$ rpki-client -vvf repo-rpki.idnic.net/repo/7d68500c-49f8-4f01-8774-f7c3164a0a58/0/FD0F38979237143A0D44165912E79E2FACD5A3BA.mft File: FD0F38979237143A0D44165912E79E2FACD5A3BA.mft (raw, json) Hash identifier: NxGJ1/5SrAs7RWco/lc/+y3cX0DZs1ER4QYF3ZZQyUI= Subject key identifier: CD:74:67:47:57:B8:02:E9:DD:2B:B7:8A:E3:78:32:5B:73:F5:27:D1 Authority key identifier: FD:0F:38:97:92:37:14:3A:0D:44:16:59:12:E7:9E:2F:AC:D5:A3:BA Certificate issuer: /CN=FD0F38979237143A0D44165912E79E2FACD5A3BA Certificate serial: 1F3F310CACEFAADD77E45647403B702D1C7434E8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FD0F38979237143A0D44165912E79E2FACD5A3BA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d68500c-49f8-4f01-8774-f7c3164a0a58/0/FD0F38979237143A0D44165912E79E2FACD5A3BA.mft Manifest number: 0524 Signing time: Sat 28 Feb 2026 08:30:54 +0000 Manifest this update: Sat 28 Feb 2026 08:25:54 +0000 Manifest next update: Tue 03 Mar 2026 15:37:54 +0000 Files and hashes: 1: FD0F38979237143A0D44165912E79E2FACD5A3BA.crl (hash: R2l5gv8qxG6pAzkYE+nAdDOPpRlyJgxlZwb+y8cdU6c=) 2: 323430363a623734303a3a2f33322d3332203d3e20313431313235.roa (hash: QqT8D5lkBG4hSbXhFLTMPSoaBkT256vJUAYJ7NnLOL4=) 3: 3130332e3135382e39382e302f32332d3234203d3e20313431313235.roa (hash: SOkxDu78tXfJl/igqr9RzKPCr0bIXcHmyK6/S8XprpU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d68500c-49f8-4f01-8774-f7c3164a0a58/0/FD0F38979237143A0D44165912E79E2FACD5A3BA.crl rsync://repo-rpki.idnic.net/repo/7d68500c-49f8-4f01-8774-f7c3164a0a58/0/FD0F38979237143A0D44165912E79E2FACD5A3BA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FD0F38979237143A0D44165912E79E2FACD5A3BA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 15:37:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:3f:31:0c:ac:ef:aa:dd:77:e4:56:47:40:3b:70:2d:1c:74:34:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FD0F38979237143A0D44165912E79E2FACD5A3BA Validity Not Before: Feb 28 08:25:54 2026 GMT Not After : Mar 3 15:37:54 2026 GMT Subject: CN=CD74674757B802E9DD2BB78AE378325B73F527D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2e:b3:fc:40:12:c2:97:ec:f6:7c:fd:c5:82: ca:16:9f:04:d2:52:ff:65:b8:f9:1b:1e:96:a3:cf: 7c:71:40:63:32:e7:84:19:89:8d:13:79:8c:d1:96: 3a:fa:ec:f9:6f:f9:f4:d8:c5:ab:7c:47:1b:f1:92: 66:0e:8a:bc:04:70:89:72:10:a5:9c:70:3d:8c:79: e8:ee:64:f4:f2:7a:2e:24:a2:b7:f7:89:1b:f0:11: 35:30:72:5c:e2:64:c8:45:a0:f2:55:99:40:b5:3a: 92:38:04:a9:c1:21:bd:42:f1:c1:55:cb:9d:46:07: 4b:d9:3e:09:ff:67:a2:a1:8f:16:2d:4d:b1:85:ce: 3f:a5:66:b8:fe:5c:c5:ce:37:e3:a1:c6:79:15:53: 6a:6a:3c:2f:a5:7a:aa:44:f0:67:e1:1d:72:05:cf: 82:fa:60:a8:1e:38:d0:da:85:71:1e:bc:d5:f6:9f: ba:3e:41:6e:a3:eb:77:5c:97:35:9d:99:ac:83:26: dd:48:41:e7:4f:c8:eb:9a:7a:49:81:81:2b:cf:98: b8:69:d9:75:ae:c7:0a:08:e0:8b:72:b8:41:b9:b1: f5:55:66:e9:95:11:e1:ba:b5:1b:a6:df:54:0f:db: b9:a5:ca:78:45:57:be:47:28:1d:ee:67:97:ab:4d: e0:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:74:67:47:57:B8:02:E9:DD:2B:B7:8A:E3:78:32:5B:73:F5:27:D1 X509v3 Authority