$ rpki-client -vvf repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/FBACFC63658425B36399C4B9D0322622B8C5B7F0.mft File: FBACFC63658425B36399C4B9D0322622B8C5B7F0.mft (raw, json) Hash identifier: gXewTSe+MYDmWpli5lRlqd7kobmZp3JJrxxZr5cbljs= Subject key identifier: AD:F4:2F:C8:62:95:5E:32:50:99:AA:29:07:BC:59:D0:60:45:3D:9C Authority key identifier: FB:AC:FC:63:65:84:25:B3:63:99:C4:B9:D0:32:26:22:B8:C5:B7:F0 Certificate issuer: /CN=FBACFC63658425B36399C4B9D0322622B8C5B7F0 Certificate serial: 7EDC8F335DB4E6C0F63CB65B0CFAAABD89341E4B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBACFC63658425B36399C4B9D0322622B8C5B7F0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/FBACFC63658425B36399C4B9D0322622B8C5B7F0.mft Manifest number: 0566 Signing time: Wed 25 Mar 2026 03:02:16 +0000 Manifest this update: Wed 25 Mar 2026 02:57:16 +0000 Manifest next update: Sat 28 Mar 2026 13:40:16 +0000 Files and hashes: 1: 323430373a336538303a3a2f33322d3438203d3e203338373638.roa (hash: jCqzfoNt2x+8bcJ6fatZirQ8CiZyxgl3URZLZEZ3szo=) 2: FBACFC63658425B36399C4B9D0322622B8C5B7F0.crl (hash: FMNHHj6Eac9Uf5S/zWvpgbW6Qgfokqs5qpXjdlHwayk=) 3: 323430373a336538303a363a3a2f34382d3438203d3e203338343936.roa (hash: 4k+7oiIZgf8A+xoNtWkGh4r/bBNQQHgBlobDBAPY3jY=) 4: 3130332e3233342e3231382e302f32342d3234203d3e203338373638.roa (hash: vWQKx1TT5Vb7zbmKfpDwSS1ZiebEmEmR3LksZYKeYp8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/FBACFC63658425B36399C4B9D0322622B8C5B7F0.crl rsync://repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/FBACFC63658425B36399C4B9D0322622B8C5B7F0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBACFC63658425B36399C4B9D0322622B8C5B7F0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 13:40:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:dc:8f:33:5d:b4:e6:c0:f6:3c:b6:5b:0c:fa:aa:bd:89:34:1e:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FBACFC63658425B36399C4B9D0322622B8C5B7F0 Validity Not Before: Mar 25 02:57:16 2026 GMT Not After : Mar 28 13:40:16 2026 GMT Subject: CN=ADF42FC862955E325099AA2907BC59D060453D9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:0a:db:73:9c:cc:e9:05:0e:51:de:47:e7:aa: f0:40:51:4b:89:4d:37:d1:b5:65:cc:a9:9d:de:56: 99:c8:cd:d7:75:93:e4:90:2b:e1:f1:ba:c7:36:0b: 3d:35:b9:4d:66:15:1b:79:5b:bc:85:97:a5:26:8c: ad:06:a8:b9:bc:a1:ce:de:24:02:8d:92:88:d1:4e: a5:89:a9:55:9c:8b:f1:5e:11:24:61:f6:5d:76:59: a2:50:4f:69:7f:8b:49:73:23:60:1d:66:c3:7a:67: b0:00:57:85:3b:dd:b6:bd:f7:53:6c:c3:f9:0c:fa: 35:63:9c:d8:ae:bc:79:fc:44:44:1e:7b:df:8d:fc: 46:eb:e5:80:96:cb:6e:43:f3:93:43:69:53:18:c8: 2c:51:da:12:81:c5:ba:e1:c5:e1:bb:73:5b:1d:07: e5:c6:23:30:b0:d4:43:07:d1:9a:7a:99:31:f3:2d: 54:c6:24:8d:8d:b9:a0:59:7c:c7:72:f0:c1:12:a4: 82:d1:ce:ad:b6:9a:2b:2f:64:2c:d9:21:c9:08:70: c7:9c:a0:dc:13:eb:33:2e:86:23:cc:9f:51:f9:23: b1:a6:da:c5:d6:17:79:62:16:11:12:9e:52:fe:e4: d7:4a:10:c2:4f:fb:89:1a:29:da:9e:36:2d:fc:97: 62:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:F4:2F:C8:62:95:5E:32:50:99:AA:29:07:BC:59:D0:60:45:3D:9C