$ rpki-client -vvf repo-rpki.idnic.net/repo/83c891d7-4fcc-4770-82d4-367b87bb551e/0/F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.mft File: F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.mft (raw, json) Hash identifier: WWD6vwTq9x5nA8WyODLR73Y7iC+USy0smXRaZn7MZ1o= Subject key identifier: AB:79:06:23:3E:F1:7D:67:C1:BF:CD:00:EF:57:3A:E4:4D:FB:1A:37 Authority key identifier: F8:C9:E7:9A:DD:DE:29:28:BC:5F:A2:7C:3D:62:1C:1D:93:25:21:69 Certificate issuer: /CN=F8C9E79ADDDE2928BC5FA27C3D621C1D93252169 Certificate serial: 27FD3FA350F0214DDB0E0DBA9780FEFE1F659F58 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.cer Subject info access: rsync://repo-rpki.idnic.net/repo/83c891d7-4fcc-4770-82d4-367b87bb551e/0/F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.mft Manifest number: 0155 Signing time: Sun 01 Mar 2026 11:52:09 +0000 Manifest this update: Sun 01 Mar 2026 11:47:09 +0000 Manifest next update: Wed 04 Mar 2026 18:13:09 +0000 Files and hashes: 1: F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.crl (hash: 4vt9WRTv6E0Rga+4RU7EiP+GmQ6NmLekS1T6krjRwds=) 2: 3135372e31302e3137382e302f32342d3234203d3e20313532333435.roa (hash: JcnToFV1Tdf0hSLWS9PFNPrwPJ5SIH11d0CkEuHYi9g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/83c891d7-4fcc-4770-82d4-367b87bb551e/0/F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.crl rsync://repo-rpki.idnic.net/repo/83c891d7-4fcc-4770-82d4-367b87bb551e/0/F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 18:13:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:fd:3f:a3:50:f0:21:4d:db:0e:0d:ba:97:80:fe:fe:1f:65:9f:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8C9E79ADDDE2928BC5FA27C3D621C1D93252169 Validity Not Before: Mar 1 11:47:09 2026 GMT Not After : Mar 4 18:13:09 2026 GMT Subject: CN=AB7906233EF17D67C1BFCD00EF573AE44DFB1A37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:2c:03:6c:d9:65:12:34:bb:34:c4:31:bb:23: 6f:fc:dc:76:17:45:09:d0:34:c6:39:a6:f7:f6:51: 76:58:5e:3b:d4:58:d7:b7:a5:35:a9:ac:41:2a:50: d1:e3:17:01:c9:8e:42:0f:80:eb:58:10:b6:10:22: 75:03:82:8e:b6:3f:1a:b5:6e:2e:51:f0:d8:0f:88: 46:bf:23:91:ed:79:60:c1:65:65:95:fb:7c:09:25: 47:d2:4a:7f:bd:bc:c6:f2:db:d4:43:ce:e2:70:a3: 1a:38:65:4e:aa:1a:27:d9:31:89:c8:1c:c2:60:6b: 48:1f:52:f6:27:4a:64:9a:79:88:17:fa:f7:00:29: cc:47:d7:02:8b:3e:79:dd:fb:b7:93:39:a1:92:36: 7e:cc:c9:45:47:a9:75:e5:38:32:08:bc:c0:8d:fc: 21:06:39:dc:2f:42:e0:07:7e:57:08:db:15:0c:74: ba:64:4f:ff:d5:1e:63:7b:69:3e:f5:a7:5a:1a:08: 92:d8:46:c8:68:b2:59:e1:21:ea:f8:d0:c1:1f:b9: 6a:24:3d:26:33:65:7a:f2:33:95:27:a2:61:23:c4: 17:32:ce:97:4c:e1:a0:0f:e5:60:23:51:76:34:a3: 82:91:01:1f:f7:84:b5:c4:ab:92:4c:42:6b:cf:6a: bc:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:79:06:23:3E:F1:7D:67:C1:BF:CD:00:EF:57:3A:E4:4D:FB:1A:37 X509v3 Authority Key Identifier: keyid:F8:C9:E7:9A:DD:DE:29:28:BC:5F:A2:7C:3D:62:1C:1D:93:25:21:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/83c891d7-4fcc-4770-82d4-367b87bb551e/0/F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/83c891d7-4fcc-4770-82d4-367b87bb551e/0/F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:00:ae:ba:cf:72:a3:13:14:24:d0:2c:42:db:6d:21:35:bc: fa:38:db:04:3f:e6:d1:3e:c7:ad:98:74:e2:a7:a3:9b:e5:53: 09:05:5c:de:cb:5e:82:6d:e5:31:29:a1:b9:06:fe:ce:85:38: cf:18:9f:07:5c:66:3b:0a:ad:cb:b3:89:c2:ce:ef:80:b6:11: 52:33:e4:8c:70:27:44:2e:2d:9a:10:66:d9:fb:5e:43:9e:d0: 7b:6a:d3:c3:27:1a:ad:da:e5:8c:9e:05:1f:68:e5:cb:9f:23: bf:33:5a:ea:67:3e:25:75:7a:a2:4b:ff:59:24:77:36:5c:c9: 86:82:32:9d:4d:6a:d7:57:13:6d:2a:0d:b7:37:cf:92:c2:95: 7c:4e:5c:1f:a6:f9:ea:7e:a1:3f:61:dd:78:b8:13:96:6d:98: b7:df:0e:20:8a:f3:17:cf:2e:0c:c5:e0:f4:e1:e9:2d:ef:f5: 20:e5:ef:c5:5e:d3:db:3f:28:2a:fc:bb:d1:2f:8a:62:7c:44: c5:65:e5:7f:e6:f2:57:31:bb:d5:c8:04:9e:87:71:8e:a4:49: 7d:17:bb:bb:58:e1:35:cf:51:f2:4e:7b:d3:10:6f:e6:79:8d: 2d:80:3f:bb:1c:bc:41:db:a8:06:22:4e:8c:53:b5:62:ec:94: 33:f7:49:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ/0/o1DwIU3bDg26l4D+/h9ln1gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhDOUU3OUFERERFMjkyOEJDNUZBMjdDM0Q2MjFDMUQ5 MzI1MjE2OTAeFw0yNjAzMDExMTQ3MDlaFw0yNjAzMDQxODEzMDlaMDMxMTAvBgNV BAMTKEFCNzkwNjIzM0VGMTdENjdDMUJGQ0QwMEVGNTczQUU0NERGQjFBMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKLANs2WUSNLs0xDG7I2/83HYX RQnQNMY5pvf2UXZYXjvUWNe3pTWprEEqUNHjFwHJjkIPgOtYELYQInUDgo62Pxq1 bi5R8NgPiEa/I5HteWDBZWWV+3wJJUfSSn+9vMby29RDzuJwoxo4ZU6qGifZMYnI HMJga0gfUvYnSmSaeYgX+vcAKcxH1wKLPnnd+7eTOaGSNn7MyUVHqXXlODIIvMCN /CEGOdwvQuAHflcI2xUMdLpkT//VHmN7aT71p1oaCJLYRshoslnhIer40MEfuWok PSYzZXryM5UnomEjxBcyzpdM4aAP5WAjUXY0o4KRAR/3hLXEq5JMQmvParx7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUq3kGIz7xfWfBv80A71c65E37GjcwHwYDVR0j BBgwFoAU+Mnnmt3eKSi8X6J8PWIcHZMlIWkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 M2M4OTFkNy00ZmNjLTQ3NzAtODJkNC0zNjdiODdiYjU1MWUvMC9GOEM5RTc5QURE REUyOTI4QkM1RkEyN0MzRDYyMUMxRDkzMjUyMTY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjhDOUU3OUFERERFMjkyOEJDNUZBMjdDM0Q2MjFDMUQ5MzI1 MjE2OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODNjODkxZDctNGZjYy00NzcwLTgy ZDQtMzY3Yjg3YmI1NTFlLzAvRjhDOUU3OUFERERFMjkyOEJDNUZBMjdDM0Q2MjFD MUQ5MzI1MjE2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFMArrrPcqMTFCTQLELbbSE1vPo42wQ/5tE+ x62YdOKno5vlUwkFXN7LXoJt5TEpobkG/s6FOM8YnwdcZjsKrcuzicLO74C2EVIz 5IxwJ0QuLZoQZtn7XkOe0Htq08MnGq3a5YyeBR9o5cufI78zWupnPiV1eqJL/1kk dzZcyYaCMp1NatdXE20qDbc3z5LClXxOXB+m+ep+oT9h3Xi4E5ZtmLffDiCK8xfP LgzF4PTh6S3v9SDl78Ve09s/KCr8u9EvimJ8RMVl5X/m8lcxu9XIBJ6HcY6kSX0X u7tY4TXPUfJOe9MQb+Z5jS2AP7scvEHbqAYiToxTtWLslDP3Ses= -----END CERTIFICATE-----Generated at Mon Mar 2 17:14:05 2026 by rpki-client