$ rpki-client -vvf repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.mft File: F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.mft (raw, json) Hash identifier: ygo+cpfM9l+GsmuauZz8xQAyoNGd3JGDH/ySkQLV7dc= Subject key identifier: 78:41:76:21:96:42:49:56:73:04:2D:05:2A:79:D4:33:CD:6F:C7:55 Authority key identifier: F5:58:D9:AA:4E:66:D7:B6:E4:CB:29:EC:87:79:53:D3:ED:6C:D7:66 Certificate issuer: /CN=F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766 Certificate serial: 5C60D56A09C5063C64A60D991FA672C65DC65C6A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.cer Subject info access: rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.mft Manifest number: 0328 Signing time: Sun 01 Mar 2026 07:20:04 +0000 Manifest this update: Sun 01 Mar 2026 07:15:04 +0000 Manifest next update: Wed 04 Mar 2026 17:55:04 +0000 Files and hashes: 1: F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.crl (hash: +7Jc2d6YGvFTJwduWutSToblb4b6HeRWGFQGtFg0Qgs=) 2: 3130332e3133322e3233372e302f32342d3234203d3e20313338313239.roa (hash: 4jYUGHzgqlt6RurnGux/NFBAQbNpobmY9uiPuWWXUgU=) 3: 3130332e3133322e3233362e302f32322d3234203d3e20313338313239.roa (hash: 2g7rbutz6JGpSI0ieoT3F+50As6HjTWRVSvDXVVxKnA=) 4: 3130332e3133322e3233392e302f32342d3234203d3e20313338313239.roa (hash: AevEhKshEQeFKNgoJ4MfmjtnuZlVYICKC2fhDAgNA8s=) 5: 323430343a343234303a3a2f33322d3438203d3e20313338313239.roa (hash: 9++yUwhwlSbkLR01RfXkFXxsjocjqNk14mv+oISczLY=) 6: 3130332e3133322e3233362e302f32342d3234203d3e20313338313239.roa (hash: UVuZpXFyrqhiOKN105Da6oazN9yog27beBkdQnj5+yc=) 7: 323430343a343234303a3133383a3a2f34382d3438203d3e20313338313239.roa (hash: nq4zy1af72x204AkF+u1PwnoA4FxaLfpw4t+rXKovzs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.crl rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 17:55:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:60:d5:6a:09:c5:06:3c:64:a6:0d:99:1f:a6:72:c6:5d:c6:5c:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766 Validity Not Before: Mar 1 07:15:04 2026 GMT Not After : Mar 4 17:55:04 2026 GMT Subject: CN=784176219642495673042D052A79D433CD6FC755 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:61:f6:c0:9a:f9:d0:5b:c2:5c:bd:a1:72:eb: 72:7c:1c:6d:60:39:74:59:cb:6a:5c:ff:2e:01:e0: dc:72:6c:67:a5:be:4c:ca:d1:9a:5f:d4:7f:db:cd: 82:e2:12:1e:9c:d7:7b:ae:cb:5e:af:a0:a0:04:8e: 2c:57:2c:0c:bd:97:b1:df:6d:51:a2:42:27:19:96: eb:da:1d:0a:33:30:d9:05:31:d9:c4:b8:b2:9f:9e: d8:17:cb:a7:4a:1f:9f:a1:34:3d:af:ed:9a:0f:12: 98:9e:61:c1:42:ed:5c:a9:7f:af:80:63:8c:3c:73: 60:fd:82:2a:75:fe:ae:ed:25:83:70:82:64:81:1e: 98:4a:37:28:01:a0:ed:1c:b5:c5:9d:75:87:41:48: 64:56:c7:56:6d:c5:6e:66:64:11:61:fc:57:4f:cc: 62:46:f4:09:71:6b:c5:aa:5b:67:76:40:77:7d:e7: 47:79:4a:07:ea:0c:e5:17:45:af:f0:46:cb:d8:c1: e4:b4:fa:9c:dd:2b:32:12:11:ec:a1:39:8f:c2:95: e2:f1:12:ef:63:fa:42:31:47:0f:31:03:93:6d:96: