:81 Certificate issuer: /CN=FBC39A6E177F8DD7BA5E257D4489C57574C07E81 Certificate serial: 0B3C8EAF1A69081506670244B33C52F1FEF4AB69 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.cer Subject info access: rsync://repo-rpki.idnic.net/repo/47ad0a3a-26b8-449a-88ec-bf0398ea53a6/0/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.mft Manifest number: 0100 Signing time: Thu 26 Mar 2026 07:21:59 +0000 Manifest this update: Thu 26 Mar 2026 07:16:59 +0000 Manifest next update: Sun 29 Mar 2026 15:32:59 +0000 Files and hashes: 1: 3136302e32352e3235302e302f32342d3234203d3e20313533303938.roa (hash: MrtKeNjFNhl14mhfxKI/GhEb/0ohG0B8bmQ7SLXWttE=) 2: FBC39A6E177F8DD7BA5E257D4489C57574C07E81.crl (hash: UwQc+YPglmkHYPaTYcwubsvkcr00ZTiSldSWjaZ+etQ=) 3: 3136302e32352e3235312e302f32342d3234203d3e20313533303938.roa (hash: +X50gpeSdWT/Y5d22C2/uBOgo8Xzo2+UIRSSAuVLkyI=) 4: 3136302e32352e3235302e302f32332d3233203d3e20313533303938.roa (hash: eL66HCHXLPzvvpIp6yZbwohxEw2vNNGKLUjoRHRX4l0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/47ad0a3a-26b8-449a-88ec-bf0398ea53a6/0/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.crl rsync://repo-rpki.idnic.net/repo/47ad0a3a-26b8-449a-88ec-bf0398ea53a6/0/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 14:23:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:3c:8e:af:1a:69:08:15:06:67:02:44:b3:3c:52:f1:fe:f4:ab:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FBC39A6E177F8DD7BA5E257D4489C57574C07E81 Validity Not Before: Mar 26 07:16:59 2026 GMT Not After : Mar 29 15:32:59 2026 GMT Subject: CN=2E352C860D51A0B807D8B08C3E4CB7B40FDDBEEF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:d9:ac:13:d4:d8:51:11:ef:c6:57:b9:7b:28: 4a:36:97:ab:9e:a0:1e:6a:7b:47:53:df:9f:7b:b4: 0e:2e:62:72:19:f5:7a:37:82:d2:a0:a3:e3:9f:79: 74:c7:ce:02:5c:95:b8:60:be:8c:35:51:e9:e2:05: 62:8a:54:a9:bb:c0:98:3d:5c:e9:7c:d5:7c:2b:db: 0e:e6:09:77:db:4f:c0:1d:7e:10:a9:2e:38:94:f5: 20:50:af:26:e5:6d:1e:2d:be:cd:37:17:cc:f2:ac: bd:3d:25:a1:1a:c6:65:b1:d7:f3:37:2e:f3:11:c2: 8e:b8:2e:1f:b6:ef:93:fb:9d:35:32:e1:44:ea:9a: cd:80:98:b9:c7:6a:b5:6f:b4:d1:51:2f:9a:c4:26: 96:5a:e7:d1:23:11:17:14:97:94:98:db:d7:0d:87: 36:a3:ee:77:3e:88:35:f7:0f:73:3e:1b:6d:ad:f7: 30:e5:e5:84:da:ee:91:ec:b3:5c:85:e5:a4:ef:fa: 07:68:10:49:87:e1:05:37:9c:ab:95:eb:ed:72:61: c2:d6:66:51:8f:b1:58:00:ea:ae:5e:68:3f:59:25: a4:93:22:05:3e:a8:3b:10:88:3b:5b:a3:0f:d2:30: 2f:cc:42:97:21:69:de:21:78:33:3d:da:73:1c:e5: 28:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:35:2C:86:0D:51:A0:B8:07:D8:B0:8C:3E:4C:B7:B4:0F:DD:BE:EF X509v3 Authority Key Identifier: