$ rpki-client -vvf repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.mft File: F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.mft (raw, json) Hash identifier: QhuTlrJxg4gvfGOQUaRQwz4f8jvAuKySHGHNEt5B23E= Subject key identifier: 73:1C:F1:5B:8F:02:4E:28:CC:D1:67:AE:A7:78:8E:5D:C1:28:6A:7E Authority key identifier: F1:BD:A5:72:CF:8D:79:20:C2:10:DB:CA:14:54:B1:90:4F:1C:1D:5F Certificate issuer: /CN=F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F Certificate serial: 0E20D0B0949C9DA782655DCE4857A5FEA022C244 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.mft Manifest number: 01C7 Signing time: Sat 28 Feb 2026 20:10:50 +0000 Manifest this update: Sat 28 Feb 2026 20:05:50 +0000 Manifest next update: Wed 04 Mar 2026 02:04:50 +0000 Files and hashes: 1: 3130332e3136342e35382e302f32342d3234203d3e20313431393130.roa (hash: jruW/AUePdWFgbuv5StGivVVFVpHpBSL3kjIWCplc4g=) 2: 3130332e3136342e35392e302f32342d3234203d3e20313431393130.roa (hash: IoIh0X1wtCWoeOPeFilpjxljpSISulJCU4DOxkNVruE=) 3: F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.crl (hash: HiT/YUQpBhnv2T815EgP5LarhYmaKCFbP/OBMYbOlzk=) 4: 3130332e3136342e35382e302f32332d3233203d3e20313431393130.roa (hash: O7uhBUEz+z1Q2GX4lPzEa5VOca0EqQ+u9YYJDNTn8wg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.crl rsync://repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 02:04:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:20:d0:b0:94:9c:9d:a7:82:65:5d:ce:48:57:a5:fe:a0:22:c2:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F Validity Not Before: Feb 28 20:05:50 2026 GMT Not After : Mar 4 02:04:50 2026 GMT Subject: CN=731CF15B8F024E28CCD167AEA7788E5DC1286A7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:49:8c:3b:21:35:bc:95:62:fb:bc:b8:d2:5a: 44:3d:58:c2:7e:ac:9e:2e:8f:8a:12:3d:7a:ea:af: c8:00:49:26:e9:63:3a:0c:ff:a4:42:05:30:28:f5: 25:eb:85:22:1a:5e:c1:4c:45:8d:b4:fc:0e:c1:43: ad:97:e1:54:f8:6d:c6:9b:1f:2e:89:5f:db:3e:4d: 02:84:4d:29:88:86:d7:5e:77:db:ec:32:1d:58:9f: 05:6f:55:fe:07:7d:7e:8c:34:36:a2:5d:61:3b:c0: 16:4c:e1:a6:eb:01:d0:0f:3f:ae:20:7b:db:7b:81: bd:e3:8b:22:83:38:60:3b:f0:69:97:04:24:ff:83: bf:9c:d6:89:1a:d1:5e:e9:9f:c4:43:63:1d:6f:75: 4a:b3:6f:ce:3b:f8:23:1e:3b:68:42:2f:5d:9e:cf: 3c:7a:c9:4b:bd:cf:89:a7:2c:a1:cb:72:83:1b:c7: 81:4b:66:ab:ae:68:fb:0b:2d:b0:33:1a:e1:bc:d6: 82:a3:d2:7c:08:0a:bb:81:a9:c0:58:ee:3a:bd:42: c5:9b:c1:c1:2d:fa:46:2a:5c:d0:c2:25:b3:46:d3: b2:d1:f3:c3:3e:c3:97:ab:d2:c0:61:74:4b:bf:ca: 92:00:55:65:62:f9:72:7d:9f:de:a5:9c:8a:c2:bf: 81:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:1C:F1:5B:8F:02:4E:28:CC:D1:67:AE:A7:78:8E:5D:C1:28:6A:7E X509v3 Authority