X509v3 Authority Key Identifier: keyid:FB:AC:FC:63:65:84:25:B3:63:99:C4:B9:D0:32:26:22:B8:C5:B7:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/FBACFC63658425B36399C4B9D0322622B8C5B7F0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBACFC63658425B36399C4B9D0322622B8C5B7F0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/FBACFC63658425B36399C4B9D0322622B8C5B7F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:0e:52:e7:05:2e:5a:a0:cd:1c:5b:72:7e:42:84:f2:e8:c7: a0:ff:9d:b7:e7:e7:d0:98:e2:30:76:70:e5:f1:5e:c3:95:11: b8:e7:10:63:b1:76:d7:a8:fc:94:f1:50:94:5a:b0:31:89:d2: 97:85:79:03:28:14:59:97:ba:d4:61:94:6f:08:16:bc:cd:20: 1b:f5:3e:7c:c1:de:80:bd:d0:d9:f2:96:69:96:05:36:7b:dd: cb:9c:74:34:c3:dc:b0:23:e1:1d:cb:5d:62:63:96:af:1c:07: 90:73:83:66:c2:96:09:92:95:40:a0:3e:74:65:36:b4:38:5c: 03:88:23:58:8e:04:79:24:da:fe:fe:13:64:f1:8a:9b:23:29: dc:fa:19:34:f8:83:0c:7f:2a:e1:60:62:17:c5:10:1e:79:e8: a6:48:2a:2f:62:39:ab:fa:48:30:63:5c:61:68:52:19:a4:58: c8:27:a5:ad:ca:bc:4c:0e:bf:42:3d:98:62:1d:d5:f0:b4:5f: e1:e2:cf:13:9b:6b:0d:ce:c5:a1:ec:fe:33:9d:af:7d:f1:5a: a2:fe:6d:6e:ac:dd:fa:77:53:8b:58:37:02:33:92:fe:02:4f: be:b8:7a:2e:6d:fa:6f:9e:7e:6d:fe:2c:46:03:7a:97:71:a6: 79:d5:9e:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUftyPM1205sD2PLZbDPqqvYk0HkswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkJBQ0ZDNjM2NTg0MjVCMzYzOTlDNEI5RDAzMjI2MjJC OEM1QjdGMDAeFw0yNjAzMjUwMjU3MTZaFw0yNjAzMjgxMzQwMTZaMDMxMTAvBgNV BAMTKEFERjQyRkM4NjI5NTVFMzI1MDk5QUEyOTA3QkM1OUQwNjA0NTNEOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGCttznMzpBQ5R3kfnqvBAUUuJ TTfRtWXMqZ3eVpnIzdd1k+SQK+Hxusc2Cz01uU1mFRt5W7yFl6UmjK0GqLm8oc7e JAKNkojRTqWJqVWci/FeESRh9l12WaJQT2l/i0lzI2AdZsN6Z7AAV4U73ba991Ns w/kM+jVjnNiuvHn8REQee9+N/Ebr5YCWy25D85NDaVMYyCxR2hKBxbrhxeG7c1sd B+XGIzCw1EMH0Zp6mTHzLVTGJI2NuaBZfMdy8MESpILRzq22misvZCzZIckIcMec oNwT6zMuhiPMn1H5I7Gm2sXWF3liFhESnlL+5NdKEMJP+4kaKdqeNi38l2LZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrfQvyGKVXjJQmaopB7xZ0GBFPZwwHwYDVR0j BBgwFoAU+6z8Y2WEJbNjmcS50DImIrjFt/AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MWU5NDI0My04N2YwLTQyNmYtYTljYS00YzE5ZWRiMDZiNDIvMC9GQkFDRkM2MzY1 ODQyNUIzNjM5OUM0QjlEMDMyMjYyMkI4QzVCN0YwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkJBQ0ZDNjM2NTg0MjVCMzYzOTlDNEI5RDAzMjI2MjJCOEM1 QjdGMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTFlOTQyNDMtODdmMC00MjZmLWE5 Y2EtNGMxOWVkYjA2YjQyLzAvRkJBQ0ZDNjM2NTg0MjVCMzYzOTlDNEI5RDAzMjI2 MjJCOEM1QjdGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIcOUucFLlqgzRxbcn5ChPLox6D/nbfn59CY 4jB2cOXxXsOVEbjnEGOxdteo/JTxUJRasDGJ0peFeQMoFFmXutRhlG8IFrzNIBv1 PnzB3oC90NnylmmWBTZ73cucdDTD3LAj4R3LXWJjlq8cB5Bzg2bClgmSlUCgPnRl NrQ4XAOII1iOBHkk2v7+E2TxipsjKdz6GTT4gwx/KuFgYhfFEB556KZIKi9iOav6 SDBjXGFoUhmkWMgnpa3KvEwOv0I9mGId1fC0X+HizxObaw3OxaHs/jOdr33xWqL+ bW6s3fp3U4tYNwIzkv4CT764ei5t+m+efm3+LEYDepdxpnnVnkc= -----END CERTIFICATE-----Generated at Thu Mar 26 09:22:41 2026 by rpki-client