$ rpki-client -vvf repo-rpki.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.mft File: F2441731A38F6F03ED8BFDB14F3CF89CED26A880.mft (raw, json) Hash identifier: WHXD8qY/ps7wYXQ2/v5qZP2TCpwBsRABrPVgbArX7Nw= Subject key identifier: 43:8F:64:18:7D:CD:AE:F9:09:6D:AD:E5:8B:30:AE:0E:22:F4:E4:19 Authority key identifier: F2:44:17:31:A3:8F:6F:03:ED:8B:FD:B1:4F:3C:F8:9C:ED:26:A8:80 Certificate issuer: /CN=F2441731A38F6F03ED8BFDB14F3CF89CED26A880 Certificate serial: 47793BEDB5CF482EAC9C10C26A2F782EAE8E23E1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.mft Manifest number: 0552 Signing time: Sun 01 Mar 2026 23:41:30 +0000 Manifest this update: Sun 01 Mar 2026 23:36:30 +0000 Manifest next update: Thu 05 Mar 2026 09:16:30 +0000 Files and hashes: 1: 3230322e39342e38332e302f32342d3234203d3e203535363732.roa (hash: XIFruI1ighCiBN1KxhqbA4Dl9kZx4Bi5WaQ0ju1y2JQ=) 2: F2441731A38F6F03ED8BFDB14F3CF89CED26A880.crl (hash: MAcNs1swk23sqweNMqpVRPzykU1oidxQ9Nf0nB1azVQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.crl rsync://repo-rpki.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:79:3b:ed:b5:cf:48:2e:ac:9c:10:c2:6a:2f:78:2e:ae:8e:23:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2441731A38F6F03ED8BFDB14F3CF89CED26A880 Validity Not Before: Mar 1 23:36:30 2026 GMT Not After : Mar 5 09:16:30 2026 GMT Subject: CN=438F64187DCDAEF9096DADE58B30AE0E22F4E419 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:37:0f:69:05:92:9b:87:44:8e:ef:b0:2b:36: 9c:7b:06:56:6a:6e:23:c4:ac:06:8d:13:f4:13:cf: af:bd:ca:30:19:6c:c0:c1:90:db:0b:28:a7:a0:7b: 1b:9c:2d:bd:8e:51:73:73:73:3b:58:f3:58:e0:7d: 45:e4:68:f2:f9:a8:07:53:5e:a7:11:da:82:e8:31: 19:17:04:d9:b2:c9:52:d6:b1:1c:e6:0f:15:07:72: c0:7d:44:c5:ab:42:47:66:61:9e:84:20:3a:03:f7: ae:fe:20:72:d0:26:d3:a3:95:30:f0:af:1c:9f:85: 70:f4:4a:40:80:18:b3:3a:7b:fb:2e:64:e9:65:0d: 70:13:5f:bb:d5:3a:9f:91:8b:b5:f9:2d:ae:1e:71: 84:2a:51:e3:f2:8f:ec:86:d4:41:4a:97:74:c1:33: d0:3c:d9:6f:05:c6:fb:10:1a:b1:69:f5:b0:0d:c4: e3:4e:f1:33:47:9e:9e:c7:4b:e2:bc:ee:ab:62:bf: 4d:50:b6:ba:dc:24:c8:e2:4c:8b:a7:41:15:e2:26: 43:6c:d4:48:20:f5:7f:54:29:54:90:ed:24:15:5f: 60:21:d8:89:af:c8:bb:c8:26:da:84:7c:ad:47:f9: 98:e2:21:e4:92:ad:6a:15:75:45:d2:ee:2f:b3:74: 21:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:8F:64:18:7D:CD:AE:F9:09:6D:AD:E5:8B:30:AE:0E:22:F4:E4:19 X509v3 Authority Key Identifier: keyid:F2:44:17:31:A3:8F:6F:03:ED:8B:FD:B1:4F:3C:F8:9C:ED:26:A8:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:4b:8c:6d:48:e8:85:e6:71:4f:98:95:94:81:31:54:0b:39: 