f5:0a:a0:3b:76:b6:4f:ed:30:f5:71:ca:43:3f:68: ea:62:b1:65:8f:96:a4:74:b9:14:cc:36:97:7b:25: b3:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:41:76:21:96:42:49:56:73:04:2D:05:2A:79:D4:33:CD:6F:C7:55 X509v3 Authority Key Identifier: keyid:F5:58:D9:AA:4E:66:D7:B6:E4:CB:29:EC:87:79:53:D3:ED:6C:D7:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:a7:13:a3:74:8b:09:8c:88:09:e4:3f:77:4e:9e:c9:83:9f: f7:cc:45:bc:d2:d0:44:a3:93:08:2b:ed:06:17:4a:81:b7:34: 1f:ed:1a:d4:09:d9:3a:3c:b4:47:65:25:45:6b:a0:e7:24:40: fa:10:43:28:57:5a:38:e7:ed:1c:80:48:f9:e3:62:66:19:37: fd:c6:44:ab:df:2f:5c:f6:5a:ac:d7:93:6e:1a:e0:18:7f:65: 4a:68:9f:14:0c:3f:14:63:a3:11:4d:b9:d9:c2:6c:74:00:d5: 59:2e:92:58:6c:bc:97:93:6d:07:9a:63:e4:7e:19:b0:bc:e6: df:bf:55:79:6d:88:92:ba:df:0e:6d:69:95:c0:f1:e9:52:d6: 50:5b:72:78:27:d5:55:07:49:e7:37:f0:15:4a:93:1a:05:bd: 3e:02:9b:3b:5d:7f:c1:4d:17:67:cb:80:2a:22:d1:8d:ad:ef: bb:82:f8:1c:a8:a2:7b:89:3d:2f:b7:dd:87:51:79:50:fe:eb: c6:4d:4b:65:bd:10:0f:95:2c:55:ca:48:b1:26:5a:c4:c6:44: 3f:52:0c:fe:7e:a4:7d:20:8c:b3:f8:b8:2b:f8:35:f0:23:17: 8c:28:70:09:8b:f7:23:f3:d7:51:2c:8b:59:26:64:4c:7c:7f: 0e:a2:e3:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXGDVagnFBjxkpg2ZH6Zyxl3GXGowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjU1OEQ5QUE0RTY2RDdCNkU0Q0IyOUVDODc3OTUzRDNF RDZDRDc2NjAeFw0yNjAzMDEwNzE1MDRaFw0yNjAzMDQxNzU1MDRaMDMxMTAvBgNV BAMTKDc4NDE3NjIxOTY0MjQ5NTY3MzA0MkQwNTJBNzlENDMzQ0Q2RkM3NTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvYfbAmvnQW8JcvaFy63J8HG1g OXRZy2pc/y4B4NxybGelvkzK0Zpf1H/bzYLiEh6c13uuy16voKAEjixXLAy9l7Hf bVGiQicZluvaHQozMNkFMdnEuLKfntgXy6dKH5+hND2v7ZoPEpieYcFC7Vypf6+A Y4w8c2D9gip1/q7tJYNwgmSBHphKNygBoO0ctcWddYdBSGRWx1ZtxW5mZBFh/FdP zGJG9Alxa8WqW2d2QHd950d5SgfqDOUXRa/wRsvYweS0+pzdKzISEeyhOY/CleLx Eu9j+kIxRw8xA5NtlvUKoDt2tk/tMPVxykM/aOpisWWPlqR0uRTMNpd7JbPFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeEF2IZZCSVZzBC0FKnnUM81vx1UwHwYDVR0j BBgwFoAU9VjZqk5m17bkyynsh3lT0+1s12YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NDljODY4MC1iZDBmLTRhNGYtOTk2ZC0yMTAyYTA1MzUzNzQvMC9GNTU4RDlBQTRF NjZEN0I2RTRDQjI5RUM4Nzc5NTNEM0VENkNENzY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjU1OEQ5QUE0RTY2RDdCNkU0Q0IyOUVDODc3OTUzRDNFRDZD RDc2Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTQ5Yzg2ODAtYmQwZi00YTRmLTk5 NmQtMjEwMmEwNTM1Mzc0LzAvRjU1OEQ5QUE0RTY2RDdCNkU0Q0IyOUVDODc3OTUz RDNFRDZDRDc2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALmnE6N0iwmMiAnkP3dOnsmDn/fMRbzS0ESj kwgr7QYXSoG3NB/tGtQJ2To8tEdlJUVroOckQPoQQyhXWjjn7RyASPnjYmYZN/3G RKvfL1z2WqzXk24a4Bh/ZUponxQMPxRjoxFNudnCbHQA1VkuklhsvJeTbQeaY+R+ GbC85t+/VXltiJK63w5taZXA8elS1lBbcngn1VUHSec38BVKkxoFvT4Cmztdf8FN F2fLgCoi0Y2t77uC+ByoonuJPS+33YdReVD+68ZNS2W9EA+VLFXKSLEmWsTGRD9S DP5+pH0gjLP4uCv4NfAjF4wocAmL9yPz11Esi1kmZEx8fw6i4wo= -----END CERTIFICATE-----Generated at Mon Mar 2 18:24:22 2026 by rpki-client