$ rpki-client -vvf repo-rpki.idnic.net/repo/5f0a2bec-f81a-4a3b-a144-175b168e22fd/0/F71ADE61635D40E729AD7D386CF8F90E391AB884.mft File: F71ADE61635D40E729AD7D386CF8F90E391AB884.mft (raw, json) Hash identifier: ccoEfCPxpiQjWIuzhiW8UASX64hQ6ccU/d0Oc7u32zo= Subject key identifier: 93:0F:4F:C9:CE:44:0E:A2:95:07:D7:8E:3E:0B:31:79:A1:0F:9A:9D Authority key identifier: F7:1A:DE:61:63:5D:40:E7:29:AD:7D:38:6C:F8:F9:0E:39:1A:B8:84 Certificate issuer: /CN=F71ADE61635D40E729AD7D386CF8F90E391AB884 Certificate serial: 15D49825E4E7DF061F7C697497386FAD5F2934F6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F71ADE61635D40E729AD7D386CF8F90E391AB884.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5f0a2bec-f81a-4a3b-a144-175b168e22fd/0/F71ADE61635D40E729AD7D386CF8F90E391AB884.mft Manifest number: 01FA Signing time: Mon 02 Mar 2026 00:20:59 +0000 Manifest this update: Mon 02 Mar 2026 00:15:59 +0000 Manifest next update: Thu 05 Mar 2026 03:35:59 +0000 Files and hashes: 1: F71ADE61635D40E729AD7D386CF8F90E391AB884.crl (hash: Nk4qJ74U4nUYb+pzmn2L4XWyWWiDnzFoKbl6zW4rge8=) 2: 3130332e3134372e3231312e302f32342d3234203d3e20313530353434.roa (hash: 5CmAHoxqMaeNE699lYg+ydVRs8BbrTW2xLv4KFQbvVM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5f0a2bec-f81a-4a3b-a144-175b168e22fd/0/F71ADE61635D40E729AD7D386CF8F90E391AB884.crl rsync://repo-rpki.idnic.net/repo/5f0a2bec-f81a-4a3b-a144-175b168e22fd/0/F71ADE61635D40E729AD7D386CF8F90E391AB884.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F71ADE61635D40E729AD7D386CF8F90E391AB884.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 03:35:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:d4:98:25:e4:e7:df:06:1f:7c:69:74:97:38:6f:ad:5f:29:34:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F71ADE61635D40E729AD7D386CF8F90E391AB884 Validity Not Before: Mar 2 00:15:59 2026 GMT Not After : Mar 5 03:35:59 2026 GMT Subject: CN=930F4FC9CE440EA29507D78E3E0B3179A10F9A9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:4a:34:1e:10:12:53:ee:a9:be:53:ad:f4:98: b0:5d:71:f9:fd:1e:31:40:a6:1a:0c:a0:cc:02:64: b1:e2:16:6c:24:1d:cc:87:8c:ff:1a:e4:a6:8d:be: b4:7c:87:91:c9:5d:9f:c6:2a:24:09:9f:55:66:dc: 32:cc:6f:82:a1:3a:e8:89:6c:aa:cd:5e:ae:ef:87: dc:2d:17:1b:dd:29:b5:63:ba:f0:f4:cb:e3:6d:d7: e3:84:18:cf:44:89:5e:f0:53:36:86:ef:d8:b3:8d: 5c:d3:a9:85:6a:46:59:16:ce:3d:8e:90:a4:a5:72: 24:e2:8e:a8:c0:7d:1a:1f:2c:38:57:5c:0a:4c:72: 90:a8:c6:fa:af:e3:a3:49:9a:ae:76:eb:12:df:a9: 56:4d:a8:d1:c7:c5:5e:3c:6a:1a:e1:e2:21:25:c5: 0d:27:47:76:de:3a:81:3c:d9:70:af:f5:ed:06:1e: 83:2e:aa:87:3c:73:a7:d7:95:1e:9a:cc:e2:b9:88: fc:7a:d7:ff:f2:6b:c3:c2:bd:81:85:06:28:e9:43: 98:55:3a:3e:3e:b3:ff:30:bf:1b:59:df:c4:bb:3c: c9:a3:4d:0d:02:11:8b:10:0f:6a:d2:bf:b5:5a:26: d3:f1:0c:68:3b:c1:78:36:f9:1f:00:81:19:12:29: cf:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:0F:4F:C9:CE:44:0E:A2:95:07:D7:8E:3E:0B:31:79:A1:0F:9A:9D X509v3 Authority Key Identifier: keyid:F7:1A:DE:61:63:5D:40:E7:29:AD:7D:38:6C:F8:F9:0E:39:1A:B8:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5f0a2bec-f81a-4a3b-a144-175b168e22fd/0/F71ADE61635D40E729AD7D386CF8F90E391AB884.