$ rpki-client -vvf repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft File: F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft (raw, json) Hash identifier: iLJQcjKX+mL47g6/ufpVnJ6lhwvEC4luQw9eAbuRR+g= Subject key identifier: 62:0F:80:25:D8:70:22:B2:8E:94:E0:D0:91:BE:D1:E5:92:0F:68:BD Authority key identifier: F3:F9:AB:30:AC:2C:50:B3:ED:F7:C9:1C:45:31:CC:9A:EE:9C:9D:A3 Certificate issuer: /CN=F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3 Certificate serial: 76E3D11FC751DEA546E3FE7D27D1CD6704A6841A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft Manifest number: 055E Signing time: Sun 01 Mar 2026 22:11:10 +0000 Manifest this update: Sun 01 Mar 2026 22:06:10 +0000 Manifest next update: Thu 05 Mar 2026 01:49:10 +0000 Files and hashes: 1: 3130332e3130302e3138322e302f32342d3234203d3e203435333035.roa (hash: +Ohb8AmL80BPgaiVvFCd/BXY6tohGQvqr2SFVpjVHPk=) 2: F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.crl (hash: z/+pVBrgIustkq1dur/MYseg9jLqxnO6FnduCrndPuc=) 3: 3130332e3130302e3138302e302f32342d3234203d3e203435333035.roa (hash: FyAvBZY6W2L1HwVaWtdBn1JjIwyZj/UZUwMR3y/jc5Q=) 4: 3130332e3130302e3138312e302f32342d3234203d3e203435333035.roa (hash: lt8611+icqcOlcb0vp3/L3lkdrCllwLsjssGKj3PZL0=) 5: 3130332e3130302e3138302e302f32332d3234203d3e203435333035.roa (hash: 2OHD4uzXRRC+UwdGonPOMWJEcqOJBkhkj3qw69Y3hzs=) 6: 3130332e3130302e3138332e302f32342d3234203d3e20313336383430.roa (hash: HP2CIuQ7HdSouFMxhc4gbLPN64fDpck7CCz5j9Fedrs=) 7: 323430313a626663303a3a2f33322d3332203d3e20313336383430.roa (hash: OD6ds+KTm//KkPIe0CnHbGgyxy24D56HEq7afLGbIc8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.crl rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 01:49:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:e3:d1:1f:c7:51:de:a5:46:e3:fe:7d:27:d1:cd:67:04:a6:84:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3 Validity Not Before: Mar 1 22:06:10 2026 GMT Not After : Mar 5 01:49:10 2026 GMT Subject: CN=620F8025D87022B28E94E0D091BED1E5920F68BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:27:0d:fc:85:dc:e9:e9:07:54:d5:7a:5e:c7: 38:27:00:1b:5f:bc:16:8a:93:ea:10:9a:8d:5c:8b: ae:5d:77:a2:37:3c:84:3b:8a:2a:f0:ad:1b:f2:c5: 36:06:6f:e9:8b:2a:7a:1e:39:46:d9:36:7a:ef:1f: 03:ef:a2:7c:08:24:3d:9e:32:a1:87:80:28:aa:9b: 64:ad:93:e1:ef:6f:ba:4a:ac:bc:ad:91:47:bf:7c: 28:58:ec:64:9e:fc:83:34:ba:76:23:82:d2:5d:1d: f8:7a:6c:a8:e4:65:9b:1e:03:20:a3:51:c1:a8:9a: 2d:65:65:46:b0:a7:be:17:9b:74:e0:5a:7c:4f:e9: 45:84:9f:5d:64:8d:a1:a2:82:10:fc:54:88:3b:33: dd:92:87:d3:3f:c6:4d:f1:74:fb:26:bf:61:62:6d: e5:4f:d8:67:ac:28:b6:d8:3d:f9:8f:b7:cc:a5:8a: b3:36:99:0b:de:bb:79:d4:a5:79:bf:64:97:cd:91: f6:a8:01:50:b5:1c:68:e6:ed:74:34:dc:ae:30:b0: 03:dc:57:6a:6b:58:53:de:2f:1a:50:b9:4b:73:d2: 50:e4:fb:3f:b2:a1:b6:53:ee:83:ba:3e:eb:ad:4e: e0:7b:65:1c:3c:58:35:e6:24:19:03:d6:bb:cd:3b: a1:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:0F:80:25:D8:70:22:B2:8E:94:E0:D0:91:BE:D1:E5:92:0F:68:BD X509v3 Authority Key Identifier: keyid:F3:F9:AB:30:AC:2C:50:B3:ED:F7:C9:1C:45:31:CC:9A:EE:9C:9D:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:cb:33:5a:66:74:da:fc:63:10:e5:da:b2:e0:1c:9b:48:9d: fd:bd:a3:1f:e8:7c:18:70:13:f8:de:99:eb:5c:9d:2d:bd:a9: fd:a0:82:78:a4:39:51:cd:09:f8:60:c8:1c:66:8a:38:b6:49: 62:fc:cd:bd:61:9c:bf:95:ac:f1:8f:7b:25:88:62:66:a6:97: 0a:39:d2:a5:62:7d:11:97:0d:c5:fa:cf:2e:31:59:09:96:7d: 02:3e:c9:00:42:f5:d0:f3:bd:8f:09:d6:7e:b1:96:40:50:02: e0:77:6a:4f:25:cc:ad:de:54:cb:14:51:55:34:be:60:21:d1: 04:b4:4a:1b:70:ac:cb:af:db:a6:74:38:2a:58:6d:a2:f0:02: 65:06:07:5a:ce:95:ca:c2:fe:b1:2d:72:26:ae:83:91:c0:f4: b6:cf:7b:47:9e:98:b3:6c:ce:0c:b8:01:03:0b:46:64:c1:97: 5e:a0:29:3f:e0:a1:a5:c3:59:98:a3:f5:15:6f:70:7e:f0:88: 13:5e:fc:fb:4a:16:c5:97:e8:5d:21:55:59:09:f8:74:26:8a: ba:29:28:13:d8:ef:92:cb:b1:51:e9:a2:a5:62:66:4a:c9:2f: 5c:7c:5b:66:66:7c:c9:3a:60:9e:ba:ff:01:15:88:6c:21:83: 84:37:0b:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUduPRH8dR3qVG4/59J9HNZwSmhBowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjNGOUFCMzBBQzJDNTBCM0VERjdDOTFDNDUzMUNDOUFF RTlDOURBMzAeFw0yNjAzMDEyMjA2MTBaFw0yNjAzMDUwMTQ5MTBaMDMxMTAvBgNV BAMTKDYyMEY4MDI1RDg3MDIyQjI4RTk0RTBEMDkxQkVEMUU1OTIwRjY4QkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNJw38hdzp6QdU1XpexzgnABtf vBaKk+oQmo1ci65dd6I3PIQ7iirwrRvyxTYGb+mLKnoeOUbZNnrvHwPvonwIJD2e MqGHgCiqm2Stk+Hvb7pKrLytkUe/fChY7GSe/IM0unYjgtJdHfh6bKjkZZseAyCj UcGomi1lZUawp74Xm3TgWnxP6UWEn11kjaGighD8VIg7M92Sh9M/xk3xdPsmv2Fi beVP2GesKLbYPfmPt8ylirM2mQveu3nUpXm/ZJfNkfaoAVC1HGjm7XQ03K4wsAPc V2prWFPeLxpQuUtz0lDk+z+yobZT7oO6PuutTuB7ZRw8WDXmJBkD1rvNO6GPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYg+AJdhwIrKOlODQkb7R5ZIPaL0wHwYDVR0j BBgwFoAU8/mrMKwsULPt98kcRTHMmu6cnaMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZWYwODkwMC1mMmM2LTRkMDctYjY5NC1kMTg4YmFhM2I4ZjIvMC9GM0Y5QUIzMEFD MkM1MEIzRURGN0M5MUM0NTMxQ0M5QUVFOUM5REEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjNGOUFCMzBBQzJDNTBCM0VERjdDOTFDNDUzMUNDOUFFRTlD OURBMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWVmMDg5MDAtZjJjNi00ZDA3LWI2 OTQtZDE4OGJhYTNiOGYyLzAvRjNGOUFCMzBBQzJDNTBCM0VERjdDOTFDNDUzMUND OUFFRTlDOURBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAETLM1pmdNr8YxDl2rLgHJtInf29ox/ofBhw E/jemetcnS29qf2ggnikOVHNCfhgyBxmiji2SWL8zb1hnL+VrPGPeyWIYmamlwo5 0qVifRGXDcX6zy4xWQmWfQI+yQBC9dDzvY8J1n6xlkBQAuB3ak8lzK3eVMsUUVU0 vmAh0QS0ShtwrMuv26Z0OCpYbaLwAmUGB1rOlcrC/rEtciaug5HA9LbPe0eemLNs zgy4AQMLRmTBl16gKT/goaXDWZij9RVvcH7wiBNe/PtKFsWX6F0hVVkJ+HQmirop KBPY75LLsVHpoqViZkrJL1x8W2ZmfMk6YJ66/wEViGwhg4Q3C4E= -----END CERTIFICATE-----Generated at Mon Mar 2 04:00:31 2026 by rpki-client