$ rpki-client -vvf repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.mft File: F7D89AF4A6B49559B90BD1A11D2262692C406D9B.mft (raw, json) Hash identifier: 7xgG+0jm1nCp13HKjb04SVNggA7utitX/UPDtm4AHIE= Subject key identifier: 9E:39:1D:8A:A9:60:DD:0F:12:22:DC:A8:0C:D1:16:0E:7A:95:3C:DC Authority key identifier: F7:D8:9A:F4:A6:B4:95:59:B9:0B:D1:A1:1D:22:62:69:2C:40:6D:9B Certificate issuer: /CN=F7D89AF4A6B49559B90BD1A11D2262692C406D9B Certificate serial: 699486DCC86DFDCCD0081820DAEA955BFF2DB995 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.mft Manifest number: 0231 Signing time: Sun 01 Mar 2026 19:31:29 +0000 Manifest this update: Sun 01 Mar 2026 19:26:29 +0000 Manifest next update: Thu 05 Mar 2026 01:12:29 +0000 Files and hashes: 1: 3130332e31332e3230342e302f32342d3234203d3e203634333030.roa (hash: aoGZEwGfwxorrH0vm0ZUZnYbhYMMuOl+o+RcX6GAvoE=) 2: 3130332e31332e3230342e302f32332d3233203d3e203634333030.roa (hash: 2AxkviF5pv7j1kTQ3v8XjI6k7pg1zXnW3iJ2qwjQWV0=) 3: F7D89AF4A6B49559B90BD1A11D2262692C406D9B.crl (hash: FLSZ/P3UIl6EBLs0KCRvrMx7P9qZVnjfGS0K8bmWJaU=) 4: 3130332e31332e3230352e302f32342d3234203d3e20313532333636.roa (hash: bNck8LpKpp26kW2UN16eMZ1fOvjILY8XEu10GDGQj+I=) 5: 3130332e31332e3230342e302f32342d3234203d3e203438343635.roa (hash: WBg+Oj5FDShLbz1I5ijbkQnlP4hqNRkJwhL0ngYl8bg=) 6: 3130332e31332e3230352e302f32342d3234203d3e203438343635.roa (hash: /BkZhdhHuWpr0COSSqEa5xQ/tUEnJqvOpL9FKXE/Mm4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.crl rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 01:12:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:94:86:dc:c8:6d:fd:cc:d0:08:18:20:da:ea:95:5b:ff:2d:b9:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F7D89AF4A6B49559B90BD1A11D2262692C406D9B Validity Not Before: Mar 1 19:26:29 2026 GMT Not After : Mar 5 01:12:29 2026 GMT Subject: CN=9E391D8AA960DD0F1222DCA80CD1160E7A953CDC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:02:25:18:fd:9e:37:81:34:4a:92:bf:fd:d5: bb:6c:6d:da:0f:a7:d6:2a:1e:9c:fd:c3:cd:35:dc: 85:93:cd:ef:22:4c:02:bd:aa:65:7c:62:ef:51:d6: 81:58:ae:4d:99:5a:54:4e:44:3d:a2:c8:d1:aa:b8: 41:0a:9e:c4:71:72:e1:c0:ee:07:38:d6:03:89:c6: ee:e3:36:cb:e9:7a:63:c8:81:c2:e9:09:5a:07:b3: 89:0d:4c:d7:ab:ee:55:0a:23:4d:aa:5e:64:29:87: d1:54:d7:d2:90:e8:60:11:04:e1:6b:cd:f3:91:78: 47:6d:c8:b9:00:2e:00:47:e6:5c:26:0e:bd:55:84: e1:20:33:be:37:b6:ce:f4:37:64:e2:5a:2f:1e:f3: e4:e9:62:92:9e:b2:d2:da:d1:c0:fb:0f:49:cd:bf: d3:4d:e6:cc:da:2f:89:e1:01:ee:2f:98:c3:27:90: 45:31:f4:83:59:3b:98:d2:9e:e5:a8:7c:5e:94:7d: 1c:32:77:4a:82:88:48:fa:d7:8b:53:1e:2a:de:92: 6b:fe:9b:2f:b9:4b:e1:e8:3b:1a:6d:f7:bf:2b:90: 95:4e:c4:0f:a5:b8:fa:54:6f:22:d7:f5:cc:e8:c7: 72:20:9a:cc:2c:a0:6f:dc:ea:a6:58:10:ba:d0:5a: 51:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:39:1D:8A:A9:60:DD:0F:12:22:DC:A8:0C:D1:16:0E:7A:95:3C:DC X509v3 Authority Key Identifier: keyid:F7:D8:9A:F4:A6:B4:95:59:B9:0B:D1:A1:1D:22:62:69:2C:40:6D:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:ae:fe:86:9b:e4:5a:73:16:17:31:43:0f:70:c7:4a:cb:6e: 32:b2:78:de:0a:d8:35:cd:00:2e:8f:58:5f:49:09:3f:bb:7c: d3:77:4a:f0:2a:af:ee:7f:8b:7a:c8:ef:56:10:e8:eb:51:26: 19:d3:9d:55:5b:20:0b:18:72:8d:9a:ba:4a:d9:23:14:75:eb: db:be:22:45:5a:4f:79:42:0f:f4:a8:62:b5:2e:45:d5:be:e7: 9d:d4:0c:cb:da:8a:d7:77:70:37:b3:a8:56:e7:15:45:4c:17: 26:5e:aa:5b:ae:19:07:53:d2:ee:c3:43:4b:b5:66:fc:4b:b3: 7c:e4:83:4e:5c:9a:95:d6:eb:d7:f4:92:4b:44:f4:da:ab:f7: 0f:3b:de:ee:43:e4:69:9d:70:93:1c:0f:02:ff:7c:7b:3e:d2: e9:ab:45:22:81:e1:25:76:fe:8d:4c:df:9e:87:2b:70:6f:57: 24:d4:9f:b5:e3:2b:6a:ea:2e:b1:50:de:10:9c:13:9f:05:71: 92:b7:b9:5b:7d:fd:2d:c6:f6:36:5b:10:29:36:1a:e4:be:03: 10:7f:f3:03:1d:09:1f:d4:35:64:75:69:24:61:40:9d:92:7e: 9d:c0:d9:d4:09:01:01:ca:50:30:50:a3:1b:ec:18:75:bd:4d: 32:e7:2c:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaZSG3Mht/czQCBgg2uqVW/8tuZUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjdEODlBRjRBNkI0OTU1OUI5MEJEMUExMUQyMjYyNjky QzQwNkQ5QjAeFw0yNjAzMDExOTI2MjlaFw0yNjAzMDUwMTEyMjlaMDMxMTAvBgNV BAMTKDlFMzkxRDhBQTk2MEREMEYxMjIyRENBODBDRDExNjBFN0E5NTNDREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3AiUY/Z43gTRKkr/91btsbdoP p9YqHpz9w8013IWTze8iTAK9qmV8Yu9R1oFYrk2ZWlRORD2iyNGquEEKnsRxcuHA 7gc41gOJxu7jNsvpemPIgcLpCVoHs4kNTNer7lUKI02qXmQph9FU19KQ6GARBOFr zfOReEdtyLkALgBH5lwmDr1VhOEgM743ts70N2TiWi8e8+TpYpKestLa0cD7D0nN v9NN5szaL4nhAe4vmMMnkEUx9INZO5jSnuWofF6UfRwyd0qCiEj614tTHirekmv+ my+5S+HoOxpt978rkJVOxA+luPpUbyLX9czox3IgmswsoG/c6qZYELrQWlE7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnjkdiqlg3Q8SItyoDNEWDnqVPNwwHwYDVR0j BBgwFoAU99ia9Ka0lVm5C9GhHSJiaSxAbZswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZmM5MDk2Yy0yOGRjLTQ0ZTQtYjRjZi05NmQ2MzFiNzNhYzAvMC9GN0Q4OUFGNEE2 QjQ5NTU5QjkwQkQxQTExRDIyNjI2OTJDNDA2RDlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjdEODlBRjRBNkI0OTU1OUI5MEJEMUExMUQyMjYyNjkyQzQw NkQ5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmZjOTA5NmMtMjhkYy00NGU0LWI0 Y2YtOTZkNjMxYjczYWMwLzAvRjdEODlBRjRBNkI0OTU1OUI5MEJEMUExMUQyMjYy NjkyQzQwNkQ5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADKu/oab5FpzFhcxQw9wx0rLbjKyeN4K2DXN AC6PWF9JCT+7fNN3SvAqr+5/i3rI71YQ6OtRJhnTnVVbIAsYco2aukrZIxR169u+ IkVaT3lCD/SoYrUuRdW+553UDMvaitd3cDezqFbnFUVMFyZeqluuGQdT0u7DQ0u1 ZvxLs3zkg05cmpXW69f0kktE9Nqr9w873u5D5GmdcJMcDwL/fHs+0umrRSKB4SV2 /o1M356HK3BvVyTUn7XjK2rqLrFQ3hCcE58FcZK3uVt9/S3G9jZbECk2GuS+AxB/ 8wMdCR/UNWR1aSRhQJ2Sfp3A2dQJAQHKUDBQoxvsGHW9TTLnLAE= -----END CERTIFICATE-----Generated at Mon Mar 2 13:25:29 2026 by rpki-client