$ rpki-client -vvf repo-rpki.idnic.net/repo/47ad0a3a-26b8-449a-88ec-bf0398ea53a6/0/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.mft File: FBC39A6E177F8DD7BA5E257D4489C57574C07E81.mft (raw, json) Hash identifier: QUXmbJI9Z2xyPMOteI45bnYUNFpFrvp2P9Am0oqCl9Q= Subject key identifier: 02:38:AF:5F:DF:95:71:67:F9:98:2A:D9:9B:C9:18:62:A9:72:54:5C Authority key identifier: FB:C3:9A:6E:17:7F:8D:D7:BA:5E:25:7D:44:89:C5:75:74:C0:7E:81 Certificate issuer: /CN=FBC39A6E177F8DD7BA5E257D4489C57574C07E81 Certificate serial: 57DDD5096530DA02FDEDA064F1AB02862E72456F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.cer Subject info access: rsync://repo-rpki.idnic.net/repo/47ad0a3a-26b8-449a-88ec-bf0398ea53a6/0/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.mft Manifest number: F5 Signing time: Sun 01 Mar 2026 22:41:56 +0000 Manifest this update: Sun 01 Mar 2026 22:36:56 +0000 Manifest next update: Thu 05 Mar 2026 00:45:56 +0000 Files and hashes: 1: 3136302e32352e3235302e302f32342d3234203d3e20313533303938.roa (hash: MrtKeNjFNhl14mhfxKI/GhEb/0ohG0B8bmQ7SLXWttE=) 2: 3136302e32352e3235302e302f32332d3233203d3e20313533303938.roa (hash: eL66HCHXLPzvvpIp6yZbwohxEw2vNNGKLUjoRHRX4l0=) 3: FBC39A6E177F8DD7BA5E257D4489C57574C07E81.crl (hash: ruyKFlgLTZOnz3aWoxlNSP4j/CELq/Drg1LNs90DA1c=) 4: 3136302e32352e3235312e302f32342d3234203d3e20313533303938.roa (hash: +X50gpeSdWT/Y5d22C2/uBOgo8Xzo2+UIRSSAuVLkyI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/47ad0a3a-26b8-449a-88ec-bf0398ea53a6/0/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.crl rsync://repo-rpki.idnic.net/repo/47ad0a3a-26b8-449a-88ec-bf0398ea53a6/0/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:45:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:dd:d5:09:65:30:da:02:fd:ed:a0:64:f1:ab:02:86:2e:72:45:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FBC39A6E177F8DD7BA5E257D4489C57574C07E81 Validity Not Before: Mar 1 22:36:56 2026 GMT Not After : Mar 5 00:45:56 2026 GMT Subject: CN=0238AF5FDF957167F9982AD99BC91862A972545C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4d:50:6d:fe:2c:0d:2f:30:aa:ef:47:12:c8: 9c:2b:23:94:8d:d8:ac:65:ae:4e:52:18:29:df:4b: 40:33:6a:39:a4:01:eb:24:89:28:9e:d6:6f:55:a1: aa:be:9c:54:21:4b:08:65:9c:91:4f:c1:30:1f:d6: 09:bb:d6:77:9c:62:ef:9e:c5:0b:46:f9:a2:19:56: 6c:fa:08:4b:f1:8a:5d:af:d9:8b:70:0d:40:49:33: ce:26:f0:6a:bd:d2:16:c9:83:a0:48:c0:84:dd:64: 5d:da:71:81:5c:be:d4:eb:e5:82:3e:cb:81:4f:7c: d5:fb:92:3f:2f:92:b2:c8:8c:d5:93:a6:c0:c6:15: 85:1c:c1:1b:5f:63:e7:e2:df:69:c4:65:73:eb:80: 1f:70:a0:6a:72:77:f4:da:f4:fa:84:46:2e:87:08: 7c:e8:5e:3f:7b:db:87:cc:77:7a:4d:b8:a7:f6:b5: b4:31:5d:4a:98:c1:ae:3d:ce:d6:1b:58:d9:51:60: 9e:8a:3c:94:d2:5c:1e:7d:e5:88:7f:45:ee:9a:29: 21:4e:77:50:6d:a2:67:8c:e3:50:47:2b:e7:da:dc: 2b:0d:90:0f:dd:d8:8f:b8:dd:3c:fe:40:19:f0:8b: 38:d6:3b:78:9e:05:83:ec:bf:eb:48:89:00:fe:a2: f5:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:38:AF:5F:DF:95:71:67:F9:98:2A:D9:9B:C9:18:62:A9:72:54:5C X509v3 Authority Key Identifier: keyid:FB:C3:9A:6E:17:7F:8D:D7:BA:5E:25:7D:44:89:C5:75:74:C0:7E:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/47ad0a3a-26b8-449a-88ec-bf0398ea53a6/0/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/47ad0a3a-26b8-449a-88ec-bf0398ea53a6/0/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:38:de:ae:8b:18:5b:c2:09:dd:35:8c:c9:0e:09:cb:56:47: 1b:67:fb:59:18:7b:9f:6b:ed:17:c8:d0:63:1b:06:70:b7:bc: 1f:3b:de:49:b5:6f:42:58:85:5c:df:bc:ca:db:fc:43:3b:b0: ae:59:3f:c0:5e:d9:b3:8a:89:90:94:90:c2:88:77:cc:18:61: 87:60:48:c6:91:1c:b7:0d:dc:d1:3d:33:fc:fd:55:ed:a0:5d: 68:ae:7d:a0:97:4c:fa:86:02:a2:d8:06:c3:28:39:06:3c:7e: 2a:c2:f4:1a:2b:ac:13:a2:a2:55:d5:c4:a1:21:0e:22:bf:41: 69:eb:12:60:e6:55:44:4a:b1:8d:cc:fa:e0:08:ae:d0:3c:89: 7e:bb:63:4d:70:db:8e:3d:58:02:30:9b:c0:a3:5d:39:ce:72: 47:8a:c0:37:0b:c6:da:5e:f8:d1:6c:55:51:34:7d:12:fd:71: 6b:17:50:c8:6d:19:89:f3:40:7d:65:7d:c2:8e:b2:b6:f3:55: 24:4a:ab:d9:aa:ff:ab:e6:a0:68:15:04:ad:d1:5d:26:29:4a: 0f:2f:b3:3f:12:ac:c9:6e:d5:7e:db:c6:84:2d:9f:34:3c:22: 28:6c:37:ba:09:ef:6d:d0:4e:47:ba:01:c7:da:90:04:01:0c: 45:93:f5:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV93VCWUw2gL97aBk8asChi5yRW8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkJDMzlBNkUxNzdGOEREN0JBNUUyNTdENDQ4OUM1NzU3 NEMwN0U4MTAeFw0yNjAzMDEyMjM2NTZaFw0yNjAzMDUwMDQ1NTZaMDMxMTAvBgNV BAMTKDAyMzhBRjVGREY5NTcxNjdGOTk4MkFEOTlCQzkxODYyQTk3MjU0NUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7TVBt/iwNLzCq70cSyJwrI5SN 2Kxlrk5SGCnfS0AzajmkAeskiSie1m9Voaq+nFQhSwhlnJFPwTAf1gm71necYu+e xQtG+aIZVmz6CEvxil2v2YtwDUBJM84m8Gq90hbJg6BIwITdZF3acYFcvtTr5YI+ y4FPfNX7kj8vkrLIjNWTpsDGFYUcwRtfY+fi32nEZXPrgB9woGpyd/Ta9PqERi6H CHzoXj9724fMd3pNuKf2tbQxXUqYwa49ztYbWNlRYJ6KPJTSXB595Yh/Re6aKSFO d1BtomeM41BHK+fa3CsNkA/d2I+43Tz+QBnwizjWO3ieBYPsv+tIiQD+ovW/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAjivX9+VcWf5mCrZm8kYYqlyVFwwHwYDVR0j BBgwFoAU+8Oabhd/jde6XiV9RInFdXTAfoEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 N2FkMGEzYS0yNmI4LTQ0OWEtODhlYy1iZjAzOThlYTUzYTYvMC9GQkMzOUE2RTE3 N0Y4REQ3QkE1RTI1N0Q0NDg5QzU3NTc0QzA3RTgxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkJDMzlBNkUxNzdGOEREN0JBNUUyNTdENDQ4OUM1NzU3NEMw N0U4MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDdhZDBhM2EtMjZiOC00NDlhLTg4 ZWMtYmYwMzk4ZWE1M2E2LzAvRkJDMzlBNkUxNzdGOEREN0JBNUUyNTdENDQ4OUM1 NzU3NEMwN0U4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAE43q6LGFvCCd01jMkOCctWRxtn+1kYe59r 7RfI0GMbBnC3vB873km1b0JYhVzfvMrb/EM7sK5ZP8Be2bOKiZCUkMKId8wYYYdg SMaRHLcN3NE9M/z9Ve2gXWiufaCXTPqGAqLYBsMoOQY8firC9BorrBOiolXVxKEh DiK/QWnrEmDmVURKsY3M+uAIrtA8iX67Y01w2449WAIwm8CjXTnOckeKwDcLxtpe +NFsVVE0fRL9cWsXUMhtGYnzQH1lfcKOsrbzVSRKq9mq/6vmoGgVBK3RXSYpSg8v sz8SrMlu1X7bxoQtnzQ8IihsN7oJ723QTke6AcfakAQBDEWT9d8= -----END CERTIFICATE-----Generated at Mon Mar 2 09:52:03 2026 by rpki-client