$ rpki-client -vvf repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.mft File: FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.mft (raw, json) Hash identifier: 4NLNJwMfpnZklxx9R18tyVW23nJm+YbbZaLPlAMq1go= Subject key identifier: FC:2D:BA:25:A0:3F:58:FB:04:31:CB:13:62:4D:6D:E5:87:E4:5C:62 Authority key identifier: FF:3F:06:6A:5E:9A:B8:F9:88:B8:E1:7C:7A:56:DD:2E:00:A6:6A:D8 Certificate issuer: /CN=FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8 Certificate serial: 7EB1EB9E78EEB1D9A929317A26F237BA53ED692B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.mft Manifest number: 0120 Signing time: Sun 01 Mar 2026 19:32:38 +0000 Manifest this update: Sun 01 Mar 2026 19:27:38 +0000 Manifest next update: Thu 05 Mar 2026 02:49:38 +0000 Files and hashes: 1: 3135372e31352e38332e302f32342d3234203d3e20313532333633.roa (hash: tmwMaZpoyniOHlrA1Ev0DGw1sFkx/sRTma2ZD2CnpMQ=) 2: FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.crl (hash: FgF0BTNGgv5H52qkm54Pg/yizXnzBWLifM0agQ/oMH4=) 3: 3135372e31352e38322e302f32342d3234203d3e20313532333633.roa (hash: LhdUiZ829jnCYzP+T/q1kR6KjN+CYgUrJ54OONbPWMo=) 4: 3135372e31352e38322e302f32332d3233203d3e20313532333633.roa (hash: TxbDMhKSioNeR20MqOvnLPpYmLwOjXBp9YQNGW/Dswg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.crl rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:45:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:b1:eb:9e:78:ee:b1:d9:a9:29:31:7a:26:f2:37:ba:53:ed:69:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8 Validity Not Before: Mar 1 19:27:38 2026 GMT Not After : Mar 5 02:49:38 2026 GMT Subject: CN=FC2DBA25A03F58FB0431CB13624D6DE587E45C62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:73:7c:04:8b:3e:76:b3:9e:ce:79:df:12:b6: 28:06:6c:86:79:2b:9e:d8:ab:fb:92:a9:38:a4:2e: 55:35:ce:2e:a3:00:72:2a:59:2f:cc:b8:b4:1b:f0: 8b:30:fd:0d:d1:c4:f0:fb:b7:2d:9c:a2:91:47:3c: 9d:d3:56:17:da:5c:2f:ac:b3:4f:cb:f3:3d:1c:12: 22:92:8f:fd:28:a4:25:d7:f2:84:04:f2:01:71:77: 0e:77:f7:57:0b:8f:c2:cd:22:94:db:3c:9a:ad:fb: 99:1d:5f:5a:c1:b5:1d:94:90:7b:f2:9b:68:31:cd: 43:71:98:b8:80:97:fc:c9:32:5f:c9:59:a1:83:76: 19:7f:43:50:bc:c1:7c:00:f7:bd:7d:df:a5:90:4f: 04:3a:33:50:84:e2:33:79:7f:fd:6c:6b:b8:96:5d: dc:db:a9:7b:75:b7:50:5b:12:1b:66:f2:d9:e8:b8: 40:a0:4c:be:dd:ff:9b:0c:09:8f:65:59:35:e4:e9: b1:a9:ca:d0:73:d6:3c:64:13:9b:a4:93:86:b3:19: 54:fc:84:6b:97:5f:fe:8a:f5:dd:26:5e:37:72:0d: 89:06:bc:15:b4:b5:bf:27:eb:02:1b:9e:07:6d:23: 2a:a3:7c:2f:b2:ab:56:f9:05:4e:88:a1:91:6b:3b: f0:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:2D:BA:25:A0:3F:58:FB:04:31:CB:13:62:4D:6D:E5:87:E4:5C:62 X509v3 Authority Key Identifier: keyid:FF:3F:06:6A:5E:9A:B8:F9:88:B8:E1:7C:7A:56:DD:2E:00:A6:6A:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:c9:18:86:66:26:a2:31:0f:f2:81:52:72:a8:19:36:1d:2a: 1d:a6:0a:a0:97:2b:12:24:2f:54:85:c1:61:1f:97:4b:5e:7f: 67:da:3a:d1:c1:d6:6d:83:3b:b5:17:6c:fb:ad:d7:a3:83:b7: 95:6d:84:1c:9c:38:b5:cc:3f:f9:bf:47:aa:6a:44:cb:6d:e6: 08:6e:b3:72:cb:ab:40:23:99:72:d7:97:68:0a:39:55:55:2a: de:8d:e1:dd:70:f7:12:6b:55:c0:b3:d0:b5:59:59:8e:3a:b1: e2:04:ab:b0:66:bd:94:9f:48:0f:ab:e7:1e:fb:ed:09:57:61: a8:14:6a:9e:24:c9:01:43:67:98:0b:00:7c:5a:f4:95:8c:7c: 26:dc:06:d2:15:0c:50:d4:87:b9:4a:e0:21:71:72:90:8d:72: 11:7b:22:1e:7e:0d:ad:ef:c3:8a:f9:e2:d0:4b:83:21:1b:4c: 98:7d:21:16:c0:8a:8e:72:49:55:34:23:9e:f9:78:3d:91:83: e2:76:30:0e:6f:99:ff:4f:66:81:98:69:aa:39:0e:e1:dc:bd: 73:cf:eb:cc:d3:26:43:98:70:e9:e5:39:5b:69:34:6d:15:ab: 55:c1:80:3d:f5:d0:40:57:a5:d6:29:aa:9e:1a:15:cc:43:1b: ed:fe:16:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfrHrnnjusdmpKTF6JvI3ulPtaSswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkYzRjA2NkE1RTlBQjhGOTg4QjhFMTdDN0E1NkREMkUw MEE2NkFEODAeFw0yNjAzMDExOTI3MzhaFw0yNjAzMDUwMjQ5MzhaMDMxMTAvBgNV BAMTKEZDMkRCQTI1QTAzRjU4RkIwNDMxQ0IxMzYyNEQ2REU1ODdFNDVDNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUc3wEiz52s57Oed8StigGbIZ5 K57Yq/uSqTikLlU1zi6jAHIqWS/MuLQb8Isw/Q3RxPD7ty2copFHPJ3TVhfaXC+s s0/L8z0cEiKSj/0opCXX8oQE8gFxdw5391cLj8LNIpTbPJqt+5kdX1rBtR2UkHvy m2gxzUNxmLiAl/zJMl/JWaGDdhl/Q1C8wXwA971936WQTwQ6M1CE4jN5f/1sa7iW XdzbqXt1t1BbEhtm8tnouECgTL7d/5sMCY9lWTXk6bGpytBz1jxkE5ukk4azGVT8 hGuXX/6K9d0mXjdyDYkGvBW0tb8n6wIbngdtIyqjfC+yq1b5BU6IoZFrO/DFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/C26JaA/WPsEMcsTYk1t5YfkXGIwHwYDVR0j BBgwFoAU/z8Gal6auPmIuOF8elbdLgCmatgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZDAxMWExYy1hMGFkLTRkOTMtODZhZi0zZjBhYWRkOTY4NGYvMC9GRjNGMDY2QTVF OUFCOEY5ODhCOEUxN0M3QTU2REQyRTAwQTY2QUQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkYzRjA2NkE1RTlBQjhGOTg4QjhFMTdDN0E1NkREMkUwMEE2 NkFEOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWQwMTFhMWMtYTBhZC00ZDkzLTg2 YWYtM2YwYWFkZDk2ODRmLzAvRkYzRjA2NkE1RTlBQjhGOTg4QjhFMTdDN0E1NkRE MkUwMEE2NkFEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABXJGIZmJqIxD/KBUnKoGTYdKh2mCqCXKxIk L1SFwWEfl0tef2faOtHB1m2DO7UXbPut16ODt5VthBycOLXMP/m/R6pqRMtt5ghu s3LLq0AjmXLXl2gKOVVVKt6N4d1w9xJrVcCz0LVZWY46seIEq7BmvZSfSA+r5x77 7QlXYagUap4kyQFDZ5gLAHxa9JWMfCbcBtIVDFDUh7lK4CFxcpCNchF7Ih5+Da3v w4r54tBLgyEbTJh9IRbAio5ySVU0I575eD2Rg+J2MA5vmf9PZoGYaao5DuHcvXPP 68zTJkOYcOnlOVtpNG0Vq1XBgD310EBXpdYpqp4aFcxDG+3+Fiw= -----END CERTIFICATE-----Generated at Mon Mar 2 12:18:59 2026 by rpki-client