$ rpki-client -vvf repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.mft File: F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.mft (raw, json) Hash identifier: Gt56MLzyCzFR2s8bKDnyxdKT7YNZdZRFqU4WkZdR9eg= Subject key identifier: 36:32:C6:C4:5E:79:82:55:AA:43:03:1A:7B:5F:E6:68:C3:7B:8A:C1 Authority key identifier: F1:85:3A:1C:5C:1E:CA:FE:10:76:F9:4A:61:FA:77:96:DD:3C:67:1A Certificate issuer: /CN=F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A Certificate serial: 29CBBD6823A732C110BCCEB8BC5D522D25AA4EFC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.mft Manifest number: 03A9 Signing time: Sun 01 Mar 2026 05:02:42 +0000 Manifest this update: Sun 01 Mar 2026 04:57:42 +0000 Manifest next update: Wed 04 Mar 2026 10:24:42 +0000 Files and hashes: 1: 3230322e39312e32382e302f32342d3234203d3e203234353238.roa (hash: aOzMI9PHIaU1+JYfqj3PgTWOSMZrS1G3wjVf+KJcQuA=) 2: 3230322e39312e33302e302f32342d3234203d3e20313532303639.roa (hash: v4GScNp+JRLvaXyvj8xalK2YN2m8f7pYE4HXkH+LiDo=) 3: 3131392e31352e3133322e302f32342d3234203d3e203435333036.roa (hash: FgWk4lEb+N8VyrkhQkA7AsDgO4pzlnxAR+so0eMn0MM=) 4: 3131392e31352e3133332e302f32342d3234203d3e203435333036.roa (hash: tGztSZAQJ35/hLuECvtTcpELlM1IpNOZ8zjyOffPPVE=) 5: 3131392e31352e3132392e302f32342d3234203d3e203435333036.roa (hash: 8CMqMpoCs6b6HNia3ifuD/WpzvcJj1kVCsO8zPSQ7wc=) 6: 3230322e39312e32372e302f32342d3234203d3e203234353238.roa (hash: sxphp4GIGCV7hhFuUuJXQKH7CdkIoeuJ+Uc7gPS1Oeo=) 7: 3131392e31352e3132382e302f32342d3234203d3e203435333036.roa (hash: 3mPJMmSU87HxOCz1kx2GnX89IU0Xnf2eTb3lccTca1k=) 8: 3131392e31352e3133302e302f32342d3234203d3e203435333036.roa (hash: WLK6N6lYU6j7qmPlWLYHBoNW0CsjIHOLp3K/3Jfw78k=) 9: 3131392e31352e3133312e302f32342d3234203d3e203435333036.roa (hash: KiKi/4BGJg0K48DdjCfOcOBa77JCOo4OxuIg38BvrXI=) 10: 3230322e39312e33312e302f32342d3234203d3e20313532303639.roa (hash: S7MlEVaiyvjAdB83EWitfmwmyo4wzjPWQGuZFYtjp34=) 11: 3230322e39312e32392e302f32342d3234203d3e203234353238.roa (hash: p6w84x+sTkId9KJBAsf0out+ASQwEBO6MAkMqXPQJmY=) 12: 3131392e31352e3133342e302f32342d3234203d3e203435333036.roa (hash: nSNHUbZiqo6P3F9SIZ9EN5nCLPpwycyYrfB+M+PV3zw=) 13: 3230322e39312e32362e302f32342d3234203d3e203234353238.roa (hash: 6Gn2L5Gc0xaArWW6fS4YuSQAyW4Nw2vh1NIUwUVsqyA=) 14: 3230322e39312e32342e302f32342d3234203d3e203234353238.roa (hash: nikRTC901Bllan4GreFOs5fithEDsAsxTQDrjRSiako=) 15: F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.crl (hash: 7YEjIyJNZjZs4lnI8P+ZSo82Vtnmey8A+oijkZQ/cL8=) 16: 3230322e39312e32352e302f32342d3234203d3e203234353238.roa (hash: f+5HOc/sgnjP7t42vcbumcmwD5c7eyke5qlw/e0UPsk=) 17: 3131392e31352e3133352e302f32342d3234203d3e203435333036.roa (hash: od2C/ltQ6m1xjAT8szqDpHM3qB6Kr8NBlMw+dYe1JvU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.crl rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 10:24:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:cb:bd:68:23:a7:32:c1:10:bc:ce:b8:bc:5d:52:2d:25:aa:4e:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A Validity Not Before: Mar 1 04:57:42 2026 GMT Not After : Mar 4 10:24:42 2026 GMT Subject: CN=3632C6C45E798255AA43031A7B5FE668C37B8AC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:bb:67:fa:22:f5:54:8f:c9:a9:24:29:dc:fc: 0a:b6:04:9f:4d:58:bb:a8:02:9e:0d:c5:d4:1c:79: 31:e4:54:18:2e:e2:4f:f4:28:43:a1:7f:8b:6b:92: e2:da:4f:ff:c5:1a:99:02:1c:03:83:e2:4e:fa:48: 