$ rpki-client -vvf repo-rpki.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.mft File: FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.mft (raw, json) Hash identifier: TYOe/e/ztdJsACeYjwZ3+P83XfXVPm9soZ1tDuthINw= Subject key identifier: D8:F3:D1:C2:7D:3E:63:03:EB:05:EE:01:C7:1C:D4:78:E1:15:F9:B7 Authority key identifier: FA:B0:81:FC:D8:6A:B0:F8:1D:41:C9:E5:FB:9C:3D:32:22:0F:48:CD Certificate issuer: /CN=FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD Certificate serial: 5D58011A0D561B4E9C15C9C5299FE0A8D14C5E9E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.mft Manifest number: 015E Signing time: Thu 16 Apr 2026 12:21:35 +0000 Manifest this update: Thu 16 Apr 2026 12:16:35 +0000 Manifest next update: Sun 19 Apr 2026 17:48:35 +0000 Files and hashes: 1: 3135372e31302e302e302f32332d3233203d3e20313532303739.roa (hash: c4rjc7ofNNmyZRUSVo5AMDmJDSE543ooVHV0iFLdEdk=) 2: 3135372e31302e312e302f32342d3234203d3e20313532303739.roa (hash: DOErYNNeAHBg7jPgOxCOjjiUusb0dUbys1pc3kVIxCE=) 3: FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.crl (hash: WAZFxC9dMyDjz4q1WziNUqWZE7+IT/DQZN2WMmTo+rs=) 4: 3135372e31302e302e302f32342d3234203d3e20313532303739.roa (hash: xoCkaz5i4P6iyUaFm6z1IavkyQCxOdN9JzTfIbqv1G0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.crl rsync://repo-rpki.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 17:48:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:58:01:1a:0d:56:1b:4e:9c:15:c9:c5:29:9f:e0:a8:d1:4c:5e:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD Validity Not Before: Apr 16 12:16:35 2026 GMT Not After : Apr 19 17:48:35 2026 GMT Subject: CN=D8F3D1C27D3E6303EB05EE01C71CD478E115F9B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:59:5c:02:7a:06:06:78:bc:2d:66:49:d8:14: 11:f3:19:2b:bb:3e:6d:08:db:61:32:54:d7:f7:49: e0:d8:dd:4a:15:ad:af:47:a0:cc:10:06:f9:06:bf: c1:11:2b:cf:55:6f:7d:be:2d:8b:66:a9:a1:ca:f5: 22:68:0d:3f:b8:c1:0c:f9:ce:0f:fd:15:04:af:55: a3:1d:8a:a2:d9:ce:f2:e6:44:e4:b8:3f:68:5f:9c: b9:65:04:ab:b5:79:82:09:12:b3:71:f9:e3:bb:87: 2b:c9:a1:63:d0:42:bb:8a:6b:cf:05:6d:bc:d7:c8: e4:b6:96:6b:50:17:fe:a7:5d:c2:36:ad:1e:3c:e4: a3:29:bf:df:88:b9:2f:92:cb:b1:b0:47:d9:56:04: be:40:94:88:79:30:7f:a4:ed:4a:31:05:b3:11:b9: 0d:27:47:db:19:37:fd:76:0b:6e:cf:67:2c:28:d5: 36:79:03:9f:32:20:6c:9d:9c:ac:ea:20:f4:58:9a: 95:e6:71:ee:9b:86:a2:fe:18:13:4e:d8:21:7c:0e: 7f:2b:4e:68:e3:97:09:90:75:87:dd:d7:57:fa:0e: 44:76:81:94:64:7b:2c:cf:6a:79:25:e5:d6:fc:78: 50:c3:8b:92:5b:74:7a:f4:25:17:c1:9d:3d:20:d2: 9a:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:F3:D1:C2:7D:3E:63:03:EB:05:EE:01:C7:1C:D4:78:E1:15:F9:B7 X509v3 Authority Key