$ rpki-client -vvf repo-rpki.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.mft File: FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.mft (raw, json) Hash identifier: Qgtnvy3Nq6IxI4sXNxi0AQ0uQQqnZkae4kUelaWMTNY= Subject key identifier: 69:2B:6F:B6:85:23:ED:CB:3F:EF:DC:5F:84:1D:6E:25:F0:67:8D:E6 Authority key identifier: FA:B0:81:FC:D8:6A:B0:F8:1D:41:C9:E5:FB:9C:3D:32:22:0F:48:CD Certificate issuer: /CN=FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD Certificate serial: 1610CD8F659A243A795405C110AC2829EDC2AE04 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.mft Manifest number: 0160 Signing time: Mon 20 Apr 2026 19:01:37 +0000 Manifest this update: Mon 20 Apr 2026 18:56:37 +0000 Manifest next update: Fri 24 Apr 2026 01:37:37 +0000 Files and hashes: 1: 3135372e31302e302e302f32332d3233203d3e20313532303739.roa (hash: c4rjc7ofNNmyZRUSVo5AMDmJDSE543ooVHV0iFLdEdk=) 2: FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.crl (hash: 6yQvOVhqZ5AuuMrZamJ2RfzFnAhbxjoyQbvgvpCcJ/0=) 3: 3135372e31302e302e302f32342d3234203d3e20313532303739.roa (hash: xoCkaz5i4P6iyUaFm6z1IavkyQCxOdN9JzTfIbqv1G0=) 4: 3135372e31302e312e302f32342d3234203d3e20313532303739.roa (hash: DOErYNNeAHBg7jPgOxCOjjiUusb0dUbys1pc3kVIxCE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.crl rsync://repo-rpki.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 01:37:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:10:cd:8f:65:9a:24:3a:79:54:05:c1:10:ac:28:29:ed:c2:ae:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD Validity Not Before: Apr 20 18:56:37 2026 GMT Not After : Apr 24 01:37:37 2026 GMT Subject: CN=692B6FB68523EDCB3FEFDC5F841D6E25F0678DE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:61:53:cd:a0:42:ad:9f:21:59:47:da:c6:9e: 28:be:d7:cd:46:b6:c4:a2:53:0b:1a:d2:3d:96:0b: bb:a8:13:dd:15:06:63:7e:23:b8:5e:5a:68:f7:b9: d9:46:8e:1e:5c:96:cc:0e:2a:d2:1d:64:26:64:15: 5a:fe:49:45:12:e4:43:4e:cf:25:0b:db:ad:c4:3c: cb:f8:66:d0:84:43:95:74:8c:db:bb:13:c9:40:26: 23:29:e6:4e:91:9d:de:f6:2e:74:b1:e4:8c:9f:f9: de:15:4d:9a:96:e3:f3:f1:7f:03:63:07:b4:36:96: 20:19:b1:9a:43:ff:65:50:8c:11:56:fc:27:e2:d3: 6c:31:10:91:46:67:21:0c:f9:d4:fe:31:ce:03:31: 61:d4:cb:6f:03:bb:c0:d7:ba:64:84:4e:a9:95:66: ba:23:91:7e:92:2a:13:af:de:e3:95:a8:b1:68:40: 36:ec:d6:11:1b:fe:84:10:fb:2d:4a:cf:99:23:c2: 7b:87:11:4e:48:6f:12:a4:4f:b0:7f:ce:f9:5d:1c: 7f:4b:7e:27:d8:30:6e:fa:70:9f:ef:1d:31:15:a8: e3:63:d2:d3:e6:32:36:11:b9:6d:05:b9:fe:42:52: af:a5:83:40:5f:ea:58:28:98:e7:24:23:8f:82:d0: d8:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:2B:6F:B6:85:23:ED:CB:3F:EF:DC:5F:84:1D:6E:25:F0:67:8D:E6 X509v3 Authority