$ rpki-client -vvf repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.mft File: FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.mft (raw, json) Hash identifier: ZRKBHks37eT8+AzOZGg/bhaAe+b7QsyhnT2Fn7in+R0= Subject key identifier: AD:9E:CC:2F:69:5F:78:DD:31:A3:A7:02:25:84:21:B1:79:6F:7C:86 Authority key identifier: FF:89:F2:3B:CB:C4:26:35:E9:7A:E1:5A:7F:B6:9E:1E:09:A9:7D:AF Certificate issuer: /CN=FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF Certificate serial: 057FBA709DF6386100EA36FBB667D569508EA6DC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.mft Manifest number: 02E4 Signing time: Sat 28 Feb 2026 21:12:28 +0000 Manifest this update: Sat 28 Feb 2026 21:07:28 +0000 Manifest next update: Wed 04 Mar 2026 06:45:28 +0000 Files and hashes: 1: FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.crl (hash: LrU0R9b62aBqTbCnsoki06W8aE2vZPOItrl/LdYFW2w=) 2: 3130332e3136332e3138342e302f32342d3234203d3e20313432333636.roa (hash: siPS5QoYum/BXEiNROt4IMRxgn1AB6K77rmnuo2DlKI=) 3: 3130332e3136332e3138352e302f32342d3234203d3e20313432333636.roa (hash: pdL/jDmC/bRYeiHS8cnl+uvo57Pja48iQZSIZZK07no=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.crl rsync://repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 06:45:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:7f:ba:70:9d:f6:38:61:00:ea:36:fb:b6:67:d5:69:50:8e:a6:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF Validity Not Before: Feb 28 21:07:28 2026 GMT Not After : Mar 4 06:45:28 2026 GMT Subject: CN=AD9ECC2F695F78DD31A3A702258421B1796F7C86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:61:b3:45:b3:eb:eb:01:fb:5a:a0:0e:67:9d: 32:5f:df:8c:10:6a:41:8b:3c:3f:86:ea:83:81:67: 5b:d5:d2:33:62:d8:91:16:c2:ba:91:8c:5e:cb:44: cd:04:17:f3:18:c6:13:8d:84:1b:ec:9e:80:75:67: 30:63:76:e0:84:05:39:9f:9f:01:7d:6c:2c:15:b4: fc:f3:57:53:55:81:29:b6:90:33:06:85:0d:85:9c: 51:44:f7:d1:c5:a7:ec:fc:94:94:d4:7a:95:49:70: 00:d2:cc:4f:27:fb:98:55:6f:be:da:81:c7:a0:31: 6f:04:e7:b4:73:bd:36:29:95:b2:66:c0:96:d5:23: a0:92:90:85:1b:11:99:c8:e1:c8:bb:45:f1:51:14: 18:2f:9a:38:3b:f1:f5:d8:20:9a:e3:be:27:72:91: 09:2b:d2:c8:15:0a:81:a8:27:ec:be:3c:c8:fe:fe: 87:a3:8a:67:40:fb:a9:29:f2:c9:99:39:7a:ea:72: b3:4a:c4:74:c1:c4:9f:42:c9:00:e5:9a:cb:a3:9a: 86:60:3e:ef:f0:9c:dc:f4:4d:93:02:20:4d:d1:cc: 6c:0e:6e:a0:9a:e8:c2:7c:01:28:a9:0b:1d:9e:68: c1:a3:03:eb:54:6f:66:a3:83:e4:e5:6b:e0:90:2c: 07:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:9E:CC:2F:69:5F:78:DD:31:A3:A7:02:25:84:21:B1:79:6F:7C:86 X509v3 Authority Key Identifier: keyid:FF:89:F2:3B:CB:C4:26:35:E9:7A:E1:5A:7F:B6:9E:1E:09:A9:7D:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:54:cc:26:69:50:8b:27:f4:2a:c7:7c:1f:21:0d:e4:fa:60: ac:1a:0e:ac:67:e6:aa:a7:01:b3:c3:cd:9a:b3:33:c7:b9:7a: d9:22:0c:55:c2:3d:dd:14:73:8c:e1:2a:f6:d2:d7:5f:27:89: 64:02:fd:1b:8d:ec:57:7f:9e:f3:83:48:2b:9c:80:a2:90:7c: 0b:6e:bc:c4:71:a4:78:7c:69:0a:33:7f:c0:5e:d7:99:01:06: 82:0b:af:ab:f4:fc:b8:0b:6f:29:cf:df:ea:d0:1e:cb:0c:75: 85:01:00:ec:1f:94:96:ba:33:57:1f:c8:e9:e2:28:ef:52:d2: a6:a9:16:d9:f7:23:96:30:8e:14:bc:f2:53:32:f5:7b:ab:12: 90:82:4e:7d:cb:c1:50:e8:92:13:02:26:34:d7:4d:de:ff:c4: 4d:be:69:b3:75:60:ee:87:80:f6:0c:9f:fd:b0:ea:5c:26:14: 56:11:3c:5f:47:40:fa:fb:01:ca:a3:db:f6:d9:0f:d6:c3:f5: 08:00:82:d5:53:ad:23:83:0d:6f:99:c8:76:51:00:fe:42:cf: 96:07:e6:7c:c2:60:57:e1:60:3b:ad:a9:6c:46:e3:82:3f:c8: 16:26:cf:37:5c:70:50:d0:7a:03:99:1a:95:62:80:4c:c3:33: 1d:0b:b7:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBX+6cJ32OGEA6jb7tmfVaVCOptwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY4OUYyM0JDQkM0MjYzNUU5N0FFMTVBN0ZCNjlFMUUw OUE5N0RBRjAeFw0yNjAyMjgyMTA3MjhaFw0yNjAzMDQwNjQ1MjhaMDMxMTAvBgNV BAMTKEFEOUVDQzJGNjk1Rjc4REQzMUEzQTcwMjI1ODQyMUIxNzk2RjdDODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBYbNFs+vrAftaoA5nnTJf34wQ akGLPD+G6oOBZ1vV0jNi2JEWwrqRjF7LRM0EF/MYxhONhBvsnoB1ZzBjduCEBTmf nwF9bCwVtPzzV1NVgSm2kDMGhQ2FnFFE99HFp+z8lJTUepVJcADSzE8n+5hVb77a gcegMW8E57RzvTYplbJmwJbVI6CSkIUbEZnI4ci7RfFRFBgvmjg78fXYIJrjvidy kQkr0sgVCoGoJ+y+PMj+/oejimdA+6kp8smZOXrqcrNKxHTBxJ9CyQDlmsujmoZg Pu/wnNz0TZMCIE3RzGwObqCa6MJ8ASipCx2eaMGjA+tUb2ajg+Tla+CQLAfxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrZ7ML2lfeN0xo6cCJYQhsXlvfIYwHwYDVR0j BBgwFoAU/4nyO8vEJjXpeuFaf7aeHgmpfa8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YjE2NjRhNy1jOWM5LTQ0NDItODcxOC05YWVjOWUyMTEwYTIvMC9GRjg5RjIzQkNC QzQyNjM1RTk3QUUxNUE3RkI2OUUxRTA5QTk3REFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkY4OUYyM0JDQkM0MjYzNUU5N0FFMTVBN0ZCNjlFMUUwOUE5 N0RBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGIxNjY0YTctYzljOS00NDQyLTg3 MTgtOWFlYzllMjExMGEyLzAvRkY4OUYyM0JDQkM0MjYzNUU5N0FFMTVBN0ZCNjlF MUUwOUE5N0RBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFNUzCZpUIsn9CrHfB8hDeT6YKwaDqxn5qqn AbPDzZqzM8e5etkiDFXCPd0Uc4zhKvbS118niWQC/RuN7Fd/nvODSCucgKKQfAtu vMRxpHh8aQozf8Be15kBBoILr6v0/LgLbynP3+rQHssMdYUBAOwflJa6M1cfyOni KO9S0qapFtn3I5YwjhS88lMy9XurEpCCTn3LwVDokhMCJjTXTd7/xE2+abN1YO6H gPYMn/2w6lwmFFYRPF9HQPr7Acqj2/bZD9bD9QgAgtVTrSODDW+ZyHZRAP5Cz5YH 5nzCYFfhYDutqWxG44I/yBYmzzdccFDQegOZGpVigEzDMx0Lt3U= -----END CERTIFICATE-----Generated at Mon Mar 2 13:03:54 2026 by rpki-client