$ rpki-client -vvf repo-rpki.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/F5908629C575E46230F87489BF209EE6FBCF3860.mft File: F5908629C575E46230F87489BF209EE6FBCF3860.mft (raw, json) Hash identifier: rwM9gUkHvrKfLkXgwimPSdw/IXS2Gu0/kKMw4+uKqDw= Subject key identifier: CA:55:8A:51:C5:0D:58:65:AA:F8:11:66:8C:29:D3:F5:F3:C5:60:48 Authority key identifier: F5:90:86:29:C5:75:E4:62:30:F8:74:89:BF:20:9E:E6:FB:CF:38:60 Certificate issuer: /CN=F5908629C575E46230F87489BF209EE6FBCF3860 Certificate serial: 28CAF90BD1B0D4CF12CC089B8BC14F35ED47AD40 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5908629C575E46230F87489BF209EE6FBCF3860.cer Subject info access: rsync://repo-rpki.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/F5908629C575E46230F87489BF209EE6FBCF3860.mft Manifest number: 01E3 Signing time: Mon 02 Mar 2026 09:01:29 +0000 Manifest this update: Mon 02 Mar 2026 08:56:29 +0000 Manifest next update: Thu 05 Mar 2026 11:46:29 +0000 Files and hashes: 1: F5908629C575E46230F87489BF209EE6FBCF3860.crl (hash: zgEGHU3QtEOIDw8iBrP7cTSKBRmBXvcn8guz1PEu/mQ=) 2: 3130332e38372e3134382e302f32332d3234203d3e203435333035.roa (hash: bYL3syFx6NGhqMU1M8OANCcKtX9aZc4njVRqY9dr5o8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/F5908629C575E46230F87489BF209EE6FBCF3860.crl rsync://repo-rpki.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/F5908629C575E46230F87489BF209EE6FBCF3860.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5908629C575E46230F87489BF209EE6FBCF3860.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:ca:f9:0b:d1:b0:d4:cf:12:cc:08:9b:8b:c1:4f:35:ed:47:ad:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F5908629C575E46230F87489BF209EE6FBCF3860 Validity Not Before: Mar 2 08:56:29 2026 GMT Not After : Mar 5 11:46:29 2026 GMT Subject: CN=CA558A51C50D5865AAF811668C29D3F5F3C56048 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:43:45:29:a4:43:fb:8b:3b:71:cd:dc:bf:d0: f6:79:c3:dd:87:f7:b0:8d:b3:c3:ea:c1:0e:2f:7f: 28:76:02:3e:22:4a:40:44:12:ee:32:8e:55:75:e1: a9:4d:92:1f:e3:83:36:10:f6:e5:d3:1e:d6:1a:58: 5e:97:a9:e6:aa:be:ef:db:0b:f2:47:fa:21:a3:15: 31:ac:4c:a5:0d:84:f1:42:47:4f:c1:55:cd:1c:92: 2a:a4:04:6b:9b:4d:8f:98:2f:0a:3f:79:e9:7e:f4: b0:b5:57:4d:36:4d:5e:78:54:53:e1:c7:c5:db:f5: 9a:ff:23:25:77:58:9f:31:6c:61:03:dd:b7:0e:c4: 58:72:4e:be:93:41:64:07:de:3a:f9:96:53:60:2a: 16:1a:96:47:4c:bd:ca:6f:2b:b7:b9:34:7a:a9:44: 94:53:4d:b0:be:4e:84:27:3f:c8:28:8a:1d:71:56: 7b:a5:23:74:a1:45:75:93:f8:ec:6e:50:a8:02:e2: c3:1f:53:b0:b3:0c:d4:42:2a:19:23:15:ac:25:57: 1b:a1:dd:7e:a1:4c:18:25:9f:05:24:02:b9:61:1d: 83:92:7e:ad:6f:6b:26:b8:c8:68:64:09:6d:69:a8: 29:5b:85:5f:61:1c:ef:fa:3c:0d:8f:7e:50:2b:01: 67:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:55:8A:51:C5:0D:58:65:AA:F8:11:66:8C:29:D3:F5:F3:C5:60:48 X509v3 Authority Key Identifier: keyid:F5:90:86:29:C5:75:E4:62:30:F8:74:89:BF:20:9E:E6:FB:CF:38:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/F5908629C575E46230F87489BF209EE6FBCF3860.