$ rpki-client -vvf repo-rpki.idnic.net/repo/88db7375-12d1-4935-bedd-902e9d432d5a/0/FF7F57218FD61F433A0C56952A393F8F52BD8926.mft File: FF7F57218FD61F433A0C56952A393F8F52BD8926.mft (raw, json) Hash identifier: /5pdPs68wy4P5Da6LY7vUWU0qZwx+Sxr/s3gu7HNpbQ= Subject key identifier: E5:49:22:E8:B6:8D:69:25:FD:2F:37:9C:BE:95:4B:0A:ED:00:38:C3 Authority key identifier: FF:7F:57:21:8F:D6:1F:43:3A:0C:56:95:2A:39:3F:8F:52:BD:89:26 Certificate issuer: /CN=FF7F57218FD61F433A0C56952A393F8F52BD8926 Certificate serial: 06051A8327F13D665754D80E353367A98B3FFBC9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF7F57218FD61F433A0C56952A393F8F52BD8926.cer Subject info access: rsync://repo-rpki.idnic.net/repo/88db7375-12d1-4935-bedd-902e9d432d5a/0/FF7F57218FD61F433A0C56952A393F8F52BD8926.mft Manifest number: 023E Signing time: Sun 01 Mar 2026 11:10:23 +0000 Manifest this update: Sun 01 Mar 2026 11:05:23 +0000 Manifest next update: Wed 04 Mar 2026 16:08:23 +0000 Files and hashes: 1: FF7F57218FD61F433A0C56952A393F8F52BD8926.crl (hash: IsCVTKNvZpngfBzf2M4ni/NSsYA/2zdD+4VmTN1Qa3U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/88db7375-12d1-4935-bedd-902e9d432d5a/0/FF7F57218FD61F433A0C56952A393F8F52BD8926.crl rsync://repo-rpki.idnic.net/repo/88db7375-12d1-4935-bedd-902e9d432d5a/0/FF7F57218FD61F433A0C56952A393F8F52BD8926.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF7F57218FD61F433A0C56952A393F8F52BD8926.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 16:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:05:1a:83:27:f1:3d:66:57:54:d8:0e:35:33:67:a9:8b:3f:fb:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF7F57218FD61F433A0C56952A393F8F52BD8926 Validity Not Before: Mar 1 11:05:23 2026 GMT Not After : Mar 4 16:08:23 2026 GMT Subject: CN=E54922E8B68D6925FD2F379CBE954B0AED0038C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5e:90:39:43:ee:25:ff:80:44:10:b3:a4:74: f8:27:dc:36:03:9a:a7:71:49:a6:63:4f:21:92:92: 03:dc:2b:90:13:b9:a1:74:d5:1f:ef:6d:51:03:f8: 63:b2:95:2a:c4:1b:4b:fd:2b:57:42:52:be:57:03: aa:19:f5:13:e2:ff:9d:ea:3c:fb:df:83:f1:66:7c: 48:b5:dd:5c:2a:87:a3:79:25:47:b2:7a:62:bd:a9: f0:00:74:35:68:7c:7e:70:4e:6c:de:48:d5:c1:36: a0:a7:03:86:67:35:af:b9:97:27:a1:a1:3b:80:6e: b6:9c:7f:db:8a:95:85:af:79:76:1f:2e:b5:9f:49: 9d:c8:d7:f5:65:a9:b9:45:ca:cf:a2:1a:ee:0f:38: c3:ff:de:37:c3:fb:66:d8:a0:c0:a3:3a:bc:b0:db: 9a:f4:9c:b8:d6:22:d6:33:fb:f1:d9:af:14:0e:54: 7d:26:36:34:2b:57:0f:15:a4:c5:f1:31:dc:07:f6: 9b:45:53:e3:b4:5d:fe:f9:da:b3:3d:c4:18:50:01: a7:2c:c7:b0:d3:0f:ce:3d:fa:7e:8a:c6:d2:7e:42: e7:bc:d1:18:d5:82:62:e5:aa:2f:a6:d7:36:66:1d: b6:27:48:87:c7:fc:a7:34:5b:e3:a7:97:c5:ad:7c: 49:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:49:22:E8:B6:8D:69:25:FD:2F:37:9C:BE:95:4B:0A:ED:00:38:C3 X509v3 Authority Key Identifier: keyid:FF:7F:57:21:8F:D6:1F:43:3A:0C:56:95:2A:39:3F:8F:52:BD:89:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/88db7375-12d1-4935-bedd-902e9d432d5a/0/FF7F57218FD61F433A0C56952A393F8F52BD8926.