$ rpki-client -vvf repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.mft File: F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.mft (raw, json) Hash identifier: W2f1icbmAZS0VNl8GxN4PRxSzO48zc796N7rgSNVaQo= Subject key identifier: 5F:83:6E:81:C0:1A:88:BE:68:CD:A0:74:45:25:7F:1C:2C:EB:E1:A4 Authority key identifier: F9:B3:A4:FD:20:9F:B6:DF:8B:DC:16:8B:15:C8:72:08:3A:34:95:A2 Certificate issuer: /CN=F9B3A4FD209FB6DF8BDC168B15C872083A3495A2 Certificate serial: 522491E1EAAB4605721045A8CAB025539871D381 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.mft Manifest number: 0552 Signing time: Sun 01 Mar 2026 03:31:17 +0000 Manifest this update: Sun 01 Mar 2026 03:26:17 +0000 Manifest next update: Wed 04 Mar 2026 05:05:17 +0000 Files and hashes: 1: F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.crl (hash: waTgFgFB+Pc8m9Dz16PXYDYQHoWmeuXlhC5+JprMQ1I=) 2: 3130332e3130362e3134352e302f32342d3234203d3e203538333639.roa (hash: /luPqRWa7rmModkmPq2AOhn1AxfZ3BxWQ7kt8Fx95y4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.crl rsync://repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 05:05:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:24:91:e1:ea:ab:46:05:72:10:45:a8:ca:b0:25:53:98:71:d3:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9B3A4FD209FB6DF8BDC168B15C872083A3495A2 Validity Not Before: Mar 1 03:26:17 2026 GMT Not After : Mar 4 05:05:17 2026 GMT Subject: CN=5F836E81C01A88BE68CDA07445257F1C2CEBE1A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:8c:93:3d:ab:e9:75:9c:a6:d8:1c:b8:9a:41: d9:e3:57:e4:b6:b5:c0:35:c4:37:dc:79:01:3b:40: ce:73:01:52:a6:66:bc:93:1f:e4:4d:27:49:5f:cf: 55:32:ab:3c:1d:5a:f3:59:94:a8:3e:59:75:8c:78: 52:a9:6e:a9:0e:dc:07:e9:31:04:c0:8d:9e:11:1d: 63:6e:5a:ad:c7:22:0a:1c:49:d8:ca:b2:53:28:03: f9:86:b1:4c:e8:d7:70:f7:ef:ad:9b:20:40:76:a5: aa:d4:80:72:95:97:30:f4:7e:4f:51:ba:54:58:85: 14:ce:10:20:02:c5:ba:5d:7b:d3:0c:30:b5:74:53: 4d:96:27:56:af:08:c5:1f:80:a9:dc:b1:2b:4c:a5: 8d:b1:46:e0:c1:50:96:07:ed:94:d1:4d:9c:da:eb: 69:2d:84:91:a0:a1:f5:51:17:cb:86:b4:60:45:7c: ce:b8:94:e6:01:0a:28:35:d7:c9:fa:18:41:3c:e3: 51:2b:e0:8f:b2:15:9f:ba:90:fc:37:c9:24:ed:09: 2c:14:11:c6:a5:db:f4:21:b1:ce:95:2c:ca:c5:ea: d0:e1:72:1c:1d:16:35:a2:a3:d9:cd:c2:ad:8c:45: 95:dc:8a:6a:c0:49:4d:4f:2d:6f:dd:3d:55:a4:72: e5:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:83:6E:81:C0:1A:88:BE:68:CD:A0:74:45:25:7F:1C:2C:EB:E1:A4 X509v3 Authority Key Identifier: keyid:F9:B3:A4:FD:20:9F:B6:DF:8B:DC:16:8B:15:C8:72:08:3A:34:95:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:8d:b3:27:48:81:a8:e6:f7:68:88:72:67:7b:2a:06:ca:cf: 