Identifier: keyid:FA:B0:81:FC:D8:6A:B0:F8:1D:41:C9:E5:FB:9C:3D:32:22:0F:48:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:e3:fd:74:7d:21:4f:0c:76:cc:20:61:25:0c:26:44:0b:0f: 75:6c:29:61:82:35:00:67:1c:f7:ac:71:80:1e:5a:b1:ad:97: b9:4a:57:dc:2b:38:67:8f:bc:57:ff:d0:7d:bd:92:3b:c3:65: 9f:2b:a4:d7:3e:74:de:1a:17:ff:f6:e2:6b:c8:eb:6a:72:56: 75:40:16:5b:d5:79:b9:5d:81:c0:cb:07:b1:d5:d4:bc:70:bd: 09:f3:df:2d:47:c0:9f:5b:64:c6:cb:98:49:6c:84:b8:0b:26: db:d4:92:1c:46:a9:5c:f6:6e:fb:3d:cd:af:ee:fb:80:93:ad: 71:1a:ed:c5:9f:31:bc:26:c6:ab:c7:c3:92:67:1f:81:2c:7b: 15:97:e4:01:26:10:79:49:47:bb:9c:1f:ff:45:7f:19:91:6a: 28:f9:38:ee:14:d1:85:bf:be:c4:3e:e1:f0:32:39:19:ef:1c: 71:f6:9a:33:fe:a8:30:e5:d5:7a:ac:f8:a8:22:15:fd:00:9f: f2:43:7a:44:f7:04:8f:48:ad:7f:42:f3:e3:9b:a7:10:a8:b5: 3a:1e:c9:62:ef:82:a7:a7:8d:c6:a8:e6:f7:14:b5:21:89:16: f6:0a:ea:55:06:f6:23:d3:bf:b7:a8:54:96:4f:04:6c:31:96: fd:9b:10:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXVgBGg1WG06cFcnFKZ/gqNFMXp4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkFCMDgxRkNEODZBQjBGODFENDFDOUU1RkI5QzNEMzIy MjBGNDhDRDAeFw0yNjA0MTYxMjE2MzVaFw0yNjA0MTkxNzQ4MzVaMDMxMTAvBgNV BAMTKEQ4RjNEMUMyN0QzRTYzMDNFQjA1RUUwMUM3MUNENDc4RTExNUY5QjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYWVwCegYGeLwtZknYFBHzGSu7 Pm0I22EyVNf3SeDY3UoVra9HoMwQBvkGv8ERK89Vb32+LYtmqaHK9SJoDT+4wQz5 zg/9FQSvVaMdiqLZzvLmROS4P2hfnLllBKu1eYIJErNx+eO7hyvJoWPQQruKa88F bbzXyOS2lmtQF/6nXcI2rR485KMpv9+IuS+Sy7GwR9lWBL5AlIh5MH+k7UoxBbMR uQ0nR9sZN/12C27PZywo1TZ5A58yIGydnKzqIPRYmpXmce6bhqL+GBNO2CF8Dn8r TmjjlwmQdYfd11f6DkR2gZRkeyzPankl5db8eFDDi5JbdHr0JRfBnT0g0ppLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2PPRwn0+YwPrBe4BxxzUeOEV+bcwHwYDVR0j BBgwFoAU+rCB/NhqsPgdQcnl+5w9MiIPSM0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OTRkMWY2Mi04NDg4LTQwODYtOGQ0Yy1mMmRlNWM3NmRhM2QvMC9GQUIwODFGQ0Q4 NkFCMEY4MUQ0MUM5RTVGQjlDM0QzMjIyMEY0OENELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkFCMDgxRkNEODZBQjBGODFENDFDOUU1RkI5QzNEMzIyMjBG NDhDRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTk0ZDFmNjItODQ4OC00MDg2LThk NGMtZjJkZTVjNzZkYTNkLzAvRkFCMDgxRkNEODZBQjBGODFENDFDOUU1RkI5QzNE MzIyMjBGNDhDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK/j/XR9IU8MdswgYSUMJkQLD3VsKWGCNQBn HPescYAeWrGtl7lKV9wrOGePvFf/0H29kjvDZZ8rpNc+dN4aF//24mvI62pyVnVA FlvVebldgcDLB7HV1LxwvQnz3y1HwJ9bZMbLmElshLgLJtvUkhxGqVz2bvs9za/u +4CTrXEa7cWfMbwmxqvHw5JnH4EsexWX5AEmEHlJR7ucH/9FfxmRaij5OO4U0YW/ vsQ+4fAyORnvHHH2mjP+qDDl1Xqs+KgiFf0An/JDekT3BI9IrX9C8+ObpxCotToe yWLvgqenjcao5vcUtSGJFvYK6lUG9iPTv7eoVJZPBGwxlv2bEJ4= -----END CERTIFICATE-----Generated at Fri Apr 17 13:59:04 2026 by rpki-client