$ rpki-client -vvf repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.mft File: F959D883144B0BFBE80E98C04EE6B6F6953F074C.mft (raw, json) Hash identifier: 3lZ2rD6lGhZEE4JVtCMQg6QAKNYAB3t55SzBwtWzFpA= Subject key identifier: 17:76:CC:57:BB:A1:10:E4:C0:F9:74:26:0F:36:3E:11:62:71:19:29 Authority key identifier: F9:59:D8:83:14:4B:0B:FB:E8:0E:98:C0:4E:E6:B6:F6:95:3F:07:4C Certificate issuer: /CN=F959D883144B0BFBE80E98C04EE6B6F6953F074C Certificate serial: 7B102177CAD0E8262A363104AA1F0AAA8AADB965 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F959D883144B0BFBE80E98C04EE6B6F6953F074C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.mft Manifest number: 0556 Signing time: Mon 02 Mar 2026 13:40:45 +0000 Manifest this update: Mon 02 Mar 2026 13:35:45 +0000 Manifest next update: Thu 05 Mar 2026 16:29:45 +0000 Files and hashes: 1: 3230322e38372e3234302e302f32312d3234203d3e203234323032.roa (hash: kDBhP+FyfiW8U5t0Hs9MXmhAuLZWtu0OwR+kZ+JvroA=) 2: 323430363a323134303a3a2f33322d3438203d3e203234323032.roa (hash: p3sc5JCZxSC+hdqWbo6JJdIFh1HtM6tVkFkCKEfAzPI=) 3: F959D883144B0BFBE80E98C04EE6B6F6953F074C.crl (hash: T6Rt9lCVwznrUc5O4Tej3Pv8lYLekOQ6ZTHWnLoY/Ts=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.crl rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F959D883144B0BFBE80E98C04EE6B6F6953F074C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:10:21:77:ca:d0:e8:26:2a:36:31:04:aa:1f:0a:aa:8a:ad:b9:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F959D883144B0BFBE80E98C04EE6B6F6953F074C Validity Not Before: Mar 2 13:35:45 2026 GMT Not After : Mar 5 16:29:45 2026 GMT Subject: CN=1776CC57BBA110E4C0F974260F363E1162711929 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:eb:e1:82:2b:77:e2:1c:da:d8:49:6a:e0:a2: cd:95:da:96:b7:9a:64:00:55:be:8e:74:74:da:c0: 20:7c:7a:fe:7b:fe:d8:b6:7f:10:c5:e1:c7:27:8f: 6c:03:29:a4:93:8c:ec:51:eb:45:0a:38:fd:0f:65: 95:c1:d7:09:f4:9a:38:31:1e:d1:84:b4:3a:67:cf: 31:fd:0e:43:dc:41:9c:70:01:43:e9:5e:4a:8d:ad: 12:12:a2:87:ff:0d:14:c2:eb:d2:82:ef:30:2c:9a: 27:fb:75:4f:39:dd:d3:a0:07:fc:f4:ee:c5:a3:57: 02:f9:8d:b0:d2:b0:55:37:57:1b:89:74:07:b4:bf: 26:66:62:82:83:ee:74:7d:5b:61:dc:4a:cd:a2:43: da:43:6a:26:27:a1:e2:94:23:43:6e:69:c6:bc:1a: 05:a2:77:7c:9a:bd:1a:f7:fd:fb:41:9e:37:b1:ed: e3:03:ca:1e:79:3a:06:da:15:67:6c:7d:e9:14:f2: c0:87:d0:a4:16:7b:e8:e4:77:37:d3:e1:9a:f8:4e: dd:ea:c0:51:ee:d5:09:21:b1:6d:d4:a3:f9:14:fb: bd:cf:79:5c:47:f9:36:06:06:b9:c9:1d:23:32:f7: ad:37:da:c8:3f:cd:55:07:c1:3d:02:35:2c:29:e7: 4d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:76:CC:57:BB:A1:10:E4:C0:F9:74:26:0F:36:3E:11:62:71:19:29 X509v3 Authority Key Identifier: keyid:F9:59:D8:83:14:4B:0B:FB:E8:0E:98:C0:4E:E6:B6:F6:95:3F:07:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F959D883144B0BFBE80E98C04EE6B6F6953F074C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:2f:ff:82:1c:ce:3b:49:cc:dc:45:af:71:7e:53:1c:d2:44: c5:3b:5b:ac:5f:ba:a7:8d:d0:5b:51:93:43:d5:12:76:a7:e5: 5a:e0:2b:ae:29:a3:96:cb:25:8b:4a:e4:b8:14:ea:76:79:b8: 0e:05:61:aa:d3:66:67:f1:b9:d6:3a:20:a4:8b:0b:7e:5a:b0: bb:d8:93:3b:96:b7:48:99:36:d3:a3:09:68:ca:cd:5e:ec:63: 43:1d:f7:8c:cc:60:92:95:62:74:4c:73:a6:21:36:41:11:b3: 60:fd:79:1e:de:bf:de:82:4b:78:f4:c6:ed:79:a6:17:cb:0f: 9c:2a:ed:32:93:15:66:9c:a7:89:27:e4:bb:a1:e3:07:3b:56: 5c:81:66:fd:62:24:be:fa:ad:92:52:29:9a:6b:26:97:9b:45: ae:51:77:77:e2:3a:98:a9:3e:63:c1:6f:9a:ed:81:9f:6a:c4: 05:7b:5b:f0:4b:ad:ac:12:ab:95:53:30:e5:e6:ac:60:fd:81: de:54:5f:57:5d:bf:d9:13:d1:b6:5f:08:ad:c5:b3:ac:0a:ce: 74:ce:ae:d9:0f:17:0d:4f:aa:89:da:a3:c9:32:ce:7d:1e:e8: dc:70:93:34:29:57:f4:93:0d:5d:c2:b3:e0:d5:19:f8:7e:7e: 5f:e3:88:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUexAhd8rQ6CYqNjEEqh8KqoqtuWUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjk1OUQ4ODMxNDRCMEJGQkU4MEU5OEMwNEVFNkI2RjY5 NTNGMDc0QzAeFw0yNjAzMDIxMzM1NDVaFw0yNjAzMDUxNjI5NDVaMDMxMTAvBgNV BAMTKDE3NzZDQzU3QkJBMTEwRTRDMEY5NzQyNjBGMzYzRTExNjI3MTE5MjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ6+GCK3fiHNrYSWrgos2V2pa3 mmQAVb6OdHTawCB8ev57/ti2fxDF4ccnj2wDKaSTjOxR60UKOP0PZZXB1wn0mjgx HtGEtDpnzzH9DkPcQZxwAUPpXkqNrRISoof/DRTC69KC7zAsmif7dU853dOgB/z0 7sWjVwL5jbDSsFU3VxuJdAe0vyZmYoKD7nR9W2HcSs2iQ9pDaiYnoeKUI0Nuaca8 GgWid3yavRr3/ftBnjex7eMDyh55OgbaFWdsfekU8sCH0KQWe+jkdzfT4Zr4Tt3q wFHu1QkhsW3Uo/kU+73PeVxH+TYGBrnJHSMy96032sg/zVUHwT0CNSwp5035AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUF3bMV7uhEOTA+XQmDzY+EWJxGSkwHwYDVR0j BBgwFoAU+VnYgxRLC/voDpjATua29pU/B0wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MWYwMmE4OS03ZWU4LTRhODMtODAwNC0yMzRkOTE0YTBmZDQvMC9GOTU5RDg4MzE0 NEIwQkZCRTgwRTk4QzA0RUU2QjZGNjk1M0YwNzRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjk1OUQ4ODMxNDRCMEJGQkU4MEU5OEMwNEVFNkI2RjY5NTNG MDc0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjFmMDJhODktN2VlOC00YTgzLTgw MDQtMjM0ZDkxNGEwZmQ0LzAvRjk1OUQ4ODMxNDRCMEJGQkU4MEU5OEMwNEVFNkI2 RjY5NTNGMDc0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKcv/4IczjtJzNxFr3F+UxzSRMU7W6xfuqeN 0FtRk0PVEnan5VrgK64po5bLJYtK5LgU6nZ5uA4FYarTZmfxudY6IKSLC35asLvY kzuWt0iZNtOjCWjKzV7sY0Md94zMYJKVYnRMc6YhNkERs2D9eR7ev96CS3j0xu15 phfLD5wq7TKTFWacp4kn5Luh4wc7VlyBZv1iJL76rZJSKZprJpebRa5Rd3fiOpip PmPBb5rtgZ9qxAV7W/BLrawSq5VTMOXmrGD9gd5UX1ddv9kT0bZfCK3Fs6wKznTO rtkPFw1Pqonao8kyzn0e6NxwkzQpV/STDV3Cs+DVGfh+fl/jiDg= -----END CERTIFICATE-----Generated at Mon Mar 2 17:10:42 2026 by rpki-client