33:14:27:62:ae:47:ea:79:23:76:af:42:6c:6d:e0:aa:65:ff: aa:85:39:3d:e9:0d:a8:5d:02:5c:d2:96:27:33:f0:5a:74:85: 39:b9:8a:8c:96:54:f5:33:00:b3:af:ce:5a:dc:6c:0e:89:de: bd:cc:6f:d6:40:01:d9:d8:29:72:42:e4:0a:95:10:65:6b:ed: 9d:3a:be:88:b1:a2:39:71:df:64:1e:ab:c3:61:82:9f:8c:4e: c1:e3:85:95:0e:3d:26:a3:df:ba:f6:fe:bf:e7:02:62:3a:de: 27:85:ea:55:bc:9d:e3:61:c0:91:84:97:8f:6e:65:31:f8:e5: 0a:a5:60:ca:07:75:91:2f:ad:19:4a:08:00:88:b3:c9:6c:f3: 02:09:9f:8e:e3:e4:04:4d:b2:fb:8b:fa:68:00:5a:de:c9:02: ff:3f:58:14:d3:7d:db:ce:af:20:bc:d7:32:42:69:ba:dc:fa: a7:1d:a8:c7:7a:00:5e:a2:58:c2:aa:4e:c6:ea:20:d4:fb:2b: 2a:51:ed:9b:6b:a5:37:8c:e0:60:fa:1a:87:74:30:52:dd:fb: e7:e9:59:85:ac:c5:f8:02:5f:bb:22:1b:f5:5f:10:6f:a7:43: 58:27:33:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUiSR4eqrRgVyEEWoyrAlU5hx04EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlCM0E0RkQyMDlGQjZERjhCREMxNjhCMTVDODcyMDgz QTM0OTVBMjAeFw0yNjAzMDEwMzI2MTdaFw0yNjAzMDQwNTA1MTdaMDMxMTAvBgNV BAMTKDVGODM2RTgxQzAxQTg4QkU2OENEQTA3NDQ1MjU3RjFDMkNFQkUxQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnjJM9q+l1nKbYHLiaQdnjV+S2 tcA1xDfceQE7QM5zAVKmZryTH+RNJ0lfz1UyqzwdWvNZlKg+WXWMeFKpbqkO3Afp MQTAjZ4RHWNuWq3HIgocSdjKslMoA/mGsUzo13D3762bIEB2parUgHKVlzD0fk9R ulRYhRTOECACxbpde9MMMLV0U02WJ1avCMUfgKncsStMpY2xRuDBUJYH7ZTRTZza 62kthJGgofVRF8uGtGBFfM64lOYBCig118n6GEE841Er4I+yFZ+6kPw3ySTtCSwU Ecal2/Qhsc6VLMrF6tDhchwdFjWio9nNwq2MRZXcimrASU1PLW/dPVWkcuURAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUX4NugcAaiL5ozaB0RSV/HCzr4aQwHwYDVR0j BBgwFoAU+bOk/SCftt+L3BaLFchyCDo0laIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MTc5MWI3My1iYjA4LTRhODMtYTE5Ny1iNjM2MGYxZDQ3ZGUvMC9GOUIzQTRGRDIw OUZCNkRGOEJEQzE2OEIxNUM4NzIwODNBMzQ5NUEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjlCM0E0RkQyMDlGQjZERjhCREMxNjhCMTVDODcyMDgzQTM0 OTVBMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTE3OTFiNzMtYmIwOC00YTgzLWEx OTctYjYzNjBmMWQ0N2RlLzAvRjlCM0E0RkQyMDlGQjZERjhCREMxNjhCMTVDODcy MDgzQTM0OTVBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFGNsydIgajm92iIcmd7KgbKzzMUJ2KuR+p5 I3avQmxt4Kpl/6qFOT3pDahdAlzSlicz8Fp0hTm5ioyWVPUzALOvzlrcbA6J3r3M b9ZAAdnYKXJC5AqVEGVr7Z06voixojlx32Qeq8Nhgp+MTsHjhZUOPSaj37r2/r/n AmI63ieF6lW8neNhwJGEl49uZTH45QqlYMoHdZEvrRlKCACIs8ls8wIJn47j5ARN svuL+mgAWt7JAv8/WBTTfdvOryC81zJCabrc+qcdqMd6AF6iWMKqTsbqINT7KypR 7ZtrpTeM4GD6God0MFLd++fpWYWsxfgCX7siG/VfEG+nQ1gnM0g= -----END CERTIFICATE-----Generated at Mon Mar 2 07:47:29 2026 by rpki-client