$ rpki-client -vvf repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/FBACFC63658425B36399C4B9D0322622B8C5B7F0.mft File: FBACFC63658425B36399C4B9D0322622B8C5B7F0.mft (raw, json) Hash identifier: t9jwKQXJ5ZG9p3cAI8W7bkDCe7Nsh1XsDuKK23EKFFE= Subject key identifier: 11:88:43:5A:52:1F:66:6A:9C:3D:26:74:BA:2D:68:DC:DB:DB:A7:B6 Authority key identifier: FB:AC:FC:63:65:84:25:B3:63:99:C4:B9:D0:32:26:22:B8:C5:B7:F0 Certificate issuer: /CN=FBACFC63658425B36399C4B9D0322622B8C5B7F0 Certificate serial: 4119AEF4702B52C12412B81A0AD1D290F1D18E7B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBACFC63658425B36399C4B9D0322622B8C5B7F0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/FBACFC63658425B36399C4B9D0322622B8C5B7F0.mft Manifest number: 0565 Signing time: Mon 23 Mar 2026 02:32:15 +0000 Manifest this update: Mon 23 Mar 2026 02:27:15 +0000 Manifest next update: Thu 26 Mar 2026 02:59:15 +0000 Files and hashes: 1: 3130332e3233342e3231382e302f32342d3234203d3e203338373638.roa (hash: vWQKx1TT5Vb7zbmKfpDwSS1ZiebEmEmR3LksZYKeYp8=) 2: FBACFC63658425B36399C4B9D0322622B8C5B7F0.crl (hash: DrMbgOMrsm3V0vonIer6dszIzqLbIY53NCsqJjz2il0=) 3: 323430373a336538303a3a2f33322d3438203d3e203338373638.roa (hash: jCqzfoNt2x+8bcJ6fatZirQ8CiZyxgl3URZLZEZ3szo=) 4: 323430373a336538303a363a3a2f34382d3438203d3e203338343936.roa (hash: 4k+7oiIZgf8A+xoNtWkGh4r/bBNQQHgBlobDBAPY3jY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/FBACFC63658425B36399C4B9D0322622B8C5B7F0.crl rsync://repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/FBACFC63658425B36399C4B9D0322622B8C5B7F0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBACFC63658425B36399C4B9D0322622B8C5B7F0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Mar 2026 02:59:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:19:ae:f4:70:2b:52:c1:24:12:b8:1a:0a:d1:d2:90:f1:d1:8e:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FBACFC63658425B36399C4B9D0322622B8C5B7F0 Validity Not Before: Mar 23 02:27:15 2026 GMT Not After : Mar 26 02:59:15 2026 GMT Subject: CN=1188435A521F666A9C3D2674BA2D68DCDBDBA7B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e7:23:84:9f:e6:04:5c:be:f7:20:3b:e2:a0: 7a:f8:5b:b6:49:5b:43:8c:9f:51:de:0b:af:19:2e: 3c:94:23:78:53:01:c8:79:f1:bd:b8:a6:96:0c:21: 25:2a:8b:5b:90:1f:95:eb:96:c4:85:e8:68:46:e9: 1e:65:40:e9:b6:92:dd:c6:c8:25:9c:a2:1d:c4:30: f7:e3:d8:f7:de:6f:e3:cd:a1:fe:9d:62:63:01:99: db:84:6d:36:1c:db:28:23:5b:04:90:0e:11:c6:20: aa:7b:2b:b2:68:39:c4:b0:7c:7f:75:76:0c:39:60: 28:ce:20:e4:ca:be:aa:d0:83:d3:85:6f:19:a6:de: 1b:b1:31:7e:3b:4d:56:8d:2e:f1:ba:10:56:75:6f: 38:75:a2:01:81:1c:81:ae:40:58:f2:5b:9b:8a:47: db:a3:e2:5b:e5:f8:51:3e:16:57:41:1d:12:da:ba: fe:37:0e:59:a8:7f:9a:86:6e:34:30:04:07:f9:8b: da:78:d4:ca:4d:f6:7c:39:88:7d:e3:15:d1:67:42: 21:d4:4f:32:e1:84:15:36:eb:6a:93:b9:4e:c2:21: 84:75:57:d6:bc:06:0a:e2:8e:d6:90:ec:c7:62:04: 66:47:52:2f:35:0a:41:ab:51:d6:ba:e9:8b:7f:8e: fe:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:88:43:5A:52:1F:66:6A:9C:3D:26:74:BA:2D:68:DC:DB:DB:A7:B6 