$ rpki-client -vvf repo-rpki.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/FF1246B1AF5B158EA26E75654D7B7A6DED645787.mft File: FF1246B1AF5B158EA26E75654D7B7A6DED645787.mft (raw, json) Hash identifier: 18bPDdqyGc94tHABa7sLxgbaSpTgrKe85OXXPiVlHgA= Subject key identifier: 42:AC:DB:53:20:9F:BF:D3:14:B2:50:9C:32:37:A8:4F:86:D1:42:AB Authority key identifier: FF:12:46:B1:AF:5B:15:8E:A2:6E:75:65:4D:7B:7A:6D:ED:64:57:87 Certificate issuer: /CN=FF1246B1AF5B158EA26E75654D7B7A6DED645787 Certificate serial: 4CC8E43175F80E5E9AE943D94ECDA2C6DADA31D5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF1246B1AF5B158EA26E75654D7B7A6DED645787.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/FF1246B1AF5B158EA26E75654D7B7A6DED645787.mft Manifest number: 0125 Signing time: Sun 01 Mar 2026 06:03:17 +0000 Manifest this update: Sun 01 Mar 2026 05:58:17 +0000 Manifest next update: Wed 04 Mar 2026 07:02:17 +0000 Files and hashes: 1: FF1246B1AF5B158EA26E75654D7B7A6DED645787.crl (hash: d9riIC9iRC9d+5l3KZfPnjidcjM5WVs0YsR59O5mfz4=) 2: 3130332e3136312e3130382e302f32342d3234203d3e20313431393132.roa (hash: uvIhcJu4c3esMkst4+88cWSmjSO0QaYXOH2ffUAXAVQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/FF1246B1AF5B158EA26E75654D7B7A6DED645787.crl rsync://repo-rpki.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/FF1246B1AF5B158EA26E75654D7B7A6DED645787.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF1246B1AF5B158EA26E75654D7B7A6DED645787.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 07:02:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:c8:e4:31:75:f8:0e:5e:9a:e9:43:d9:4e:cd:a2:c6:da:da:31:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF1246B1AF5B158EA26E75654D7B7A6DED645787 Validity Not Before: Mar 1 05:58:17 2026 GMT Not After : Mar 4 07:02:17 2026 GMT Subject: CN=42ACDB53209FBFD314B2509C3237A84F86D142AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:89:cc:83:dc:fc:c3:6c:7a:aa:36:38:c6:97: 64:4a:8c:e6:d9:65:ad:49:65:30:a2:51:7f:97:84: 7f:46:de:1c:91:e7:1c:cc:1b:b4:5d:f0:e3:94:9c: 1a:aa:de:a8:17:30:da:82:bc:bc:9a:f9:aa:96:89: 5e:55:f6:2c:ae:76:1b:cd:6d:51:cc:44:ff:83:58: ff:71:54:4f:8b:58:0e:eb:36:34:b1:95:ff:e2:1f: eb:a2:e2:9a:58:ad:75:26:8d:18:0a:25:19:72:42: ac:c0:a7:21:4f:82:c4:a6:e1:92:67:da:1c:e1:1e: 07:40:02:c7:69:b3:7c:c1:98:69:4a:f0:da:d4:96: 50:97:bd:c4:3d:c8:6e:0b:6a:aa:f8:8b:91:84:6b: 66:2b:2d:ff:03:68:31:a9:2a:d5:69:9d:bf:fc:b0: b1:7f:4e:ad:c1:f3:67:5d:6f:24:fa:10:63:f7:72: 15:74:a3:7f:6f:1e:88:fc:4f:82:8b:9a:b9:1b:31: bb:d6:cc:29:8e:06:12:2d:f7:16:73:6e:28:00:f8: fe:0f:8d:20:5b:40:cf:23:ab:28:0c:22:99:28:bb: 52:20:94:4e:89:80:7b:08:2e:12:4c:ba:30:ac:1d: ac:4f:87:0e:da:7f:39:8f:e0:b6:b7:1c:39:7f:c1: 98:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:AC:DB:53:20:9F:BF:D3:14:B2:50:9C:32:37:A8:4F:86:D1:42:AB X509v3 Authority Key Identifier: keyid:FF:12:46:B1:AF:5B:15:8E:A2:6E:75:65:4D:7B:7A:6D:ED:64:57:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/FF1246B1AF5B158EA26E75654D7B7A6DED645787.