$ rpki-client -vvf repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.mft File: 1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.mft (raw, json) Hash identifier: qzmCXnaIRZevDiL0GUIVVYwhNn4tGCcQDCFXYnZUKtA= Subject key identifier: FF:2A:DF:5A:30:42:25:B7:7F:D7:60:C2:4B:95:69:6B:F3:34:AB:9A Authority key identifier: 1F:D7:CE:EC:69:DE:A7:83:83:83:31:7F:FB:0D:4A:10:7A:F4:57:2A Certificate issuer: /CN=1FD7CEEC69DEA7838383317FFB0D4A107AF4572A Certificate serial: 08298716C9A09FE07C81F2E9F00AC5D39C66C729 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.mft Manifest number: 04C4 Signing time: Mon 02 Mar 2026 01:32:31 +0000 Manifest this update: Mon 02 Mar 2026 01:27:31 +0000 Manifest next update: Thu 05 Mar 2026 08:39:31 +0000 Files and hashes: 1: 3130332e3232352e3137302e302f32342d3234203d3e203436303437.roa (hash: Puzw6btCdPQ2KOCDFFaL2opEFaU1YVpimShuXfVUo3Y=) 2: 3130332e3139352e3136382e302f32332d3234203d3e203436303437.roa (hash: 5tvhyREjxfe/DJlZ9wBpFrEXCdu8eQWjVSLlHduznyg=) 3: 1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.crl (hash: Rwnlr7LBJwCkdEWNOSH6FbyPmOVMBxw5UlLwC1k/2QQ=) 4: 3230322e392e36392e302f32342d3234203d3e203436303437.roa (hash: 52WZwGRv+Wo5hswd/uRmdKS5RbkBGKSp3qw8Zcv5xAA=) 5: 323430353a316463303a3a2f33322d3438203d3e203436303437.roa (hash: ygjycUROLuuycgQmlGFdBviRnTHP36unF91EN7REwu4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.crl rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:29:87:16:c9:a0:9f:e0:7c:81:f2:e9:f0:0a:c5:d3:9c:66:c7:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FD7CEEC69DEA7838383317FFB0D4A107AF4572A Validity Not Before: Mar 2 01:27:31 2026 GMT Not After : Mar 5 08:39:31 2026 GMT Subject: CN=FF2ADF5A304225B77FD760C24B95696BF334AB9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:84:4c:4d:a5:5e:61:d1:c5:96:60:a1:38:b4: 65:2d:9e:63:ce:6c:f6:98:16:f7:04:5e:f4:9f:a4: f1:71:f8:78:59:bf:12:7f:85:d7:64:05:02:18:9b: 7a:fe:a2:cf:17:31:63:22:0d:0c:8f:ca:ff:3f:9e: 7a:70:da:2b:f8:79:20:19:65:e5:c1:a7:74:55:d6: 40:28:9a:f6:2b:ac:a0:89:b1:2b:35:67:21:33:72: ba:87:c3:d2:e6:c6:ef:fd:9e:16:62:66:65:48:21: 29:30:8b:98:50:46:49:7f:db:e9:c6:28:8b:df:e2: 28:6f:a7:e1:ad:7d:5b:d6:71:99:46:2b:7d:38:9d: 85:de:5c:57:57:f0:4e:55:c5:8e:d7:0c:f2:b4:44: 20:65:fd:54:91:83:0c:a2:e4:d2:24:e5:1f:e3:a1: 45:7a:e7:93:d8:56:2f:64:2b:4b:4b:9c:b1:85:8e: af:e4:23:de:14:d2:df:af:d9:6e:4e:f5:19:7b:54: 98:40:7b:41:db:b0:52:30:1d:c8:94:07:e1:8e:92: 9c:65:e1:95:23:82:c8:ba:50:53:16:84:4f:f9:ab: 4f:83:d2:89:f2:2a:f3:60:d7:14:d5:9e:0c:9a:15: bd:8b:a2:d9:4e:f1:b9:f7:59:09:45:d5:3c:9b:5b: 0d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:2A:DF:5A:30:42:25:B7:7F:D7:60:C2:4B:95:69:6B:F3:34:AB:9A