$ rpki-client -vvf repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.mft File: FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.mft (raw, json) Hash identifier: aGAaA94VyFYX/Gg/sUea4MU2V4rIwUreoJK8hJHCtBM= Subject key identifier: 8C:74:36:34:CD:31:15:05:4E:52:91:84:F4:A0:57:36:51:54:AB:95 Authority key identifier: FB:1D:4F:91:39:A6:1D:F4:B9:1E:31:27:0F:3D:2A:1C:07:B3:5C:E1 Certificate issuer: /CN=FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1 Certificate serial: 516FBFF12FBD3D0824FAB0139DEDC5070A0EFF0C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.mft Manifest number: 01FC Signing time: Thu 26 Mar 2026 02:42:26 +0000 Manifest this update: Thu 26 Mar 2026 02:37:26 +0000 Manifest next update: Sun 29 Mar 2026 04:54:26 +0000 Files and hashes: 1: 3130332e3134392e3131382e302f32332d3234203d3e20313431303535.roa (hash: IBRiB5ZmLj4+M80KfLmmLbAbFNEpKpmTUiD30MwcLOE=) 2: FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.crl (hash: 27pbc2b141UjVk8ZwQ4mBSUvQCWgEFu9Z82r7U0ybUE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.crl rsync://repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 04:54:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:6f:bf:f1:2f:bd:3d:08:24:fa:b0:13:9d:ed:c5:07:0a:0e:ff:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1 Validity Not Before: Mar 26 02:37:26 2026 GMT Not After : Mar 29 04:54:26 2026 GMT Subject: CN=8C743634CD3115054E529184F4A057365154AB95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:c6:b8:c4:98:c4:16:49:0c:5b:78:68:1b:8f: 2e:fd:3f:0c:2a:90:24:35:d2:36:cf:47:4b:a9:ef: 9f:75:89:1d:be:b4:4a:88:80:f2:f3:6b:0c:d1:99: 4b:ac:fe:a3:bf:68:e1:3d:f0:7f:e9:7a:3d:ee:ae: f0:b3:94:8a:ba:7a:61:86:14:07:ca:14:68:7d:77: 00:88:0f:c0:22:27:61:2a:0f:0d:b1:0d:11:a0:28: 16:01:55:69:32:79:b0:e4:6d:12:4a:20:01:ff:90: d5:77:03:cd:33:5f:ae:57:b6:f8:7c:b2:2f:70:d9: 6e:e9:03:ee:ac:53:5e:af:fc:4e:16:64:0e:76:34: 22:40:a4:18:3b:dc:86:5b:67:9b:c8:21:08:c6:db: 88:b4:cf:cd:d9:45:df:96:80:f8:1b:3e:81:71:24: e7:68:e2:72:3a:e2:44:be:09:06:ad:3d:21:c3:dd: ac:28:85:dd:2a:c1:2a:0b:8e:5f:9d:21:33:85:25: b5:eb:9e:69:a8:15:05:f9:87:4c:4d:73:21:42:a0: 61:e6:3c:b6:02:83:22:ba:dc:91:e5:90:21:f4:3a: b9:0f:63:49:28:62:74:c2:39:58:18:18:2d:e2:f4: 11:68:73:1f:37:b2:f4:e4:1a:fe:1b:0d:a4:56:13: e1:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:74:36:34:CD:31:15:05:4E:52:91:84:F4:A0:57:36:51:54:AB:95 X509v3 Authority Key Identifier: keyid:FB:1D:4F:91:39:A6:1D:F4:B9:1E:31:27:0F:3D:2A:1C:07:B3:5C:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:25:6b:d1:d6:a9:b1:b4:fc:1a:7d:bb:b0:77:dc:03:c3:7b: 