$ rpki-client -vvf repo-rpki.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.mft File: FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.mft (raw, json) Hash identifier: 8nk6VQtw3z15hCTFdU0vO9r9IsQ75COnK54SWe7tLXY= Subject key identifier: 6D:A8:7E:3A:5D:0A:86:DA:11:85:11:6E:14:ED:FD:58:7E:B9:EE:47 Authority key identifier: FA:B0:81:FC:D8:6A:B0:F8:1D:41:C9:E5:FB:9C:3D:32:22:0F:48:CD Certificate issuer: /CN=FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD Certificate serial: 4265360F72867808C1BF7821868A8F0ABD8A4AFF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.mft Manifest number: 0149 Signing time: Sat 28 Feb 2026 14:41:29 +0000 Manifest this update: Sat 28 Feb 2026 14:36:29 +0000 Manifest next update: Tue 03 Mar 2026 22:30:29 +0000 Files and hashes: 1: 3135372e31302e302e302f32332d3233203d3e20313532303739.roa (hash: c4rjc7ofNNmyZRUSVo5AMDmJDSE543ooVHV0iFLdEdk=) 2: 3135372e31302e312e302f32342d3234203d3e20313532303739.roa (hash: DOErYNNeAHBg7jPgOxCOjjiUusb0dUbys1pc3kVIxCE=) 3: FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.crl (hash: N+ndxgvd2NK2uwHnFsY2U2elp03zCdGe4qd+fJkMZEg=) 4: 3135372e31302e302e302f32342d3234203d3e20313532303739.roa (hash: xoCkaz5i4P6iyUaFm6z1IavkyQCxOdN9JzTfIbqv1G0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.crl rsync://repo-rpki.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 22:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:65:36:0f:72:86:78:08:c1:bf:78:21:86:8a:8f:0a:bd:8a:4a:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD Validity Not Before: Feb 28 14:36:29 2026 GMT Not After : Mar 3 22:30:29 2026 GMT Subject: CN=6DA87E3A5D0A86DA1185116E14EDFD587EB9EE47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:30:a2:e5:57:45:82:94:c8:9f:56:ca:0d:9a: 4e:d5:c7:1b:32:51:ec:46:9c:46:37:c9:17:0a:35: 0e:8d:4f:5a:4d:52:25:08:aa:fc:45:24:e2:87:72: 1f:98:e0:48:fb:4b:e6:e7:b0:6d:87:69:21:24:54: 65:fc:b1:ff:1a:05:76:47:57:2d:12:bf:32:c8:9d: f9:a2:e8:07:08:5d:58:1c:27:68:0f:26:2b:c3:dc: 18:88:51:e0:eb:56:9a:55:26:75:76:d9:8c:08:68: 62:2f:3c:41:8c:b1:f3:aa:74:c7:07:a3:a2:4e:88: 7d:f3:25:6e:39:07:56:f5:ec:96:15:9f:b6:a5:48: 7d:0d:8b:8e:0d:e6:ca:c4:c3:6a:d0:2e:c2:f6:b0: b3:9d:2f:c4:06:30:07:fe:b1:a7:0d:1e:c8:20:f3: 04:f9:e5:da:56:86:95:47:1d:b7:60:cb:37:5e:6e: 20:8b:6c:97:00:3b:fc:62:91:f0:26:d8:41:2b:bc: ff:4c:64:0e:1b:58:69:50:9a:f1:b8:be:b5:1e:05: 58:a2:90:c2:cc:72:b2:67:27:97:e9:fc:79:e8:bc: 10:25:87:45:76:2d:d7:02:69:09:c3:fa:c2:5c:b8: a7:90:45:90:c4:19:f7:4a:ec:e6:ad:38:5b:a7:9c: a3:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:A8:7E:3A:5D:0A:86:DA:11:85:11:6E:14:ED:FD:58:7E:B9:EE:47 X509v3 Authority Key