$ rpki-client -vvf repo-rpki.idnic.net/repo/483a1db2-b11e-4cdc-a25c-0f124cae70ee/0/FF467F8613654288ED5F52ACB466941450FA5DF8.mft File: FF467F8613654288ED5F52ACB466941450FA5DF8.mft (raw, json) Hash identifier: 1YiXiPYPB7ngZKeCU2utdMIRo/8DPEmNV3Wb84VPSik= Subject key identifier: 28:3C:02:9A:61:3B:86:F5:22:F6:88:9C:06:3B:59:23:86:33:EA:1C Authority key identifier: FF:46:7F:86:13:65:42:88:ED:5F:52:AC:B4:66:94:14:50:FA:5D:F8 Certificate issuer: /CN=FF467F8613654288ED5F52ACB466941450FA5DF8 Certificate serial: 4A9F3E94FC0A12A479DEE48136C7A0043DBD9691 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF467F8613654288ED5F52ACB466941450FA5DF8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/483a1db2-b11e-4cdc-a25c-0f124cae70ee/0/FF467F8613654288ED5F52ACB466941450FA5DF8.mft Manifest number: 0253 Signing time: Sun 01 Mar 2026 20:31:17 +0000 Manifest this update: Sun 01 Mar 2026 20:26:17 +0000 Manifest next update: Thu 05 Mar 2026 05:33:17 +0000 Files and hashes: 1: FF467F8613654288ED5F52ACB466941450FA5DF8.crl (hash: 3enH3NAaBTRMoZlNtb3GLsYvDjcdglza5+KpV7PRfWk=) 2: 3130332e3136342e3137342e302f32332d3234203d3e20313439393330.roa (hash: 5dMeFoH75yb3wslMxgFX9lE7/v4DQyEis4eWyx6RIyk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/483a1db2-b11e-4cdc-a25c-0f124cae70ee/0/FF467F8613654288ED5F52ACB466941450FA5DF8.crl rsync://repo-rpki.idnic.net/repo/483a1db2-b11e-4cdc-a25c-0f124cae70ee/0/FF467F8613654288ED5F52ACB466941450FA5DF8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF467F8613654288ED5F52ACB466941450FA5DF8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:17:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:9f:3e:94:fc:0a:12:a4:79:de:e4:81:36:c7:a0:04:3d:bd:96:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF467F8613654288ED5F52ACB466941450FA5DF8 Validity Not Before: Mar 1 20:26:17 2026 GMT Not After : Mar 5 05:33:17 2026 GMT Subject: CN=283C029A613B86F522F6889C063B59238633EA1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:cd:6a:a1:73:63:cf:57:18:db:9e:21:a5:9e: 91:8d:ca:d7:4c:9b:5b:01:8f:b7:05:99:ce:85:29: 82:0c:bd:47:c8:ea:6f:ba:bd:9a:a6:89:14:08:78: c4:e0:52:f9:46:ef:7f:81:74:db:48:87:c8:9c:0b: 46:d8:2c:57:81:49:cf:4d:74:e2:29:35:5e:58:6b: 4d:25:80:fe:df:c9:b9:88:ac:fc:ff:8d:a1:14:a9: f1:ff:f0:9a:48:28:37:78:a7:02:d3:54:b8:bc:ce: ac:59:e5:32:74:80:20:64:ad:f1:d9:3e:b1:20:75: 4b:6c:1e:60:e2:ba:51:1b:75:8c:a1:4b:c3:c0:c9: f7:69:23:eb:f4:c1:d1:50:5b:0d:72:36:6a:a3:d5: 51:db:6c:1f:27:49:2d:c1:09:03:6d:9b:41:c9:a7: 83:de:be:7d:00:6f:d1:a4:98:8c:f7:d1:a5:b7:7a: 5c:11:6f:fe:d8:b7:18:52:2a:b8:80:48:c5:2d:80: b7:47:d8:70:ba:2b:fe:b8:13:01:de:fc:de:92:79: ff:98:95:24:c2:22:38:03:d9:0a:ae:b5:ea:25:a2: af:3f:bb:2b:3a:1f:0b:2d:49:78:d5:dc:db:4f:36: 45:5e:3b:a1:05:32:4a:cb:72:a5:6d:02:d7:62:64: 8d:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:3C:02:9A:61:3B:86:F5:22:F6:88:9C:06:3B:59:23:86:33:EA:1C X509v3 Authority Key Identifier: keyid:FF:46:7F:86:13:65:42:88:ED:5F:52:AC:B4:66:94:14:50:FA:5D:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/483a1db2-b11e-4cdc-a25c-0f124cae70ee/0/FF467F8613654288ED5F52ACB466941450FA5DF8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF467F8613654288ED5F52ACB466941450FA5DF8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/483a1db2-b11e-4cdc-a25c-0f124cae70ee/0/FF467F8613654288ED5F52ACB466941450FA5DF8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:fe:38:ac:45:59:4d:5f:02:9a:65:9f:8a:d4:06:cb:b0:93: 37:68:4d:91:7e:58:83:dc:d2:5d:7c:67:78:2a:e0:63:a4:7b: d5:87:9a:d5:ab:3c:4e:58:ee:d3:99:40:14:74:b3:39:d2:5a: 64:e8:30:c7:d2:78:17:32:88:89:2b:64:d7:ba:8e:80:4c:5b: 39:d4:59:69:9a:59:3a:97:96:a9:1c:40:15:66:bf:f2:0b:fe: b0:e1:bd:76:f3:82:e4:0a:21:a0:64:79:90:a3:3f:fa:f7:8d: 03:2e:09:d2:75:af:bd:18:36:6e:51:30:f1:aa:82:75:1d:53: 15:0e:18:e3:ce:02:90:99:ed:58:64:76:5e:12:ac:66:e1:d7: 94:18:48:d6:48:41:55:34:d5:d5:7a:6b:f6:13:b2:85:a0:e1: 83:e2:f2:22:20:1d:d7:ee:bf:cf:10:76:e8:c2:3a:77:cc:80: 65:cd:d7:e4:29:e6:20:5d:89:60:aa:7d:ea:9e:d3:8a:14:87: 8f:87:6c:1b:a2:8f:48:9a:2f:0c:e7:ca:be:8b:db:79:b2:77: 4b:55:c9:8d:7f:f2:21:7f:3b:f6:bc:15:f7:ef:ff:75:a3:ae: 64:9c:de:27:b0:ab:75:5c:1c:06:1b:0c:8f:65:7f:f6:06:94: 62:14:e3:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSp8+lPwKEqR53uSBNsegBD29lpEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY0NjdGODYxMzY1NDI4OEVENUY1MkFDQjQ2Njk0MTQ1 MEZBNURGODAeFw0yNjAzMDEyMDI2MTdaFw0yNjAzMDUwNTMzMTdaMDMxMTAvBgNV BAMTKDI4M0MwMjlBNjEzQjg2RjUyMkY2ODg5QzA2M0I1OTIzODYzM0VBMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSzWqhc2PPVxjbniGlnpGNytdM m1sBj7cFmc6FKYIMvUfI6m+6vZqmiRQIeMTgUvlG73+BdNtIh8icC0bYLFeBSc9N dOIpNV5Ya00lgP7fybmIrPz/jaEUqfH/8JpIKDd4pwLTVLi8zqxZ5TJ0gCBkrfHZ PrEgdUtsHmDiulEbdYyhS8PAyfdpI+v0wdFQWw1yNmqj1VHbbB8nSS3BCQNtm0HJ p4Pevn0Ab9GkmIz30aW3elwRb/7YtxhSKriASMUtgLdH2HC6K/64EwHe/N6Sef+Y lSTCIjgD2Qquteoloq8/uys6HwstSXjV3NtPNkVeO6EFMkrLcqVtAtdiZI09AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKDwCmmE7hvUi9oicBjtZI4Yz6hwwHwYDVR0j BBgwFoAU/0Z/hhNlQojtX1KstGaUFFD6XfgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ODNhMWRiMi1iMTFlLTRjZGMtYTI1Yy0wZjEyNGNhZTcwZWUvMC9GRjQ2N0Y4NjEz NjU0Mjg4RUQ1RjUyQUNCNDY2OTQxNDUwRkE1REY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkY0NjdGODYxMzY1NDI4OEVENUY1MkFDQjQ2Njk0MTQ1MEZB NURGOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDgzYTFkYjItYjExZS00Y2RjLWEy NWMtMGYxMjRjYWU3MGVlLzAvRkY0NjdGODYxMzY1NDI4OEVENUY1MkFDQjQ2Njk0 MTQ1MEZBNURGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACP+OKxFWU1fAppln4rUBsuwkzdoTZF+WIPc 0l18Z3gq4GOke9WHmtWrPE5Y7tOZQBR0sznSWmToMMfSeBcyiIkrZNe6joBMWznU WWmaWTqXlqkcQBVmv/IL/rDhvXbzguQKIaBkeZCjP/r3jQMuCdJ1r70YNm5RMPGq gnUdUxUOGOPOApCZ7Vhkdl4SrGbh15QYSNZIQVU01dV6a/YTsoWg4YPi8iIgHdfu v88QdujCOnfMgGXN1+Qp5iBdiWCqfeqe04oUh4+HbBuij0iaLwznyr6L23myd0tV yY1/8iF/O/a8Fffv/3WjrmSc3iewq3VcHAYbDI9lf/YGlGIU49s= -----END CERTIFICATE-----Generated at Mon Mar 2 04:34:46 2026 by rpki-client