$ rpki-client -vvf repo-rpki.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/FB138C203D8A14318A87CA5B1BC5A19CA221F056.mft File: FB138C203D8A14318A87CA5B1BC5A19CA221F056.mft (raw, json) Hash identifier: t6w/p5cX3baJWoTHFZqk9DoIyCbN9AE5186p7IQyKa4= Subject key identifier: 36:9E:65:F1:F2:80:74:DC:19:DF:AB:CE:05:9C:11:1F:91:4D:9C:54 Authority key identifier: FB:13:8C:20:3D:8A:14:31:8A:87:CA:5B:1B:C5:A1:9C:A2:21:F0:56 Certificate issuer: /CN=FB138C203D8A14318A87CA5B1BC5A19CA221F056 Certificate serial: 0A55EC226DB7EDE8DFCB74D6AFAAF6BD118493B4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB138C203D8A14318A87CA5B1BC5A19CA221F056.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/FB138C203D8A14318A87CA5B1BC5A19CA221F056.mft Manifest number: 028A Signing time: Tue 24 Mar 2026 19:02:23 +0000 Manifest this update: Tue 24 Mar 2026 18:57:23 +0000 Manifest next update: Sat 28 Mar 2026 03:50:23 +0000 Files and hashes: 1: 3130332e3138352e34342e302f32332d3234203d3e20313339343536.roa (hash: SWq4la0YFhRphZlV1lpO+Gl0xrKKhaB1W5v4eWGzgWI=) 2: FB138C203D8A14318A87CA5B1BC5A19CA221F056.crl (hash: xp1mU01o1DyPk6tatt8wHPyvG0qAkzxSqErOVLlQSO8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/FB138C203D8A14318A87CA5B1BC5A19CA221F056.crl rsync://repo-rpki.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/FB138C203D8A14318A87CA5B1BC5A19CA221F056.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB138C203D8A14318A87CA5B1BC5A19CA221F056.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 03:50:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:55:ec:22:6d:b7:ed:e8:df:cb:74:d6:af:aa:f6:bd:11:84:93:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB138C203D8A14318A87CA5B1BC5A19CA221F056 Validity Not Before: Mar 24 18:57:23 2026 GMT Not After : Mar 28 03:50:23 2026 GMT Subject: CN=369E65F1F28074DC19DFABCE059C111F914D9C54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:db:4f:fb:f1:ba:fc:70:3e:61:3d:af:55:a8: 40:97:0b:b6:f0:7c:62:f3:b6:22:1f:26:87:b0:96: 53:8d:e0:3e:72:92:e0:88:ac:15:80:09:be:14:7b: 74:b6:8b:f3:13:12:4c:05:e4:01:41:c9:1e:c6:a3: 12:e3:d5:90:a0:a2:00:c7:a3:22:68:63:e2:d1:c1: 35:b8:4b:98:8d:c7:ff:c9:fb:a1:f2:60:57:f1:cd: 39:24:f5:e5:1e:e2:77:f2:87:62:3e:8c:9e:7b:d5: 00:e8:61:56:cc:1e:3e:1f:09:90:05:49:e1:14:5f: 3c:10:d3:53:12:37:e9:24:a1:96:cf:43:87:78:4a: cc:15:d3:73:97:fc:e5:d7:72:fe:35:f8:84:31:d0: c0:d2:14:ba:7d:8f:ba:27:cd:78:f7:f9:46:a9:87: 9c:72:1e:01:da:ad:82:6e:16:2b:07:92:f2:b7:cf: e0:5e:94:bb:6a:dd:79:3c:c2:06:f4:a6:c9:e4:0b: f6:ef:5b:0b:39:2b:21:09:bf:ff:15:c2:e4:c9:1e: ab:e0:67:31:d1:16:18:53:5c:19:18:d2:72:e8:e2: 86:45:c2:9a:32:cd:48:24:55:b2:fb:a7:ab:fb:36: db:19:3d:01:f7:63:df:28:4a:52:19:b2:3a:23:72: c3:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:9E:65:F1:F2:80:74:DC:19:DF:AB:CE:05:9C:11:1F:91:4D:9C:54 X509v3 Authority Key Identifier: keyid:FB:13:8C:20:3D:8A:14:31:8A:87:CA:5B:1B:C5:A1:9C:A2:21:F0:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/FB138C203D8A14318A87CA5B1BC5A19CA221F056.