$ rpki-client -vvf repo-rpki.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.mft File: F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.mft (raw, json) Hash identifier: Qk14zpujG2Np+Ty1Mk6ThibkUp3tQikoLkiyweoZCag= Subject key identifier: 94:3A:72:7D:87:66:7C:87:7F:B9:F4:32:C0:45:C6:99:B0:AD:97:11 Authority key identifier: F7:A5:C0:89:7A:1A:B3:1B:FD:31:BE:0A:F2:1D:82:5C:5A:A6:97:2D Certificate issuer: /CN=F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D Certificate serial: 1921A8950AD28053A8A3C82852EAF329DE5A252B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.mft Manifest number: 0272 Signing time: Sun 01 Mar 2026 04:11:19 +0000 Manifest this update: Sun 01 Mar 2026 04:06:18 +0000 Manifest next update: Wed 04 Mar 2026 11:18:18 +0000 Files and hashes: 1: F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.crl (hash: qvn2w14XV1NNrzWabw8N2YIZRzpd/c0buvastnsi8FU=) 2: 3130332e3135392e3139372e302f32342d3234203d3e20313430343730.roa (hash: BgFgmH5jU+LRrTrgwlopaW2g0oi0zIzrx7nTuzaPyLk=) 3: 3130332e3135392e3139362e302f32332d3233203d3e20313430343730.roa (hash: kaLOnVcH2eiN/bRpUUdlc2RBWfunbSbF+3c/cmkKp/Y=) 4: 3130332e3135392e3139362e302f32342d3234203d3e20313430343730.roa (hash: McME/dbo6pUSMwDf337mfAJTZsh9zKeBHm2ij6JMlyA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.crl rsync://repo-rpki.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 11:18:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:21:a8:95:0a:d2:80:53:a8:a3:c8:28:52:ea:f3:29:de:5a:25:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D Validity Not Before: Mar 1 04:06:18 2026 GMT Not After : Mar 4 11:18:18 2026 GMT Subject: CN=943A727D87667C877FB9F432C045C699B0AD9711 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:ac:ca:87:ec:0c:09:39:a2:ad:ea:68:27:e1: 2f:58:b9:e8:bc:31:e6:6e:f0:e9:af:7b:f7:8d:7f: af:e5:7e:ff:4d:5a:e0:2c:40:3f:c3:b5:60:7b:56: 65:bc:b5:52:97:ba:b1:c7:d4:2e:b3:95:29:87:91: 94:96:80:8a:5f:77:e4:86:f1:fa:92:4b:65:c4:02: 34:7d:95:05:2d:a5:c7:e9:ca:78:61:1e:83:d6:86: 90:e0:16:46:15:65:da:34:7c:62:6d:98:b4:b8:3f: 97:5d:8b:89:bf:4f:e1:64:49:dd:b4:2a:70:f7:3b: 96:4a:a0:7c:72:06:d0:d1:02:3c:fc:ad:9d:c6:6c: ca:cc:e7:34:22:25:d1:2d:a8:a2:38:a3:ee:ac:95: 66:b7:51:bc:b5:7a:1f:ef:77:55:d0:a4:85:7a:8a: 93:72:f6:b0:b9:a9:a3:cb:d4:29:3b:f4:c1:cc:6b: ff:1f:2b:cb:98:64:43:e3:a5:07:ab:f2:95:ad:14: 64:00:92:9d:f9:40:69:f5:2e:0b:a8:4d:4e:e0:3b: 48:4d:c5:04:49:4e:2d:31:dc:58:7a:fb:07:7a:56: f0:91:8b:fb:fb:ca:eb:c6:24:ee:ca:ec:71:9a:5f: 69:94:9c:19:72:41:05:9c:03:4b:04:20:f7:4e:c9: 16:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:3A:72:7D:87:66:7C:87:7F:B9:F4:32:C0:45:C6:99:B0:AD:97:11 X509v3 