$ rpki-client -vvf repo-rpki.idnic.net/repo/3248d27b-ccb0-4fc7-abca-9fc0a3e15754/0/FF45D0F44B7B63B976B41EEE18CC92393CF8184F.mft File: FF45D0F44B7B63B976B41EEE18CC92393CF8184F.mft (raw, json) Hash identifier: q3zLnGrP03v0c6cbyntr4u6Oh4xg5f8ZGjatjnq4NOg= Subject key identifier: 51:97:4E:AB:83:62:8F:8E:39:C0:DC:32:61:5B:31:6C:84:32:C7:65 Authority key identifier: FF:45:D0:F4:4B:7B:63:B9:76:B4:1E:EE:18:CC:92:39:3C:F8:18:4F Certificate issuer: /CN=FF45D0F44B7B63B976B41EEE18CC92393CF8184F Certificate serial: 030D7CF2EA23EFF6B6646AB25B01234818D72018 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF45D0F44B7B63B976B41EEE18CC92393CF8184F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3248d27b-ccb0-4fc7-abca-9fc0a3e15754/0/FF45D0F44B7B63B976B41EEE18CC92393CF8184F.mft Manifest number: 022E Signing time: Sat 28 Feb 2026 09:50:03 +0000 Manifest this update: Sat 28 Feb 2026 09:45:03 +0000 Manifest next update: Tue 03 Mar 2026 11:14:03 +0000 Files and hashes: 1: 3130332e3136392e33382e302f32332d3234203d3e20313432333331.roa (hash: XR+TpGg6coEePHmhn8BPw57A0ogwMebLb1ve/vRAoWA=) 2: FF45D0F44B7B63B976B41EEE18CC92393CF8184F.crl (hash: e42guMpvTOxfn/imdbCPgKthPvkTNUOULVCRmnerBEM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3248d27b-ccb0-4fc7-abca-9fc0a3e15754/0/FF45D0F44B7B63B976B41EEE18CC92393CF8184F.crl rsync://repo-rpki.idnic.net/repo/3248d27b-ccb0-4fc7-abca-9fc0a3e15754/0/FF45D0F44B7B63B976B41EEE18CC92393CF8184F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF45D0F44B7B63B976B41EEE18CC92393CF8184F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 11:14:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:0d:7c:f2:ea:23:ef:f6:b6:64:6a:b2:5b:01:23:48:18:d7:20:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF45D0F44B7B63B976B41EEE18CC92393CF8184F Validity Not Before: Feb 28 09:45:03 2026 GMT Not After : Mar 3 11:14:03 2026 GMT Subject: CN=51974EAB83628F8E39C0DC32615B316C8432C765 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:44:8d:d5:1a:04:8a:97:fa:45:9d:1d:8a:9f: 55:03:bb:28:92:ca:e0:24:67:d4:74:ac:c6:c7:4b: 82:74:f0:34:46:1d:28:db:9f:4d:60:1b:98:21:2c: de:dc:09:cd:3d:4a:6b:2d:0c:83:37:4d:0b:a6:46: 62:1d:1c:95:97:bd:5b:4a:96:f1:c7:ee:01:2e:96: ca:0b:17:7c:df:6b:55:ea:29:f2:a3:a7:75:5e:19: 86:cf:92:f8:5b:31:b9:55:a0:f6:65:32:f6:9e:b1: 2a:60:7d:c0:06:5a:4b:86:94:ff:e4:47:6f:f3:ce: 4c:60:3a:a4:c7:a6:c1:f0:0e:f9:76:f3:87:0e:51: b4:b4:9c:79:ed:e8:38:1d:28:23:37:11:43:21:e6: 62:05:55:47:6d:32:05:e0:74:1c:e8:af:56:4d:eb: 6c:7c:c9:65:80:ee:00:3c:f8:0c:00:13:93:cb:36: c0:7c:ec:bb:de:5e:d2:87:16:6a:d7:f6:2e:aa:ba: 14:40:66:6a:49:ea:44:b7:55:9c:56:92:fd:b5:95: 14:e3:4c:cc:82:ed:b4:11:bf:97:14:8f:66:b5:2d: d3:15:72:d6:4f:3d:67:35:ee:ea:ea:e7:2c:2b:e2: 2a:7e:be:9c:5e:12:9a:6c:3d:a4:11:6e:0b:18:ec: dc:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:97:4E:AB:83:62:8F:8E:39:C0:DC:32:61:5B:31:6C:84:32:C7:65 X509v3 Authority Key Identifier: keyid:FF:45:D0:F4:4B:7B:63:B9:76:B4:1E:EE:18:CC:92:39:3C:F8:18:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3248d27b-ccb0-4fc7-abca-9fc0a3e15754/0/FF45D0F44B7B63B976B41EEE18CC92393CF8184F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF45D0F44B7B63B976B41EEE18CC92393CF8184F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3248d27b-ccb0-4fc7-abca-9fc0a3e15754/0/FF45D0F44B7B63B976B41EEE18CC92393CF8184F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:b6:dc:47:da:52:af:a6:db:7d:20:19:92:65:c5:55:d5:2a: 67:b3:48:dd:0c:e2:b7:88:5e:5e:97:7d:fc:1f:da:a9:92:6b: f0:72:14:71:9f:37:90:92:6e:eb:ae:4c:1e:ed:7a:10:29:85: 7d:0f:67:b1:34:1c:25:87:c0:3e:91:01:42:73:c0:99:23:c1: 52:dc:90:32:65:8f:c5:96:99:1e:51:de:dc:a6:1e:ce:81:ef: 57:d2:e8:08:ff:f2:76:3b:30:af:28:c3:66:f4:0f:0e:5f:a3: 2a:f9:62:8f:0f:2a:7b:20:e3:51:ec:12:d9:07:3a:e5:79:71: 3a:f3:c4:96:c5:82:6c:65:4d:f6:3a:3c:8a:d3:26:6f:46:88: 17:e3:eb:fd:65:73:16:ae:14:37:10:87:6b:12:3d:db:5b:3c: eb:f2:d3:65:d2:13:03:b9:64:e7:09:61:c7:24:5a:ae:24:1a: de:dc:59:b3:5a:0c:d2:7b:2f:76:cb:5e:57:cd:d5:78:41:5f: 7b:33:3c:b7:6f:4b:6e:44:f7:84:91:f3:52:4b:81:cd:44:27: fd:ca:59:21:19:0d:df:0a:26:19:59:a9:fa:01:0f:e9:be:90: ee:0b:d9:95:1f:44:6b:08:98:f2:b3:3d:51:44:df:58:21:ff: 19:1b:57:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAw188uoj7/a2ZGqyWwEjSBjXIBgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY0NUQwRjQ0QjdCNjNCOTc2QjQxRUVFMThDQzkyMzkz Q0Y4MTg0RjAeFw0yNjAyMjgwOTQ1MDNaFw0yNjAzMDMxMTE0MDNaMDMxMTAvBgNV BAMTKDUxOTc0RUFCODM2MjhGOEUzOUMwREMzMjYxNUIzMTZDODQzMkM3NjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5RI3VGgSKl/pFnR2Kn1UDuyiS yuAkZ9R0rMbHS4J08DRGHSjbn01gG5ghLN7cCc09SmstDIM3TQumRmIdHJWXvVtK lvHH7gEulsoLF3zfa1XqKfKjp3VeGYbPkvhbMblVoPZlMvaesSpgfcAGWkuGlP/k R2/zzkxgOqTHpsHwDvl284cOUbS0nHnt6DgdKCM3EUMh5mIFVUdtMgXgdBzor1ZN 62x8yWWA7gA8+AwAE5PLNsB87LveXtKHFmrX9i6quhRAZmpJ6kS3VZxWkv21lRTj TMyC7bQRv5cUj2a1LdMVctZPPWc17urq5ywr4ip+vpxeEppsPaQRbgsY7NzfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUZdOq4Nij445wNwyYVsxbIQyx2UwHwYDVR0j BBgwFoAU/0XQ9Et7Y7l2tB7uGMySOTz4GE8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MjQ4ZDI3Yi1jY2IwLTRmYzctYWJjYS05ZmMwYTNlMTU3NTQvMC9GRjQ1RDBGNDRC N0I2M0I5NzZCNDFFRUUxOENDOTIzOTNDRjgxODRGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkY0NUQwRjQ0QjdCNjNCOTc2QjQxRUVFMThDQzkyMzkzQ0Y4 MTg0Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzI0OGQyN2ItY2NiMC00ZmM3LWFi Y2EtOWZjMGEzZTE1NzU0LzAvRkY0NUQwRjQ0QjdCNjNCOTc2QjQxRUVFMThDQzky MzkzQ0Y4MTg0Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKq23EfaUq+m230gGZJlxVXVKmezSN0M4reI Xl6Xffwf2qmSa/ByFHGfN5CSbuuuTB7tehAphX0PZ7E0HCWHwD6RAUJzwJkjwVLc kDJlj8WWmR5R3tymHs6B71fS6Aj/8nY7MK8ow2b0Dw5foyr5Yo8PKnsg41HsEtkH OuV5cTrzxJbFgmxlTfY6PIrTJm9GiBfj6/1lcxauFDcQh2sSPdtbPOvy02XSEwO5 ZOcJYcckWq4kGt7cWbNaDNJ7L3bLXlfN1XhBX3szPLdvS25E94SR81JLgc1EJ/3K WSEZDd8KJhlZqfoBD+m+kO4L2ZUfRGsImPKzPVFE31gh/xkbV0U= -----END CERTIFICATE-----Generated at Mon Mar 2 02:21:07 2026 by rpki-client