$ rpki-client -vvf repo-rpki.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/F71A5EA4A463A015DB17D32923D3F431A6F20F62.mft File: F71A5EA4A463A015DB17D32923D3F431A6F20F62.mft (raw, json) Hash identifier: HGO/CL6EROxFh7fayl6uWSo3g1U0nto5pQS0EKclNNw= Subject key identifier: C8:52:CD:CE:CE:8D:38:72:9C:1F:2E:5F:F3:98:CF:91:95:0C:DB:87 Authority key identifier: F7:1A:5E:A4:A4:63:A0:15:DB:17:D3:29:23:D3:F4:31:A6:F2:0F:62 Certificate issuer: /CN=F71A5EA4A463A015DB17D32923D3F431A6F20F62 Certificate serial: 4114DBBAF04990FF73E83DA4986C42FAC1F895F6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F71A5EA4A463A015DB17D32923D3F431A6F20F62.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/F71A5EA4A463A015DB17D32923D3F431A6F20F62.mft Manifest number: 01F3 Signing time: Sun 01 Mar 2026 02:32:00 +0000 Manifest this update: Sun 01 Mar 2026 02:27:00 +0000 Manifest next update: Wed 04 Mar 2026 04:57:00 +0000 Files and hashes: 1: 3130332e37352e36362e302f32332d3234203d3e20313530353231.roa (hash: iletpOTfxixHKxRms6Z2yECRzDZ4SIPJlSYEIU/u2zU=) 2: F71A5EA4A463A015DB17D32923D3F431A6F20F62.crl (hash: AJTKeNORSUUoKFpQkhDFHqmIMWPwE+Xk1KYVDUbLkv0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/F71A5EA4A463A015DB17D32923D3F431A6F20F62.crl rsync://repo-rpki.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/F71A5EA4A463A015DB17D32923D3F431A6F20F62.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F71A5EA4A463A015DB17D32923D3F431A6F20F62.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 04:57:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:14:db:ba:f0:49:90:ff:73:e8:3d:a4:98:6c:42:fa:c1:f8:95:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F71A5EA4A463A015DB17D32923D3F431A6F20F62 Validity Not Before: Mar 1 02:27:00 2026 GMT Not After : Mar 4 04:57:00 2026 GMT Subject: CN=C852CDCECE8D38729C1F2E5FF398CF91950CDB87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0d:12:05:96:6b:7a:f9:74:3e:a2:32:39:ea: 72:9f:99:59:ac:df:c0:0e:04:cd:e6:55:36:44:1a: aa:da:f0:47:23:4c:c4:c7:fb:a8:dd:27:df:61:c3: f0:40:24:af:ef:1b:b7:01:ff:a4:f5:a7:78:14:21: 8b:b6:50:83:37:9a:eb:3f:ca:39:c9:b0:3c:9e:82: a1:0e:fc:52:52:ba:3c:6b:2a:b2:0d:6b:ad:ef:6f: 63:61:a4:bb:34:a1:10:83:cf:7a:8e:ec:a2:87:7b: e2:5d:02:6f:b8:48:26:c1:b3:14:0f:5f:42:4f:ef: 55:24:96:40:96:f7:3c:85:e0:3a:5e:b7:0f:c7:6c: 9d:7c:53:b0:7a:e2:4e:00:6b:85:68:68:63:29:c5: 2f:6b:6b:35:6d:32:a5:c5:57:6a:12:2b:51:c5:f3: f8:f1:6a:aa:68:d3:82:42:a5:4b:a2:6e:96:87:14: 79:a6:d0:f6:7d:82:7b:67:75:a2:a4:1d:1d:b2:74: 6a:c0:f4:c6:4d:b8:a7:07:48:ec:a1:42:73:62:01: 11:b0:f3:d7:5b:bf:5a:5d:56:6b:39:bc:ba:05:f7: b0:b2:57:23:d3:cd:7f:f8:85:50:8e:e0:c7:44:2e: d7:32:d8:ac:34:e6:23:81:d5:66:2e:aa:0e:27:e2: 0a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:52:CD:CE:CE:8D:38:72:9C:1F:2E:5F:F3:98:CF:91:95:0C:DB:87 X509v3 Authority Key Identifier: keyid:F7:1A:5E:A4:A4:63:A0:15:DB:17:D3:29:23:D3:F4:31:A6:F2:0F:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/F71A5EA4A463A015DB17D32923D3F431A6F20F62.