40:30:72:8f:d2:84:46:e9:59:21:8f:33:db:9a:ca:a1:4e:e7: 69:60:67:01:b1:c8:0b:1f:24:0b:af:fd:15:0c:db:45:12:4a: 42:d8:d8:b1:05:95:e1:64:7c:df:50:3e:6b:54:4b:ab:35:c5: e1:5f:4b:43:e4:b3:2d:7e:98:ee:9a:1d:c1:6a:a3:91:ef:ae: 4a:b4:24:25:fa:0a:51:04:37:58:72:e4:74:9a:8d:ff:bf:33: 51:8b:e0:fa:7e:ba:b8:44:48:79:df:7a:b7:f7:5d:fc:c2:7b: 85:82:f0:6d:b9:a5:30:c9:60:d4:9a:36:7d:c4:6c:5a:d7:1b: 77:d7:a7:0b:9e:cc:de:b9:ec:16:a8:1b:85:2a:2d:0c:c7:fa: 44:a4:6e:00:07:41:9f:7c:fd:fd:a6:f3:c1:31:9c:ed:ea:38: 5a:55:28:ef:c1:08:96:51:77:38:18:b9:ff:f9:8e:e8:b4:6a: 68:b2:23:7d:1b:67:e4:92:5e:e7:4c:a4:b4:3f:c7:79:e1:f3: 46:f2:88:8c:87:fc:1e:bb:a7:87:b5:19:65:59:fe:1e:f0:db: 96:af:36:ca:c6:41:f7:61:a1:89:3b:79:96:d5:0c:13:70:73: 7c:4e:7c:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUW+/8S+9PQgk+rATne3FBwoO/wwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkIxRDRGOTEzOUE2MURGNEI5MUUzMTI3MEYzRDJBMUMw N0IzNUNFMTAeFw0yNjAzMjYwMjM3MjZaFw0yNjAzMjkwNDU0MjZaMDMxMTAvBgNV BAMTKDhDNzQzNjM0Q0QzMTE1MDU0RTUyOTE4NEY0QTA1NzM2NTE1NEFCOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTxrjEmMQWSQxbeGgbjy79Pwwq kCQ10jbPR0up7591iR2+tEqIgPLzawzRmUus/qO/aOE98H/pej3urvCzlIq6emGG FAfKFGh9dwCID8AiJ2EqDw2xDRGgKBYBVWkyebDkbRJKIAH/kNV3A80zX65Xtvh8 si9w2W7pA+6sU16v/E4WZA52NCJApBg73IZbZ5vIIQjG24i0z83ZRd+WgPgbPoFx JOdo4nI64kS+CQatPSHD3awohd0qwSoLjl+dITOFJbXrnmmoFQX5h0xNcyFCoGHm PLYCgyK63JHlkCH0OrkPY0koYnTCOVgYGC3i9BFocx83svTkGv4bDaRWE+EtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjHQ2NM0xFQVOUpGE9KBXNlFUq5UwHwYDVR0j BBgwFoAU+x1PkTmmHfS5HjEnDz0qHAezXOEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Y2M3MGY3ZC0zM2ZlLTRkZjItODFlNS1kYzBkNTVhYzUxNzAvMC9GQjFENEY5MTM5 QTYxREY0QjkxRTMxMjcwRjNEMkExQzA3QjM1Q0UxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkIxRDRGOTEzOUE2MURGNEI5MUUzMTI3MEYzRDJBMUMwN0Iz NUNFMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWNjNzBmN2QtMzNmZS00ZGYyLTgx ZTUtZGMwZDU1YWM1MTcwLzAvRkIxRDRGOTEzOUE2MURGNEI5MUUzMTI3MEYzRDJB MUMwN0IzNUNFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADAla9HWqbG0/Bp9u7B33APDe0Awco/ShEbp WSGPM9uayqFO52lgZwGxyAsfJAuv/RUM20USSkLY2LEFleFkfN9QPmtUS6s1xeFf S0Pksy1+mO6aHcFqo5Hvrkq0JCX6ClEEN1hy5HSajf+/M1GL4Pp+urhESHnferf3 XfzCe4WC8G25pTDJYNSaNn3EbFrXG3fXpwuezN657BaoG4UqLQzH+kSkbgAHQZ98 /f2m88ExnO3qOFpVKO/BCJZRdzgYuf/5jui0amiyI30bZ+SSXudMpLQ/x3nh80by iIyH/B67p4e1GWVZ/h7w25avNsrGQfdhoYk7eZbVDBNwc3xOfHU= -----END CERTIFICATE-----Generated at Thu Mar 26 08:52:58 2026 by rpki-client