Identifier: keyid:FA:B0:81:FC:D8:6A:B0:F8:1D:41:C9:E5:FB:9C:3D:32:22:0F:48:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:4e:0e:2c:2b:12:86:ef:7e:56:82:6e:40:23:c3:73:18:24: 67:9d:f1:a9:56:40:73:d8:73:41:3c:da:0f:50:f5:66:78:ce: 1d:06:26:a4:77:a5:66:42:6e:18:a7:44:83:65:ae:18:a9:20: 78:47:b1:2b:64:97:c4:7d:9d:7e:d2:18:0c:f9:68:7c:83:92: 82:56:f2:88:9e:d6:aa:ec:27:63:75:f8:89:7f:dc:2d:4f:1f: 21:57:96:3b:10:d8:25:08:a0:da:ba:c8:21:16:9f:dd:d4:4c: ff:b2:e6:b4:d2:c2:13:b5:67:99:2d:66:ad:3a:38:62:69:c1: 01:6d:cd:72:12:ed:31:3d:af:54:ad:56:c8:8a:7f:54:e7:52: bd:a3:b3:36:6b:f4:ff:4d:62:b9:5b:92:fc:7b:b4:7b:2c:20: 8e:3f:97:5f:e4:e9:ff:d6:69:34:4f:c3:45:f2:59:2f:4c:7f: 2f:3c:38:f4:e9:f1:09:5d:ef:0e:88:9d:d1:3b:46:7a:50:d8: c6:73:5f:95:13:39:05:3e:2c:3a:82:72:7b:6c:d9:d2:7d:79: b5:3a:6b:ca:84:62:c2:94:a3:22:f2:4c:7b:5c:5a:9a:b8:8c: 26:ca:11:d3:c7:ae:d7:f6:e0:f9:a7:1a:2b:ed:79:0c:ba:d7: a3:98:ce:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQmU2D3KGeAjBv3ghhoqPCr2KSv8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkFCMDgxRkNEODZBQjBGODFENDFDOUU1RkI5QzNEMzIy MjBGNDhDRDAeFw0yNjAyMjgxNDM2MjlaFw0yNjAzMDMyMjMwMjlaMDMxMTAvBgNV BAMTKDZEQTg3RTNBNUQwQTg2REExMTg1MTE2RTE0RURGRDU4N0VCOUVFNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaMKLlV0WClMifVsoNmk7Vxxsy UexGnEY3yRcKNQ6NT1pNUiUIqvxFJOKHch+Y4Ej7S+bnsG2HaSEkVGX8sf8aBXZH Vy0SvzLInfmi6AcIXVgcJ2gPJivD3BiIUeDrVppVJnV22YwIaGIvPEGMsfOqdMcH o6JOiH3zJW45B1b17JYVn7alSH0Ni44N5srEw2rQLsL2sLOdL8QGMAf+sacNHsgg 8wT55dpWhpVHHbdgyzdebiCLbJcAO/xikfAm2EErvP9MZA4bWGlQmvG4vrUeBVii kMLMcrJnJ5fp/HnovBAlh0V2LdcCaQnD+sJcuKeQRZDEGfdK7OatOFunnKM9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbah+Ol0KhtoRhRFuFO39WH657kcwHwYDVR0j BBgwFoAU+rCB/NhqsPgdQcnl+5w9MiIPSM0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OTRkMWY2Mi04NDg4LTQwODYtOGQ0Yy1mMmRlNWM3NmRhM2QvMC9GQUIwODFGQ0Q4 NkFCMEY4MUQ0MUM5RTVGQjlDM0QzMjIyMEY0OENELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkFCMDgxRkNEODZBQjBGODFENDFDOUU1RkI5QzNEMzIyMjBG NDhDRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTk0ZDFmNjItODQ4OC00MDg2LThk NGMtZjJkZTVjNzZkYTNkLzAvRkFCMDgxRkNEODZBQjBGODFENDFDOUU1RkI5QzNE MzIyMjBGNDhDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABxODiwrEobvflaCbkAjw3MYJGed8alWQHPY c0E82g9Q9WZ4zh0GJqR3pWZCbhinRINlrhipIHhHsStkl8R9nX7SGAz5aHyDkoJW 8oie1qrsJ2N1+Il/3C1PHyFXljsQ2CUIoNq6yCEWn93UTP+y5rTSwhO1Z5ktZq06 OGJpwQFtzXIS7TE9r1StVsiKf1TnUr2jszZr9P9NYrlbkvx7tHssII4/l1/k6f/W aTRPw0XyWS9Mfy88OPTp8Qld7w6IndE7RnpQ2MZzX5UTOQU+LDqCcnts2dJ9ebU6 a8qEYsKUoyLyTHtcWpq4jCbKEdPHrtf24PmnGivteQy616OYzmA= -----END CERTIFICATE-----Generated at Mon Mar 2 11:21:26 2026 by rpki-client