$ rpki-client -vvf repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.mft File: FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.mft (raw, json) Hash identifier: 8LhlS+c7kL28PhCduepDTp8hv16PdGmmnTk4zjxqM2E= Subject key identifier: 2D:80:3D:C7:EA:22:33:F1:97:9B:23:87:8C:ED:40:E5:B3:32:2A:72 Authority key identifier: FB:1D:4F:91:39:A6:1D:F4:B9:1E:31:27:0F:3D:2A:1C:07:B3:5C:E1 Certificate issuer: /CN=FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1 Certificate serial: 5C867E7D115B29AE53B77D14B876BF93E43A78EB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.mft Manifest number: 0207 Signing time: Sun 19 Apr 2026 06:32:25 +0000 Manifest this update: Sun 19 Apr 2026 06:27:25 +0000 Manifest next update: Wed 22 Apr 2026 10:14:25 +0000 Files and hashes: 1: 3130332e3134392e3131382e302f32332d3234203d3e20313431303535.roa (hash: IBRiB5ZmLj4+M80KfLmmLbAbFNEpKpmTUiD30MwcLOE=) 2: FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.crl (hash: 2ijVcPaOOx647Qpg+JG/0NItJozJShF5c+fOFWHX0Os=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.crl rsync://repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 10:14:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:86:7e:7d:11:5b:29:ae:53:b7:7d:14:b8:76:bf:93:e4:3a:78:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1 Validity Not Before: Apr 19 06:27:25 2026 GMT Not After : Apr 22 10:14:25 2026 GMT Subject: CN=2D803DC7EA2233F1979B23878CED40E5B3322A72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e3:31:c5:39:f6:0d:2a:01:50:ef:19:6f:19: 76:74:55:dc:e0:04:ef:3c:6f:b9:3e:e8:0d:aa:1e: a1:53:9a:1a:9e:81:16:1b:2c:4f:51:70:f4:60:0a: 59:dd:cd:7b:9a:3d:5f:96:6a:8a:0c:74:25:e1:31: 33:2a:b3:6a:c8:60:64:c5:41:a0:d3:d6:8b:64:cd: 6f:b6:1e:e6:31:24:7c:f3:d6:f0:05:1b:13:7d:e1: 7b:89:d0:f2:f8:39:0d:80:03:73:53:09:98:75:22: d6:87:3c:a6:87:b5:d1:93:c8:70:3e:8e:36:57:2d: 0a:dc:32:7a:70:43:7d:43:69:70:4f:f7:80:ff:f4: d2:d0:16:c3:34:bf:e8:33:44:1c:ed:05:c3:55:6d: df:16:40:a0:54:50:e1:eb:f1:2f:33:93:42:8b:5d: 15:b6:8e:d4:9d:c3:34:b3:89:83:78:79:18:74:40: 71:09:a5:7d:d8:8e:51:b9:ff:c4:aa:8e:e8:88:27: 0d:45:f0:dc:37:34:81:dc:5e:3f:f4:ea:5c:7b:00: a3:61:13:f2:34:65:3c:0d:9f:1b:25:e4:b8:50:15: 3d:68:27:95:83:05:28:ce:15:93:65:1d:f8:b0:9d: 11:a0:2c:08:8d:81:28:42:99:97:fa:83:dc:91:77: 82:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:80:3D:C7:EA:22:33:F1:97:9B:23:87:8C:ED:40:E5:B3:32:2A:72 X509v3 Authority Key Identifier: keyid:FB:1D:4F:91:39:A6:1D:F4:B9:1E:31:27:0F:3D:2A:1C:07:B3:5C:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:cc:8a:3a:16:94:9c:bf:9e:bf:97:f0:62:92:c3:af:ef:64: 