$ rpki-client -vvf repo-rpki.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.mft File: FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.mft (raw, json) Hash identifier: Ut7TqfNt0p1VpOX3gk90s9VXL1ka3/52LK3HOCNoCXE= Subject key identifier: 3A:2F:BF:78:FC:F3:3D:8C:E2:7F:99:08:6D:25:65:E0:21:60:E1:30 Authority key identifier: FB:3F:CC:1A:69:B1:BD:92:D6:A3:19:D7:FD:82:0E:EE:CE:67:42:45 Certificate issuer: /CN=FB3FCC1A69B1BD92D6A319D7FD820EEECE674245 Certificate serial: 2778CECDAEE86DCF3B1E72622E911DF376B3EEAA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.mft Manifest number: 03DB Signing time: Mon 23 Mar 2026 08:21:37 +0000 Manifest this update: Mon 23 Mar 2026 08:16:37 +0000 Manifest next update: Thu 26 Mar 2026 12:03:37 +0000 Files and hashes: 1: FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.crl (hash: g2wpDleS/oGK2BaA6mBOdvgzIEj9VNI4cB8AP6MnOg4=) 2: 3130332e3136342e3137302e302f32332d3234203d3e203137393935.roa (hash: KS9w1B5P8a3jbKsmFzr3W5flDVbhE11L0B9cjjDxpnE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.crl rsync://repo-rpki.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Mar 2026 09:57:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:78:ce:cd:ae:e8:6d:cf:3b:1e:72:62:2e:91:1d:f3:76:b3:ee:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB3FCC1A69B1BD92D6A319D7FD820EEECE674245 Validity Not Before: Mar 23 08:16:37 2026 GMT Not After : Mar 26 12:03:37 2026 GMT Subject: CN=3A2FBF78FCF33D8CE27F99086D2565E02160E130 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:df:f9:4a:07:ca:01:24:7c:79:18:9c:16:c1: ba:e6:eb:b9:ce:fa:6b:6c:8e:61:07:07:fc:08:83: bb:9d:7c:e5:b5:5d:8b:3a:a1:a7:a8:72:da:04:43: 0c:53:4e:27:05:f3:56:f8:94:b7:03:83:ff:5f:f9: 44:96:5b:0c:3a:47:5b:fe:b9:6f:12:a7:5b:70:69: 87:58:6f:5b:73:e8:b7:87:a5:28:1f:01:a5:92:f2: 37:8f:15:1c:a6:1d:73:50:c1:d1:4b:90:0d:15:83: d5:b5:44:cb:01:cb:a5:b0:a7:e2:5c:11:ad:54:e3: 16:ba:ef:6b:82:7f:4b:39:d3:ae:b4:93:88:2c:3b: 94:cf:70:7d:de:5d:20:93:3f:22:5a:89:3c:61:33: 38:9c:30:48:9f:82:c7:bb:f0:7a:1f:87:61:6f:52: 3e:d0:cc:51:c1:ac:66:e2:8f:15:0d:db:93:ce:82: 59:32:7e:ef:95:de:f6:3b:c7:6c:1d:d9:b6:c3:4b: 25:bc:d2:ba:d5:1e:ff:fc:5a:a8:a2:04:05:fd:0e: b4:e2:f8:44:2a:95:3f:06:f6:3f:71:32:f4:ea:81: 48:28:f2:f2:c3:e4:a4:43:7c:ed:99:c2:08:7d:ae: 42:6b:b0:f9:b5:66:2b:96:06:06:e6:8b:5c:5b:1a: c6:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:2F:BF:78:FC:F3:3D:8C:E2:7F:99:08:6D:25:65:E0:21:60:E1:30 X509v3 Authority Key Identifier: keyid:FB:3F:CC:1A:69:B1:BD:92:D6:A3:19:D7:FD:82:0E:EE:CE:67:42:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:f7:9b:a6:fc:b6:07:1f:61:6e:9a:b7:5d:99:84:1a:6a:94: f0:a1:7c:c5:91:ab:06:f3:27:42:0f:b1:16:70:b0:33:5c:96: 08:fc:9c:c1:12:4b:19:a0:8d:82:59:ce:20:90:6b:6a:a8:f9: f8:bf:22:55:68:79:65:0e:e8:ec:3a:6c:71:5b:44:a3:d4:75: 35:7b:6f:8a:ca:e0:d8:02:86:f1:b2:b7:5a:5f:cf:1a:7f:16: 2f:6d:b1:66:3c:64:02:f4:b7:d0:a5:a3:69:2c:c7:cc:60:18: bc:e4:dc:e6:fe:16:9d:7a:a7:a0:29:3a:b1:91:3c:18:38:db: f3:c0:07:f2:17:52:4e:d7:d6:d7:2c:dd:72:0a:35:fc:26:e1: 12:08:13:11:43:a9:12:34:a7:56:c0:8c:92:46:56:0d:a8:9c: 46:c6:f0:0f:a8:c5:d9:a0:83:b1:03:10:05:5b:a4:20:80:1a: 08:0a:43:54:0d:a8:4b:bb:e7:5d:51:1d:57:82:9c:12:ca:62: 93:f9:3d:97:17:18:7c:91:68:91:1a:3d:dd:29:8b:33:ed:18: b5:1e:ef:fc:32:18:2c:83:34:6a:61:c4:8f:2e:5e:54:86:6b: ce:ea:4f:ac:30:9f:b1:c0:67:2d:3c:a7:ab:7c:d7:5c:2b:7a: 33:70:ef:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ3jOza7obc87HnJiLpEd83az7qowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkIzRkNDMUE2OUIxQkQ5MkQ2QTMxOUQ3RkQ4MjBFRUVD RTY3NDI0NTAeFw0yNjAzMjMwODE2MzdaFw0yNjAzMjYxMjAzMzdaMDMxMTAvBgNV BAMTKDNBMkZCRjc4RkNGMzNEOENFMjdGOTkwODZEMjU2NUUwMjE2MEUxMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt3/lKB8oBJHx5GJwWwbrm67nO +mtsjmEHB/wIg7udfOW1XYs6oaeoctoEQwxTTicF81b4lLcDg/9f+USWWww6R1v+ uW8Sp1twaYdYb1tz6LeHpSgfAaWS8jePFRymHXNQwdFLkA0Vg9W1RMsBy6Wwp+Jc Ea1U4xa672uCf0s50660k4gsO5TPcH3eXSCTPyJaiTxhMzicMEifgse78Hofh2Fv Uj7QzFHBrGbijxUN25POglkyfu+V3vY7x2wd2bbDSyW80rrVHv/8WqiiBAX9DrTi +EQqlT8G9j9xMvTqgUgo8vLD5KRDfO2Zwgh9rkJrsPm1ZiuWBgbmi1xbGsZ7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOi+/ePzzPYzif5kIbSVl4CFg4TAwHwYDVR0j BBgwFoAU+z/MGmmxvZLWoxnX/YIO7s5nQkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZDg3YmVlZC02MzMwLTRmMzMtOTEwNS04NzcyMmNkZjJkZDAvMC9GQjNGQ0MxQTY5 QjFCRDkyRDZBMzE5RDdGRDgyMEVFRUNFNjc0MjQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkIzRkNDMUE2OUIxQkQ5MkQ2QTMxOUQ3RkQ4MjBFRUVDRTY3 NDI0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWQ4N2JlZWQtNjMzMC00ZjMzLTkx MDUtODc3MjJjZGYyZGQwLzAvRkIzRkNDMUE2OUIxQkQ5MkQ2QTMxOUQ3RkQ4MjBF RUVDRTY3NDI0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALD3m6b8tgcfYW6at12ZhBpqlPChfMWRqwbz J0IPsRZwsDNclgj8nMESSxmgjYJZziCQa2qo+fi/IlVoeWUO6Ow6bHFbRKPUdTV7 b4rK4NgChvGyt1pfzxp/Fi9tsWY8ZAL0t9Clo2ksx8xgGLzk3Ob+Fp16p6ApOrGR PBg42/PAB/IXUk7X1tcs3XIKNfwm4RIIExFDqRI0p1bAjJJGVg2onEbG8A+oxdmg g7EDEAVbpCCAGggKQ1QNqEu7511RHVeCnBLKYpP5PZcXGHyRaJEaPd0pizPtGLUe 7/wyGCyDNGphxI8uXlSGa87qT6wwn7HAZy08p6t811wrejNw75Q= -----END CERTIFICATE-----Generated at Tue Mar 24 01:51:35 2026 by rpki-client