Key Identifier: keyid:FA:B0:81:FC:D8:6A:B0:F8:1D:41:C9:E5:FB:9C:3D:32:22:0F:48:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:6e:eb:01:ac:c7:2c:d6:22:7f:df:5e:2a:34:f9:42:07:cc: 43:77:4b:e9:51:e3:9f:a0:e9:72:b6:47:b0:d8:4c:c2:7a:ac: a0:b5:70:1f:8d:1c:ac:b3:51:d7:66:32:23:c9:a6:47:a0:f5: 3a:7b:4b:73:0a:ee:43:c6:9b:d0:a7:7d:5c:97:a4:d7:3b:6d: 66:45:50:61:85:51:34:a6:2e:76:4a:bf:53:2a:3d:35:8d:2a: 26:d1:66:21:9b:56:9b:d2:f6:a3:ad:13:cc:f7:bc:f6:8a:f3: b3:58:c4:d1:c3:3d:74:42:45:28:5d:5f:c1:19:25:71:a0:f2: 88:3f:71:ea:fd:96:a3:40:9f:f6:ad:8b:b9:58:7b:4b:1c:4d: 4d:1b:ad:a6:5f:1d:e1:f4:7d:58:eb:2b:8e:dc:8f:35:94:e9: 0b:96:f2:2c:ff:1e:2d:4a:ba:77:99:0c:88:67:2e:c4:79:ed: 7e:ac:84:1b:ae:d5:60:40:a9:a9:44:00:57:54:79:33:57:41: b5:b3:1a:02:f8:da:82:ad:4c:e2:10:be:6e:45:bd:6b:91:4c: e8:55:a7:cd:e9:ef:44:4c:41:81:7e:99:10:77:ae:08:80:52: 32:61:11:9b:d2:c8:0a:b8:86:ff:48:4f:3b:89:89:74:be:83: 64:c9:76:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFhDNj2WaJDp5VAXBEKwoKe3CrgQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkFCMDgxRkNEODZBQjBGODFENDFDOUU1RkI5QzNEMzIy MjBGNDhDRDAeFw0yNjA0MjAxODU2MzdaFw0yNjA0MjQwMTM3MzdaMDMxMTAvBgNV BAMTKDY5MkI2RkI2ODUyM0VEQ0IzRkVGREM1Rjg0MUQ2RTI1RjA2NzhERTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOYVPNoEKtnyFZR9rGnii+181G tsSiUwsa0j2WC7uoE90VBmN+I7heWmj3udlGjh5clswOKtIdZCZkFVr+SUUS5ENO zyUL263EPMv4ZtCEQ5V0jNu7E8lAJiMp5k6Rnd72LnSx5Iyf+d4VTZqW4/PxfwNj B7Q2liAZsZpD/2VQjBFW/Cfi02wxEJFGZyEM+dT+Mc4DMWHUy28Du8DXumSETqmV ZrojkX6SKhOv3uOVqLFoQDbs1hEb/oQQ+y1Kz5kjwnuHEU5IbxKkT7B/zvldHH9L fifYMG76cJ/vHTEVqONj0tPmMjYRuW0Fuf5CUq+lg0Bf6lgomOckI4+C0NhDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaStvtoUj7cs/79xfhB1uJfBnjeYwHwYDVR0j BBgwFoAU+rCB/NhqsPgdQcnl+5w9MiIPSM0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OTRkMWY2Mi04NDg4LTQwODYtOGQ0Yy1mMmRlNWM3NmRhM2QvMC9GQUIwODFGQ0Q4 NkFCMEY4MUQ0MUM5RTVGQjlDM0QzMjIyMEY0OENELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkFCMDgxRkNEODZBQjBGODFENDFDOUU1RkI5QzNEMzIyMjBG NDhDRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTk0ZDFmNjItODQ4OC00MDg2LThk NGMtZjJkZTVjNzZkYTNkLzAvRkFCMDgxRkNEODZBQjBGODFENDFDOUU1RkI5QzNE MzIyMjBGNDhDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKhu6wGsxyzWIn/fXio0+UIHzEN3S+lR45+g 6XK2R7DYTMJ6rKC1cB+NHKyzUddmMiPJpkeg9Tp7S3MK7kPGm9CnfVyXpNc7bWZF UGGFUTSmLnZKv1MqPTWNKibRZiGbVpvS9qOtE8z3vPaK87NYxNHDPXRCRShdX8EZ JXGg8og/cer9lqNAn/ati7lYe0scTU0braZfHeH0fVjrK47cjzWU6QuW8iz/Hi1K uneZDIhnLsR57X6shBuu1WBAqalEAFdUeTNXQbWzGgL42oKtTOIQvm5FvWuRTOhV p83p70RMQYF+mRB3rgiAUjJhEZvSyAq4hv9ITzuJiXS+g2TJdsg= -----END CERTIFICATE-----Generated at Wed Apr 22 04:53:24 2026 by rpki-client