$ rpki-client -vvf repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.mft File: F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.mft (raw, json) Hash identifier: s6JFK+IiVgWw+TMydY5bZRuK0z9TCMXBm3PcFk4PGPI= Subject key identifier: 55:64:B7:D6:DC:56:39:3F:E0:22:A8:09:5E:05:DD:49:F7:CE:2E:47 Authority key identifier: F9:F2:1F:18:D0:C5:65:6D:8F:24:B3:FF:EE:0B:17:A1:70:FA:D4:A5 Certificate issuer: /CN=F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5 Certificate serial: 689BB8B6BB9DD149F4AE2E6D7DF414643B94771C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.mft Manifest number: 0550 Signing time: Sun 01 Mar 2026 04:43:18 +0000 Manifest this update: Sun 01 Mar 2026 04:38:18 +0000 Manifest next update: Wed 04 Mar 2026 12:10:18 +0000 Files and hashes: 1: 3130332e31352e33362e302f32342d3234203d3e203538343939.roa (hash: Ib6AjQYHIsLwQhK435dkfw2SbJ0i4m47zXiCaGZl8vU=) 2: 3130332e31352e33362e302f32332d3233203d3e203538343939.roa (hash: tsFXcVi2vQ7ookPqbCA3Q2goRlJZ3P3EWx7MteHU17w=) 3: 323030313a6466303a6338303a3a2f34382d3438203d3e203538343939.roa (hash: +tOA/QTi1erDkh8xjg35ATQ0nh241kswkzy+opupzr4=) 4: F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.crl (hash: jtHwx0sDKKnAQDoPNlKO34B2cBFkhimKIiuLZ1coJ64=) 5: 3130332e31352e33372e302f32342d3234203d3e203538343939.roa (hash: zeTi7BqNqgcikPyjG0SatRxWNjs6zr4KOqjWgwcH3go=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.crl rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 12:10:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:9b:b8:b6:bb:9d:d1:49:f4:ae:2e:6d:7d:f4:14:64:3b:94:77:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5 Validity Not Before: Mar 1 04:38:18 2026 GMT Not After : Mar 4 12:10:18 2026 GMT Subject: CN=5564B7D6DC56393FE022A8095E05DD49F7CE2E47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:22:75:06:e7:d7:16:61:eb:02:ec:6b:96:58: 01:b6:fe:4d:40:e7:11:96:2f:af:28:1c:03:ad:1a: 03:79:af:5a:04:9e:15:d8:f7:1a:fe:ea:76:60:87: 1f:51:0b:c1:83:93:1a:69:6f:79:e3:46:ba:b8:a6: ea:d7:74:98:78:c2:16:3b:1f:75:5a:9f:57:27:6e: fc:38:9f:b9:d1:54:2e:06:7b:39:37:72:79:c9:ad: 92:f0:37:3f:ba:9c:2a:74:e7:d8:ba:87:c1:05:2e: a3:33:4b:01:d0:68:6f:fb:8a:ad:21:58:89:64:67: 62:b6:bd:8e:2f:49:4a:4a:bf:94:30:fc:ba:92:e3: 98:2b:de:1c:4e:d5:ba:1d:eb:7b:c2:9f:1c:66:da: 29:bd:9d:01:8b:39:b4:1b:d3:ad:9b:34:c5:00:e5: 66:4a:ca:b0:6c:e5:50:e0:ba:48:91:e7:17:2c:ac: e7:94:1e:80:4f:40:a3:c6:c1:66:f0:c8:da:38:ab: a8:c9:1a:00:f3:81:28:82:c6:7f:7f:b7:89:6e:35: 6c:85:1d:25:7a:fd:a2:31:ef:ca:4a:c2:1d:86:15: 92:c2:a2:ec:3c:ca:2b:0d:71:6a:33:51:22:f8:9d: 10:f2:a8:9c:b8:70:07:91:06:59:8c:0d:f5:da:93: 71:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:64:B7:D6:DC:56:39:3F:E0:22:A8:09:5E:05:DD:49:F7:CE:2E:47 