$ rpki-client -vvf repo-rpki.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.mft File: F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.mft (raw, json) Hash identifier: ko+uBQRmskg4N3sESuqWDLPzCu6097Ad+eftmlHgbHA= Subject key identifier: 38:1B:B6:91:C1:6F:7E:F3:03:70:16:BF:A5:34:E5:CA:90:45:CF:93 Authority key identifier: F5:D7:1E:C7:79:22:A9:08:0F:17:C3:A1:6F:BE:5F:69:B1:CD:88:32 Certificate issuer: /CN=F5D71EC77922A9080F17C3A16FBE5F69B1CD8832 Certificate serial: 1EC07DCDCC6ED730C755F73FC3470D25F0B2BC73 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.mft Manifest number: 0150 Signing time: Sun 01 Mar 2026 02:01:47 +0000 Manifest this update: Sun 01 Mar 2026 01:56:47 +0000 Manifest next update: Wed 04 Mar 2026 11:07:47 +0000 Files and hashes: 1: F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.crl (hash: yqBPdhBrK1unDX8oAsjgDaevZyLTOH0KwNjymxJ9KDY=) 2: 33362e35302e3232352e302f32342d3234203d3e20313532303830.roa (hash: nKxO8PKUOfcfhIzcZRlVaTiwSCaRzFdd2tCF/Y3OpxE=) 3: 33362e35302e3232342e302f32342d3234203d3e20313532303830.roa (hash: poGKgapE6hco0w5hl/ttNEBFLPyrOwCdpTe8gg19IFU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.crl rsync://repo-rpki.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 11:07:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:c0:7d:cd:cc:6e:d7:30:c7:55:f7:3f:c3:47:0d:25:f0:b2:bc:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F5D71EC77922A9080F17C3A16FBE5F69B1CD8832 Validity Not Before: Mar 1 01:56:47 2026 GMT Not After : Mar 4 11:07:47 2026 GMT Subject: CN=381BB691C16F7EF3037016BFA534E5CA9045CF93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:51:4b:c1:dc:9e:29:4a:9e:5f:45:9f:3c:7c: cf:3a:b6:0e:0c:ff:f9:8f:a7:49:6b:54:f7:1b:0f: ff:f5:23:d2:85:dd:d3:74:65:4f:8e:e3:c0:81:14: 51:84:71:8a:70:84:08:4b:c6:c9:27:4a:66:7f:a8: 34:04:49:5b:eb:f0:3d:e0:b9:28:91:f5:1f:a3:c7: 2d:e9:33:87:1a:17:68:84:56:8b:13:f9:a0:c1:82: 5c:b5:57:71:d2:aa:e0:fe:07:01:28:3a:c7:84:c0: 16:48:75:d4:14:d6:ba:f9:7e:6c:cc:9c:02:0c:c8: a7:e5:e1:0f:7b:df:eb:a2:0b:d5:5e:8e:15:34:7f: 1a:cf:f4:74:6e:c5:26:52:cd:0e:63:9e:b8:2b:33: 45:79:cf:04:ee:e1:54:a7:54:6c:9d:23:18:a7:2b: 28:d1:06:bd:d5:83:f6:f1:ee:42:9b:ae:46:ef:ce: 0d:f2:cb:11:be:28:99:6e:40:c5:bb:3a:19:bb:e3: 40:8e:e4:65:46:32:0f:68:47:6d:a4:d6:24:a7:9d: 65:40:15:09:6c:82:7a:62:67:ce:b7:1d:58:00:9a: b5:c2:2a:38:3f:8a:07:62:bf:7a:1f:b0:c6:ef:cb: a7:f3:ef:3e:85:80:0c:73:4e:42:c7:df:94:2b:de: c3:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:1B:B6:91:C1:6F:7E:F3:03:70:16:BF:A5:34:E5:CA:90:45:CF:93 X509v3 Authority Key Identifier: keyid:F5:D7:1E:C7:79:22:A9:08:0F:17:C3:A1:6F:BE:5F:69:B1:CD:88:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:ce:6c:fd:dd:df:ed:4c:a7:ee:6b:63:57:81:73:90:98:cc: 67:4d:0a:fc:00:0f:17:b6:17:90:33:c9:ad:06:7b:28:41:78: d7:6e:b2:fb:22:21:5f:2c:e7:e0:04:f8:e9:a3:08:d3:e5:a9: fb:5d:7c:52:e1:5a:50:5f:ec:4b:4d:67:3f:b9:b0:17:95:02: 17:0c:bf:cd:a3:b5:c5:6b:16:eb:18:49:7d:03:20:0c:50:6c: 13:3c:27:d3:a7:c0:cb:93:24:6c:34:c1:43:06:06:28:ae:2c: fb:e8:22:98:40:b6:b9:f3:4b:98:d0:ef:33:34:1b:2b:0a:13: e4:72:08:cc:57:c9:b1:c5:3d:79:ab:d0:a8:04:4c:31:87:cd: 53:91:b2:8b:8d:6c:14:71:b1:2d:0a:78:4d:4e:68:86:2e:a4: f0:ab:6d:a0:a3:ab:e6:ca:de:8b:6d:af:55:e2:a8:a6:39:b1: 83:d4:de:90:ec:87:11:99:33:9c:3f:f8:74:0f:58:50:5a:35: c8:ed:cd:78:f0:32:33:28:d5:0c:a2:00:b4:5a:36:11:5e:a1: 44:da:7f:bb:41:8c:0a:44:99:06:49:fb:26:a6:71:7d:15:78: a0:4f:64:e1:b5:c8:fc:a6:a8:e7:e7:c7:29:bc:b9:8b:fd:14: 1a:37:af:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHsB9zcxu1zDHVfc/w0cNJfCyvHMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjVENzFFQzc3OTIyQTkwODBGMTdDM0ExNkZCRTVGNjlC MUNEODgzMjAeFw0yNjAzMDEwMTU2NDdaFw0yNjAzMDQxMTA3NDdaMDMxMTAvBgNV BAMTKDM4MUJCNjkxQzE2RjdFRjMwMzcwMTZCRkE1MzRFNUNBOTA0NUNGOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGUUvB3J4pSp5fRZ88fM86tg4M //mPp0lrVPcbD//1I9KF3dN0ZU+O48CBFFGEcYpwhAhLxsknSmZ/qDQESVvr8D3g uSiR9R+jxy3pM4caF2iEVosT+aDBgly1V3HSquD+BwEoOseEwBZIddQU1rr5fmzM nAIMyKfl4Q973+uiC9VejhU0fxrP9HRuxSZSzQ5jnrgrM0V5zwTu4VSnVGydIxin KyjRBr3Vg/bx7kKbrkbvzg3yyxG+KJluQMW7Ohm740CO5GVGMg9oR22k1iSnnWVA FQlsgnpiZ863HVgAmrXCKjg/igdiv3ofsMbvy6fz7z6FgAxzTkLH35Qr3sP7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOBu2kcFvfvMDcBa/pTTlypBFz5MwHwYDVR0j BBgwFoAU9dcex3kiqQgPF8Ohb75fabHNiDIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YWU4MzY3My0wOTZhLTQ0MGMtYjI3YS05YmU2NGIxM2I0ZTUvMC9GNUQ3MUVDNzc5 MjJBOTA4MEYxN0MzQTE2RkJFNUY2OUIxQ0Q4ODMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjVENzFFQzc3OTIyQTkwODBGMTdDM0ExNkZCRTVGNjlCMUNE ODgzMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2FlODM2NzMtMDk2YS00NDBjLWIy N2EtOWJlNjRiMTNiNGU1LzAvRjVENzFFQzc3OTIyQTkwODBGMTdDM0ExNkZCRTVG NjlCMUNEODgzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALLObP3d3+1Mp+5rY1eBc5CYzGdNCvwADxe2 F5Azya0GeyhBeNdusvsiIV8s5+AE+OmjCNPlqftdfFLhWlBf7EtNZz+5sBeVAhcM v82jtcVrFusYSX0DIAxQbBM8J9OnwMuTJGw0wUMGBiiuLPvoIphAtrnzS5jQ7zM0 GysKE+RyCMxXybHFPXmr0KgETDGHzVORsouNbBRxsS0KeE1OaIYupPCrbaCjq+bK 3ottr1XiqKY5sYPU3pDshxGZM5w/+HQPWFBaNcjtzXjwMjMo1QyiALRaNhFeoUTa f7tBjApEmQZJ+yamcX0VeKBPZOG1yPymqOfnxym8uYv9FBo3r8s= -----END CERTIFICATE-----Generated at Mon Mar 2 12:41:19 2026 by rpki-client