Authority Key Identifier: keyid:F7:A5:C0:89:7A:1A:B3:1B:FD:31:BE:0A:F2:1D:82:5C:5A:A6:97:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:3d:ef:19:41:89:cf:31:8a:1f:f9:79:bf:6e:09:8f:fa:07: 9e:27:c4:7c:68:e9:d5:ba:94:76:21:e6:78:2e:f0:ec:05:d7: eb:da:f0:29:e1:b9:46:b6:06:ac:83:f3:39:a2:49:fa:8c:32: 65:a5:f5:68:42:a0:a3:cd:3f:4f:a5:37:01:57:b2:e9:e0:6c: 26:26:c7:46:39:5e:23:36:6e:48:de:2c:f2:60:01:48:39:56: ef:80:27:ee:a2:e3:f6:ac:e9:63:81:17:93:fa:72:f4:5d:9e: e7:97:c5:35:c4:c8:51:51:14:7a:31:49:a7:62:2b:cb:c9:ea: b1:33:58:6c:76:c1:12:74:9e:ec:18:cc:68:b3:5f:ab:47:a3: ed:27:c3:af:35:a5:82:e1:d9:95:57:ae:2d:b3:8d:2b:7f:82: 3b:2f:2b:b2:35:13:19:3c:90:7a:56:84:c6:a3:87:97:5f:2a: 8a:3e:e9:77:8d:01:c0:97:ec:71:ea:46:51:d0:6b:ea:4a:5b: 94:21:13:75:7a:85:2c:69:a7:45:8e:c3:1e:f7:42:b4:28:2e: 9c:99:cd:9f:6b:83:6d:08:03:d6:57:13:6f:2b:ac:4a:78:6b: 1f:e5:91:b0:27:62:e5:4f:22:4f:3b:cb:a7:d2:2f:d5:3f:44: 54:d9:cb:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGSGolQrSgFOoo8goUurzKd5aJSswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjdBNUMwODk3QTFBQjMxQkZEMzFCRTBBRjIxRDgyNUM1 QUE2OTcyRDAeFw0yNjAzMDEwNDA2MThaFw0yNjAzMDQxMTE4MThaMDMxMTAvBgNV BAMTKDk0M0E3MjdEODc2NjdDODc3RkI5RjQzMkMwNDVDNjk5QjBBRDk3MTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfrMqH7AwJOaKt6mgn4S9Yuei8 MeZu8Omve/eNf6/lfv9NWuAsQD/DtWB7VmW8tVKXurHH1C6zlSmHkZSWgIpfd+SG 8fqSS2XEAjR9lQUtpcfpynhhHoPWhpDgFkYVZdo0fGJtmLS4P5ddi4m/T+FkSd20 KnD3O5ZKoHxyBtDRAjz8rZ3GbMrM5zQiJdEtqKI4o+6slWa3Uby1eh/vd1XQpIV6 ipNy9rC5qaPL1Ck79MHMa/8fK8uYZEPjpQer8pWtFGQAkp35QGn1LguoTU7gO0hN xQRJTi0x3Fh6+wd6VvCRi/v7yuvGJO7K7HGaX2mUnBlyQQWcA0sEIPdOyRbHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlDpyfYdmfId/ufQywEXGmbCtlxEwHwYDVR0j BBgwFoAU96XAiXoasxv9Mb4K8h2CXFqmly0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Y2RkNTc3NC0zMGRkLTRhMDAtYjFhOS05YjEyODI2OTMwYzIvMC9GN0E1QzA4OTdB MUFCMzFCRkQzMUJFMEFGMjFEODI1QzVBQTY5NzJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjdBNUMwODk3QTFBQjMxQkZEMzFCRTBBRjIxRDgyNUM1QUE2 OTcyRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2NkZDU3NzQtMzBkZC00YTAwLWIx YTktOWIxMjgyNjkzMGMyLzAvRjdBNUMwODk3QTFBQjMxQkZEMzFCRTBBRjIxRDgy NUM1QUE2OTcyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAs97xlBic8xih/5eb9uCY/6B54nxHxo6dW6 lHYh5ngu8OwF1+va8CnhuUa2BqyD8zmiSfqMMmWl9WhCoKPNP0+lNwFXsungbCYm x0Y5XiM2bkjeLPJgAUg5Vu+AJ+6i4/as6WOBF5P6cvRdnueXxTXEyFFRFHoxSadi K8vJ6rEzWGx2wRJ0nuwYzGizX6tHo+0nw681pYLh2ZVXri2zjSt/gjsvK7I1Exk8 kHpWhMajh5dfKoo+6XeNAcCX7HHqRlHQa+pKW5QhE3V6hSxpp0WOwx73QrQoLpyZ zZ9rg20IA9ZXE28rrEp4ax/lkbAnYuVPIk87y6fSL9U/RFTZy9E= -----END CERTIFICATE-----Generated at Mon Mar 2 13:19:41 2026 by rpki-client