Key Identifier: keyid:FD:0F:38:97:92:37:14:3A:0D:44:16:59:12:E7:9E:2F:AC:D5:A3:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d68500c-49f8-4f01-8774-f7c3164a0a58/0/FD0F38979237143A0D44165912E79E2FACD5A3BA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FD0F38979237143A0D44165912E79E2FACD5A3BA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d68500c-49f8-4f01-8774-f7c3164a0a58/0/FD0F38979237143A0D44165912E79E2FACD5A3BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:98:74:83:50:d0:fa:de:ad:59:27:18:18:ed:53:3b:54:2b: 83:c9:6f:78:71:50:a2:fb:1e:5a:d7:19:8e:71:11:a4:37:7c: ed:42:63:27:ab:f2:7e:9b:fd:3b:ea:70:37:e8:2f:c4:12:84: e5:d1:67:3c:c1:98:00:b3:83:91:5f:49:9e:81:60:c6:0f:d8: 42:9a:6b:ff:e2:d1:b1:9f:0e:7e:b9:a7:fa:27:12:e5:24:c4: fb:c2:24:5b:15:ca:e5:4d:59:c2:82:45:22:96:bf:39:b9:fc: 8b:75:27:15:9d:da:0d:24:c1:20:d6:4a:97:5e:d5:19:77:36: 73:f5:46:8e:9b:99:13:6f:96:58:bc:f3:fe:39:69:a8:61:5f: c9:c8:cd:0f:75:d5:cb:bc:0c:33:15:14:f3:11:c1:6f:ce:80: 2f:6a:8d:c9:a6:63:ee:38:49:eb:e6:52:61:f7:c2:30:f9:7b: fc:79:a8:8f:1b:34:ba:a9:2b:68:26:4b:2e:35:2b:f0:53:c1: b9:46:75:51:5f:0e:a7:6a:3c:10:25:63:47:a1:73:b8:27:cd: 14:4f:5d:26:0e:a1:30:1d:b9:aa:52:cc:71:a1:92:3c:cc:e8: b2:59:5d:a3:23:b5:9d:40:bb:d1:95:1f:3f:20:73:c0:2c:56: 0c:cf:b6:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHz8xDKzvqt135FZHQDtwLRx0NOgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkQwRjM4OTc5MjM3MTQzQTBENDQxNjU5MTJFNzlFMkZB Q0Q1QTNCQTAeFw0yNjAyMjgwODI1NTRaFw0yNjAzMDMxNTM3NTRaMDMxMTAvBgNV BAMTKENENzQ2NzQ3NTdCODAyRTlERDJCQjc4QUUzNzgzMjVCNzNGNTI3RDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6LrP8QBLCl+z2fP3FgsoWnwTS Uv9luPkbHpajz3xxQGMy54QZiY0TeYzRljr67Plv+fTYxat8RxvxkmYOirwEcIly EKWccD2MeejuZPTyei4korf3iRvwETUwclziZMhFoPJVmUC1OpI4BKnBIb1C8cFV y51GB0vZPgn/Z6KhjxYtTbGFzj+lZrj+XMXON+OhxnkVU2pqPC+leqpE8GfhHXIF z4L6YKgeONDahXEevNX2n7o+QW6j63dclzWdmayDJt1IQedPyOuaekmBgSvPmLhp 2XWuxwoI4ItyuEG5sfVVZumVEeG6tRum31QP27mlynhFV75HKB3uZ5erTeCrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzXRnR1e4AundK7eK43gyW3P1J9EwHwYDVR0j BBgwFoAU/Q84l5I3FDoNRBZZEueeL6zVo7owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDY4NTAwYy00OWY4LTRmMDEtODc3NC1mN2MzMTY0YTBhNTgvMC9GRDBGMzg5Nzky MzcxNDNBMEQ0NDE2NTkxMkU3OUUyRkFDRDVBM0JBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkQwRjM4OTc5MjM3MTQzQTBENDQxNjU5MTJFNzlFMkZBQ0Q1 QTNCQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Q2ODUwMGMtNDlmOC00ZjAxLTg3 NzQtZjdjMzE2NGEwYTU4LzAvRkQwRjM4OTc5MjM3MTQzQTBENDQxNjU5MTJFNzlF MkZBQ0Q1QTNCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIGYdINQ0PrerVknGBjtUztUK4PJb3hxUKL7 HlrXGY5xEaQ3fO1CYyer8n6b/TvqcDfoL8QShOXRZzzBmACzg5FfSZ6BYMYP2EKa a//i0bGfDn65p/onEuUkxPvCJFsVyuVNWcKCRSKWvzm5/It1JxWd2g0kwSDWSpde 1Rl3NnP1Ro6bmRNvlli88/45aahhX8nIzQ911cu8DDMVFPMRwW/OgC9qjcmmY+44 SevmUmH3wjD5e/x5qI8bNLqpK2gmSy41K/BTwblGdVFfDqdqPBAlY0ehc7gnzRRP XSYOoTAduapSzHGhkjzM6LJZXaMjtZ1Au9GVHz8gc8AsVgzPti4= -----END CERTIFICATE-----Generated at Mon Mar 2 15:20:17 2026 by rpki-client