$ rpki-client -vvf repo-rpki.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.mft File: FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.mft (raw, json) Hash identifier: bj5lwlTORAZnb3meN4w8pN2MHW2SvbRdi4TrrDySPNc= Subject key identifier: FC:78:3D:18:DF:79:C9:2B:EB:87:63:CF:6F:14:5A:A1:45:96:C0:B9 Authority key identifier: FA:B0:81:FC:D8:6A:B0:F8:1D:41:C9:E5:FB:9C:3D:32:22:0F:48:CD Certificate issuer: /CN=FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD Certificate serial: 0BE96C3413C44B06107D64D439C51E1AA163A94D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.mft Manifest number: 0154 Signing time: Wed 25 Mar 2026 02:11:30 +0000 Manifest this update: Wed 25 Mar 2026 02:06:30 +0000 Manifest next update: Sat 28 Mar 2026 04:11:30 +0000 Files and hashes: 1: 3135372e31302e312e302f32342d3234203d3e20313532303739.roa (hash: DOErYNNeAHBg7jPgOxCOjjiUusb0dUbys1pc3kVIxCE=) 2: 3135372e31302e302e302f32332d3233203d3e20313532303739.roa (hash: c4rjc7ofNNmyZRUSVo5AMDmJDSE543ooVHV0iFLdEdk=) 3: FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.crl (hash: 6m/Plgj8bfMSQOrOvk1v4G5gs9UpoyC08aUrHOwHTS0=) 4: 3135372e31302e302e302f32342d3234203d3e20313532303739.roa (hash: xoCkaz5i4P6iyUaFm6z1IavkyQCxOdN9JzTfIbqv1G0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.crl rsync://repo-rpki.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 04:11:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:e9:6c:34:13:c4:4b:06:10:7d:64:d4:39:c5:1e:1a:a1:63:a9:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD Validity Not Before: Mar 25 02:06:30 2026 GMT Not After : Mar 28 04:11:30 2026 GMT Subject: CN=FC783D18DF79C92BEB8763CF6F145AA14596C0B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b3:e5:37:e5:20:9e:4c:95:b5:2f:d2:fa:76: f7:1f:44:8a:14:1e:2f:e8:b7:ad:f9:1a:f0:48:87: 13:b1:f5:d4:9a:59:36:9d:df:3b:a1:2b:d3:7f:c8: 95:3b:eb:c2:dc:ab:e5:b6:d4:91:dd:73:50:06:15: 44:19:38:8a:c5:65:0f:6d:b1:9f:32:ce:77:7d:e5: 9c:e9:f1:4b:8f:b7:ee:85:1b:f2:c2:64:29:aa:c9: 27:b9:db:65:e4:46:2e:f8:b7:9c:2f:9e:85:12:38: c3:07:70:9b:02:aa:f5:d5:b0:80:10:95:92:ad:17: 01:ac:4b:b1:a1:92:e0:69:63:41:b6:16:94:13:1e: a3:16:30:6f:ea:d4:e5:13:af:9a:e8:e8:90:87:55: 6f:f0:ef:4d:71:1b:b2:06:b8:57:aa:0d:3e:73:5e: 64:93:2b:8a:18:8c:2d:4f:c6:c3:8a:30:c6:40:89: 6e:94:d5:47:a7:f1:c6:19:1f:f1:22:1e:46:b5:a1: 62:f0:ef:0e:95:57:5f:e0:ea:58:c6:29:2d:f3:84: 33:7c:23:53:1f:3b:9e:87:29:69:38:0c:8e:ee:0b: f5:75:31:77:b3:dc:8e:b6:ee:73:12:cb:88:52:3c: 52:70:9e:4d:21:f9:ea:80:15:35:6f:4d:36:df:21: 1d:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:78:3D:18:DF:79:C9:2B:EB:87:63:CF:6F:14:5A:A1:45:96:C0:B9 X509v3 Authority Key