Key Identifier: keyid:F1:BD:A5:72:CF:8D:79:20:C2:10:DB:CA:14:54:B1:90:4F:1C:1D:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:f9:dc:10:a9:35:bf:ec:28:61:0d:a1:d6:a7:e0:43:e4:52: 68:a2:12:80:d9:72:1a:f4:ef:b0:e7:b5:4e:5f:77:72:c1:64: c2:ae:f6:5d:f0:2b:7e:e1:fa:b6:c6:6b:4a:03:50:83:47:67: 64:ee:03:69:69:6c:0e:54:91:07:19:ea:62:f8:0b:ff:61:9d: 5f:9d:d5:06:51:c1:11:f3:9e:ef:58:47:01:47:3b:aa:35:5b: d1:04:8c:d0:40:3d:13:17:05:7c:59:07:3a:2e:6c:d2:a5:ee: cf:5a:53:d5:ee:73:e5:63:27:14:7d:8d:7e:4c:a0:bc:ec:20: d1:01:6a:1a:fa:40:c1:a3:4b:35:4b:dd:d9:1c:a7:6a:fa:c1: d4:6e:fd:40:c8:79:a6:2c:21:13:b4:13:3c:dc:31:ee:0a:de: 71:4b:70:e3:48:a5:a6:53:50:e4:80:8c:7d:95:40:50:d4:27: e7:a1:d6:f7:38:d2:2e:c3:87:cb:0b:4b:1c:56:ba:64:5e:09: bc:55:79:fe:c7:0a:be:cb:92:3d:8f:b1:33:42:6a:46:57:e2: fa:33:b1:52:9d:8e:be:23:bd:cc:26:f5:a9:d9:fb:03:32:9e: 42:31:76:7f:62:c3:5c:4c:11:f9:15:21:32:d9:f8:86:a3:7e: 9f:df:cd:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDiDQsJScnaeCZV3OSFel/qAiwkQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjFCREE1NzJDRjhENzkyMEMyMTBEQkNBMTQ1NEIxOTA0 RjFDMUQ1RjAeFw0yNjAyMjgyMDA1NTBaFw0yNjAzMDQwMjA0NTBaMDMxMTAvBgNV BAMTKDczMUNGMTVCOEYwMjRFMjhDQ0QxNjdBRUE3Nzg4RTVEQzEyODZBN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZSYw7ITW8lWL7vLjSWkQ9WMJ+ rJ4uj4oSPXrqr8gASSbpYzoM/6RCBTAo9SXrhSIaXsFMRY20/A7BQ62X4VT4bcab Hy6JX9s+TQKETSmIhtded9vsMh1YnwVvVf4HfX6MNDaiXWE7wBZM4abrAdAPP64g e9t7gb3jiyKDOGA78GmXBCT/g7+c1oka0V7pn8RDYx1vdUqzb847+CMeO2hCL12e zzx6yUu9z4mnLKHLcoMbx4FLZquuaPsLLbAzGuG81oKj0nwICruBqcBY7jq9QsWb wcEt+kYqXNDCJbNG07LR88M+w5er0sBhdEu/ypIAVWVi+XJ9n96lnIrCv4FLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcxzxW48CTijM0Weup3iOXcEoan4wHwYDVR0j BBgwFoAU8b2lcs+NeSDCENvKFFSxkE8cHV8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NTAxY2RmOS01MmUxLTRjOTgtOWFiMy1hZmI3MGZhYzM3N2MvMC9GMUJEQTU3MkNG OEQ3OTIwQzIxMERCQ0ExNDU0QjE5MDRGMUMxRDVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjFCREE1NzJDRjhENzkyMEMyMTBEQkNBMTQ1NEIxOTA0RjFD MUQ1Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDUwMWNkZjktNTJlMS00Yzk4LTlh YjMtYWZiNzBmYWMzNzdjLzAvRjFCREE1NzJDRjhENzkyMEMyMTBEQkNBMTQ1NEIx OTA0RjFDMUQ1Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKf53BCpNb/sKGENodan4EPkUmiiEoDZchr0 77DntU5fd3LBZMKu9l3wK37h+rbGa0oDUINHZ2TuA2lpbA5UkQcZ6mL4C/9hnV+d 1QZRwRHznu9YRwFHO6o1W9EEjNBAPRMXBXxZBzoubNKl7s9aU9Xuc+VjJxR9jX5M oLzsINEBahr6QMGjSzVL3dkcp2r6wdRu/UDIeaYsIRO0EzzcMe4K3nFLcONIpaZT UOSAjH2VQFDUJ+eh1vc40i7Dh8sLSxxWumReCbxVef7HCr7Lkj2PsTNCakZX4voz sVKdjr4jvcwm9anZ+wMynkIxdn9iw1xMEfkVITLZ+Iajfp/fzS0= -----END CERTIFICATE-----Generated at Mon Mar 2 08:20:48 2026 by rpki-client