$ rpki-client -vvf repo-rpki.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.mft File: FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.mft (raw, json) Hash identifier: EG9HW26cMD3nQAbGNcjkaqh7zaZQ/zwyuirqPhvHskI= Subject key identifier: 03:89:5C:10:8D:23:46:8F:8C:B3:AD:B3:AB:BB:0E:A5:BD:95:D1:54 Authority key identifier: FB:3F:CC:1A:69:B1:BD:92:D6:A3:19:D7:FD:82:0E:EE:CE:67:42:45 Certificate issuer: /CN=FB3FCC1A69B1BD92D6A319D7FD820EEECE674245 Certificate serial: 6FAD175EE3A3D83C1E4B3BE7F2B50E40A3C5BD02 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.mft Manifest number: 03D2 Signing time: Sun 01 Mar 2026 22:31:45 +0000 Manifest this update: Sun 01 Mar 2026 22:26:45 +0000 Manifest next update: Thu 05 Mar 2026 02:33:45 +0000 Files and hashes: 1: 3130332e3136342e3137302e302f32332d3234203d3e203137393935.roa (hash: KS9w1B5P8a3jbKsmFzr3W5flDVbhE11L0B9cjjDxpnE=) 2: FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.crl (hash: lrLly2JriejqkxNUNzpB20DrnSm6n6UhDOpfrYmUiMQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.crl rsync://repo-rpki.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:33:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:ad:17:5e:e3:a3:d8:3c:1e:4b:3b:e7:f2:b5:0e:40:a3:c5:bd:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB3FCC1A69B1BD92D6A319D7FD820EEECE674245 Validity Not Before: Mar 1 22:26:45 2026 GMT Not After : Mar 5 02:33:45 2026 GMT Subject: CN=03895C108D23468F8CB3ADB3ABBB0EA5BD95D154 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:5a:e1:5c:7a:75:70:a0:ff:ef:63:61:44:1b: de:1c:d1:2d:28:ba:9f:07:b2:73:ef:4c:8a:89:72: 0e:cf:0c:7b:ea:8a:44:cb:b8:62:59:ce:3c:ba:35: 58:4c:87:dd:d2:ed:3e:95:b0:67:af:3e:91:e8:c5: 7f:d1:b6:00:38:f7:b6:c8:d5:50:ac:9f:14:0f:00: 84:2d:e6:b5:5b:17:c2:93:57:9c:b0:65:99:90:45: b7:4c:84:b3:40:51:d3:54:8f:b8:de:2d:64:13:a7: 97:e3:12:0c:bf:ec:4d:67:cb:fc:07:f6:39:58:9d: 18:f1:8e:80:15:da:e0:40:d6:5f:33:cf:6b:eb:f8: 6a:4f:fc:f1:b0:26:00:d8:80:76:fe:fb:1a:b0:9b: f1:99:2d:f5:ff:f7:96:83:56:c5:f2:7a:ce:61:b0: 78:23:29:a5:94:76:b9:f3:2b:18:31:ec:6d:b2:77: b1:0a:a5:51:b2:5b:72:fe:5c:70:58:c9:51:df:5e: e3:41:2f:a5:25:e9:a9:37:13:0d:d5:2b:1a:5a:99: 90:97:7b:ac:89:60:cd:99:86:1e:67:83:eb:b3:86: 4e:d1:9b:2c:62:3b:83:b7:ec:33:ec:26:ab:98:83: 64:c4:64:54:51:b1:ac:8d:aa:43:42:f8:d5:69:49: 8c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:89:5C:10:8D:23:46:8F:8C:B3:AD:B3:AB:BB:0E:A5:BD:95:D1:54 X509v3 Authority Key Identifier: keyid:FB:3F:CC:1A:69:B1:BD:92:D6:A3:19:D7:FD:82:0E:EE:CE:67:42:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:32:eb:e9:1f:d5:c4:50:09:47:69:c9:8a:f2:4e:e8:a5:31: f1:f8:ae:3d:4f:0f:08:5d:de:9a:32:20:a1:cd:ac:ec:d5:f5: 83:bb:9d:7b:64:69:24:fa:8d:c9:ee:c1:1b:72:ef:a4:3c:53: 61:5a:6e:60:e1:30:c3:63:94:ae:72:75:6b:24:8e:ef:02:82: 31:06:69:3d:2c:7e:cc:81:89:68:a1:a9:63:e1:40:33:89:b3: da:15:3b:1b:40:08:23:10:26:9a:e9:42:41:ae:28:19:3d:8a: f3:14:0b:2d:8e:ac:0c:17:15:c0:d1:86:5a:ec:46:31:24:af: 3a:81:67:75:cd:7a:96:a6:91:b9:74:f6:77:24:26:e9:90:37: e3:91:df:46:a0:64:79:88:f7:5a:60:22:73:b8:39:29:5f:39: d2:f6:03:65:5d:c8:1f:7c:ca:7e:67:c9:29:8a:7b:3a:d7:a7: 8a:b3:7d:1a:0d:c6:d5:fc:30:b3:47:a7:74:33:14:66:95:d0: 2a:d5:be:d1:85:ef:85:01:38:74:d4:d0:2e:dc:6f:7c:70:18: 4b:91:1a:e9:e7:ce:08:b1:10:31:65:55:82:7c:a4:b1:7a:7c: 45:fb:b2:3f:5f:a0:8f:14:c9:2c:ce:23:36:28:2b:0d:27:21: 5f:93:59:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb60XXuOj2DweSzvn8rUOQKPFvQIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkIzRkNDMUE2OUIxQkQ5MkQ2QTMxOUQ3RkQ4MjBFRUVD RTY3NDI0NTAeFw0yNjAzMDEyMjI2NDVaFw0yNjAzMDUwMjMzNDVaMDMxMTAvBgNV BAMTKDAzODk1QzEwOEQyMzQ2OEY4Q0IzQURCM0FCQkIwRUE1QkQ5NUQxNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEWuFcenVwoP/vY2FEG94c0S0o up8HsnPvTIqJcg7PDHvqikTLuGJZzjy6NVhMh93S7T6VsGevPpHoxX/RtgA497bI 1VCsnxQPAIQt5rVbF8KTV5ywZZmQRbdMhLNAUdNUj7jeLWQTp5fjEgy/7E1ny/wH 9jlYnRjxjoAV2uBA1l8zz2vr+GpP/PGwJgDYgHb++xqwm/GZLfX/95aDVsXyes5h sHgjKaWUdrnzKxgx7G2yd7EKpVGyW3L+XHBYyVHfXuNBL6Ul6ak3Ew3VKxpamZCX e6yJYM2Zhh5ng+uzhk7RmyxiO4O37DPsJquYg2TEZFRRsayNqkNC+NVpSYyXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA4lcEI0jRo+Ms62zq7sOpb2V0VQwHwYDVR0j BBgwFoAU+z/MGmmxvZLWoxnX/YIO7s5nQkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZDg3YmVlZC02MzMwLTRmMzMtOTEwNS04NzcyMmNkZjJkZDAvMC9GQjNGQ0MxQTY5 QjFCRDkyRDZBMzE5RDdGRDgyMEVFRUNFNjc0MjQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkIzRkNDMUE2OUIxQkQ5MkQ2QTMxOUQ3RkQ4MjBFRUVDRTY3 NDI0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWQ4N2JlZWQtNjMzMC00ZjMzLTkx MDUtODc3MjJjZGYyZGQwLzAvRkIzRkNDMUE2OUIxQkQ5MkQ2QTMxOUQ3RkQ4MjBF RUVDRTY3NDI0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHMy6+kf1cRQCUdpyYryTuilMfH4rj1PDwhd 3poyIKHNrOzV9YO7nXtkaST6jcnuwRty76Q8U2FabmDhMMNjlK5ydWskju8CgjEG aT0sfsyBiWihqWPhQDOJs9oVOxtACCMQJprpQkGuKBk9ivMUCy2OrAwXFcDRhlrs RjEkrzqBZ3XNepamkbl09nckJumQN+OR30agZHmI91pgInO4OSlfOdL2A2VdyB98 yn5nySmKezrXp4qzfRoNxtX8MLNHp3QzFGaV0CrVvtGF74UBOHTU0C7cb3xwGEuR GunnzgixEDFlVYJ8pLF6fEX7sj9foI8UySzOIzYoKw0nIV+TWVI= -----END CERTIFICATE-----Generated at Mon Mar 2 13:05:18 2026 by rpki-client