Identifier: keyid:FA:B0:81:FC:D8:6A:B0:F8:1D:41:C9:E5:FB:9C:3D:32:22:0F:48:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:de:16:63:93:18:19:20:9d:6a:e5:e4:5e:0d:8a:83:38:af: 08:ea:4e:cc:c8:fe:37:ce:2e:d0:92:f4:9f:98:29:cf:be:30: 60:5f:a4:12:83:e3:42:0f:64:11:d0:a9:19:ef:94:20:17:0b: e3:9e:4f:de:c5:64:5a:22:ce:ea:e2:76:be:11:8d:ef:da:2d: f6:79:e4:18:9b:85:64:fe:05:41:fc:4d:75:7a:0a:38:76:76: 93:2f:d9:8f:24:c3:f9:ea:d7:53:a4:98:88:ac:05:2d:42:4d: 31:91:6e:21:87:59:04:41:b3:c6:7d:5f:ae:2b:81:93:14:7f: 77:87:a6:f5:23:42:e6:15:0d:59:26:de:45:ef:f6:6e:a3:0c: 84:35:2e:8c:b5:92:3f:0b:94:11:11:99:9c:7c:52:28:7b:0b: c0:8e:77:d9:be:78:83:e6:d9:d2:c5:6b:28:0b:b2:b3:a5:be: b9:4a:0d:62:27:08:0b:5e:13:fa:95:c8:c9:55:ef:00:a2:cc: 3c:09:8b:f1:73:8c:33:8b:da:76:8b:18:a3:ca:1a:ba:b5:72: 00:38:ef:46:9f:ac:bd:64:1a:70:79:b7:7e:f6:cb:59:4e:64: fb:96:f6:88:e0:b5:82:a9:d8:24:0f:55:3e:ee:38:d4:56:60: 33:38:33:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC+lsNBPESwYQfWTUOcUeGqFjqU0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkFCMDgxRkNEODZBQjBGODFENDFDOUU1RkI5QzNEMzIy MjBGNDhDRDAeFw0yNjAzMjUwMjA2MzBaFw0yNjAzMjgwNDExMzBaMDMxMTAvBgNV BAMTKEZDNzgzRDE4REY3OUM5MkJFQjg3NjNDRjZGMTQ1QUExNDU5NkMwQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRs+U35SCeTJW1L9L6dvcfRIoU Hi/ot635GvBIhxOx9dSaWTad3zuhK9N/yJU768Lcq+W21JHdc1AGFUQZOIrFZQ9t sZ8yznd95Zzp8UuPt+6FG/LCZCmqySe522XkRi74t5wvnoUSOMMHcJsCqvXVsIAQ lZKtFwGsS7GhkuBpY0G2FpQTHqMWMG/q1OUTr5ro6JCHVW/w701xG7IGuFeqDT5z XmSTK4oYjC1PxsOKMMZAiW6U1Uen8cYZH/EiHka1oWLw7w6VV1/g6ljGKS3zhDN8 I1MfO56HKWk4DI7uC/V1MXez3I627nMSy4hSPFJwnk0h+eqAFTVvTTbfIR21AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/Hg9GN95ySvrh2PPbxRaoUWWwLkwHwYDVR0j BBgwFoAU+rCB/NhqsPgdQcnl+5w9MiIPSM0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OTRkMWY2Mi04NDg4LTQwODYtOGQ0Yy1mMmRlNWM3NmRhM2QvMC9GQUIwODFGQ0Q4 NkFCMEY4MUQ0MUM5RTVGQjlDM0QzMjIyMEY0OENELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkFCMDgxRkNEODZBQjBGODFENDFDOUU1RkI5QzNEMzIyMjBG NDhDRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTk0ZDFmNjItODQ4OC00MDg2LThk NGMtZjJkZTVjNzZkYTNkLzAvRkFCMDgxRkNEODZBQjBGODFENDFDOUU1RkI5QzNE MzIyMjBGNDhDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGDeFmOTGBkgnWrl5F4NioM4rwjqTszI/jfO LtCS9J+YKc++MGBfpBKD40IPZBHQqRnvlCAXC+OeT97FZFoizuridr4Rje/aLfZ5 5BibhWT+BUH8TXV6Cjh2dpMv2Y8kw/nq11OkmIisBS1CTTGRbiGHWQRBs8Z9X64r gZMUf3eHpvUjQuYVDVkm3kXv9m6jDIQ1Loy1kj8LlBERmZx8Uih7C8COd9m+eIPm 2dLFaygLsrOlvrlKDWInCAteE/qVyMlV7wCizDwJi/FzjDOL2naLGKPKGrq1cgA4 70afrL1kGnB5t372y1lOZPuW9ojgtYKp2CQPVT7uONRWYDM4M+U= -----END CERTIFICATE-----Generated at Thu Mar 26 17:20:40 2026 by rpki-client