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F71A5EA4A463A015DB17D32923D3F431A6F20F62.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/F71A5EA4A463A015DB17D32923D3F431A6F20F62.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:57:31:47:42:d7:d8:50:0c:8b:32:08:33:84:ab:73:e0:55: 45:b5:42:72:ff:39:b2:d9:c3:bf:25:12:e8:0f:43:8a:51:ad: d7:0b:01:37:b5:46:7d:69:d0:f3:55:60:ab:79:c4:e0:b7:32: c2:4b:a9:e8:55:4a:bd:f9:c1:0c:6b:16:6f:7f:64:f4:1d:64: 25:99:8b:7e:36:69:55:af:0e:c5:4e:7d:9f:7b:55:3b:bc:af: 62:0a:b8:45:14:bc:60:e8:7f:dd:e9:8c:b2:ee:e6:de:46:46: d3:ba:e6:3a:0e:0b:74:82:c6:cc:39:d1:9c:7f:7b:0c:38:30: 27:20:3a:7d:08:cb:0e:db:55:e9:eb:30:d6:b2:bb:85:a7:e4: bf:92:db:8d:30:a9:bf:75:79:e2:33:a4:40:41:08:03:1d:ab: 39:e6:37:5a:79:74:e8:44:05:25:fe:3f:42:7f:88:e2:d1:74: 92:b0:c6:f0:b2:8f:b9:ce:a9:d1:f0:7e:82:05:48:59:b5:c1: 75:61:53:20:98:4c:ae:53:88:75:b1:76:e7:ee:b0:e9:72:b8: 1b:ae:cc:fb:1b:2a:ba:64:57:c2:bf:cf:8d:9f:5d:f8:a3:35: 4d:18:78:b0:d1:eb:c8:2e:20:f4:6e:34:8d:a0:fc:6a:c3:30: 9d:db:b5:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQRTbuvBJkP9z6D2kmGxC+sH4lfYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjcxQTVFQTRBNDYzQTAxNURCMTdEMzI5MjNEM0Y0MzFB NkYyMEY2MjAeFw0yNjAzMDEwMjI3MDBaFw0yNjAzMDQwNDU3MDBaMDMxMTAvBgNV BAMTKEM4NTJDRENFQ0U4RDM4NzI5QzFGMkU1RkYzOThDRjkxOTUwQ0RCODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyDRIFlmt6+XQ+ojI56nKfmVms 38AOBM3mVTZEGqra8EcjTMTH+6jdJ99hw/BAJK/vG7cB/6T1p3gUIYu2UIM3mus/ yjnJsDyegqEO/FJSujxrKrINa63vb2NhpLs0oRCDz3qO7KKHe+JdAm+4SCbBsxQP X0JP71UklkCW9zyF4Dpetw/HbJ18U7B64k4Aa4VoaGMpxS9razVtMqXFV2oSK1HF 8/jxaqpo04JCpUuibpaHFHmm0PZ9gntndaKkHR2ydGrA9MZNuKcHSOyhQnNiARGw 89dbv1pdVms5vLoF97CyVyPTzX/4hVCO4MdELtcy2Kw05iOB1WYuqg4n4goLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyFLNzs6NOHKcHy5f85jPkZUM24cwHwYDVR0j BBgwFoAU9xpepKRjoBXbF9MpI9P0MabyD2IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j M2Y3NmM2ZC1mODUwLTRjNDktODU0Yy01NWYzODI4NDRjOTcvMC9GNzFBNUVBNEE0 NjNBMDE1REIxN0QzMjkyM0QzRjQzMUE2RjIwRjYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjcxQTVFQTRBNDYzQTAxNURCMTdEMzI5MjNEM0Y0MzFBNkYy MEY2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzNmNzZjNmQtZjg1MC00YzQ5LTg1 NGMtNTVmMzgyODQ0Yzk3LzAvRjcxQTVFQTRBNDYzQTAxNURCMTdEMzI5MjNEM0Y0 MzFBNkYyMEY2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAVXMUdC19hQDIsyCDOEq3PgVUW1QnL/ObLZ w78lEugPQ4pRrdcLATe1Rn1p0PNVYKt5xOC3MsJLqehVSr35wQxrFm9/ZPQdZCWZ i342aVWvDsVOfZ97VTu8r2IKuEUUvGDof93pjLLu5t5GRtO65joOC3SCxsw50Zx/ eww4MCcgOn0Iyw7bVenrMNayu4Wn5L+S240wqb91eeIzpEBBCAMdqznmN1p5dOhE BSX+P0J/iOLRdJKwxvCyj7nOqdHwfoIFSFm1wXVhUyCYTK5TiHWxdufusOlyuBuu zPsbKrpkV8K/z42fXfijNU0YeLDR68guIPRuNI2g/GrDMJ3btQ4= -----END CERTIFICATE-----Generated at Mon Mar 2 15:03:37 2026 by rpki-client