$ rpki-client -vvf repo-rpki.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/FF102371565831DDB9C06DF47DF79B1120C9861E.mft File: FF102371565831DDB9C06DF47DF79B1120C9861E.mft (raw, json) Hash identifier: RwQHokes6BTeDKwTYgxx+saCNRrrnYZ3NGi+2y321zY= Subject key identifier: 5F:BB:15:2C:DC:C6:13:6F:63:A9:CB:96:91:4C:0B:09:F1:1D:4D:44 Authority key identifier: FF:10:23:71:56:58:31:DD:B9:C0:6D:F4:7D:F7:9B:11:20:C9:86:1E Certificate issuer: /CN=FF102371565831DDB9C06DF47DF79B1120C9861E Certificate serial: 0B3A9D3B4E85D6E7958ACADD918688654BCC8256 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF102371565831DDB9C06DF47DF79B1120C9861E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/FF102371565831DDB9C06DF47DF79B1120C9861E.mft Manifest number: 0105 Signing time: Sun 01 Mar 2026 22:01:19 +0000 Manifest this update: Sun 01 Mar 2026 21:56:19 +0000 Manifest next update: Thu 05 Mar 2026 08:58:19 +0000 Files and hashes: 1: 3130332e332e3233332e302f32342d3234203d3e203538343837.roa (hash: J+VrJkjfilmZKoAgsIWnKv1mOwdSs14Mc87IKiPWNdQ=) 2: FF102371565831DDB9C06DF47DF79B1120C9861E.crl (hash: Pwl559w9GpGxFa2joc8VOGSYUQVPh4fjQbWVqYBI95Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/FF102371565831DDB9C06DF47DF79B1120C9861E.crl rsync://repo-rpki.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/FF102371565831DDB9C06DF47DF79B1120C9861E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF102371565831DDB9C06DF47DF79B1120C9861E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:3a:9d:3b:4e:85:d6:e7:95:8a:ca:dd:91:86:88:65:4b:cc:82:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF102371565831DDB9C06DF47DF79B1120C9861E Validity Not Before: Mar 1 21:56:19 2026 GMT Not After : Mar 5 08:58:19 2026 GMT Subject: CN=5FBB152CDCC6136F63A9CB96914C0B09F11D4D44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a1:8d:58:08:90:76:8e:a2:35:34:27:59:af: 2d:02:ad:bb:b2:97:93:f4:42:13:53:33:8e:b0:dc: f6:8a:6d:89:43:7e:b0:74:3e:f0:d8:a6:54:83:fd: c5:09:6e:c3:13:4e:28:1e:df:84:7c:37:be:fc:14: 05:18:9c:81:f3:20:2b:00:f4:13:01:89:6d:04:48: 73:c8:bf:c7:a4:76:3a:be:78:c9:1c:49:fb:83:a0: 1c:ed:21:04:47:ed:9b:eb:54:41:8a:df:3a:b3:7d: c3:fe:d8:34:dd:bc:a7:ee:77:3b:14:16:42:9b:72: 62:48:16:19:b8:f4:d9:ff:48:d3:07:8f:5b:28:30: 15:f7:48:39:8a:42:f4:ef:50:72:ba:bf:15:cb:f5: 44:25:32:6d:c8:5a:cd:33:6c:ed:e3:f8:b1:b4:0a: bf:46:65:6f:09:7e:38:fa:52:af:17:94:91:a4:3a: f1:3c:a0:e0:70:a2:37:ac:79:53:59:89:b2:28:f5: d0:f8:cb:80:16:36:13:64:e5:16:15:5e:f9:39:8a: 5f:2d:d7:ea:dc:11:26:70:6e:55:75:4c:42:2b:b8: 4e:33:42:d6:f5:67:f3:79:6f:a5:da:a2:fb:1e:26: 9c:72:df:b9:91:28:ee:39:b1:36:6f:d1:79:3f:8c: 6e:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:BB:15:2C:DC:C6:13:6F:63:A9:CB:96:91:4C:0B:09:F1:1D:4D:44 X509v3 Authority Key Identifier: keyid:FF:10:23:71:56:58:31:DD:B9:C0:6D:F4:7D:F7:9B:11:20:C9:86:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/FF102371565831DDB9C06DF47DF79B1120C9861E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF102371565831DDB9C06DF47DF79B1120C9861E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/FF102371565831DDB9C06DF47DF79B1120C9861E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:48:b2:48:25:fd:91:f6:2d:c5:5c:a2:05:76:49:64:61:2e: 06:63:7a:13:68:e1:0b:d2:9d:bf:74:db:f6:ba:9b:49:67:1d: d6:94:58:74:ba:6c:00:cf:cb:42:32:04:10:8f:82:fa:c8:b9: a8:82:88:3d:05:67:fb:dc:2f:e5:a6:f8:42:a2:d1:62:ed:cf: 9d:a7:d3:86:f7:5b:4d:a3:43:14:3a:02:87:2f:8b:0d:10:75: fe:9e:35:02:bb:d1:b4:a8:fb:47:3d:a5:d3:db:98:a3:fc:67: 5a:21:6b:6d:28:76:4d:72:b4:ae:41:6a:44:b1:00:7a:c5:f6: fa:ae:0f:2a:cd:56:59:83:36:b5:31:e3:53:0c:d5:7a:9c:a1: 01:d5:bd:65:af:56:9f:75:a2:e9:7a:4b:4b:1a:11:3d:93:4f: 2e:b8:5b:9f:c7:cc:cc:61:5b:da:be:19:bf:f8:33:a4:fa:87: 0a:7d:4c:ea:df:b7:66:9a:1e:50:a2:4a:1f:59:11:f5:cd:57: b6:a1:e1:d0:72:a0:c4:07:e7:6d:b4:fa:d7:6d:27:6a:28:fb: 82:72:73:fe:97:4c:ea:7f:2d:92:4a:89:6a:b9:d0:55:04:3c: 04:85:e3:83:67:6d:e3:b1:50:ed:6b:35:17:df:f9:aa:d4:9a: 72:c0:19:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCzqdO06F1ueVisrdkYaIZUvMglYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkYxMDIzNzE1NjU4MzFEREI5QzA2REY0N0RGNzlCMTEy MEM5ODYxRTAeFw0yNjAzMDEyMTU2MTlaFw0yNjAzMDUwODU4MTlaMDMxMTAvBgNV BAMTKDVGQkIxNTJDRENDNjEzNkY2M0E5Q0I5NjkxNEMwQjA5RjExRDRENDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeoY1YCJB2jqI1NCdZry0Crbuy l5P0QhNTM46w3PaKbYlDfrB0PvDYplSD/cUJbsMTTige34R8N778FAUYnIHzICsA 9BMBiW0ESHPIv8ekdjq+eMkcSfuDoBztIQRH7ZvrVEGK3zqzfcP+2DTdvKfudzsU FkKbcmJIFhm49Nn/SNMHj1soMBX3SDmKQvTvUHK6vxXL9UQlMm3IWs0zbO3j+LG0 Cr9GZW8Jfjj6Uq8XlJGkOvE8oOBwojeseVNZibIo9dD4y4AWNhNk5RYVXvk5il8t 1+rcESZwblV1TEIruE4zQtb1Z/N5b6XaovseJpxy37mRKO45sTZv0Xk/jG4tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUX7sVLNzGE29jqcuWkUwLCfEdTUQwHwYDVR0j BBgwFoAU/xAjcVZYMd25wG30ffebESDJhh4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NDNmMjllYS04NzRhLTRkMWEtYWJjYy03NTI5M2NiNTFhNmQvMC9GRjEwMjM3MTU2 NTgzMUREQjlDMDZERjQ3REY3OUIxMTIwQzk4NjFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkYxMDIzNzE1NjU4MzFEREI5QzA2REY0N0RGNzlCMTEyMEM5 ODYxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzQzZjI5ZWEtODc0YS00ZDFhLWFi Y2MtNzUyOTNjYjUxYTZkLzAvRkYxMDIzNzE1NjU4MzFEREI5QzA2REY0N0RGNzlC MTEyMEM5ODYxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEBIskgl/ZH2LcVcogV2SWRhLgZjehNo4QvS nb902/a6m0lnHdaUWHS6bADPy0IyBBCPgvrIuaiCiD0FZ/vcL+Wm+EKi0WLtz52n 04b3W02jQxQ6Aocviw0Qdf6eNQK70bSo+0c9pdPbmKP8Z1oha20odk1ytK5BakSx AHrF9vquDyrNVlmDNrUx41MM1XqcoQHVvWWvVp91oul6S0saET2TTy64W5/HzMxh W9q+Gb/4M6T6hwp9TOrft2aaHlCiSh9ZEfXNV7ah4dByoMQH5220+tdtJ2oo+4Jy c/6XTOp/LZJKiWq50FUEPASF44NnbeOxUO1rNRff+arUmnLAGY8= -----END CERTIFICATE-----Generated at Mon Mar 2 10:02:04 2026 by rpki-client