$ rpki-client -vvf repo-rpki.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.mft File: F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.mft (raw, json) Hash identifier: VrNH+pyAtu6QTs1O/APRoCDj62Hd9J4b37v9pVqywi8= Subject key identifier: EC:71:33:AB:2C:B2:B3:4F:B7:42:BB:4B:7D:5F:6D:B8:5F:51:7D:F5 Authority key identifier: F9:93:0E:30:8D:30:B3:E1:5C:FF:F7:EB:0D:34:37:A0:B7:EC:E7:BD Certificate issuer: /CN=F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD Certificate serial: 17ACA52DEAB875480F7D3179FC2DAD08B4F8AF7C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.mft Manifest number: 011F Signing time: Sun 01 Mar 2026 08:22:21 +0000 Manifest this update: Sun 01 Mar 2026 08:17:21 +0000 Manifest next update: Wed 04 Mar 2026 15:56:21 +0000 Files and hashes: 1: F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.crl (hash: 3n++GY8998TLcbBr/+CyGciZz9RXCXD33feWr33l/ps=) 2: 3135372e36362e392e302f32342d3234203d3e20313532373436.roa (hash: yzGdWGx0/LyfGs3EaQckTyBR5cGJiuvQbeLsUkZKPDA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.crl rsync://repo-rpki.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 15:56:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:ac:a5:2d:ea:b8:75:48:0f:7d:31:79:fc:2d:ad:08:b4:f8:af:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD Validity Not Before: Mar 1 08:17:21 2026 GMT Not After : Mar 4 15:56:21 2026 GMT Subject: CN=EC7133AB2CB2B34FB742BB4B7D5F6DB85F517DF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:38:67:12:35:eb:d6:37:ea:75:0c:cf:e8:3b: 9d:0a:c8:89:f2:df:1d:cb:a1:c0:ca:15:2d:25:24: 63:b7:56:da:f9:50:22:bf:f8:43:85:e6:9c:72:b4: 38:db:88:e0:79:14:3e:3e:1a:f6:b8:26:de:56:4f: d7:64:4b:58:91:4b:9e:4b:59:00:d0:9a:00:11:eb: 4f:62:40:b5:17:78:8a:05:43:84:54:4b:33:c3:2f: 7b:cd:95:dd:21:38:7b:65:37:99:74:00:b0:16:41: 1a:70:ea:b3:06:f0:f4:a5:d4:45:7f:76:a3:d8:2f: 4e:0d:d6:1d:9a:87:11:89:77:60:22:23:6b:01:3d: 52:d4:ec:2a:62:90:99:46:3c:2f:02:59:97:46:2d: 17:bd:23:58:28:c9:b6:c5:ac:33:74:9b:6c:17:33: d9:d2:6c:06:a3:6d:33:f1:11:b3:66:50:22:5a:63: 2c:0f:d9:0f:11:a3:1f:d4:a9:92:3a:68:f9:1c:3d: f6:7c:2c:60:4d:d1:ad:ae:3a:2a:ad:ca:5d:56:f5: e4:8b:53:26:28:8f:4f:09:52:b8:27:c9:89:4c:fc: 44:18:c0:39:9b:7e:d2:64:f1:96:7d:65:3a:17:08: a8:bf:21:cd:7e:b7:80:17:bd:5b:ab:42:91:c8:44: 18:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:71:33:AB:2C:B2:B3:4F:B7:42:BB:4B:7D:5F:6D:B8:5F:51:7D:F5 X509v3 Authority Key Identifier: keyid:F9:93:0E:30:8D:30:B3:E1:5C:FF:F7:EB:0D:34:37:A0:B7:EC:E7:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:37:a6:3b:4c:a9:d1:37:27:1f:d5:fa:6f:01:f9:0b:a9:c1: e5:75:2c:c8:32:12:69:6d:1c:e9:bc:b5:db:d2:cf:93:de:7d: 08:14:2f:24:27:6c:c3:21:53:c3:b4:37:16:dd:0a:0c:51:df: f2:3d:f0:48:6b:f5:32:07:77:98:96:d2:27:aa:af:e5:66:22: 98:05:93:0b:00:7b:51:ce:9f:aa:fa:09:14:4f:cd:85:e0:75: ca:e1:4c:08:9d:f7:cf:69:09:68:88:38:e5:91:b1:ea:b6:c3: 08:5e:0e:48:c3:92:34:c5:68:90:87:94:ac:28:67:eb:f9:55: e7:38:c8:ea:24:40:1d:47:49:23:c5:8e:c5:72:86:2a:f9:7e: 84:70:c2:92:a7:ea:97:44:87:3a:1b:f8:f6:c5:d2:d8:00:31: e5:88:6d:d1:e0:4b:34:d4:5b:78:2b:ed:ce:55:4b:33:22:ce: e2:2b:53:d0:8d:35:31:f1:ba:84:b4:f4:d7:49:5e:23:1c:1f: d4:91:b6:50:49:7c:8a:f1:1f:3e:0c:31:32:4a:4d:02:63:c5: a7:a3:8d:91:67:1d:2f:da:fc:b6:8e:14:f3:e9:9f:67:09:84: 2e:d8:31:b9:31:01:6a:0d:48:34:c5:1b:ca:2c:66:e5:f3:34: 52:55:32:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF6ylLeq4dUgPfTF5/C2tCLT4r3wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjk5MzBFMzA4RDMwQjNFMTVDRkZGN0VCMEQzNDM3QTBC N0VDRTdCRDAeFw0yNjAzMDEwODE3MjFaFw0yNjAzMDQxNTU2MjFaMDMxMTAvBgNV BAMTKEVDNzEzM0FCMkNCMkIzNEZCNzQyQkI0QjdENUY2REI4NUY1MTdERjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKOGcSNevWN+p1DM/oO50KyIny 3x3LocDKFS0lJGO3Vtr5UCK/+EOF5pxytDjbiOB5FD4+Gva4Jt5WT9dkS1iRS55L WQDQmgAR609iQLUXeIoFQ4RUSzPDL3vNld0hOHtlN5l0ALAWQRpw6rMG8PSl1EV/ dqPYL04N1h2ahxGJd2AiI2sBPVLU7CpikJlGPC8CWZdGLRe9I1goybbFrDN0m2wX M9nSbAajbTPxEbNmUCJaYywP2Q8Rox/UqZI6aPkcPfZ8LGBN0a2uOiqtyl1W9eSL UyYoj08JUrgnyYlM/EQYwDmbftJk8ZZ9ZToXCKi/Ic1+t4AXvVurQpHIRBiFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7HEzqyyys0+3QrtLfV9tuF9RffUwHwYDVR0j BBgwFoAU+ZMOMI0ws+Fc//frDTQ3oLfs570wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZWJmNTVjYS1kNzgzLTRhM2ItOTVjYy03M2NjMzQ2ZGI0NmUvMC9GOTkzMEUzMDhE MzBCM0UxNUNGRkY3RUIwRDM0MzdBMEI3RUNFN0JELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjk5MzBFMzA4RDMwQjNFMTVDRkZGN0VCMEQzNDM3QTBCN0VD RTdCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmViZjU1Y2EtZDc4My00YTNiLTk1 Y2MtNzNjYzM0NmRiNDZlLzAvRjk5MzBFMzA4RDMwQjNFMTVDRkZGN0VCMEQzNDM3 QTBCN0VDRTdCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFM3pjtMqdE3Jx/V+m8B+QupweV1LMgyEmlt HOm8tdvSz5PefQgULyQnbMMhU8O0NxbdCgxR3/I98Ehr9TIHd5iW0ieqr+VmIpgF kwsAe1HOn6r6CRRPzYXgdcrhTAid989pCWiIOOWRseq2wwheDkjDkjTFaJCHlKwo Z+v5Vec4yOokQB1HSSPFjsVyhir5foRwwpKn6pdEhzob+PbF0tgAMeWIbdHgSzTU W3gr7c5VSzMizuIrU9CNNTHxuoS09NdJXiMcH9SRtlBJfIrxHz4MMTJKTQJjxaej jZFnHS/a/LaOFPPpn2cJhC7YMbkxAWoNSDTFG8osZuXzNFJVMrg= -----END CERTIFICATE-----Generated at Mon Mar 2 14:59:18 2026 by rpki-client