6a:ec:e9:55:c9:4f:e9:4c:73:d4:0a:3e:1f:38:d1: 08:fe:6c:68:ac:1a:ac:be:06:48:57:3c:02:31:ca: 14:b7:8a:96:df:6d:29:75:24:79:58:36:b0:ec:6e: 22:eb:1b:b2:60:f2:d6:08:ac:a2:c7:c1:fb:01:81: e0:fc:3f:3e:ad:55:8b:60:61:43:78:05:66:c0:ba: 68:56:46:c9:91:b8:9a:fd:e7:cc:3e:58:cc:88:48: 23:2c:5a:97:c5:34:b0:eb:a4:6f:db:8e:a5:13:df: 25:4f:a6:e2:6a:7f:f7:f7:dc:d7:df:18:d6:cb:5a: e5:fb:e1:e3:92:7b:84:32:c6:49:e5:c6:b3:12:04: c3:2f:5e:4e:db:98:e3:e0:2a:76:da:5f:6b:20:90: c9:48:5d:86:0c:39:91:cd:54:77:1f:38:08:4e:b0: a2:6d:5e:7d:65:38:2c:74:5a:cb:ce:be:c9:d8:b3: 5b:1f:3d:81:94:92:3e:80:9b:23:d5:15:42:5e:7d: 4d:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:32:C6:C4:5E:79:82:55:AA:43:03:1A:7B:5F:E6:68:C3:7B:8A:C1 X509v3 Authority Key Identifier: keyid:F1:85:3A:1C:5C:1E:CA:FE:10:76:F9:4A:61:FA:77:96:DD:3C:67:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:e6:8d:0c:68:88:1b:f2:b9:c2:60:60:f5:fa:95:d6:5f:ad: a4:47:a0:23:a8:1c:47:cf:f9:b7:8a:68:9c:2e:cf:b1:14:7a: 7b:c6:93:9b:13:a5:f7:b4:19:d4:00:d9:77:02:9e:3c:ca:11: ce:d2:08:fa:a3:2d:3a:05:91:53:bc:f3:a6:f6:a3:fd:37:4c: 76:6e:e9:f5:8b:52:f6:70:20:10:8f:b5:0b:e4:17:eb:4b:04: b2:4c:91:e7:2e:8b:4d:37:57:c1:e8:ff:50:e9:15:34:ea:f7: 15:fc:c0:4b:fc:63:df:9a:a9:85:48:78:ce:6b:74:3b:e0:5d: 51:70:86:47:3c:92:e1:0f:76:d6:89:12:ed:95:2e:56:aa:e4: f7:04:09:9a:7f:f6:d6:b7:79:c1:d8:f9:30:72:d3:68:92:b1: 89:e0:5b:fc:28:be:35:83:e6:38:09:22:43:44:17:92:3a:5c: 6d:e4:b9:48:ff:cd:fe:f1:f3:6f:97:0f:ca:38:01:81:9d:a8: df:42:ad:02:fe:c3:84:64:30:08:60:3a:fa:01:77:8e:87:d8: d3:58:f2:6c:6d:d5:a7:f6:fa:8b:d1:03:c6:90:04:85:9e:92: 4f:6f:31:49:32:b6:36:ef:d0:9c:74:84:02:f1:2d:52:25:73: b9:9f:d8:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKcu9aCOnMsEQvM64vF1SLSWqTvwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjE4NTNBMUM1QzFFQ0FGRTEwNzZGOTRBNjFGQTc3OTZE RDNDNjcxQTAeFw0yNjAzMDEwNDU3NDJaFw0yNjAzMDQxMDI0NDJaMDMxMTAvBgNV BAMTKDM2MzJDNkM0NUU3OTgyNTVBQTQzMDMxQTdCNUZFNjY4QzM3QjhBQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyu2f6IvVUj8mpJCnc/Aq2BJ9N WLuoAp4NxdQceTHkVBgu4k/0KEOhf4trkuLaT//FGpkCHAOD4k76SGrs6VXJT+lM c9QKPh840Qj+bGisGqy+BkhXPAIxyhS3ipbfbSl1JHlYNrDsbiLrG7Jg8tYIrKLH wfsBgeD8Pz6tVYtgYUN4BWbAumhWRsmRuJr958w+WMyISCMsWpfFNLDrpG/bjqUT 3yVPpuJqf/f33NffGNbLWuX74eOSe4QyxknlxrMSBMMvXk7bmOPgKnbaX2sgkMlI XYYMOZHNVHcfOAhOsKJtXn1lOCx0WsvOvsnYs1sfPYGUkj6AmyPVFUJefU1NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNjLGxF55glWqQwMae1/maMN7isEwHwYDVR0j BBgwFoAU8YU6HFweyv4QdvlKYfp3lt08ZxowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OWFiNjBiMS1hMjQ0LTRhNzgtYjMxYi1mZWNhM2QxNGVkOWYvMC9GMTg1M0ExQzVD MUVDQUZFMTA3NkY5NEE2MUZBNzc5NkREM0M2NzFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjE4NTNBMUM1QzFFQ0FGRTEwNzZGOTRBNjFGQTc3OTZERDND NjcxQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjlhYjYwYjEtYTI0NC00YTc4LWIz MWItZmVjYTNkMTRlZDlmLzAvRjE4NTNBMUM1QzFFQ0FGRTEwNzZGOTRBNjFGQTc3 OTZERDNDNjcxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACnmjQxoiBvyucJgYPX6ldZfraRHoCOoHEfP +beKaJwuz7EUenvGk5sTpfe0GdQA2XcCnjzKEc7SCPqjLToFkVO886b2o/03THZu 6fWLUvZwIBCPtQvkF+tLBLJMkecui003V8Ho/1DpFTTq9xX8wEv8Y9+aqYVIeM5r dDvgXVFwhkc8kuEPdtaJEu2VLlaq5PcECZp/9ta3ecHY+TBy02iSsYngW/wovjWD 5jgJIkNEF5I6XG3kuUj/zf7x82+XD8o4AYGdqN9CrQL+w4RkMAhgOvoBd46H2NNY 8mxt1af2+ovRA8aQBIWekk9vMUkytjbv0Jx0hALxLVIlc7mf2Gc= -----END CERTIFICATE-----Generated at Mon Mar 2 12:00:26 2026 by rpki-client