$ rpki-client -vvf repo-rpki.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.mft File: FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.mft (raw, json) Hash identifier: ZWMtGnoUDDawTKXbRukFNsdmZovDz2WuLU+713FPYYA= Subject key identifier: 3C:9D:23:A3:1A:E7:C4:90:B2:D4:95:E8:F7:55:62:CB:30:DE:13:BB Authority key identifier: FB:3F:CC:1A:69:B1:BD:92:D6:A3:19:D7:FD:82:0E:EE:CE:67:42:45 Certificate issuer: /CN=FB3FCC1A69B1BD92D6A319D7FD820EEECE674245 Certificate serial: 1AA3342FFA55F3BD098AB503B74AA694A531E9B8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.mft Manifest number: 03DC Signing time: Wed 25 Mar 2026 12:11:38 +0000 Manifest this update: Wed 25 Mar 2026 12:06:38 +0000 Manifest next update: Sat 28 Mar 2026 15:54:38 +0000 Files and hashes: 1: 3130332e3136342e3137302e302f32332d3234203d3e203137393935.roa (hash: KS9w1B5P8a3jbKsmFzr3W5flDVbhE11L0B9cjjDxpnE=) 2: FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.crl (hash: p+w21LPPOlbbwqO7IhJdh8tdx7Y1Klr3uB+cQTCBlbE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.crl rsync://repo-rpki.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 15:54:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:a3:34:2f:fa:55:f3:bd:09:8a:b5:03:b7:4a:a6:94:a5:31:e9:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB3FCC1A69B1BD92D6A319D7FD820EEECE674245 Validity Not Before: Mar 25 12:06:38 2026 GMT Not After : Mar 28 15:54:38 2026 GMT Subject: CN=3C9D23A31AE7C490B2D495E8F75562CB30DE13BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:7c:e3:e4:4a:e0:da:a1:83:42:95:ad:fd:f8: 9d:8a:5d:64:00:b1:af:a6:82:eb:0d:0c:04:2b:87: dc:1c:68:44:d1:3c:aa:38:4a:79:3b:f5:5b:2c:37: 56:ae:e1:3e:2d:2a:0c:63:30:00:c4:02:da:a3:54: e6:58:88:71:6f:9e:a5:2d:c4:a2:eb:26:57:9a:e4: 6b:fc:d7:65:29:92:93:7a:20:76:b1:db:7c:50:4d: b5:a2:37:ba:2a:b8:af:da:fc:69:6d:87:99:c5:0f: 73:c7:6a:46:df:cc:64:c4:d2:00:fe:60:6a:b7:bb: 19:32:2a:f1:35:52:72:16:7f:80:aa:17:de:b9:49: fc:7e:5e:e6:1a:b9:1a:51:4a:16:29:23:73:78:b2: e6:09:91:ab:71:1a:f9:9d:22:3d:85:e4:0b:3f:93: 46:0a:95:04:87:ca:15:f4:9e:55:81:18:84:ca:66: b8:35:7e:d9:29:76:49:c0:79:66:65:65:a9:53:37: 03:94:92:66:fa:85:12:5b:8b:cc:9b:9e:86:82:0d: de:0c:c9:b6:7f:11:7c:ea:e9:d0:0b:42:a4:ac:de: 6f:fb:64:13:32:93:53:79:f0:6f:ad:99:84:eb:59: 7d:fd:6c:48:aa:48:02:98:b2:e8:d4:5c:b7:cf:99: 9e:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:9D:23:A3:1A:E7:C4:90:B2:D4:95:E8:F7:55:62:CB:30:DE:13:BB X509v3 Authority Key Identifier: keyid:FB:3F:CC:1A:69:B1:BD:92:D6:A3:19:D7:FD:82:0E:EE:CE:67:42:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:f2:b5:41:c7:ce:2f:d8:d3:98:8c:21:17:5f:4f:1e:bb:1c: 05:4c:33:1c:a0:73:0a:09:6b:d6:e1:6a:0e:3d:8b:d5:cb:bf: 1a:87:17:46:bb:3a:c2:24:24:5e:c1:38:1e:6f:2d:9a:26:c1: c2:d2:99:dd:12:bd:f0:b0:97:81:90:dc:45:ae:9d:a2:7e:5e: dd:31:e1:d5:9a:66:88:4d:33:70:05:8e:82:f7:73:b7:99:36: d9:93:e9:98:62:9a:b3:6d:75:4a:00:cc:98:e4:14:08:a3:df: dd:7b:5a:42:96:10:3b:db:20:e8:37:b5:74:d1:9f:45:36:89: 6a:9b:54:79:5a:28:0b:ac:c9:70:c0:6a:49:6c:c4:5e:18:60: 6f:40:ec:bf:c8:7e:d5:01:98:7c:3e:0f:b2:f5:0e:11:1e:f9: f2:81:f6:78:a7:fa:e2:71:38:2e:cc:df:99:51:fd:f6:4c:e2: e9:26:39:a1:76:58:c2:e7:21:cb:b3:b4:57:28:c9:30:b5:b0: de:1c:07:d1:80:d8:b0:28:4c:98:7d:f1:32:d3:17:d0:7c:7b: f1:2e:19:d5:e9:40:09:4e:54:d6:66:1b:62:53:15:b6:d4:47: 78:cd:2d:3a:c8:d2:74:47:03:97:2e:86:ee:2e:78:1b:fc:7b: 77:ef:a0:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGqM0L/pV870JirUDt0qmlKUx6bgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkIzRkNDMUE2OUIxQkQ5MkQ2QTMxOUQ3RkQ4MjBFRUVD RTY3NDI0NTAeFw0yNjAzMjUxMjA2MzhaFw0yNjAzMjgxNTU0MzhaMDMxMTAvBgNV BAMTKDNDOUQyM0EzMUFFN0M0OTBCMkQ0OTVFOEY3NTU2MkNCMzBERTEzQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdfOPkSuDaoYNCla39+J2KXWQA sa+mgusNDAQrh9wcaETRPKo4Snk79VssN1au4T4tKgxjMADEAtqjVOZYiHFvnqUt xKLrJlea5Gv812UpkpN6IHax23xQTbWiN7oquK/a/Glth5nFD3PHakbfzGTE0gD+ YGq3uxkyKvE1UnIWf4CqF965Sfx+XuYauRpRShYpI3N4suYJkatxGvmdIj2F5As/ k0YKlQSHyhX0nlWBGITKZrg1ftkpdknAeWZlZalTNwOUkmb6hRJbi8ybnoaCDd4M ybZ/EXzq6dALQqSs3m/7ZBMyk1N58G+tmYTrWX39bEiqSAKYsujUXLfPmZ5NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPJ0joxrnxJCy1JXo91ViyzDeE7swHwYDVR0j BBgwFoAU+z/MGmmxvZLWoxnX/YIO7s5nQkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZDg3YmVlZC02MzMwLTRmMzMtOTEwNS04NzcyMmNkZjJkZDAvMC9GQjNGQ0MxQTY5 QjFCRDkyRDZBMzE5RDdGRDgyMEVFRUNFNjc0MjQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkIzRkNDMUE2OUIxQkQ5MkQ2QTMxOUQ3RkQ4MjBFRUVDRTY3 NDI0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWQ4N2JlZWQtNjMzMC00ZjMzLTkx MDUtODc3MjJjZGYyZGQwLzAvRkIzRkNDMUE2OUIxQkQ5MkQ2QTMxOUQ3RkQ4MjBF RUVDRTY3NDI0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEjytUHHzi/Y05iMIRdfTx67HAVMMxygcwoJ a9bhag49i9XLvxqHF0a7OsIkJF7BOB5vLZomwcLSmd0SvfCwl4GQ3EWunaJ+Xt0x 4dWaZohNM3AFjoL3c7eZNtmT6ZhimrNtdUoAzJjkFAij3917WkKWEDvbIOg3tXTR n0U2iWqbVHlaKAusyXDAaklsxF4YYG9A7L/IftUBmHw+D7L1DhEe+fKB9nin+uJx OC7M35lR/fZM4ukmOaF2WMLnIcuztFcoyTC1sN4cB9GA2LAoTJh98TLTF9B8e/Eu GdXpQAlOVNZmG2JTFbbUR3jNLTrI0nRHA5cuhu4ueBv8e3fvoAI= -----END CERTIFICATE-----Generated at Thu Mar 26 16:58:51 2026 by rpki-client