$ rpki-client -vvf repo-rpki.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.mft File: F9D638DDA6C754F5CF82A174AE82F94D51E5E326.mft (raw, json) Hash identifier: p7xhPTSAmQEUPtaQt3g5kkYOKGLHCLfvBanlVPcQnYQ= Subject key identifier: F8:95:2B:D9:30:C6:DC:0A:C5:40:89:75:20:AD:D6:CA:96:21:A4:2F Authority key identifier: F9:D6:38:DD:A6:C7:54:F5:CF:82:A1:74:AE:82:F9:4D:51:E5:E3:26 Certificate issuer: /CN=F9D638DDA6C754F5CF82A174AE82F94D51E5E326 Certificate serial: 555F07B146A61B8DA4F2C0D1D07AC20476B2D20A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.mft Manifest number: 03D1 Signing time: Sat 28 Feb 2026 18:21:25 +0000 Manifest this update: Sat 28 Feb 2026 18:16:25 +0000 Manifest next update: Wed 04 Mar 2026 00:12:25 +0000 Files and hashes: 1: F9D638DDA6C754F5CF82A174AE82F94D51E5E326.crl (hash: XZuO4WDysdq+KY+DBcrBc1flYujcPNbLnzIwW4d/G/8=) 2: 3130332e37362e3230342e302f32342d3234203d3e20313335343833.roa (hash: HnPdBvCCg8avKOKqlY6FjH1UWq2tAli++1G3pShzD84=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.crl rsync://repo-rpki.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 00:12:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:5f:07:b1:46:a6:1b:8d:a4:f2:c0:d1:d0:7a:c2:04:76:b2:d2:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9D638DDA6C754F5CF82A174AE82F94D51E5E326 Validity Not Before: Feb 28 18:16:25 2026 GMT Not After : Mar 4 00:12:25 2026 GMT Subject: CN=F8952BD930C6DC0AC540897520ADD6CA9621A42F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:8f:c4:87:2e:dd:7f:44:19:97:54:63:1b:ee: b9:8d:6e:54:b3:40:3a:00:a4:d4:63:07:10:11:56: 65:5b:90:2d:55:a4:79:37:bd:2a:81:a6:31:68:16: ba:c6:25:65:92:a5:dd:d8:37:99:d6:86:37:cd:fb: 1c:c1:31:6e:9a:61:c4:df:29:3f:ec:31:08:a1:6d: 5b:33:da:e6:1c:fe:c8:7f:66:c0:78:54:44:b5:ee: 2a:95:ad:94:4a:38:9a:a4:28:47:d2:fd:63:b4:93: 98:45:f1:75:6a:29:dc:d4:f9:91:a6:f2:17:cd:58: 0b:bf:f1:50:87:74:88:a3:85:03:52:f0:6a:27:2a: ab:fe:96:f4:b5:0d:a0:97:2c:a3:ae:43:15:4b:6a: 92:a9:36:2b:1c:e1:5f:4d:39:1c:4c:a1:84:b7:db: dd:ae:0c:7e:e2:aa:d1:dd:ac:1a:b2:91:cd:5d:92: 11:28:08:c7:3f:2f:4d:2a:f8:fe:db:dd:88:4b:21: 63:eb:75:be:e3:41:80:3e:f1:f0:9d:4a:93:ed:b1: 4c:05:6e:40:5f:15:75:e1:b5:4b:04:cb:95:3c:0e: ee:c5:47:a4:5a:fa:20:18:59:51:c2:0c:f9:92:f9: 3d:23:d7:a7:80:75:6d:53:ed:fe:38:23:98:27:14: a6:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:95:2B:D9:30:C6:DC:0A:C5:40:89:75:20:AD:D6:CA:96:21:A4:2F X509v3 Authority Key Identifier: keyid:F9:D6:38:DD:A6:C7:54:F5:CF:82:A1:74:AE:82:F9:4D:51:E5:E3:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:39:23:7d:16:9b:7a:87:3c:79:16:79:92:47:99:0e:bb:e8: 