$ rpki-client -vvf repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.mft File: F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.mft (raw, json) Hash identifier: coIcjDDl75fdZrBEEIXGzHtRliMIrZurAnUh9gqAE/w= Subject key identifier: 97:CB:42:48:7D:5F:8E:A1:4A:86:EF:0F:14:44:B4:41:99:2D:83:BB Authority key identifier: F8:FA:AE:F9:7E:D3:DB:A7:D2:72:43:70:7C:7C:0D:16:05:89:6B:AF Certificate issuer: /CN=F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF Certificate serial: 659775E157C9696DE21346E8E91D8CDF89EA8B60 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.mft Manifest number: 0138 Signing time: Sat 28 Feb 2026 11:21:09 +0000 Manifest this update: Sat 28 Feb 2026 11:16:09 +0000 Manifest next update: Tue 03 Mar 2026 16:23:09 +0000 Files and hashes: 1: 3135372e32302e3133302e302f32342d3234203d3e20313532343134.roa (hash: XsyvDRA0TNZEIvbyLzo4xfiEE9IebAVqTJNT7CQxRoY=) 2: F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.crl (hash: VUEx7xiGKaYTs+9rBqC4UMQ7TTx2KYR9TBkI941fRpU=) 3: 3135372e32302e3133312e302f32342d3234203d3e20313532343134.roa (hash: 8cewFPLuyArtugKlZDxPydivdpl6gb8C4w3o7gohs6Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.crl rsync://repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 16:23:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:97:75:e1:57:c9:69:6d:e2:13:46:e8:e9:1d:8c:df:89:ea:8b:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF Validity Not Before: Feb 28 11:16:09 2026 GMT Not After : Mar 3 16:23:09 2026 GMT Subject: CN=97CB42487D5F8EA14A86EF0F1444B441992D83BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:67:9d:48:0b:cd:c8:39:c9:e0:49:6b:99:bb: 61:e6:5e:8d:a6:ac:88:10:46:82:aa:d9:ab:f1:33: ee:86:86:d1:cf:cf:1d:cd:9f:70:bd:5c:47:15:6b: 29:4b:d3:d5:03:26:a0:8b:7e:13:b8:7a:ca:17:cf: 61:09:ea:c2:52:8a:53:72:df:ed:fd:51:35:b9:4f: ed:8c:7e:7c:30:c5:b4:d4:92:6e:ce:11:7d:19:66: bd:72:d1:91:32:4e:20:e9:09:d4:e0:55:2d:c1:8c: d3:74:22:93:65:60:bc:33:90:2f:09:03:21:d1:73: 8d:06:51:f5:3e:ab:f1:49:1f:2d:b2:6c:76:97:55: e6:25:4a:6c:8a:ce:4d:57:9e:00:7a:a1:dc:3e:a9: 79:ee:66:cb:dc:42:19:4d:7a:8a:31:d0:72:b8:8d: 8d:98:5f:a5:f0:33:12:ae:69:6d:b9:0e:d3:7c:b4: 92:dd:3b:84:e9:8f:0d:cf:bf:b6:89:89:8a:a6:42: f2:3c:a0:07:90:39:48:a2:c9:97:57:17:10:d1:f0: 3c:cc:89:6e:4b:65:ce:a6:98:a8:86:03:87:90:c6: 7d:33:da:7f:be:3b:c2:78:a4:ce:21:67:57:26:24: 43:da:80:fc:8e:1c:59:64:cd:c4:b9:7e:9f:09:cd: 10:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:CB:42:48:7D:5F:8E:A1:4A:86:EF:0F:14:44:B4:41:99:2D:83:BB X509v3 Authority Key Identifier: keyid:F8:FA:AE:F9:7E:D3:DB:A7:D2:72:43:70:7C:7C:0D:16:05:89:6B:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:6c:17:40:45:8f:e2:d4:ea:8f:22:f8:aa:56:a0:a8:73:44: 3c:91:17:f5:a0:4c:04:c7:85:17:32:5f:8d:d8:1b:12:79:e6: 08:b1:40:f8:2e:62:bb:b8:c8:7c:0c:0e:7e:30:03:bd:62:ee: d0:ef:40:3d:76:f7:45:c0:ec:98:b5:5e:4a:23:8d:33:59:bc: c0:c1:77:e4:32:ea:8d:44:21:1d:1d:1d:39:bf:53:ce:3d:9f: 18:2f:84:fe:50:25:46:30:dc:5b:40:fc:a2:dc:d7:3e:3f:02: aa:d8:7e:24:03:68:e6:b2:73:f9:bc:e7:b6:2a:49:88:76:70: 84:ed:86:f2:db:af:c6:1b:7f:bd:2a:00:05:b7:66:8a:30:eb: 11:d5:b3:6c:bb:95:21:2e:b2:68:97:fa:77:db:3e:2b:3d:6f: 46:ff:1b:f5:fc:c2:fb:b9:23:9e:f3:2f:80:de:a5:ec:b9:75: fc:85:3d:a7:6c:7f:49:3b:b7:22:14:5c:68:3d:22:c6:97:f0: 6a:6a:30:c1:d9:b0:3a:12:ba:54:67:17:49:dc:c9:18:e2:9a: 37:3e:98:bb:fb:01:7f:ef:c7:5a:f3:b2:1f:da:c8:fd:d3:04: 1b:7c:32:a7:47:cc:4b:a9:0e:94:a1:d2:5d:1c:e3:ca:27:1f: 9c:38:df:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZZd14VfJaW3iE0bo6R2M34nqi2AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhGQUFFRjk3RUQzREJBN0QyNzI0MzcwN0M3QzBEMTYw NTg5NkJBRjAeFw0yNjAyMjgxMTE2MDlaFw0yNjAzMDMxNjIzMDlaMDMxMTAvBgNV BAMTKDk3Q0I0MjQ4N0Q1RjhFQTE0QTg2RUYwRjE0NDRCNDQxOTkyRDgzQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGZ51IC83IOcngSWuZu2HmXo2m rIgQRoKq2avxM+6GhtHPzx3Nn3C9XEcVaylL09UDJqCLfhO4esoXz2EJ6sJSilNy 3+39UTW5T+2MfnwwxbTUkm7OEX0ZZr1y0ZEyTiDpCdTgVS3BjNN0IpNlYLwzkC8J AyHRc40GUfU+q/FJHy2ybHaXVeYlSmyKzk1XngB6odw+qXnuZsvcQhlNeoox0HK4 jY2YX6XwMxKuaW25DtN8tJLdO4Tpjw3Pv7aJiYqmQvI8oAeQOUiiyZdXFxDR8DzM iW5LZc6mmKiGA4eQxn0z2n++O8J4pM4hZ1cmJEPagPyOHFlkzcS5fp8JzRAlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUl8tCSH1fjqFKhu8PFES0QZktg7swHwYDVR0j BBgwFoAU+Pqu+X7T26fSckNwfHwNFgWJa68wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ODZmZjI2NC1mZjI1LTRmZTYtODZlZi1kODRiN2QyODgzNTQvMC9GOEZBQUVGOTdF RDNEQkE3RDI3MjQzNzA3QzdDMEQxNjA1ODk2QkFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjhGQUFFRjk3RUQzREJBN0QyNzI0MzcwN0M3QzBEMTYwNTg5 NkJBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzg2ZmYyNjQtZmYyNS00ZmU2LTg2 ZWYtZDg0YjdkMjg4MzU0LzAvRjhGQUFFRjk3RUQzREJBN0QyNzI0MzcwN0M3QzBE MTYwNTg5NkJBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADxsF0BFj+LU6o8i+KpWoKhzRDyRF/WgTATH hRcyX43YGxJ55gixQPguYru4yHwMDn4wA71i7tDvQD1290XA7Ji1XkojjTNZvMDB d+Qy6o1EIR0dHTm/U849nxgvhP5QJUYw3FtA/KLc1z4/AqrYfiQDaOayc/m857Yq SYh2cITthvLbr8Ybf70qAAW3Zoow6xHVs2y7lSEusmiX+nfbPis9b0b/G/X8wvu5 I57zL4Depey5dfyFPadsf0k7tyIUXGg9IsaX8GpqMMHZsDoSulRnF0ncyRjimjc+ mLv7AX/vx1rzsh/ayP3TBBt8MqdHzEupDpSh0l0c48onH5w436I= -----END CERTIFICATE-----Generated at Mon Mar 2 11:18:29 2026 by rpki-client