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF7F57218FD61F433A0C56952A393F8F52BD8926.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/88db7375-12d1-4935-bedd-902e9d432d5a/0/FF7F57218FD61F433A0C56952A393F8F52BD8926.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:6c:b3:ba:55:7f:49:ce:ba:f6:1f:d0:bc:2c:9b:c0:68:93: 8f:e7:d4:41:73:2e:2f:7b:82:f1:b9:4b:67:35:86:96:45:56: d4:91:63:df:3b:30:47:11:8f:58:20:9e:db:b5:7a:11:c0:21: 49:06:ed:2b:33:aa:d4:4f:b8:ed:a2:e5:72:c9:da:85:28:0d: 28:02:d8:e5:77:f2:86:ea:fb:3a:cd:33:bb:52:a5:16:d9:00: 3e:a0:b7:cd:b2:ce:a3:e7:3e:22:17:60:a6:f0:e0:1a:8d:1f: 5a:02:72:73:24:5c:35:99:74:ac:02:62:ca:56:05:f6:c3:03: 73:78:5f:f2:3b:2e:12:e9:8d:d4:e8:78:75:2f:4c:78:cf:4e: e4:5f:51:94:17:c7:ca:01:b7:12:c8:31:f8:6c:99:68:83:34: fe:a5:88:79:32:d5:47:ae:8a:1d:83:5b:ab:c8:fa:e8:e4:52: 46:9c:8e:b4:3e:bd:69:ce:08:f3:73:d7:28:2e:7d:4c:42:5b: bb:f3:e7:ea:1d:8e:42:43:24:56:ff:c7:68:af:e8:2b:40:c3: 1e:21:48:68:10:c6:bb:21:d2:cf:f7:01:36:69:0c:0c:e1:a2: 48:a9:f7:c5:a6:49:1a:fb:40:7a:53:bc:8b:77:35:2d:80:37: 97:b3:16:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBgUagyfxPWZXVNgONTNnqYs/+8kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY3RjU3MjE4RkQ2MUY0MzNBMEM1Njk1MkEzOTNGOEY1 MkJEODkyNjAeFw0yNjAzMDExMTA1MjNaFw0yNjAzMDQxNjA4MjNaMDMxMTAvBgNV BAMTKEU1NDkyMkU4QjY4RDY5MjVGRDJGMzc5Q0JFOTU0QjBBRUQwMDM4QzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5XpA5Q+4l/4BEELOkdPgn3DYD mqdxSaZjTyGSkgPcK5ATuaF01R/vbVED+GOylSrEG0v9K1dCUr5XA6oZ9RPi/53q PPvfg/FmfEi13Vwqh6N5JUeyemK9qfAAdDVofH5wTmzeSNXBNqCnA4ZnNa+5lyeh oTuAbracf9uKlYWveXYfLrWfSZ3I1/VlqblFys+iGu4POMP/3jfD+2bYoMCjOryw 25r0nLjWItYz+/HZrxQOVH0mNjQrVw8VpMXxMdwH9ptFU+O0Xf752rM9xBhQAacs x7DTD849+n6KxtJ+Que80RjVgmLlqi+m1zZmHbYnSIfH/Kc0W+Onl8WtfElZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5Uki6LaNaSX9LzecvpVLCu0AOMMwHwYDVR0j BBgwFoAU/39XIY/WH0M6DFaVKjk/j1K9iSYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OGRiNzM3NS0xMmQxLTQ5MzUtYmVkZC05MDJlOWQ0MzJkNWEvMC9GRjdGNTcyMThG RDYxRjQzM0EwQzU2OTUyQTM5M0Y4RjUyQkQ4OTI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkY3RjU3MjE4RkQ2MUY0MzNBMEM1Njk1MkEzOTNGOEY1MkJE ODkyNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODhkYjczNzUtMTJkMS00OTM1LWJl ZGQtOTAyZTlkNDMyZDVhLzAvRkY3RjU3MjE4RkQ2MUY0MzNBMEM1Njk1MkEzOTNG OEY1MkJEODkyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA1ss7pVf0nOuvYf0Lwsm8Bok4/n1EFzLi97 gvG5S2c1hpZFVtSRY987MEcRj1ggntu1ehHAIUkG7SszqtRPuO2i5XLJ2oUoDSgC 2OV38obq+zrNM7tSpRbZAD6gt82yzqPnPiIXYKbw4BqNH1oCcnMkXDWZdKwCYspW BfbDA3N4X/I7LhLpjdToeHUvTHjPTuRfUZQXx8oBtxLIMfhsmWiDNP6liHky1Ueu ih2DW6vI+ujkUkacjrQ+vWnOCPNz1ygufUxCW7vz5+odjkJDJFb/x2iv6CtAwx4h SGgQxrsh0s/3ATZpDAzhokip98WmSRr7QHpTvIt3NS2AN5ezFgI= -----END CERTIFICATE-----Generated at Mon Mar 2 04:37:11 2026 by rpki-client