04:cc:91:68:6f:93:38:e8:d3:77:a1:9f:74:f6:40:b3:2b:db: 36:8e:16:b9:bb:60:f6:ad:77:95:33:3f:98:be:74:1b:52:5c: f0:39:20:3a:65:34:f0:5a:31:51:e6:4d:31:ff:99:f7:de:e7: 0f:cb:45:3f:f6:06:5e:a7:d5:16:d6:4b:33:3f:0c:6a:2f:ef: 0a:8f:98:52:03:9d:51:39:64:23:35:78:97:d8:8c:92:04:2f: 97:9a:1d:c6:99:e5:43:a5:0f:98:a7:32:8b:63:12:f1:ae:a0: 7a:bd:fe:41:1c:28:fa:64:d1:e0:d8:c5:df:77:b4:0c:0f:51: da:c2:7b:de:55:c9:ce:b0:c6:cb:eb:5c:c8:2c:2d:43:fb:48: 6b:e4:9d:ef:21:da:ae:5c:3c:e5:03:11:e2:16:e1:6f:23:5c: 15:45:a0:d1:35:90:e3:51:44:e4:fb:74:b3:71:28:cb:2d:ae: 0c:32:ac:85:a9:c4:4a:8d:de:4f:07:b8:8b:b1:c4:16:1f:20: 80:e9:f3:ff:24:94:3a:87:7e:9c:e3:b8:23:62:90:4c:f6:1d: 9f:29:fe:13:c6:3b:cd:f3:05:d6:d3:4b:7b:8b:a8:ce:73:84: 9b:d4:6f:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR3k77bXPSC6snBDCai94Lq6OI+EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI0NDE3MzFBMzhGNkYwM0VEOEJGREIxNEYzQ0Y4OUNF RDI2QTg4MDAeFw0yNjAzMDEyMzM2MzBaFw0yNjAzMDUwOTE2MzBaMDMxMTAvBgNV BAMTKDQzOEY2NDE4N0RDREFFRjkwOTZEQURFNThCMzBBRTBFMjJGNEU0MTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjNw9pBZKbh0SO77ArNpx7BlZq biPErAaNE/QTz6+9yjAZbMDBkNsLKKegexucLb2OUXNzcztY81jgfUXkaPL5qAdT XqcR2oLoMRkXBNmyyVLWsRzmDxUHcsB9RMWrQkdmYZ6EIDoD967+IHLQJtOjlTDw rxyfhXD0SkCAGLM6e/suZOllDXATX7vVOp+Ri7X5La4ecYQqUePyj+yG1EFKl3TB M9A82W8FxvsQGrFp9bANxONO8TNHnp7HS+K87qtiv01QtrrcJMjiTIunQRXiJkNs 1Egg9X9UKVSQ7SQVX2Ah2ImvyLvIJtqEfK1H+ZjiIeSSrWoVdUXS7i+zdCFhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ49kGH3NrvkJba3lizCuDiL05BkwHwYDVR0j BBgwFoAU8kQXMaOPbwPti/2xTzz4nO0mqIAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i OGI0NDFhZC1mMWFhLTQ4ZDMtOWVkYi1iOWE1ZDVjZTliYTgvMC9GMjQ0MTczMUEz OEY2RjAzRUQ4QkZEQjE0RjNDRjg5Q0VEMjZBODgwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjI0NDE3MzFBMzhGNkYwM0VEOEJGREIxNEYzQ0Y4OUNFRDI2 QTg4MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjhiNDQxYWQtZjFhYS00OGQzLTll ZGItYjlhNWQ1Y2U5YmE4LzAvRjI0NDE3MzFBMzhGNkYwM0VEOEJGREIxNEYzQ0Y4 OUNFRDI2QTg4MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEZLjG1I6IXmcU+YlZSBMVQLOQTMkWhvkzjo 03ehn3T2QLMr2zaOFrm7YPatd5UzP5i+dBtSXPA5IDplNPBaMVHmTTH/mffe5w/L RT/2Bl6n1RbWSzM/DGov7wqPmFIDnVE5ZCM1eJfYjJIEL5eaHcaZ5UOlD5inMotj EvGuoHq9/kEcKPpk0eDYxd93tAwPUdrCe95Vyc6wxsvrXMgsLUP7SGvkne8h2q5c POUDEeIW4W8jXBVFoNE1kONRROT7dLNxKMstrgwyrIWpxEqN3k8HuIuxxBYfIIDp 8/8klDqHfpzjuCNikEz2HZ8p/hPGO83zBdbTS3uLqM5zhJvUbwQ= -----END CERTIFICATE-----Generated at Mon Mar 2 05:56:00 2026 by rpki-client