$ rpki-client -vvf repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.mft File: F520C5AEC051FBD03954D15F7A52EAB852DC4D63.mft (raw, json) Hash identifier: Y5Y+jk/jRJqhrk8tgjfKXU2fEkkwIOTjrzsTNTnBd1c= Subject key identifier: 2D:89:81:08:E0:2F:94:9B:39:42:32:9E:F1:79:5C:01:4B:F0:AF:AB Authority key identifier: F5:20:C5:AE:C0:51:FB:D0:39:54:D1:5F:7A:52:EA:B8:52:DC:4D:63 Certificate issuer: /CN=F520C5AEC051FBD03954D15F7A52EAB852DC4D63 Certificate serial: 54091F737255D4F5AC3D419CBC71E6CEF36B4839 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.cer Subject info access: rsync://repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.mft Manifest number: 0550 Signing time: Mon 02 Mar 2026 00:20:51 +0000 Manifest this update: Mon 02 Mar 2026 00:15:51 +0000 Manifest next update: Thu 05 Mar 2026 07:42:51 +0000 Files and hashes: 1: 3130332e3134322e3230302e302f32332d3234203d3e20313339333739.roa (hash: CW38hcQKuGx3OYMIBYq8S0wTy4MYcrKf3ZrGBJO/Jz8=) 2: F520C5AEC051FBD03954D15F7A52EAB852DC4D63.crl (hash: qvi52fAT7Q1OLp+nreM+KTuJa++WugmfCTKwSvZFkJY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.crl rsync://repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:17:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:09:1f:73:72:55:d4:f5:ac:3d:41:9c:bc:71:e6:ce:f3:6b:48:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F520C5AEC051FBD03954D15F7A52EAB852DC4D63 Validity Not Before: Mar 2 00:15:51 2026 GMT Not After : Mar 5 07:42:51 2026 GMT Subject: CN=2D898108E02F949B3942329EF1795C014BF0AFAB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:0c:4e:73:07:2c:fe:eb:fa:ea:2a:de:83:f3: 12:b7:36:e8:e5:f8:f5:bc:8b:5a:db:ff:e5:6e:7f: 3a:14:da:37:b3:05:ce:41:95:85:13:94:ac:7d:53: 8c:69:c3:99:cc:3e:cc:b9:bf:03:00:aa:6d:ed:cb: f7:84:17:63:4b:b1:bd:48:ce:08:aa:1a:84:04:6c: fc:4b:ef:16:35:20:85:ad:09:38:97:45:d0:0f:08: 5b:b2:02:bb:4f:32:9a:51:c9:15:57:b6:22:2d:c6: bf:8c:9c:2f:aa:ad:6f:10:d1:86:19:93:ff:69:eb: 58:7f:91:1f:6b:56:16:0c:01:8c:4d:92:5c:a4:16: 93:5f:33:ba:0d:f2:db:b4:90:06:38:9f:22:91:01: f1:82:26:9c:19:98:ad:09:10:02:2d:de:e8:dd:c8: fe:77:ea:6b:7b:9c:04:6d:9f:10:8f:37:62:d3:88: 10:c7:fa:71:3a:05:2a:09:20:68:50:a3:ba:08:b7: 70:82:89:b9:16:e2:41:d3:dc:05:f8:52:51:81:a8: f6:63:40:b6:78:f7:0f:59:28:26:74:48:3e:5c:d3: fc:13:09:6e:66:96:3c:b7:a5:71:3e:6d:4c:8e:cd: 74:a0:79:8b:6d:9b:04:3d:64:f3:41:b1:23:eb:21: df:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:89:81:08:E0:2F:94:9B:39:42:32:9E:F1:79:5C:01:4B:F0:AF:AB X509v3 Authority Key Identifier: keyid:F5:20:C5:AE:C0:51:FB:D0:39:54:D1:5F:7A:52:EA:B8:52:DC:4D:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:87:aa:75:e5:91:1e:df:67:49:c7:0a:f3:6c:11:e3:25:72: 5c:16:da:40:e6:60:24:b3:d6:7a:59:ea:cb:55:18:3c:2b:c2: 95:13:b2:f1:84:26:f9:48:ba:14:dc:bc:ce:b4:78:0b:1e:3b: 21:d3:43:7f:b6:ce:21:8d:41:a9:89:79:9b:7f:ba:80:71:f2: ac:74:0a:73:8c:e7:75:aa:3c:a5:37:a4:50:e5:13:21:f8:2b: 45:db:d4:ca:86:ed:8c:b5:82:e6:86:ff:ae:43:34:72:9f:09: d7:b2:2d:17:45:9a:b3:3b:5e:c1:44:6e:3e:98:4e:b6:5d:24: 76:0a:3d:bb:8f:31:fe:69:2f:b1:d8:01:01:15:5b:19:02:ed: 35:d8:28:bc:e2:47:2e:e8:ae:15:a0:6e:1e:31:42:f6:d3:8f: f7:18:5a:7b:be:fb:89:61:28:de:95:a5:f6:7b:7a:2a:6d:e7: 9d:ff:41:fb:7f:b2:e4:5c:06:16:8f:6f:f8:26:60:97:d5:75: f3:db:a6:27:1a:6e:02:9c:0a:6c:9c:e7:a5:9c:3a:74:72:49: 16:28:6b:12:2b:69:23:d6:f6:60:61:93:c2:25:41:0a:1d:aa: 3b:9c:90:9b:54:0c:d4:11:64:e7:60:dd:b4:2d:05:6f:7f:2b: 6e:29:d3:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVAkfc3JV1PWsPUGcvHHmzvNrSDkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjUyMEM1QUVDMDUxRkJEMDM5NTREMTVGN0E1MkVBQjg1 MkRDNEQ2MzAeFw0yNjAzMDIwMDE1NTFaFw0yNjAzMDUwNzQyNTFaMDMxMTAvBgNV BAMTKDJEODk4MTA4RTAyRjk0OUIzOTQyMzI5RUYxNzk1QzAxNEJGMEFGQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaDE5zByz+6/rqKt6D8xK3Nujl +PW8i1rb/+VufzoU2jezBc5BlYUTlKx9U4xpw5nMPsy5vwMAqm3ty/eEF2NLsb1I zgiqGoQEbPxL7xY1IIWtCTiXRdAPCFuyArtPMppRyRVXtiItxr+MnC+qrW8Q0YYZ k/9p61h/kR9rVhYMAYxNklykFpNfM7oN8tu0kAY4nyKRAfGCJpwZmK0JEAIt3ujd yP536mt7nARtnxCPN2LTiBDH+nE6BSoJIGhQo7oIt3CCibkW4kHT3AX4UlGBqPZj QLZ49w9ZKCZ0SD5c0/wTCW5mljy3pXE+bUyOzXSgeYttmwQ9ZPNBsSPrId9bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULYmBCOAvlJs5QjKe8XlcAUvwr6swHwYDVR0j BBgwFoAU9SDFrsBR+9A5VNFfelLquFLcTWMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MmE5OGM4Yi1jYWQ5LTQ5ZTEtYjE3OC0xZGFmM2I2MmVmNTkvMC9GNTIwQzVBRUMw NTFGQkQwMzk1NEQxNUY3QTUyRUFCODUyREM0RDYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjUyMEM1QUVDMDUxRkJEMDM5NTREMTVGN0E1MkVBQjg1MkRD NEQ2My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzJhOThjOGItY2FkOS00OWUxLWIx NzgtMWRhZjNiNjJlZjU5LzAvRjUyMEM1QUVDMDUxRkJEMDM5NTREMTVGN0E1MkVB Qjg1MkRDNEQ2My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJuHqnXlkR7fZ0nHCvNsEeMlclwW2kDmYCSz 1npZ6stVGDwrwpUTsvGEJvlIuhTcvM60eAseOyHTQ3+2ziGNQamJeZt/uoBx8qx0 CnOM53WqPKU3pFDlEyH4K0Xb1MqG7Yy1guaG/65DNHKfCdeyLRdFmrM7XsFEbj6Y TrZdJHYKPbuPMf5pL7HYAQEVWxkC7TXYKLziRy7orhWgbh4xQvbTj/cYWnu++4lh KN6VpfZ7eipt553/Qft/suRcBhaPb/gmYJfVdfPbpicabgKcCmyc56WcOnRySRYo axIraSPW9mBhk8IlQQodqjuckJtUDNQRZOdg3bQtBW9/K24p04Y= -----END CERTIFICATE-----Generated at Mon Mar 2 04:35:38 2026 by rpki-client