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB138C203D8A14318A87CA5B1BC5A19CA221F056.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/FB138C203D8A14318A87CA5B1BC5A19CA221F056.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:aa:25:4f:3f:ee:dc:51:37:0d:d3:37:3d:b7:9e:b8:15:e8: c0:57:97:40:9c:dc:69:63:08:9c:47:66:26:03:43:a6:57:61: 66:2f:4b:cc:a8:be:cb:80:99:17:35:81:6d:e2:c1:02:b6:3e: 07:80:e3:8f:a9:dc:86:d1:53:d7:17:2d:7d:40:a6:cd:de:da: 8c:00:de:65:16:65:31:bc:eb:da:43:fb:36:35:e4:08:32:eb: 34:bc:be:f8:f0:55:e3:6a:44:89:2f:72:0a:45:ca:c2:b9:ca: fc:b4:93:18:b3:56:d9:32:f2:34:02:dc:d0:6e:2b:05:e9:80: 13:bb:47:b6:fa:e4:d7:d9:a8:e0:aa:e3:a6:5d:cd:26:53:cf: 89:ee:3c:8f:5a:18:e7:79:59:60:8a:f7:ad:d1:82:00:c3:02: c6:85:d8:73:c1:45:c9:57:c0:f4:a6:cc:8f:e1:09:d7:d6:0e: 62:89:97:f6:68:f1:e4:40:aa:e3:c4:c9:8f:02:35:b7:28:28: 5b:af:9f:4d:5e:8d:50:4b:e1:b4:3e:06:43:05:32:0e:e0:58: 3a:b6:ea:58:f3:bc:2f:2a:13:e5:4f:d5:1d:60:f1:4c:69:81: 4c:5a:c8:56:71:61:7d:d4:89:34:f9:34:6e:15:7e:e9:ed:a8: bb:78:b9:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUClXsIm237ejfy3TWr6r2vRGEk7QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkIxMzhDMjAzRDhBMTQzMThBODdDQTVCMUJDNUExOUNB MjIxRjA1NjAeFw0yNjAzMjQxODU3MjNaFw0yNjAzMjgwMzUwMjNaMDMxMTAvBgNV BAMTKDM2OUU2NUYxRjI4MDc0REMxOURGQUJDRTA1OUMxMTFGOTE0RDlDNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC020/78br8cD5hPa9VqECXC7bw fGLztiIfJoewllON4D5ykuCIrBWACb4Ue3S2i/MTEkwF5AFByR7GoxLj1ZCgogDH oyJoY+LRwTW4S5iNx//J+6HyYFfxzTkk9eUe4nfyh2I+jJ571QDoYVbMHj4fCZAF SeEUXzwQ01MSN+kkoZbPQ4d4SswV03OX/OXXcv41+IQx0MDSFLp9j7onzXj3+Uap h5xyHgHarYJuFisHkvK3z+BelLtq3Xk8wgb0psnkC/bvWws5KyEJv/8VwuTJHqvg ZzHRFhhTXBkY0nLo4oZFwpoyzUgkVbL7p6v7NtsZPQH3Y98oSlIZsjojcsMlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNp5l8fKAdNwZ36vOBZwRH5FNnFQwHwYDVR0j BBgwFoAU+xOMID2KFDGKh8pbG8WhnKIh8FYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YzVmMmU0Zi00NWQ0LTRkNjItOTJjZi1kNzhiNWM1NDFhMWMvMC9GQjEzOEMyMDNE OEExNDMxOEE4N0NBNUIxQkM1QTE5Q0EyMjFGMDU2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkIxMzhDMjAzRDhBMTQzMThBODdDQTVCMUJDNUExOUNBMjIx RjA1Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWM1ZjJlNGYtNDVkNC00ZDYyLTky Y2YtZDc4YjVjNTQxYTFjLzAvRkIxMzhDMjAzRDhBMTQzMThBODdDQTVCMUJDNUEx OUNBMjIxRjA1Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALOqJU8/7txRNw3TNz23nrgV6MBXl0Cc3Glj CJxHZiYDQ6ZXYWYvS8yovsuAmRc1gW3iwQK2PgeA44+p3IbRU9cXLX1Aps3e2owA 3mUWZTG869pD+zY15Agy6zS8vvjwVeNqRIkvcgpFysK5yvy0kxizVtky8jQC3NBu KwXpgBO7R7b65NfZqOCq46ZdzSZTz4nuPI9aGOd5WWCK963RggDDAsaF2HPBRclX wPSmzI/hCdfWDmKJl/Zo8eRAquPEyY8CNbcoKFuvn01ejVBL4bQ+BkMFMg7gWDq2 6ljzvC8qE+VP1R1g8UxpgUxayFZxYX3UiTT5NG4VfuntqLt4ubc= -----END CERTIFICATE-----Generated at Thu Mar 26 15:07:37 2026 by rpki-client