X509v3 Authority Key Identifier: keyid:1F:D7:CE:EC:69:DE:A7:83:83:83:31:7F:FB:0D:4A:10:7A:F4:57:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:47:c0:6b:e3:03:4b:7f:49:a4:71:93:47:29:6e:86:eb:f5: 16:22:1f:7c:45:65:d1:ed:79:eb:90:c8:4e:1d:99:8d:59:63: 19:34:f2:5b:8d:2e:e2:ae:15:24:20:8a:02:d8:5f:d0:0b:07: 31:01:68:bc:b0:0d:18:b0:33:c4:8b:97:16:0b:fb:aa:a1:76: 81:76:08:5c:59:18:0d:f2:44:63:57:a4:63:1d:01:05:3a:b5: 76:51:8b:94:23:56:ec:2c:61:0c:39:a4:07:3a:7a:06:c7:07: 5f:4a:40:39:a9:04:48:a6:ba:da:e9:52:88:d7:41:78:3f:74: 05:44:7a:8a:af:07:bd:90:ed:73:8e:81:6a:af:69:15:00:0a: ef:49:85:63:3e:89:2b:3c:a8:28:b3:20:cd:29:cc:f2:aa:b3: b5:ad:7a:64:49:2f:5e:53:3a:dd:db:7f:12:79:a1:d8:e0:09: e0:1e:2c:d7:e9:09:26:8b:75:84:83:ae:67:8a:18:a5:74:e6: aa:30:bb:27:20:70:2c:e0:c4:4b:59:6e:89:2c:a4:65:0d:ce: 90:15:85:1e:70:76:2b:42:3b:da:81:2e:d4:3b:36:fa:cb:4e: d2:34:cb:1a:0c:12:82:89:c2:de:ed:79:f1:19:af:62:5d:67: 11:ab:89:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCCmHFsmgn+B8gfLp8ArF05xmxykwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZEN0NFRUM2OURFQTc4MzgzODMzMTdGRkIwRDRBMTA3 QUY0NTcyQTAeFw0yNjAzMDIwMTI3MzFaFw0yNjAzMDUwODM5MzFaMDMxMTAvBgNV BAMTKEZGMkFERjVBMzA0MjI1Qjc3RkQ3NjBDMjRCOTU2OTZCRjMzNEFCOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqhExNpV5h0cWWYKE4tGUtnmPO bPaYFvcEXvSfpPFx+HhZvxJ/hddkBQIYm3r+os8XMWMiDQyPyv8/nnpw2iv4eSAZ ZeXBp3RV1kAomvYrrKCJsSs1ZyEzcrqHw9Lmxu/9nhZiZmVIISkwi5hQRkl/2+nG KIvf4ihvp+GtfVvWcZlGK304nYXeXFdX8E5VxY7XDPK0RCBl/VSRgwyi5NIk5R/j oUV655PYVi9kK0tLnLGFjq/kI94U0t+v2W5O9Rl7VJhAe0HbsFIwHciUB+GOkpxl 4ZUjgsi6UFMWhE/5q0+D0onyKvNg1xTVngyaFb2LotlO8bn3WQlF1TybWw1/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/yrfWjBCJbd/12DCS5Vpa/M0q5owHwYDVR0j BBgwFoAUH9fO7Gnep4ODgzF/+w1KEHr0VyowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZTEyOWM5NC1jNWE2LTRkZDQtYjM0YS03ZTM1M2RlNmNlODEvMC8xRkQ3Q0VFQzY5 REVBNzgzODM4MzMxN0ZGQjBENEExMDdBRjQ1NzJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUZEN0NFRUM2OURFQTc4MzgzODMzMTdGRkIwRDRBMTA3QUY0 NTcyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWUxMjljOTQtYzVhNi00ZGQ0LWIz NGEtN2UzNTNkZTZjZTgxLzAvMUZEN0NFRUM2OURFQTc4MzgzODMzMTdGRkIwRDRB MTA3QUY0NTcyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALRHwGvjA0t/SaRxk0cpbobr9RYiH3xFZdHt eeuQyE4dmY1ZYxk08luNLuKuFSQgigLYX9ALBzEBaLywDRiwM8SLlxYL+6qhdoF2 CFxZGA3yRGNXpGMdAQU6tXZRi5QjVuwsYQw5pAc6egbHB19KQDmpBEimutrpUojX QXg/dAVEeoqvB72Q7XOOgWqvaRUACu9JhWM+iSs8qCizIM0pzPKqs7WtemRJL15T Ot3bfxJ5odjgCeAeLNfpCSaLdYSDrmeKGKV05qowuycgcCzgxEtZbokspGUNzpAV hR5wditCO9qBLtQ7NvrLTtI0yxoMEoKJwt7tefEZr2JdZxGriXI= -----END CERTIFICATE-----Generated at Mon Mar 2 12:43:01 2026 by rpki-client