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5908629C575E46230F87489BF209EE6FBCF3860.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/F5908629C575E46230F87489BF209EE6FBCF3860.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:0f:a1:6a:b3:25:c1:6b:1d:42:81:5e:26:90:9a:b6:59:f3: c6:1b:b7:c9:e5:dd:d7:1a:8f:fb:d3:9b:e7:1e:c4:36:06:a9: 5e:53:f9:19:74:2b:5c:6b:7b:2e:5c:82:6f:70:5f:ed:df:73: ca:b5:eb:f3:eb:53:a0:af:61:c8:a4:89:3e:66:e0:b6:5b:d4: c7:d2:de:a1:14:1c:7f:ab:a8:e6:cc:50:47:6b:4d:51:e8:44: fd:4f:9a:b1:79:29:12:79:2e:89:b8:b9:41:65:52:4b:d7:da: f7:88:52:11:ff:a8:c1:5a:59:20:5a:69:f3:5e:11:31:3c:0b: 3b:dc:fe:2e:d5:83:84:08:17:86:72:22:34:99:46:56:4c:c9: fb:61:8b:3b:62:8c:a0:39:e6:d8:4e:b3:84:ae:ea:5b:70:cc: c7:94:b2:ee:6f:b5:7b:aa:3d:42:b1:94:ba:63:0c:2c:b1:67: 7c:1f:5b:3d:d7:c0:ff:32:04:8f:63:d0:80:00:1a:f2:4e:a9: 81:6e:d3:19:fd:2b:b3:7b:bd:c4:c0:8e:94:3b:a7:c5:b9:79: 47:c6:f1:e8:10:ee:28:35:97:eb:95:00:d1:15:44:97:3f:2c: b1:43:22:04:a2:d0:97:f8:08:bf:a8:aa:84:73:b9:b7:ea:c1: 60:57:4c:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKMr5C9Gw1M8SzAibi8FPNe1HrUAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjU5MDg2MjlDNTc1RTQ2MjMwRjg3NDg5QkYyMDlFRTZG QkNGMzg2MDAeFw0yNjAzMDIwODU2MjlaFw0yNjAzMDUxMTQ2MjlaMDMxMTAvBgNV BAMTKENBNTU4QTUxQzUwRDU4NjVBQUY4MTE2NjhDMjlEM0Y1RjNDNTYwNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXQ0UppEP7iztxzdy/0PZ5w92H 97CNs8PqwQ4vfyh2Aj4iSkBEEu4yjlV14alNkh/jgzYQ9uXTHtYaWF6Xqeaqvu/b C/JH+iGjFTGsTKUNhPFCR0/BVc0ckiqkBGubTY+YLwo/eel+9LC1V002TV54VFPh x8Xb9Zr/IyV3WJ8xbGED3bcOxFhyTr6TQWQH3jr5llNgKhYalkdMvcpvK7e5NHqp RJRTTbC+ToQnP8goih1xVnulI3ShRXWT+OxuUKgC4sMfU7CzDNRCKhkjFawlVxuh 3X6hTBglnwUkArlhHYOSfq1vaya4yGhkCW1pqClbhV9hHO/6PA2PflArAWdTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUylWKUcUNWGWq+BFmjCnT9fPFYEgwHwYDVR0j BBgwFoAU9ZCGKcV15GIw+HSJvyCe5vvPOGAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 M2RkYjc5Zi0yYzM3LTQ3YWYtYjk1ZC0xNTMxMTQ2M2IzNDMvMC9GNTkwODYyOUM1 NzVFNDYyMzBGODc0ODlCRjIwOUVFNkZCQ0YzODYwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjU5MDg2MjlDNTc1RTQ2MjMwRjg3NDg5QkYyMDlFRTZGQkNG Mzg2MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDNkZGI3OWYtMmMzNy00N2FmLWI5 NWQtMTUzMTE0NjNiMzQzLzAvRjU5MDg2MjlDNTc1RTQ2MjMwRjg3NDg5QkYyMDlF RTZGQkNGMzg2MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA0PoWqzJcFrHUKBXiaQmrZZ88Ybt8nl3dca j/vTm+cexDYGqV5T+Rl0K1xrey5cgm9wX+3fc8q16/PrU6CvYcikiT5m4LZb1MfS 3qEUHH+rqObMUEdrTVHoRP1PmrF5KRJ5Lom4uUFlUkvX2veIUhH/qMFaWSBaafNe ETE8Czvc/i7Vg4QIF4ZyIjSZRlZMyfthiztijKA55thOs4Su6ltwzMeUsu5vtXuq PUKxlLpjDCyxZ3wfWz3XwP8yBI9j0IAAGvJOqYFu0xn9K7N7vcTAjpQ7p8W5eUfG 8egQ7ig1l+uVANEVRJc/LLFDIgSi0Jf4CL+oqoRzubfqwWBXTIs= -----END CERTIFICATE-----Generated at Mon Mar 2 15:52:49 2026 by rpki-client