$ rpki-client -vvf repo-rpki.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.mft File: F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.mft (raw, json) Hash identifier: JzRyCvF5IC7S/YC2YOqNXV/Hqh2Ae1vx74ULXSQ67Oc= Subject key identifier: CC:AC:A0:E3:4B:FB:3D:1B:2D:CA:07:C3:08:51:4D:68:29:9C:D8:C3 Authority key identifier: F0:7F:FF:47:2E:D9:C7:00:73:BC:98:86:5A:4A:5A:6C:2B:0E:A3:5E Certificate issuer: /CN=F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E Certificate serial: 70FC6B952647F2320D2EDBB9C49B72FC644BD852 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.mft Manifest number: F2 Signing time: Sun 01 Mar 2026 22:20:03 +0000 Manifest this update: Sun 01 Mar 2026 22:15:03 +0000 Manifest next update: Thu 05 Mar 2026 03:13:03 +0000 Files and hashes: 1: F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.crl (hash: zpnPQMGogcbLPPtjdP8YH1xJAHlZqfxSiBfxcLOPNjU=) 2: 3130332e3132312e35382e302f32342d3234203d3e20313338303436.roa (hash: qsp//iZceVpeXKSwIm+bVjK6+BteJANtUH8oVA3B3qs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.crl rsync://repo-rpki.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 03:13:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:fc:6b:95:26:47:f2:32:0d:2e:db:b9:c4:9b:72:fc:64:4b:d8:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E Validity Not Before: Mar 1 22:15:03 2026 GMT Not After : Mar 5 03:13:03 2026 GMT Subject: CN=CCACA0E34BFB3D1B2DCA07C308514D68299CD8C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:c9:25:1e:94:92:1e:9a:30:32:18:2d:10:92: 01:7e:5a:e2:5f:a4:d7:7c:35:48:5a:94:7b:98:4f: 5a:d4:32:87:dd:5a:28:63:f1:16:30:30:2a:94:13: 45:53:ce:2e:cb:75:72:2f:56:56:5f:c2:ab:be:41: 75:11:c2:6c:b3:ed:4d:79:e9:77:29:27:37:d6:76: 7f:68:71:0b:d6:df:42:67:78:0c:c8:cb:5a:fa:0d: 70:57:94:49:67:af:61:92:ed:66:3a:f0:5e:00:00: 95:9c:8f:ab:17:17:72:0a:ae:51:46:8b:5e:fc:41: d7:84:02:61:50:e8:0d:7d:85:f3:14:63:03:11:d9: 77:5b:b7:19:ba:f2:02:ce:52:dd:08:83:3f:c1:01: 0f:ff:46:8b:c1:01:24:2a:e6:e4:55:3d:e3:f4:26: 58:06:98:06:0a:a2:21:d6:5c:75:f2:cb:4c:27:12: e6:06:97:80:8c:57:12:0b:ed:bd:b8:e6:8a:d1:3e: f4:c9:ea:67:27:12:1f:3f:06:d8:4d:e0:27:86:f4: 55:5f:ae:be:58:96:7a:18:11:54:0a:65:4a:61:2b: b0:4e:38:1f:30:e7:6d:14:5a:d2:ad:a5:d4:42:2c: f7:48:ae:e7:8c:57:e6:de:76:b3:77:db:21:ad:b0: 38:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:AC:A0:E3:4B:FB:3D:1B:2D:CA:07:C3:08:51:4D:68:29:9C:D8:C3 X509v3 Authority Key Identifier: keyid:F0:7F:FF:47:2E:D9:C7:00:73:BC:98:86:5A:4A:5A:6C:2B:0E:A3:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:3a:6a:35:6a:77:0c:04:84:46:fe:c7:0b:51:bf:01:61:a1: 