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF1246B1AF5B158EA26E75654D7B7A6DED645787.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/FF1246B1AF5B158EA26E75654D7B7A6DED645787.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:ef:0d:40:ac:d5:17:dd:97:71:24:7a:9c:fb:92:91:74:32: ef:83:19:1f:b3:2b:62:3e:13:15:35:47:f3:1d:da:fd:45:03: ff:54:72:d6:5c:a9:cc:39:ca:18:61:9a:c3:0d:f8:c3:f7:1b: 69:d2:2b:d8:9f:7b:3a:dd:9f:41:f2:95:1a:07:fe:05:fc:e3: 0e:05:e4:5c:61:99:82:8b:ce:dc:e0:15:c3:04:e6:b8:6d:5f: c3:85:e6:89:98:4d:2d:d7:cf:17:ca:2d:d5:80:6b:fd:2d:89: 8f:dc:ad:21:c6:9f:ba:32:9b:74:ec:1b:d4:26:de:40:bf:51: 71:f8:26:ab:16:56:1d:47:7b:cc:e2:6f:e2:e3:76:83:84:36: 29:bc:c3:db:95:a5:81:d9:2f:ee:3f:f4:b7:8d:09:ca:5b:10: 8d:09:36:6c:7a:15:e4:bf:36:01:0c:d3:aa:95:7d:37:75:b1: 40:a1:d6:72:80:c6:ec:5f:3d:d9:85:41:32:04:fb:18:8d:16: 3b:c0:32:9f:83:cf:c3:28:4c:72:83:62:c6:49:3d:1a:68:19: 95:4e:43:d0:00:d1:4e:42:20:34:20:4c:7f:91:57:28:e7:b6: 6d:38:08:32:73:51:62:c2:2f:46:95:bc:8e:75:87:73:b2:02: 56:52:7d:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTMjkMXX4Dl6a6UPZTs2ixtraMdUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkYxMjQ2QjFBRjVCMTU4RUEyNkU3NTY1NEQ3QjdBNkRF RDY0NTc4NzAeFw0yNjAzMDEwNTU4MTdaFw0yNjAzMDQwNzAyMTdaMDMxMTAvBgNV BAMTKDQyQUNEQjUzMjA5RkJGRDMxNEIyNTA5QzMyMzdBODRGODZEMTQyQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyicyD3PzDbHqqNjjGl2RKjObZ Za1JZTCiUX+XhH9G3hyR5xzMG7Rd8OOUnBqq3qgXMNqCvLya+aqWiV5V9iyudhvN bVHMRP+DWP9xVE+LWA7rNjSxlf/iH+ui4ppYrXUmjRgKJRlyQqzApyFPgsSm4ZJn 2hzhHgdAAsdps3zBmGlK8NrUllCXvcQ9yG4Laqr4i5GEa2YrLf8DaDGpKtVpnb/8 sLF/Tq3B82ddbyT6EGP3chV0o39vHoj8T4KLmrkbMbvWzCmOBhIt9xZzbigA+P4P jSBbQM8jqygMIpkou1IglE6JgHsILhJMujCsHaxPhw7afzmP4La3HDl/wZjRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQqzbUyCfv9MUslCcMjeoT4bRQqswHwYDVR0j BBgwFoAU/xJGsa9bFY6ibnVlTXt6be1kV4cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ODlhMDY2MS0zMWVlLTQ5YTItYWU5Zi1mNmQ1NzNhMTdkZjcvMC9GRjEyNDZCMUFG NUIxNThFQTI2RTc1NjU0RDdCN0E2REVENjQ1Nzg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkYxMjQ2QjFBRjVCMTU4RUEyNkU3NTY1NEQ3QjdBNkRFRDY0 NTc4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTg5YTA2NjEtMzFlZS00OWEyLWFl OWYtZjZkNTczYTE3ZGY3LzAvRkYxMjQ2QjFBRjVCMTU4RUEyNkU3NTY1NEQ3QjdB NkRFRDY0NTc4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADfvDUCs1Rfdl3Ekepz7kpF0Mu+DGR+zK2I+ ExU1R/Md2v1FA/9UctZcqcw5yhhhmsMN+MP3G2nSK9ifezrdn0HylRoH/gX84w4F 5FxhmYKLztzgFcME5rhtX8OF5omYTS3XzxfKLdWAa/0tiY/crSHGn7oym3TsG9Qm 3kC/UXH4JqsWVh1He8zib+LjdoOENim8w9uVpYHZL+4/9LeNCcpbEI0JNmx6FeS/ NgEM06qVfTd1sUCh1nKAxuxfPdmFQTIE+xiNFjvAMp+Dz8MoTHKDYsZJPRpoGZVO Q9AA0U5CIDQgTH+RVyjntm04CDJzUWLCL0aVvI51h3OyAlZSfYM= -----END CERTIFICATE-----Generated at Mon Mar 2 16:52:48 2026 by rpki-client