$ rpki-client -vvf repo-rpki.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/F1364C8B62D0A8EDFF2EB7CE55698011E828988A.mft File: F1364C8B62D0A8EDFF2EB7CE55698011E828988A.mft (raw, json) Hash identifier: DUjgUJ+oxOwbftdupWPJxYmt0B0JN1zeYhff9jTIqL0= Subject key identifier: 37:1B:24:B4:DC:0D:7B:3D:55:0B:5E:82:29:0E:EC:EB:25:AF:58:88 Authority key identifier: F1:36:4C:8B:62:D0:A8:ED:FF:2E:B7:CE:55:69:80:11:E8:28:98:8A Certificate issuer: /CN=F1364C8B62D0A8EDFF2EB7CE55698011E828988A Certificate serial: 15062EC30AF5DB8E2B4E2E47CC115E2AE4C665D1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1364C8B62D0A8EDFF2EB7CE55698011E828988A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/F1364C8B62D0A8EDFF2EB7CE55698011E828988A.mft Manifest number: 02E7 Signing time: Sat 28 Feb 2026 20:30:40 +0000 Manifest this update: Sat 28 Feb 2026 20:25:40 +0000 Manifest next update: Tue 03 Mar 2026 23:52:40 +0000 Files and hashes: 1: F1364C8B62D0A8EDFF2EB7CE55698011E828988A.crl (hash: DHx0Juhz+HaLvqZ7f4UiZDTVr43ModZYmmJOuqpkrLo=) 2: 3130332e3137382e3135302e302f32342d3234203d3e20313439333234.roa (hash: c3S8Sv0dGIlGjcnrbLjUcHdin3EJiHMEXQSgcY9POBM=) 3: 3130332e3137382e3135302e302f32332d3233203d3e20313439333234.roa (hash: KyVMhkhG4VtcKnJeiu0MXlT+/JG0ojfS9TufypkTrUA=) 4: 3130332e3137382e3135312e302f32342d3234203d3e20313439333234.roa (hash: 5zbaW1xbLSdresKE5AfyN56h8mwWMq5gXzkIga/AR30=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/F1364C8B62D0A8EDFF2EB7CE55698011E828988A.crl rsync://repo-rpki.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/F1364C8B62D0A8EDFF2EB7CE55698011E828988A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1364C8B62D0A8EDFF2EB7CE55698011E828988A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 23:52:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:06:2e:c3:0a:f5:db:8e:2b:4e:2e:47:cc:11:5e:2a:e4:c6:65:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F1364C8B62D0A8EDFF2EB7CE55698011E828988A Validity Not Before: Feb 28 20:25:40 2026 GMT Not After : Mar 3 23:52:40 2026 GMT Subject: CN=371B24B4DC0D7B3D550B5E82290EECEB25AF5888 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:9a:b0:f7:07:dc:e1:62:53:8b:23:69:96:6c: ef:9a:be:93:45:40:d8:9a:f8:19:7d:cc:73:11:50: 20:ec:cc:02:3f:36:ca:a4:22:b1:91:d9:d0:3f:35: ff:2a:f9:95:8a:87:f1:b3:4f:15:ca:40:0f:d5:e4: 3b:f5:92:51:5e:d7:4f:83:ae:8c:4f:15:48:c2:1b: ac:f5:e0:8b:db:4c:2e:a4:cb:19:84:3d:eb:04:2f: cb:ce:6d:79:29:02:aa:a8:10:fc:e9:ca:5c:90:2d: 98:52:1b:74:e2:98:87:cf:4c:e4:fb:cc:f0:39:e2: 9c:6a:e5:88:ea:f9:0a:e1:a0:e4:41:3e:35:b3:a5: 06:a4:5f:96:2c:68:1a:e0:ec:14:00:41:cb:58:17: 06:5c:d4:9b:1b:83:25:d4:d8:f6:31:9f:88:e4:28: 88:16:44:89:88:62:a4:f3:a5:29:39:41:a1:f7:c6: 55:61:a7:e4:4b:ac:a9:d4:5c:97:7a:a3:81:d6:2f: ea:cd:b6:f4:79:fa:a3:46:cb:39:26:26:96:c2:0c: e5:ea:78:44:04:13:08:10:f5:aa:3b:38:1c:32:66: 0c:60:cf:50:a5:93:dd:6a:5b:ea:97:61:03:23:50: e5:a6:58:67:32:30:cd:30:2a:69:aa:d4:95:df:33: 3f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:1B:24:B4:DC:0D:7B:3D:55:0B:5E:82:29:0E:EC:EB:25:AF:58:88 