$ rpki-client -vvf repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/FBACFC63658425B36399C4B9D0322622B8C5B7F0.mft File: FBACFC63658425B36399C4B9D0322622B8C5B7F0.mft (raw, json) Hash identifier: 5NaSUrF776VYErX1Npee+U4rU7aPtbNOHnnTEVktI1M= Subject key identifier: 2B:3A:CB:66:3C:BE:9D:79:F5:9A:2F:5B:C6:9F:52:5F:FB:D0:E0:61 Authority key identifier: FB:AC:FC:63:65:84:25:B3:63:99:C4:B9:D0:32:26:22:B8:C5:B7:F0 Certificate issuer: /CN=FBACFC63658425B36399C4B9D0322622B8C5B7F0 Certificate serial: 0AA3C3436E82556C64EFBDD8E3A736066DD9E96F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBACFC63658425B36399C4B9D0322622B8C5B7F0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/FBACFC63658425B36399C4B9D0322622B8C5B7F0.mft Manifest number: 0570 Signing time: Wed 15 Apr 2026 11:32:21 +0000 Manifest this update: Wed 15 Apr 2026 11:27:21 +0000 Manifest next update: Sat 18 Apr 2026 16:08:21 +0000 Files and hashes: 1: FBACFC63658425B36399C4B9D0322622B8C5B7F0.crl (hash: 5IhLy4ItATitOzZnaMs0tvqbW06bfW11bD3VUYPnKXU=) 2: 3130332e3233342e3231382e302f32342d3234203d3e203338373638.roa (hash: vWQKx1TT5Vb7zbmKfpDwSS1ZiebEmEmR3LksZYKeYp8=) 3: 323430373a336538303a363a3a2f34382d3438203d3e203338343936.roa (hash: 3Y3mlm4HMyrgNpmUNSqSOB2l/S9ZhaHNUoUcTNO5h0c=) 4: 323430373a336538303a3a2f33322d3438203d3e203338373638.roa (hash: jCqzfoNt2x+8bcJ6fatZirQ8CiZyxgl3URZLZEZ3szo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/FBACFC63658425B36399C4B9D0322622B8C5B7F0.crl rsync://repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/FBACFC63658425B36399C4B9D0322622B8C5B7F0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBACFC63658425B36399C4B9D0322622B8C5B7F0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 16:08:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:a3:c3:43:6e:82:55:6c:64:ef:bd:d8:e3:a7:36:06:6d:d9:e9:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FBACFC63658425B36399C4B9D0322622B8C5B7F0 Validity Not Before: Apr 15 11:27:21 2026 GMT Not After : Apr 18 16:08:21 2026 GMT Subject: CN=2B3ACB663CBE9D79F59A2F5BC69F525FFBD0E061 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a0:40:9b:e4:ee:da:11:ef:46:e2:f9:ca:f1: 9e:7a:12:35:80:81:c0:8c:88:3d:9f:28:b2:e9:6a: 82:d4:fd:4b:cb:5d:04:ab:70:fc:e2:0f:29:3f:f6: 6a:5e:7c:71:96:1c:8d:76:e8:fb:70:f9:c5:45:eb: ee:48:bf:23:3c:42:e7:23:7e:ac:fb:1c:6b:0b:9d: 65:78:41:72:9d:67:5c:f5:7c:83:af:50:b1:00:8e: e7:03:0e:6a:4b:59:3b:83:63:81:ed:bf:ba:e1:13: 37:e8:23:91:71:0e:b8:b6:ea:ce:6c:f9:28:a6:fd: 3e:bd:70:3e:a5:62:e7:e1:50:ff:29:d2:56:91:20: 80:91:0d:f4:93:b2:da:c8:17:67:70:42:83:8e:b5: e0:1d:98:be:48:d8:a0:fc:5f:f5:72:26:73:9c:5c: 7e:49:45:af:87:ff:59:89:2d:20:41:89:bf:72:10: 84:37:40:a9:62:ed:30:73:51:87:f1:03:5f:60:a3: 17:23:81:0c:61:00:a9:9c:d8:3e:4b:2c:cb:7e:5d: 7f:db:3f:bc:56:e8:23:ba:4c:87:77:34:89:4c:73: 1f:e7:be:b8:89:1c:a8:72:2e:da:88:58:3c:ec:16: 64:4f:7b:80:ea:d2:00:10:bb:35:01:cc:34:b0:af: e8:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:3A:CB:66:3C:BE:9D:79:F5:9A:2F:5B:C6:9F:52:5F:FB:D0:E0:61 