55:ed:df:6f:c3:6a:b8:7c:5a:53:fd:bb:1d:ab:f8:ae:14:79: d1:84:52:53:1e:5b:0b:da:23:ca:43:fd:25:c7:1c:de:ac:8c: 34:f6:75:03:21:e0:b0:4c:90:6b:65:f2:16:b7:48:86:5a:e5: 18:83:24:9c:10:72:79:20:30:31:3a:7d:a1:a0:05:7a:3d:fc: ef:df:f5:c5:9d:31:53:6b:55:89:6b:f0:27:d4:08:0e:d2:3b: 53:1a:74:7d:9d:68:8a:5e:13:23:10:52:51:f9:e7:6c:6e:fc: 90:dd:a4:19:da:b8:81:c4:cf:54:21:0a:cf:9b:b8:24:eb:1b: 28:d6:b8:9b:4d:7e:74:44:6a:0f:ad:23:e8:f1:23:35:a9:86: 11:e0:f9:9b:64:d1:e7:4a:6a:7f:1e:5f:64:00:4e:02:b8:b9: 6b:ba:2a:59:a5:d6:4f:46:39:18:a8:76:2e:1e:a2:40:90:e0: b3:89:ae:f6:df:0d:b4:a7:56:f7:9e:ad:77:04:0b:fc:18:59: b1:4d:a9:2d:b4:e5:b4:4c:84:ee:6c:6b:42:5e:82:82:42:35: e1:46:c0:65:56:b8:ff:06:db:06:2a:5b:73:79:c4:0d:82:4c: 45:bb:ba:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXIZ+fRFbKa5Tt30UuHa/k+Q6eOswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkIxRDRGOTEzOUE2MURGNEI5MUUzMTI3MEYzRDJBMUMw N0IzNUNFMTAeFw0yNjA0MTkwNjI3MjVaFw0yNjA0MjIxMDE0MjVaMDMxMTAvBgNV BAMTKDJEODAzREM3RUEyMjMzRjE5NzlCMjM4NzhDRUQ0MEU1QjMzMjJBNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC74zHFOfYNKgFQ7xlvGXZ0Vdzg BO88b7k+6A2qHqFTmhqegRYbLE9RcPRgClndzXuaPV+WaooMdCXhMTMqs2rIYGTF QaDT1otkzW+2HuYxJHzz1vAFGxN94XuJ0PL4OQ2AA3NTCZh1ItaHPKaHtdGTyHA+ jjZXLQrcMnpwQ31DaXBP94D/9NLQFsM0v+gzRBztBcNVbd8WQKBUUOHr8S8zk0KL XRW2jtSdwzSziYN4eRh0QHEJpX3YjlG5/8SqjuiIJw1F8Nw3NIHcXj/06lx7AKNh E/I0ZTwNnxsl5LhQFT1oJ5WDBSjOFZNlHfiwnRGgLAiNgShCmZf6g9yRd4K5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQULYA9x+oiM/GXmyOHjO1A5bMyKnIwHwYDVR0j BBgwFoAU+x1PkTmmHfS5HjEnDz0qHAezXOEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Y2M3MGY3ZC0zM2ZlLTRkZjItODFlNS1kYzBkNTVhYzUxNzAvMC9GQjFENEY5MTM5 QTYxREY0QjkxRTMxMjcwRjNEMkExQzA3QjM1Q0UxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkIxRDRGOTEzOUE2MURGNEI5MUUzMTI3MEYzRDJBMUMwN0Iz NUNFMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWNjNzBmN2QtMzNmZS00ZGYyLTgx ZTUtZGMwZDU1YWM1MTcwLzAvRkIxRDRGOTEzOUE2MURGNEI5MUUzMTI3MEYzRDJB MUMwN0IzNUNFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACDMijoWlJy/nr+X8GKSw6/vZFXt32/Darh8 WlP9ux2r+K4UedGEUlMeWwvaI8pD/SXHHN6sjDT2dQMh4LBMkGtl8ha3SIZa5RiD JJwQcnkgMDE6faGgBXo9/O/f9cWdMVNrVYlr8CfUCA7SO1MadH2daIpeEyMQUlH5 52xu/JDdpBnauIHEz1QhCs+buCTrGyjWuJtNfnREag+tI+jxIzWphhHg+Ztk0edK an8eX2QATgK4uWu6Klml1k9GORiodi4eokCQ4LOJrvbfDbSnVveerXcEC/wYWbFN qS205bRMhO5sa0JegoJCNeFGwGVWuP8G2wYqW3N5xA2CTEW7uh8= -----END CERTIFICATE-----Generated at Sun Apr 19 13:00:20 2026 by rpki-client