X509v3 Authority Key Identifier: keyid:FB:AC:FC:63:65:84:25:B3:63:99:C4:B9:D0:32:26:22:B8:C5:B7:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/FBACFC63658425B36399C4B9D0322622B8C5B7F0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBACFC63658425B36399C4B9D0322622B8C5B7F0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/FBACFC63658425B36399C4B9D0322622B8C5B7F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:48:36:00:5e:80:c4:47:c6:cf:7d:27:01:ba:7e:84:83:27: a0:49:ac:97:1e:9a:41:0f:e5:ab:43:80:a2:c9:0a:3f:ee:4c: 32:ea:bf:1b:b9:36:f6:67:5b:a6:47:1a:b7:18:69:53:06:dd: e8:ad:b2:c5:e3:36:91:01:13:6d:49:69:b8:42:4a:1e:56:a3: 69:73:aa:6c:bc:2f:64:3f:ac:93:b9:c4:58:b7:49:fb:ea:23: c7:da:52:21:5d:94:fb:d7:1d:55:31:40:58:09:af:25:29:4f: 15:d4:e7:43:87:0b:bd:70:4b:ca:62:ff:19:7d:b2:d7:3e:45: 5a:ac:2c:bc:db:ae:1b:d0:1b:ae:16:cd:44:02:5d:7e:03:ad: bb:c6:88:ed:fb:64:44:48:c0:96:b1:3d:f9:ed:98:19:1b:61: 51:16:df:07:1f:2f:aa:a3:02:f6:11:f3:4a:57:88:9b:8a:86: 49:42:40:40:07:1a:68:ed:ba:2d:7e:81:28:f9:f8:33:9a:8a: a3:f8:a0:ce:6d:8d:e8:2d:42:da:49:9f:0a:63:61:2e:95:54: 6a:f6:ca:bf:22:23:5a:99:bd:5c:57:55:ab:be:fa:70:64:7a: 42:d9:c0:d8:dd:4b:7d:f6:55:8c:83:4a:ba:eb:09:55:40:2e: b0:d0:d0:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQRmu9HArUsEkErgaCtHSkPHRjnswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkJBQ0ZDNjM2NTg0MjVCMzYzOTlDNEI5RDAzMjI2MjJC OEM1QjdGMDAeFw0yNjAzMjMwMjI3MTVaFw0yNjAzMjYwMjU5MTVaMDMxMTAvBgNV BAMTKDExODg0MzVBNTIxRjY2NkE5QzNEMjY3NEJBMkQ2OERDREJEQkE3QjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT5yOEn+YEXL73IDvioHr4W7ZJ W0OMn1HeC68ZLjyUI3hTAch58b24ppYMISUqi1uQH5XrlsSF6GhG6R5lQOm2kt3G yCWcoh3EMPfj2Pfeb+PNof6dYmMBmduEbTYc2ygjWwSQDhHGIKp7K7JoOcSwfH91 dgw5YCjOIOTKvqrQg9OFbxmm3huxMX47TVaNLvG6EFZ1bzh1ogGBHIGuQFjyW5uK R9uj4lvl+FE+FldBHRLauv43Dlmof5qGbjQwBAf5i9p41MpN9nw5iH3jFdFnQiHU TzLhhBU262qTuU7CIYR1V9a8BgrijtaQ7MdiBGZHUi81CkGrUda66Yt/jv7dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEYhDWlIfZmqcPSZ0ui1o3Nvbp7YwHwYDVR0j BBgwFoAU+6z8Y2WEJbNjmcS50DImIrjFt/AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MWU5NDI0My04N2YwLTQyNmYtYTljYS00YzE5ZWRiMDZiNDIvMC9GQkFDRkM2MzY1 ODQyNUIzNjM5OUM0QjlEMDMyMjYyMkI4QzVCN0YwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkJBQ0ZDNjM2NTg0MjVCMzYzOTlDNEI5RDAzMjI2MjJCOEM1 QjdGMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTFlOTQyNDMtODdmMC00MjZmLWE5 Y2EtNGMxOWVkYjA2YjQyLzAvRkJBQ0ZDNjM2NTg0MjVCMzYzOTlDNEI5RDAzMjI2 MjJCOEM1QjdGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHhINgBegMRHxs99JwG6foSDJ6BJrJcemkEP 5atDgKLJCj/uTDLqvxu5NvZnW6ZHGrcYaVMG3eitssXjNpEBE21JabhCSh5Wo2lz qmy8L2Q/rJO5xFi3SfvqI8faUiFdlPvXHVUxQFgJryUpTxXU50OHC71wS8pi/xl9 stc+RVqsLLzbrhvQG64WzUQCXX4DrbvGiO37ZERIwJaxPfntmBkbYVEW3wcfL6qj AvYR80pXiJuKhklCQEAHGmjtui1+gSj5+DOaiqP4oM5tjegtQtpJnwpjYS6VVGr2 yr8iI1qZvVxXVau++nBkekLZwNjdS332VYyDSrrrCVVALrDQ0AI= -----END CERTIFICATE-----Generated at Tue Mar 24 07:07:01 2026 by rpki-client