$ rpki-client -vvf repo-rpki.idnic.net/repo/1251d6cf-c7b1-4687-9203-d161cc40b6a2/0/F9C4820743DB001E8F69D44C19320E1BF09F8F88.mft File: F9C4820743DB001E8F69D44C19320E1BF09F8F88.mft (raw, json) Hash identifier: R/ziFcArMdvpTnSFof+zfvQrT3kp6tNaTsf/Q98FfyY= Subject key identifier: 8A:99:92:25:5F:C6:A9:8E:2C:95:34:4E:F9:0F:C3:49:D6:8D:B0:ED Authority key identifier: F9:C4:82:07:43:DB:00:1E:8F:69:D4:4C:19:32:0E:1B:F0:9F:8F:88 Certificate issuer: /CN=F9C4820743DB001E8F69D44C19320E1BF09F8F88 Certificate serial: 2C957925DDB61E9349286D2579A1CF8D179B2FCC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9C4820743DB001E8F69D44C19320E1BF09F8F88.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1251d6cf-c7b1-4687-9203-d161cc40b6a2/0/F9C4820743DB001E8F69D44C19320E1BF09F8F88.mft Manifest number: 0101 Signing time: Sat 28 Feb 2026 14:31:18 +0000 Manifest this update: Sat 28 Feb 2026 14:26:18 +0000 Manifest next update: Tue 03 Mar 2026 17:18:18 +0000 Files and hashes: 1: 3130332e3135342e3137302e302f32332d3234203d3e20313333383331.roa (hash: 4wsZtWGdUSLxalGSdvbsdwhGmX/CaV7PyQsT2ixJWxE=) 2: F9C4820743DB001E8F69D44C19320E1BF09F8F88.crl (hash: oihAXxYyvZywtUEQCLKiiALxYpun65OO4t2r8r0EQIU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1251d6cf-c7b1-4687-9203-d161cc40b6a2/0/F9C4820743DB001E8F69D44C19320E1BF09F8F88.crl rsync://repo-rpki.idnic.net/repo/1251d6cf-c7b1-4687-9203-d161cc40b6a2/0/F9C4820743DB001E8F69D44C19320E1BF09F8F88.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9C4820743DB001E8F69D44C19320E1BF09F8F88.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 17:18:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:95:79:25:dd:b6:1e:93:49:28:6d:25:79:a1:cf:8d:17:9b:2f:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9C4820743DB001E8F69D44C19320E1BF09F8F88 Validity Not Before: Feb 28 14:26:18 2026 GMT Not After : Mar 3 17:18:18 2026 GMT Subject: CN=8A9992255FC6A98E2C95344EF90FC349D68DB0ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:83:c6:5f:d6:b4:4e:78:6d:38:c7:05:35:3e: 58:f9:e7:9d:f4:a7:17:b8:79:21:db:0b:0b:45:06: 83:d5:3d:64:e8:2b:82:ca:d0:5e:d3:d7:d0:ca:fb: 2b:ac:4b:09:64:4d:c1:1b:f0:9b:cf:86:fa:e1:6d: 73:51:58:61:5e:63:2b:79:7d:b1:4f:7f:ae:81:2f: 7a:af:8c:df:6d:74:8c:48:54:fa:bb:45:3e:2d:dc: c9:ac:ec:62:11:68:8f:35:2b:4c:1b:90:60:8e:8a: df:3f:d7:65:2b:cd:5d:35:f2:26:59:26:d3:40:10: 83:26:7d:b6:45:bf:07:d0:21:a0:67:b3:04:8f:8f: 8c:ec:29:55:48:0e:f3:21:fb:91:69:b3:d3:3f:df: f6:8a:09:a2:60:13:b5:1b:b5:99:f9:11:e2:bc:02: a9:ab:1f:42:d0:4b:a0:a4:02:eb:27:52:f3:b3:3b: d2:90:fd:d5:5c:2b:7b:26:bc:a3:3e:f7:11:8a:cf: 11:c1:dd:27:31:c9:6c:de:e9:2b:10:fa:75:71:94: 97:83:46:fa:72:94:0d:26:ef:38:69:4c:0c:bd:f3: 85:b2:97:fc:6d:0f:a7:df:26:cf:a5:5f:3d:76:f6: 36:31:85:f8:d7:ee:03:3e:df:c0:1c:d9:8a:13:d8: 0a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:99:92:25:5F:C6:A9:8E:2C:95:34:4E:F9:0F:C3:49:D6:8D:B0:ED X509v3 Authority Key Identifier: keyid:F9:C4:82:07:43:DB:00:1E:8F:69:D4:4C:19:32:0E:1B:F0:9F:8F:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1251d6cf-c7b1-4687-9203-d161cc40b6a2/0/F9C4820743DB001E8F69D44C19320E1BF09F8F88.