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F71ADE61635D40E729AD7D386CF8F90E391AB884.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5f0a2bec-f81a-4a3b-a144-175b168e22fd/0/F71ADE61635D40E729AD7D386CF8F90E391AB884.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:96:26:cc:6b:9d:f7:41:36:8a:20:e6:8f:89:5b:4d:8e:f5: e9:83:f4:73:bc:38:d2:ff:3d:dd:82:6b:af:fc:ac:34:44:2d: f6:ac:c0:bc:3d:75:5c:ef:0d:b8:db:5e:47:e2:68:cc:d8:2d: cf:a7:05:a8:77:7e:59:f4:fc:ec:2f:d5:84:c1:1a:d4:bc:05: dc:5a:f4:43:dc:0b:59:d0:c3:08:ea:d4:c1:fc:c0:a2:42:f5: 74:a6:3f:0f:96:38:4c:5c:fe:d2:4e:ae:45:55:d3:53:23:c2: 26:7c:a1:a7:e6:71:33:d6:1e:46:70:c0:b3:f5:b0:6c:de:df: 3b:f8:fd:2f:e6:2d:d1:1c:d2:3b:d4:4e:eb:64:e3:20:e1:3b: ac:98:38:d3:da:61:86:71:bd:07:86:a4:b9:1f:90:ff:fe:83: de:31:34:b7:9e:d9:20:57:f2:58:cd:23:62:48:ff:d4:3c:49: 89:69:64:fd:63:ec:cd:6f:6f:95:27:c3:cc:da:eb:8a:6f:91: f3:f7:b5:be:4d:2e:ee:fd:d8:f4:1f:b7:ea:29:94:01:35:4f: 70:24:1a:ee:f7:b5:0d:8f:49:cd:7c:23:76:dd:40:fe:4d:cd: ec:c7:ae:0a:2a:38:22:d1:a5:c3:d8:8c:07:09:05:09:35:03: 4e:01:98:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFdSYJeTn3wYffGl0lzhvrV8pNPYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjcxQURFNjE2MzVENDBFNzI5QUQ3RDM4NkNGOEY5MEUz OTFBQjg4NDAeFw0yNjAzMDIwMDE1NTlaFw0yNjAzMDUwMzM1NTlaMDMxMTAvBgNV BAMTKDkzMEY0RkM5Q0U0NDBFQTI5NTA3RDc4RTNFMEIzMTc5QTEwRjlBOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcSjQeEBJT7qm+U630mLBdcfn9 HjFAphoMoMwCZLHiFmwkHcyHjP8a5KaNvrR8h5HJXZ/GKiQJn1Vm3DLMb4KhOuiJ bKrNXq7vh9wtFxvdKbVjuvD0y+Nt1+OEGM9EiV7wUzaG79izjVzTqYVqRlkWzj2O kKSlciTijqjAfRofLDhXXApMcpCoxvqv46NJmq526xLfqVZNqNHHxV48ahrh4iEl xQ0nR3beOoE82XCv9e0GHoMuqoc8c6fXlR6azOK5iPx61//ya8PCvYGFBijpQ5hV Oj4+s/8wvxtZ38S7PMmjTQ0CEYsQD2rSv7VaJtPxDGg7wXg2+R8AgRkSKc9NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkw9Pyc5EDqKVB9eOPgsxeaEPmp0wHwYDVR0j BBgwFoAU9xreYWNdQOcprX04bPj5DjkauIQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZjBhMmJlYy1mODFhLTRhM2ItYTE0NC0xNzViMTY4ZTIyZmQvMC9GNzFBREU2MTYz NUQ0MEU3MjlBRDdEMzg2Q0Y4RjkwRTM5MUFCODg0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjcxQURFNjE2MzVENDBFNzI5QUQ3RDM4NkNGOEY5MEUzOTFB Qjg4NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWYwYTJiZWMtZjgxYS00YTNiLWEx NDQtMTc1YjE2OGUyMmZkLzAvRjcxQURFNjE2MzVENDBFNzI5QUQ3RDM4NkNGOEY5 MEUzOTFBQjg4NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKaWJsxrnfdBNoog5o+JW02O9emD9HO8ONL/ Pd2Ca6/8rDRELfaswLw9dVzvDbjbXkfiaMzYLc+nBah3fln0/Owv1YTBGtS8Bdxa 9EPcC1nQwwjq1MH8wKJC9XSmPw+WOExc/tJOrkVV01MjwiZ8oafmcTPWHkZwwLP1 sGze3zv4/S/mLdEc0jvUTutk4yDhO6yYONPaYYZxvQeGpLkfkP/+g94xNLee2SBX 8ljNI2JI/9Q8SYlpZP1j7M1vb5Unw8za64pvkfP3tb5NLu792PQft+oplAE1T3Ak Gu73tQ2PSc18I3bdQP5NzezHrgoqOCLRpcPYjAcJBQk1A04BmCM= -----END CERTIFICATE-----Generated at Mon Mar 2 06:52:48 2026 by rpki-client