X509v3 Authority Key Identifier: keyid:F9:F2:1F:18:D0:C5:65:6D:8F:24:B3:FF:EE:0B:17:A1:70:FA:D4:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:ef:3a:40:77:9a:42:7c:58:1b:98:b6:ad:5c:22:ca:7b:ab: 28:6d:22:89:0b:f2:b2:a1:17:0d:65:d5:d9:c7:f6:20:64:c9: 9c:2a:b4:68:61:a3:f4:48:09:ce:d8:3f:c8:9a:80:08:47:ef: 5d:32:7e:df:ae:1e:1e:7b:9a:f8:e4:79:ae:0c:df:1a:d3:de: 6e:5e:19:68:8a:8a:ea:4a:c4:aa:d6:21:15:d1:c2:30:2c:ce: 27:aa:54:bb:12:b8:f2:2c:87:1e:94:aa:3e:73:45:62:20:4c: 67:5d:f3:c0:82:56:ac:51:65:76:8d:e3:67:ca:04:bb:dd:a9: 76:7c:3c:10:69:56:49:d8:58:ac:8f:f0:60:d6:88:f6:80:e2: 8b:06:33:79:44:86:35:91:81:f8:79:33:2d:30:e3:79:99:b1: 14:f0:7b:43:4e:24:7a:26:ab:8c:30:9d:0b:e9:77:f4:cf:8e: 73:56:af:f3:78:8c:76:23:3e:e2:6e:fd:bd:9b:20:ed:f3:d5: f6:9c:0c:63:76:02:84:ad:2d:8c:6c:4f:eb:78:80:86:24:44: b0:04:e7:71:d8:c1:43:6b:1a:ee:39:23:24:30:8c:10:2d:16: 19:cd:c4:d7:dc:77:a1:66:eb:61:a8:f0:ed:4c:d8:8c:4c:71: bb:bc:9d:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaJu4trud0Un0ri5tffQUZDuUdxwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlGMjFGMThEMEM1NjU2RDhGMjRCM0ZGRUUwQjE3QTE3 MEZBRDRBNTAeFw0yNjAzMDEwNDM4MThaFw0yNjAzMDQxMjEwMThaMDMxMTAvBgNV BAMTKDU1NjRCN0Q2REM1NjM5M0ZFMDIyQTgwOTVFMDVERDQ5RjdDRTJFNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoInUG59cWYesC7GuWWAG2/k1A 5xGWL68oHAOtGgN5r1oEnhXY9xr+6nZghx9RC8GDkxppb3njRrq4purXdJh4whY7 H3Van1cnbvw4n7nRVC4Gezk3cnnJrZLwNz+6nCp059i6h8EFLqMzSwHQaG/7iq0h WIlkZ2K2vY4vSUpKv5Qw/LqS45gr3hxO1bod63vCnxxm2im9nQGLObQb062bNMUA 5WZKyrBs5VDgukiR5xcsrOeUHoBPQKPGwWbwyNo4q6jJGgDzgSiCxn9/t4luNWyF HSV6/aIx78pKwh2GFZLCouw8yisNcWozUSL4nRDyqJy4cAeRBlmMDfXak3EtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVWS31txWOT/gIqgJXgXdSffOLkcwHwYDVR0j BBgwFoAU+fIfGNDFZW2PJLP/7gsXoXD61KUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YjFjOTU3OS01NmJhLTRhNzAtYmExMy0zYjA1YTZjY2IyMWUvMC9GOUYyMUYxOEQw QzU2NTZEOEYyNEIzRkZFRTBCMTdBMTcwRkFENEE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjlGMjFGMThEMEM1NjU2RDhGMjRCM0ZGRUUwQjE3QTE3MEZB RDRBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWIxYzk1NzktNTZiYS00YTcwLWJh MTMtM2IwNWE2Y2NiMjFlLzAvRjlGMjFGMThEMEM1NjU2RDhGMjRCM0ZGRUUwQjE3 QTE3MEZBRDRBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHXvOkB3mkJ8WBuYtq1cIsp7qyhtIokL8rKh Fw1l1dnH9iBkyZwqtGhho/RICc7YP8iagAhH710yft+uHh57mvjkea4M3xrT3m5e GWiKiupKxKrWIRXRwjAszieqVLsSuPIshx6Uqj5zRWIgTGdd88CCVqxRZXaN42fK BLvdqXZ8PBBpVknYWKyP8GDWiPaA4osGM3lEhjWRgfh5My0w43mZsRTwe0NOJHom q4wwnQvpd/TPjnNWr/N4jHYjPuJu/b2bIO3z1facDGN2AoStLYxsT+t4gIYkRLAE 53HYwUNrGu45IyQwjBAtFhnNxNfcd6Fm62Go8O1M2IxMcbu8nZg= -----END CERTIFICATE-----Generated at Mon Mar 2 00:52:17 2026 by rpki-client