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9C4820743DB001E8F69D44C19320E1BF09F8F88.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1251d6cf-c7b1-4687-9203-d161cc40b6a2/0/F9C4820743DB001E8F69D44C19320E1BF09F8F88.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:17:e0:d4:14:9f:30:6d:0f:3f:54:54:16:6e:37:95:c4:b6: 55:13:4e:ba:e5:c4:9e:91:5e:aa:3e:d8:35:e6:ef:b9:02:b7: 1e:47:fb:d6:94:1e:41:f1:9d:5b:d1:0b:7e:f2:0f:b7:5c:7c: a0:1b:f4:56:3e:ec:69:7e:d3:59:9a:81:bd:a6:3f:67:7f:04: d8:be:d2:0a:bc:02:fd:a4:f8:17:11:17:1c:11:ba:ce:5d:a1: cc:7e:5e:af:b8:01:32:78:d5:fd:ff:f7:24:fc:55:b5:1b:9c: 3f:ae:bc:57:b0:7f:1e:4e:8f:d2:a9:af:03:2b:92:26:d9:cc: 69:25:3a:3c:86:37:17:88:cf:78:23:76:26:d7:45:08:63:23: 8b:9d:65:9b:e4:d2:9a:e8:8f:5c:57:0f:42:b3:01:2c:7d:3d: 82:8d:91:99:88:88:0a:c7:19:13:fe:c5:3a:31:de:52:dd:64: 72:d5:c9:1a:31:44:db:53:58:22:48:ad:cf:d9:ec:6b:2a:6b: 02:20:ca:4a:f5:a8:53:8f:ab:8d:1a:7b:58:2a:ef:65:41:ca: dc:e5:58:9f:b6:1d:5b:39:87:6f:6f:a3:16:4b:0d:be:cf:97: f3:a4:98:84:90:d4:ab:bd:bb:95:48:c0:4a:ac:21:6c:3c:99: 26:ff:84:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULJV5Jd22HpNJKG0leaHPjRebL8wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlDNDgyMDc0M0RCMDAxRThGNjlENDRDMTkzMjBFMUJG MDlGOEY4ODAeFw0yNjAyMjgxNDI2MThaFw0yNjAzMDMxNzE4MThaMDMxMTAvBgNV BAMTKDhBOTk5MjI1NUZDNkE5OEUyQzk1MzQ0RUY5MEZDMzQ5RDY4REIwRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTg8Zf1rROeG04xwU1Plj55530 pxe4eSHbCwtFBoPVPWToK4LK0F7T19DK+yusSwlkTcEb8JvPhvrhbXNRWGFeYyt5 fbFPf66BL3qvjN9tdIxIVPq7RT4t3Mms7GIRaI81K0wbkGCOit8/12UrzV018iZZ JtNAEIMmfbZFvwfQIaBnswSPj4zsKVVIDvMh+5Fps9M/3/aKCaJgE7UbtZn5EeK8 AqmrH0LQS6CkAusnUvOzO9KQ/dVcK3smvKM+9xGKzxHB3ScxyWze6SsQ+nVxlJeD RvpylA0m7zhpTAy984Wyl/xtD6ffJs+lXz129jYxhfjX7gM+38Ac2YoT2Aq7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUipmSJV/GqY4slTRO+Q/DSdaNsO0wHwYDVR0j BBgwFoAU+cSCB0PbAB6PadRMGTIOG/Cfj4gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MjUxZDZjZi1jN2IxLTQ2ODctOTIwMy1kMTYxY2M0MGI2YTIvMC9GOUM0ODIwNzQz REIwMDFFOEY2OUQ0NEMxOTMyMEUxQkYwOUY4Rjg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjlDNDgyMDc0M0RCMDAxRThGNjlENDRDMTkzMjBFMUJGMDlG OEY4OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTI1MWQ2Y2YtYzdiMS00Njg3LTky MDMtZDE2MWNjNDBiNmEyLzAvRjlDNDgyMDc0M0RCMDAxRThGNjlENDRDMTkzMjBF MUJGMDlGOEY4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIEX4NQUnzBtDz9UVBZuN5XEtlUTTrrlxJ6R Xqo+2DXm77kCtx5H+9aUHkHxnVvRC37yD7dcfKAb9FY+7Gl+01magb2mP2d/BNi+ 0gq8Av2k+BcRFxwRus5docx+Xq+4ATJ41f3/9yT8VbUbnD+uvFewfx5Oj9KprwMr kibZzGklOjyGNxeIz3gjdibXRQhjI4udZZvk0proj1xXD0KzASx9PYKNkZmIiArH GRP+xTox3lLdZHLVyRoxRNtTWCJIrc/Z7GsqawIgykr1qFOPq40ae1gq72VBytzl WJ+2HVs5h29voxZLDb7Pl/OkmISQ1Ku9u5VIwEqsIWw8mSb/hD0= -----END CERTIFICATE-----Generated at Mon Mar 2 14:28:40 2026 by rpki-client