3c:f7:b2:3e:f1:59:d9:38:62:81:1d:1d:d4:78:27:d6:22:72: 22:52:0a:e4:59:35:35:94:49:58:cf:b3:f8:8e:a7:49:45:66: a4:48:2f:c2:bb:43:5c:ae:2d:3f:8e:8e:85:bf:12:b9:f6:96: 54:c8:0a:f9:fc:a3:24:8a:e5:1b:31:49:4d:3d:96:9d:a2:d5: 2d:33:c5:f4:d2:c8:b6:b7:ee:03:20:65:d8:ab:7d:77:ee:16: c4:27:49:f0:b1:70:da:bc:40:d7:77:45:fd:e3:51:2a:6e:5e: 4e:de:28:1c:7d:e7:8a:a4:c9:4b:a9:73:d5:e8:6f:7d:65:b4: 20:7c:8f:45:4d:61:fb:11:4f:99:66:b3:b8:bb:73:79:de:87: bf:2a:05:ea:be:43:1d:7f:f2:62:12:09:62:0c:5b:1a:94:8c: d5:e1:c9:96:c4:ef:2e:0a:86:40:10:e3:5a:98:a8:b7:f6:e6: 85:72:9d:ee:81:72:07:da:ff:5d:b4:68:da:75:35:20:60:c1: 11:ed:7f:c5:d5:37:20:eb:83:64:82:78:2d:9e:b9:08:a4:19: 65:0b:f4:2b:6e:7d:95:d4:5b:5b:b2:b9:e2:ca:f8:13:0f:d5: 99:27:f1:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcPxrlSZH8jINLtu5xJty/GRL2FIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjA3RkZGNDcyRUQ5QzcwMDczQkM5ODg2NUE0QTVBNkMy QjBFQTM1RTAeFw0yNjAzMDEyMjE1MDNaFw0yNjAzMDUwMzEzMDNaMDMxMTAvBgNV BAMTKENDQUNBMEUzNEJGQjNEMUIyRENBMDdDMzA4NTE0RDY4Mjk5Q0Q4QzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYySUelJIemjAyGC0QkgF+WuJf pNd8NUhalHuYT1rUMofdWihj8RYwMCqUE0VTzi7LdXIvVlZfwqu+QXURwmyz7U15 6XcpJzfWdn9ocQvW30JneAzIy1r6DXBXlElnr2GS7WY68F4AAJWcj6sXF3IKrlFG i178QdeEAmFQ6A19hfMUYwMR2Xdbtxm68gLOUt0Igz/BAQ//RovBASQq5uRVPeP0 JlgGmAYKoiHWXHXyy0wnEuYGl4CMVxIL7b245orRPvTJ6mcnEh8/BthN4CeG9FVf rr5YlnoYEVQKZUphK7BOOB8w520UWtKtpdRCLPdIrueMV+bedrN32yGtsDjzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzKyg40v7PRstygfDCFFNaCmc2MMwHwYDVR0j BBgwFoAU8H//Ry7ZxwBzvJiGWkpabCsOo14wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MjRkYjU2Ny0zM2E4LTRjZTAtYmNmZi1jYjBmMGE4NWMyMzkvMC9GMDdGRkY0NzJF RDlDNzAwNzNCQzk4ODY1QTRBNUE2QzJCMEVBMzVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjA3RkZGNDcyRUQ5QzcwMDczQkM5ODg2NUE0QTVBNkMyQjBF QTM1RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzI0ZGI1NjctMzNhOC00Y2UwLWJj ZmYtY2IwZjBhODVjMjM5LzAvRjA3RkZGNDcyRUQ5QzcwMDczQkM5ODg2NUE0QTVB NkMyQjBFQTM1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB46ajVqdwwEhEb+xwtRvwFhoTz3sj7xWdk4 YoEdHdR4J9YiciJSCuRZNTWUSVjPs/iOp0lFZqRIL8K7Q1yuLT+OjoW/Ern2llTI Cvn8oySK5RsxSU09lp2i1S0zxfTSyLa37gMgZdirfXfuFsQnSfCxcNq8QNd3Rf3j USpuXk7eKBx954qkyUupc9Xob31ltCB8j0VNYfsRT5lms7i7c3neh78qBeq+Qx1/ 8mISCWIMWxqUjNXhyZbE7y4KhkAQ41qYqLf25oVyne6Bcgfa/120aNp1NSBgwRHt f8XVNyDrg2SCeC2euQikGWUL9CtufZXUW1uyueLK+BMP1Zkn8SQ= -----END CERTIFICATE-----Generated at Mon Mar 2 13:01:07 2026 by rpki-client