$ rpki-client -vvf repo-rpki.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.mft File: F027F0676E31F5D61FFCB99138BA71A6A6C2A888.mft (raw, json) Hash identifier: ghb89assQAlmAd5iPFNw9w2a55RJ00m+YMBWmq9t9xI= Subject key identifier: 28:F2:45:83:96:AE:BD:72:5D:9C:30:27:D1:B6:BE:2A:0E:C9:86:6E Authority key identifier: F0:27:F0:67:6E:31:F5:D6:1F:FC:B9:91:38:BA:71:A6:A6:C2:A8:88 Certificate issuer: /CN=F027F0676E31F5D61FFCB99138BA71A6A6C2A888 Certificate serial: 6FBC2698C5B2C5F097C2734D4FCB4595E54895F8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.mft Manifest number: 01F7 Signing time: Sat 28 Feb 2026 00:11:49 +0000 Manifest this update: Sat 28 Feb 2026 00:06:49 +0000 Manifest next update: Tue 03 Mar 2026 08:44:49 +0000 Files and hashes: 1: 3130332e37392e3233382e302f32342d3234203d3e20313336383431.roa (hash: S3rj42K3zgcLtAy4zNzKlACfc7OoExWsWn2P6hM2xiU=) 2: 3130332e37392e3233392e302f32342d3234203d3e20313336383431.roa (hash: tiiZ5XR5qtoVKRiJyK/ZbstHJPK9DYWkRihRcxcZHeQ=) 3: F027F0676E31F5D61FFCB99138BA71A6A6C2A888.crl (hash: SMgF1kHUX8fxR/J/BI9IhDXf/4XKDAzTTg81HFrnPZ0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.crl rsync://repo-rpki.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 08:44:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:bc:26:98:c5:b2:c5:f0:97:c2:73:4d:4f:cb:45:95:e5:48:95:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F027F0676E31F5D61FFCB99138BA71A6A6C2A888 Validity Not Before: Feb 28 00:06:49 2026 GMT Not After : Mar 3 08:44:49 2026 GMT Subject: CN=28F2458396AEBD725D9C3027D1B6BE2A0EC9866E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:55:c8:6a:b8:6b:e3:59:37:0e:ba:47:02:28: 19:cc:80:0b:76:8c:05:c1:f3:33:fe:a4:67:b5:1f: 24:20:3e:17:31:0d:c2:af:9a:85:ca:0b:b2:75:d0: d0:b7:57:ff:15:8d:77:63:fe:db:36:69:2b:31:fb: e2:73:b9:9f:7f:6d:ce:17:4e:b2:2b:15:63:ee:3d: 8f:fd:c5:83:d6:b9:e5:36:bb:29:eb:04:8a:23:ce: 11:c3:81:be:14:55:83:9a:d4:d3:ce:8c:97:8b:96: 8e:c0:30:ae:9d:2e:e5:52:cb:9d:5a:72:84:34:14: fa:71:8c:78:6c:88:29:77:c1:9b:5c:04:8e:52:24: 27:14:71:4d:94:3f:14:72:8c:82:64:97:c9:ad:e9: 4c:19:69:4b:32:2f:72:ca:5c:38:45:b8:26:a6:0c: 49:33:b9:4a:4f:03:47:12:a5:21:3e:64:cc:33:2e: 99:16:0b:3d:1a:6f:9e:d9:38:fe:6b:f8:4f:a2:d9: 1e:41:c5:fe:7e:e3:a5:49:64:3d:3d:00:d7:0e:78: a0:76:0c:5e:32:ed:4f:74:c0:3d:d0:4e:42:99:59: ea:c1:e1:fb:e7:b7:5b:99:b8:da:b8:f7:2f:0a:8c: 8d:b5:ac:fc:64:96:e7:9b:4b:d1:68:c7:a6:08:49: 66:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:F2:45:83:96:AE:BD:72:5D:9C:30:27:D1:B6:BE:2A:0E:C9:86:6E X509v3 Authority Key Identifier: keyid:F0:27:F0:67:6E:31:F5:D6:1F:FC:B9:91:38:BA:71:A6:A6:C2:A8:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:22:e6:8c:6b:d3:a2:64:67:b3:8b:3c:c0:3d:fb:b2:59:99: 7f:3d:f5:64:fd:12:bb:fe:c3:38:bb:cf:22:d7:04:2c:28:2f: bf:9d:c8:3c:86:91:24:3f:af:f0:28:71:c1:f5:5b:3b:37:03: e9:67:80:cd:0e:57:45:e1:12:5a:c5:2f:ed:cc:c9:47:9d:19: 80:b7:58:e6:54:50:8d:84:11:66:46:75:51:d2:7f:3e:e7:69: 64:ef:c8:7c:bb:ec:51:bf:9e:5c:ff:4c:4e:29:60:c3:fc:52: 84:73:3f:1b:2b:42:32:b0:20:64:7b:20:8f:f8:f1:15:85:86: 75:5b:b7:c8:73:a4:63:e4:ab:99:48:98:f1:d8:71:6f:39:02: a4:5f:c7:0c:5f:8a:4c:d7:6d:e8:fb:d5:0b:82:09:b7:d7:8b: 62:72:88:b3:e7:c6:7f:01:e0:34:07:1d:90:3c:41:eb:e4:5b: 0e:3a:2d:36:16:d1:c5:ef:c5:18:35:81:ee:99:aa:f1:58:55: 24:2f:85:15:29:71:31:29:18:88:3a:c3:bb:05:88:ca:23:4a: 24:d6:1f:04:14:ec:f6:52:b0:bb:9e:a6:90:12:6f:65:02:8f: 96:b8:a2:d9:c4:e6:58:92:6e:9f:93:6b:6f:03:52:7f:ea:c1: 10:58:91:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb7wmmMWyxfCXwnNNT8tFleVIlfgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjAyN0YwNjc2RTMxRjVENjFGRkNCOTkxMzhCQTcxQTZB NkMyQTg4ODAeFw0yNjAyMjgwMDA2NDlaFw0yNjAzMDMwODQ0NDlaMDMxMTAvBgNV BAMTKDI4RjI0NTgzOTZBRUJENzI1RDlDMzAyN0QxQjZCRTJBMEVDOTg2NkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjVchquGvjWTcOukcCKBnMgAt2 jAXB8zP+pGe1HyQgPhcxDcKvmoXKC7J10NC3V/8VjXdj/ts2aSsx++JzuZ9/bc4X TrIrFWPuPY/9xYPWueU2uynrBIojzhHDgb4UVYOa1NPOjJeLlo7AMK6dLuVSy51a coQ0FPpxjHhsiCl3wZtcBI5SJCcUcU2UPxRyjIJkl8mt6UwZaUsyL3LKXDhFuCam DEkzuUpPA0cSpSE+ZMwzLpkWCz0ab57ZOP5r+E+i2R5Bxf5+46VJZD09ANcOeKB2 DF4y7U90wD3QTkKZWerB4fvnt1uZuNq49y8KjI21rPxkluebS9Fox6YISWY9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKPJFg5auvXJdnDAn0ba+Kg7Jhm4wHwYDVR0j BBgwFoAU8CfwZ24x9dYf/LmROLpxpqbCqIgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NmRmMjY5MS1kYjYyLTQzYjktOGE1Ny0wZTA2ZGExYWNjNjQvMC9GMDI3RjA2NzZF MzFGNUQ2MUZGQ0I5OTEzOEJBNzFBNkE2QzJBODg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjAyN0YwNjc2RTMxRjVENjFGRkNCOTkxMzhCQTcxQTZBNkMy QTg4OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDZkZjI2OTEtZGI2Mi00M2I5LThh NTctMGUwNmRhMWFjYzY0LzAvRjAyN0YwNjc2RTMxRjVENjFGRkNCOTkxMzhCQTcx QTZBNkMyQTg4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAwi5oxr06JkZ7OLPMA9+7JZmX899WT9Erv+ wzi7zyLXBCwoL7+dyDyGkSQ/r/AoccH1Wzs3A+lngM0OV0XhElrFL+3MyUedGYC3 WOZUUI2EEWZGdVHSfz7naWTvyHy77FG/nlz/TE4pYMP8UoRzPxsrQjKwIGR7II/4 8RWFhnVbt8hzpGPkq5lImPHYcW85AqRfxwxfikzXbej71QuCCbfXi2JyiLPnxn8B 4DQHHZA8QevkWw46LTYW0cXvxRg1ge6ZqvFYVSQvhRUpcTEpGIg6w7sFiMojSiTW HwQU7PZSsLueppASb2UCj5a4otnE5liSbp+Ta28DUn/qwRBYkdE= -----END CERTIFICATE-----Generated at Mon Mar 2 08:16:23 2026 by rpki-client