$ rpki-client -vvf repo-rpki.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.mft File: F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.mft (raw, json) Hash identifier: d7Oj7jMC32+ORuVf4wsSqnt3r8Bxcehud7jgSg53Wrw= Subject key identifier: A6:9E:C2:D1:BD:E2:F8:21:37:E7:E8:DF:25:00:8D:70:7F:A9:5D:7A Authority key identifier: F2:28:6B:78:D2:C9:6C:F3:CD:F0:67:A8:9D:3F:54:81:59:1C:FE:3F Certificate issuer: /CN=F2286B78D2C96CF3CDF067A89D3F5481591CFE3F Certificate serial: 44DED4978957B4FA0175C8995B7164A52E36025E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.mft Manifest number: 055A Signing time: Mon 02 Mar 2026 02:23:43 +0000 Manifest this update: Mon 02 Mar 2026 02:18:43 +0000 Manifest next update: Thu 05 Mar 2026 02:44:43 +0000 Files and hashes: 1: 323030313a6466343a616138303a3a2f34382d3438203d3e20313431303537.roa (hash: tTehZh9UKuAWzLXm3C0kYFHgqql5m+DDpx9m9vm/Bjg=) 2: F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.crl (hash: grvcPlfJF8WJOZZUZHaVN3AESMVrhcn2Mrqz7MafHCA=) 3: 3130332e3135352e32362e302f32342d3234203d3e20313431303537.roa (hash: zvD1gWyZUcS44IboIaWL1frQd2y5H3jWJXa/wy/mGcM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.crl rsync://repo-rpki.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:44:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:de:d4:97:89:57:b4:fa:01:75:c8:99:5b:71:64:a5:2e:36:02:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2286B78D2C96CF3CDF067A89D3F5481591CFE3F Validity Not Before: Mar 2 02:18:43 2026 GMT Not After : Mar 5 02:44:43 2026 GMT Subject: CN=A69EC2D1BDE2F82137E7E8DF25008D707FA95D7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:e5:3b:74:0b:fc:cb:81:4f:13:63:32:3c:4a: 8d:c0:29:ca:1e:c0:0e:e6:75:1f:f4:67:47:5f:40: 72:dc:59:a0:ca:fd:05:79:db:85:1c:24:aa:e3:24: 6f:9b:cc:ce:59:0c:90:5d:1f:42:e5:cd:d5:29:ec: e2:9a:8b:6c:04:93:23:1e:6e:b0:1a:28:0b:bf:0f: f0:32:f9:d4:9a:2f:44:68:df:44:b6:2b:91:c2:e6: 5d:2d:aa:d2:40:01:44:0d:3b:b0:aa:f8:c9:86:86: 79:1d:9b:a7:70:c7:cc:b2:df:8b:15:be:72:9d:f8: ac:ba:90:a4:28:27:66:b0:1b:00:0c:9a:10:16:1a: 58:f3:5b:f5:77:35:a9:c0:2b:de:91:9d:ad:d6:a0: ef:59:7c:aa:91:ba:6a:03:64:c2:cf:3d:2a:6a:59: 94:22:6a:dc:13:2b:95:b8:fc:9c:88:eb:5c:8e:58: 5e:ee:48:97:06:91:7f:fa:46:a2:4d:b0:12:5d:21: 18:9d:04:01:a2:5a:75:26:a5:a4:7f:35:3f:ad:f2: 68:47:60:5e:e1:b4:a0:7f:3e:83:54:2e:ac:b5:8d: ac:e9:e6:d1:d6:1c:14:69:31:c8:0d:ab:8d:8f:62: 99:ec:66:8b:11:aa:66:37:f1:f4:93:21:dc:9a:ce: 05:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:9E:C2:D1:BD:E2:F8:21:37:E7:E8:DF:25:00:8D:70:7F:A9:5D:7A X509v3 Authority Key Identifier: keyid:F2:28:6B:78:D2:C9:6C:F3:CD:F0:67:A8:9D:3F:54:81:59:1C:FE:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:e1:ca:0e:ce:9e:07:93:d8:4e:19:57:d4:e9:57:8c:5b:4a: 98:a9:86:b3:cd:3e:b7:22:53:12:0e:58:70:ac:59:71:66:15: 14:cd:b4:bb:a4:74:7d:6a:76:a7:84:d3:3b:1f:a3:28:c4:01: 00:8c:3b:57:7c:dd:cd:19:cd:75:c6:0c:fb:10:2c:90:0f:5c: e7:a7:e7:6c:d0:c2:de:b6:39:16:71:ec:7e:5c:a1:30:e5:10: c0:89:fe:83:11:d5:2e:86:dc:ff:15:81:6b:1b:42:37:70:aa: c8:a4:a0:93:8b:26:b1:3a:2f:67:8e:e0:97:58:68:38:6a:2b: b7:d5:88:71:b0:9f:2a:f1:fd:93:69:a5:ff:b0:3e:9b:f7:00: 3e:cf:62:4b:02:e2:f9:3d:d9:6b:ce:b0:b0:d5:cc:76:e0:34: 0f:62:fd:7f:db:a7:21:69:d8:02:a1:bf:6b:0e:2e:19:1b:6b: d4:6f:48:bf:37:a2:4e:22:0c:04:47:a5:b2:a9:3c:9c:f0:a4: cb:3c:d8:ef:0b:e3:fc:64:72:51:6d:bd:ef:af:49:0c:2e:b1: e1:13:5d:bc:65:01:52:76:3a:ef:03:d2:d0:6a:c0:c8:48:24: e4:89:a6:57:15:af:be:0a:b7:d7:53:1d:ca:ef:f6:ae:65:47: d3:0a:7b:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURN7Ul4lXtPoBdciZW3FkpS42Al4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjIyODZCNzhEMkM5NkNGM0NERjA2N0E4OUQzRjU0ODE1 OTFDRkUzRjAeFw0yNjAzMDIwMjE4NDNaFw0yNjAzMDUwMjQ0NDNaMDMxMTAvBgNV BAMTKEE2OUVDMkQxQkRFMkY4MjEzN0U3RThERjI1MDA4RDcwN0ZBOTVEN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe5Tt0C/zLgU8TYzI8So3AKcoe wA7mdR/0Z0dfQHLcWaDK/QV524UcJKrjJG+bzM5ZDJBdH0LlzdUp7OKai2wEkyMe brAaKAu/D/Ay+dSaL0Ro30S2K5HC5l0tqtJAAUQNO7Cq+MmGhnkdm6dwx8yy34sV vnKd+Ky6kKQoJ2awGwAMmhAWGljzW/V3NanAK96Rna3WoO9ZfKqRumoDZMLPPSpq WZQiatwTK5W4/JyI61yOWF7uSJcGkX/6RqJNsBJdIRidBAGiWnUmpaR/NT+t8mhH YF7htKB/PoNULqy1jazp5tHWHBRpMcgNq42PYpnsZosRqmY38fSTIdyazgW7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpp7C0b3i+CE35+jfJQCNcH+pXXowHwYDVR0j BBgwFoAU8ihreNLJbPPN8GeonT9UgVkc/j8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MjRkYTE1Mi0wMDI0LTQzNmQtOTkwZC0zMjM4MDZlMDE2OTkvMC9GMjI4NkI3OEQy Qzk2Q0YzQ0RGMDY3QTg5RDNGNTQ4MTU5MUNGRTNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjIyODZCNzhEMkM5NkNGM0NERjA2N0E4OUQzRjU0ODE1OTFD RkUzRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzI0ZGExNTItMDAyNC00MzZkLTk5 MGQtMzIzODA2ZTAxNjk5LzAvRjIyODZCNzhEMkM5NkNGM0NERjA2N0E4OUQzRjU0 ODE1OTFDRkUzRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAThyg7OngeT2E4ZV9TpV4xbSpiphrPNPrci UxIOWHCsWXFmFRTNtLukdH1qdqeE0zsfoyjEAQCMO1d83c0ZzXXGDPsQLJAPXOen 52zQwt62ORZx7H5coTDlEMCJ/oMR1S6G3P8VgWsbQjdwqsikoJOLJrE6L2eO4JdY aDhqK7fViHGwnyrx/ZNppf+wPpv3AD7PYksC4vk92WvOsLDVzHbgNA9i/X/bpyFp 2AKhv2sOLhkba9RvSL83ok4iDARHpbKpPJzwpMs82O8L4/xkclFtve+vSQwuseET XbxlAVJ2Ou8D0tBqwMhIJOSJplcVr74Kt9dTHcrv9q5lR9MKe8s= -----END CERTIFICATE-----Generated at Mon Mar 2 15:32:59 2026 by rpki-client