X509v3 Authority Key Identifier: keyid:FB:AC:FC:63:65:84:25:B3:63:99:C4:B9:D0:32:26:22:B8:C5:B7:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/FBACFC63658425B36399C4B9D0322622B8C5B7F0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBACFC63658425B36399C4B9D0322622B8C5B7F0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/FBACFC63658425B36399C4B9D0322622B8C5B7F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:2a:64:b5:ac:47:00:7b:87:1a:c6:b2:45:02:bb:97:ed:3e: 83:ea:08:28:3d:a7:f1:ed:fe:ae:3d:fb:cb:82:24:3c:d3:b6: cf:32:9f:42:5a:ea:1a:b2:e3:15:a4:54:eb:e3:53:09:a8:c1: 0d:1e:5d:f1:bb:5b:ce:db:21:0b:13:e0:aa:b0:da:a9:3c:12: be:87:86:08:c7:95:77:b0:1c:d0:7e:8b:c5:a2:2f:b8:fd:dd: eb:0d:85:72:72:c2:ac:80:0b:35:66:b2:4f:42:33:a3:f7:aa: b7:b6:8f:a1:ac:79:12:e1:b5:7a:4f:79:1d:14:ee:19:b3:22: 2c:25:c8:bf:56:41:ba:b1:3c:8f:cb:51:d6:21:d2:dd:c2:1c: 04:18:2b:4d:8e:5a:3e:2e:f3:21:1e:31:66:d7:d1:6e:d2:d4: 1c:d3:8d:f5:08:d3:21:e4:09:1d:6b:9d:35:be:42:ef:c2:2b: 51:94:24:34:ac:7c:02:fa:06:3b:c9:63:60:c6:e9:3f:f4:8a: 44:e8:3c:15:47:93:89:a5:d5:c1:35:fb:d9:22:16:15:95:97: 2d:28:d2:fe:99:40:c9:17:d3:1e:d8:65:d3:2e:c2:76:82:fd: a7:f7:d6:97:98:c8:23:78:fe:ac:46:9b:c9:23:55:8c:82:81: c6:df:0d:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCqPDQ26CVWxk773Y46c2Bm3Z6W8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkJBQ0ZDNjM2NTg0MjVCMzYzOTlDNEI5RDAzMjI2MjJC OEM1QjdGMDAeFw0yNjA0MTUxMTI3MjFaFw0yNjA0MTgxNjA4MjFaMDMxMTAvBgNV BAMTKDJCM0FDQjY2M0NCRTlENzlGNTlBMkY1QkM2OUY1MjVGRkJEMEUwNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwoECb5O7aEe9G4vnK8Z56EjWA gcCMiD2fKLLpaoLU/UvLXQSrcPziDyk/9mpefHGWHI126Ptw+cVF6+5IvyM8Qucj fqz7HGsLnWV4QXKdZ1z1fIOvULEAjucDDmpLWTuDY4Htv7rhEzfoI5FxDri26s5s +Sim/T69cD6lYufhUP8p0laRIICRDfSTstrIF2dwQoOOteAdmL5I2KD8X/VyJnOc XH5JRa+H/1mJLSBBib9yEIQ3QKli7TBzUYfxA19goxcjgQxhAKmc2D5LLMt+XX/b P7xW6CO6TId3NIlMcx/nvriJHKhyLtqIWDzsFmRPe4Dq0gAQuzUBzDSwr+ilAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKzrLZjy+nXn1mi9bxp9SX/vQ4GEwHwYDVR0j BBgwFoAU+6z8Y2WEJbNjmcS50DImIrjFt/AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MWU5NDI0My04N2YwLTQyNmYtYTljYS00YzE5ZWRiMDZiNDIvMC9GQkFDRkM2MzY1 ODQyNUIzNjM5OUM0QjlEMDMyMjYyMkI4QzVCN0YwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkJBQ0ZDNjM2NTg0MjVCMzYzOTlDNEI5RDAzMjI2MjJCOEM1 QjdGMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTFlOTQyNDMtODdmMC00MjZmLWE5 Y2EtNGMxOWVkYjA2YjQyLzAvRkJBQ0ZDNjM2NTg0MjVCMzYzOTlDNEI5RDAzMjI2 MjJCOEM1QjdGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE0qZLWsRwB7hxrGskUCu5ftPoPqCCg9p/Ht /q49+8uCJDzTts8yn0Ja6hqy4xWkVOvjUwmowQ0eXfG7W87bIQsT4Kqw2qk8Er6H hgjHlXewHNB+i8WiL7j93esNhXJywqyACzVmsk9CM6P3qre2j6GseRLhtXpPeR0U 7hmzIiwlyL9WQbqxPI/LUdYh0t3CHAQYK02OWj4u8yEeMWbX0W7S1BzTjfUI0yHk CR1rnTW+Qu/CK1GUJDSsfAL6BjvJY2DG6T/0ikToPBVHk4ml1cE1+9kiFhWVly0o 0v6ZQMkX0x7YZdMuwnaC/af31peYyCN4/qxGm8kjVYyCgcbfDSc= -----END CERTIFICATE-----Generated at Fri Apr 17 16:59:58 2026 by rpki-client