X509v3 Authority Key Identifier: keyid:F1:36:4C:8B:62:D0:A8:ED:FF:2E:B7:CE:55:69:80:11:E8:28:98:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/F1364C8B62D0A8EDFF2EB7CE55698011E828988A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1364C8B62D0A8EDFF2EB7CE55698011E828988A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/F1364C8B62D0A8EDFF2EB7CE55698011E828988A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:54:eb:d4:34:6b:fd:80:6d:48:b6:18:1b:b8:2e:af:00:8b: dd:36:38:4f:99:d5:ca:15:33:14:c7:60:a4:3e:68:90:91:d8: c9:52:f4:11:16:ad:8d:1f:e8:f9:65:7c:58:69:94:08:9d:3a: 22:2f:f6:d2:2a:c0:8d:88:65:d2:8b:45:67:2e:b8:9d:0b:f9: 77:e4:42:8f:7e:87:6e:c1:2f:17:bd:31:6b:28:d2:12:b8:f4: 99:1b:aa:62:82:e1:2c:99:75:dc:d7:31:6b:d6:8b:1d:fb:fd: 15:1c:57:49:11:a1:b9:4e:f4:60:78:7e:91:69:c5:62:a6:23: 64:8a:7c:8c:13:92:c5:00:8a:44:24:80:8b:f2:8e:96:eb:cf: 7f:44:6c:2e:4a:18:d1:d1:bd:1a:05:0f:7d:b6:35:ad:57:0f: 08:31:c3:8f:1d:40:f9:d1:51:cc:f5:53:34:cf:c4:53:46:0e: 32:04:84:1b:39:4f:ed:47:2b:9e:2e:38:0c:b4:e5:fe:29:1f: 62:f0:b4:26:a9:a7:0d:f1:ea:bc:29:a8:3b:13:d0:38:6f:10: ba:30:83:fd:f2:aa:4c:ff:f7:3a:94:f5:14:62:5c:ba:a1:84: 5b:92:cc:cb:ed:1c:1e:75:33:1a:4a:0c:ec:f1:f6:00:a6:d6: 28:d5:82:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFQYuwwr1244rTi5HzBFeKuTGZdEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjEzNjRDOEI2MkQwQThFREZGMkVCN0NFNTU2OTgwMTFF ODI4OTg4QTAeFw0yNjAyMjgyMDI1NDBaFw0yNjAzMDMyMzUyNDBaMDMxMTAvBgNV BAMTKDM3MUIyNEI0REMwRDdCM0Q1NTBCNUU4MjI5MEVFQ0VCMjVBRjU4ODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHmrD3B9zhYlOLI2mWbO+avpNF QNia+Bl9zHMRUCDszAI/NsqkIrGR2dA/Nf8q+ZWKh/GzTxXKQA/V5Dv1klFe10+D roxPFUjCG6z14IvbTC6kyxmEPesEL8vObXkpAqqoEPzpylyQLZhSG3TimIfPTOT7 zPA54pxq5Yjq+QrhoORBPjWzpQakX5YsaBrg7BQAQctYFwZc1JsbgyXU2PYxn4jk KIgWRImIYqTzpSk5QaH3xlVhp+RLrKnUXJd6o4HWL+rNtvR5+qNGyzkmJpbCDOXq eEQEEwgQ9ao7OBwyZgxgz1Clk91qW+qXYQMjUOWmWGcyMM0wKmmq1JXfMz/HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNxsktNwNez1VC16CKQ7s6yWvWIgwHwYDVR0j BBgwFoAU8TZMi2LQqO3/LrfOVWmAEegomIowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NjVmYTk4Zi0xZTg1LTQ2MzgtYmI5ZC0yODczNzhhNGNlODcvMC9GMTM2NEM4QjYy RDBBOEVERkYyRUI3Q0U1NTY5ODAxMUU4Mjg5ODhBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjEzNjRDOEI2MkQwQThFREZGMkVCN0NFNTU2OTgwMTFFODI4 OTg4QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDY1ZmE5OGYtMWU4NS00NjM4LWJi OWQtMjg3Mzc4YTRjZTg3LzAvRjEzNjRDOEI2MkQwQThFREZGMkVCN0NFNTU2OTgw MTFFODI4OTg4QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACVU69Q0a/2AbUi2GBu4Lq8Ai902OE+Z1coV MxTHYKQ+aJCR2MlS9BEWrY0f6PllfFhplAidOiIv9tIqwI2IZdKLRWcuuJ0L+Xfk Qo9+h27BLxe9MWso0hK49JkbqmKC4SyZddzXMWvWix37/RUcV0kRoblO9GB4fpFp xWKmI2SKfIwTksUAikQkgIvyjpbrz39EbC5KGNHRvRoFD322Na1XDwgxw48dQPnR Ucz1UzTPxFNGDjIEhBs5T+1HK54uOAy05f4pH2LwtCappw3x6rwpqDsT0DhvELow g/3yqkz/9zqU9RRiXLqhhFuSzMvtHB51MxpKDOzx9gCm1ijVgnE= -----END CERTIFICATE-----Generated at Mon Mar 2 09:47:44 2026 by rpki-client