keyid:FB:C3:9A:6E:17:7F:8D:D7:BA:5E:25:7D:44:89:C5:75:74:C0:7E:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/47ad0a3a-26b8-449a-88ec-bf0398ea53a6/0/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/47ad0a3a-26b8-449a-88ec-bf0398ea53a6/0/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:96:b0:8f:48:a2:f4:ee:3e:4b:ce:45:a5:46:85:f0:a6:39: c6:f7:e2:4e:37:81:f9:f2:96:a7:88:37:b7:3f:12:d4:7d:9b: ef:69:b2:bf:10:78:f2:ce:c1:f9:ab:a4:6d:e0:11:80:ab:bb: 54:37:a0:0c:ca:93:02:d1:ab:d4:be:5b:d0:9c:bf:bc:4b:2e: 29:58:e5:9b:26:fc:67:a5:f0:90:3b:50:12:84:12:0c:99:67: 6c:0a:f2:5d:16:3f:0f:55:95:6a:94:5c:6a:dd:0e:93:4d:c3: 29:ce:0a:36:a7:bf:e9:b7:32:62:5b:97:6b:a9:ca:91:96:5c: 5b:4b:51:ef:4e:92:ab:b2:56:a7:72:be:45:9a:9e:4a:d9:e4: b8:d5:7c:11:1d:09:8f:7f:c7:89:42:80:92:b1:ed:f8:11:ce: f4:2a:d4:53:7c:ec:ea:0b:ee:ba:83:9b:38:86:6c:e3:89:39: 33:90:8a:89:ca:0f:54:00:85:5c:9d:23:ba:68:97:85:a2:ac: 8e:78:44:4f:f8:41:56:f4:5b:01:de:ce:04:09:90:6c:55:3f: 6d:56:04:e6:6c:a8:f9:7b:a5:ec:4e:52:10:9c:b5:5c:2c:b6: ab:ff:ff:2b:0f:0f:34:ab:ef:1a:83:1c:1d:61:57:e4:d7:2d: 55:df:e8:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCzyOrxppCBUGZwJEszxS8f70q2kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkJDMzlBNkUxNzdGOEREN0JBNUUyNTdENDQ4OUM1NzU3 NEMwN0U4MTAeFw0yNjAzMjYwNzE2NTlaFw0yNjAzMjkxNTMyNTlaMDMxMTAvBgNV BAMTKDJFMzUyQzg2MEQ1MUEwQjgwN0Q4QjA4QzNFNENCN0I0MEZEREJFRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDz2awT1NhREe/GV7l7KEo2l6ue oB5qe0dT3597tA4uYnIZ9Xo3gtKgo+OfeXTHzgJclbhgvow1UeniBWKKVKm7wJg9 XOl81Xwr2w7mCXfbT8AdfhCpLjiU9SBQryblbR4tvs03F8zyrL09JaEaxmWx1/M3 LvMRwo64Lh+275P7nTUy4UTqms2AmLnHarVvtNFRL5rEJpZa59EjERcUl5SY29cN hzaj7nc+iDX3D3M+G22t9zDl5YTa7pHss1yF5aTv+gdoEEmH4QU3nKuV6+1yYcLW ZlGPsVgA6q5eaD9ZJaSTIgU+qDsQiDtbow/SMC/MQpchad4heDM92nMc5SilAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULjUshg1RoLgH2LCMPky3tA/dvu8wHwYDVR0j BBgwFoAU+8Oabhd/jde6XiV9RInFdXTAfoEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 N2FkMGEzYS0yNmI4LTQ0OWEtODhlYy1iZjAzOThlYTUzYTYvMC9GQkMzOUE2RTE3 N0Y4REQ3QkE1RTI1N0Q0NDg5QzU3NTc0QzA3RTgxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkJDMzlBNkUxNzdGOEREN0JBNUUyNTdENDQ4OUM1NzU3NEMw N0U4MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDdhZDBhM2EtMjZiOC00NDlhLTg4 ZWMtYmYwMzk4ZWE1M2E2LzAvRkJDMzlBNkUxNzdGOEREN0JBNUUyNTdENDQ4OUM1 NzU3NEMwN0U4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALKWsI9IovTuPkvORaVGhfCmOcb34k43gfny lqeIN7c/EtR9m+9psr8QePLOwfmrpG3gEYCru1Q3oAzKkwLRq9S+W9Ccv7xLLilY 5Zsm/Gel8JA7UBKEEgyZZ2wK8l0WPw9VlWqUXGrdDpNNwynOCjanv+m3MmJbl2up ypGWXFtLUe9OkquyVqdyvkWankrZ5LjVfBEdCY9/x4lCgJKx7fgRzvQq1FN87OoL 7rqDmziGbOOJOTOQionKD1QAhVydI7pol4WirI54RE/4QVb0WwHezgQJkGxVP21W BOZsqPl7pexOUhCctVwstqv//ysPDzSr7xqDHB1hV+TXLVXf6D4= -----END CERTIFICATE-----Generated at Thu Mar 26 15:49:45 2026 by rpki-client