99:cf:39:bd:28:48:8e:51:8d:ec:ee:66:14:d9:ab:06:3c:77: 9c:e0:a6:3a:8c:b6:d1:d7:ff:43:e4:38:7f:ec:ec:36:3e:1b: 19:2a:ee:26:bd:70:80:6f:82:44:3c:de:ad:ed:17:56:b6:6f: 62:37:61:05:d0:b8:8a:be:5f:6b:11:43:3b:79:7a:0b:21:cd: 8b:21:38:89:0f:d6:7c:e6:a8:ef:17:33:37:ac:da:c5:a6:18: 81:d0:7e:06:56:ce:c3:b0:96:4b:e9:bf:43:78:70:9b:cb:de: c4:f7:99:7c:bd:4d:03:a4:e0:1a:e8:f1:5d:36:9b:9c:2a:5c: 29:a0:0e:3a:f6:29:2c:95:f4:f8:b8:50:e8:4b:c9:e5:e2:7b: c7:d6:56:ba:b0:f2:28:84:cc:44:84:99:ca:63:97:6a:2f:b8: 5e:8d:9f:bb:43:80:5f:bf:fd:4e:9a:4a:ba:29:19:23:ff:00: e7:0e:83:fa:5e:ef:9d:7e:4d:bd:57:a7:4a:b5:fc:0a:26:b9: f3:50:48:6e:ed:32:4b:a5:c9:e8:da:f0:5c:5e:29:7b:f9:d8: 47:e9:52:24:c5:63:e4:c9:5b:08:62:e0:57:26:2c:b4:20:2a: c7:9b:21:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVV8HsUamG42k8sDR0HrCBHay0gowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlENjM4RERBNkM3NTRGNUNGODJBMTc0QUU4MkY5NEQ1 MUU1RTMyNjAeFw0yNjAyMjgxODE2MjVaFw0yNjAzMDQwMDEyMjVaMDMxMTAvBgNV BAMTKEY4OTUyQkQ5MzBDNkRDMEFDNTQwODk3NTIwQURENkNBOTYyMUE0MkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdj8SHLt1/RBmXVGMb7rmNblSz QDoApNRjBxARVmVbkC1VpHk3vSqBpjFoFrrGJWWSpd3YN5nWhjfN+xzBMW6aYcTf KT/sMQihbVsz2uYc/sh/ZsB4VES17iqVrZRKOJqkKEfS/WO0k5hF8XVqKdzU+ZGm 8hfNWAu/8VCHdIijhQNS8GonKqv+lvS1DaCXLKOuQxVLapKpNisc4V9NORxMoYS3 292uDH7iqtHdrBqykc1dkhEoCMc/L00q+P7b3YhLIWPrdb7jQYA+8fCdSpPtsUwF bkBfFXXhtUsEy5U8Du7FR6Ra+iAYWVHCDPmS+T0j16eAdW1T7f44I5gnFKazAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+JUr2TDG3ArFQIl1IK3WypYhpC8wHwYDVR0j BBgwFoAU+dY43abHVPXPgqF0roL5TVHl4yYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NWE3M2QwNC0yMTRmLTQ2YjgtOTc0Ni02MmNkZTg1NTg4ZmEvMC9GOUQ2MzhEREE2 Qzc1NEY1Q0Y4MkExNzRBRTgyRjk0RDUxRTVFMzI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjlENjM4RERBNkM3NTRGNUNGODJBMTc0QUU4MkY5NEQ1MUU1 RTMyNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjVhNzNkMDQtMjE0Zi00NmI4LTk3 NDYtNjJjZGU4NTU4OGZhLzAvRjlENjM4RERBNkM3NTRGNUNGODJBMTc0QUU4MkY5 NEQ1MUU1RTMyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE05I30Wm3qHPHkWeZJHmQ676JnPOb0oSI5R jezuZhTZqwY8d5zgpjqMttHX/0PkOH/s7DY+Gxkq7ia9cIBvgkQ83q3tF1a2b2I3 YQXQuIq+X2sRQzt5egshzYshOIkP1nzmqO8XMzes2sWmGIHQfgZWzsOwlkvpv0N4 cJvL3sT3mXy9TQOk4Bro8V02m5wqXCmgDjr2KSyV9Pi4UOhLyeXie8fWVrqw8iiE zESEmcpjl2ovuF6Nn7tDgF+//U6aSropGSP/AOcOg/pe751+Tb1Xp0q1/AomufNQ SG7tMkulyeja8FxeKXv52EfpUiTFY+TJWwhi4FcmLLQgKsebIS8= -----END CERTIFICATE-----Generated at Mon Mar 2 18:32:58 2026 by rpki-client