$ rpki-client -vvf repo-rpki.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/5F4C49641E1677408C44A096E9E7E709A4580B39.mft File: 5F4C49641E1677408C44A096E9E7E709A4580B39.mft (raw, json) Hash identifier: GliVTp84HrZv2xkdEbp6L+oxuN6OFDkHlFruNUDWJoo= Subject key identifier: 3B:BA:C9:C4:52:4C:42:22:9E:65:7B:41:DF:00:58:8A:F3:41:90:B5 Authority key identifier: 5F:4C:49:64:1E:16:77:40:8C:44:A0:96:E9:E7:E7:09:A4:58:0B:39 Certificate issuer: /CN=5F4C49641E1677408C44A096E9E7E709A4580B39 Certificate serial: 63771B54ACCB584D1C9005A270B6FC4A658E56C6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5F4C49641E1677408C44A096E9E7E709A4580B39.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/5F4C49641E1677408C44A096E9E7E709A4580B39.mft Manifest number: F9 Signing time: Sun 01 Mar 2026 10:31:11 +0000 Manifest this update: Sun 01 Mar 2026 10:26:11 +0000 Manifest next update: Wed 04 Mar 2026 16:30:11 +0000 Files and hashes: 1: 3135372e31352e3131322e302f32342d3234203d3e20313532333639.roa (hash: 44UIGhT2CR88gEAMCeA+qiaxDEitDJdZzTyS4PAwJto=) 2: 3135372e31352e3131332e302f32342d3234203d3e20313532333639.roa (hash: uNx5iwyz6x880NzmuCneSj6IVO81E/uFr4QeiksRPNA=) 3: 5F4C49641E1677408C44A096E9E7E709A4580B39.crl (hash: +P32wcJMduziKYK8igPy4z5SWq6TJuNIkH4KEy1QW+s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/5F4C49641E1677408C44A096E9E7E709A4580B39.crl rsync://repo-rpki.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/5F4C49641E1677408C44A096E9E7E709A4580B39.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5F4C49641E1677408C44A096E9E7E709A4580B39.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 16:30:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:77:1b:54:ac:cb:58:4d:1c:90:05:a2:70:b6:fc:4a:65:8e:56:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F4C49641E1677408C44A096E9E7E709A4580B39 Validity Not Before: Mar 1 10:26:11 2026 GMT Not After : Mar 4 16:30:11 2026 GMT Subject: CN=3BBAC9C4524C42229E657B41DF00588AF34190B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:17:5a:67:45:84:2f:ea:a6:24:75:ce:2c:86: 84:88:63:e0:9a:df:2e:35:c6:0b:80:cf:e9:dd:21: be:20:c7:47:55:7b:ad:9a:8c:70:a6:c3:10:05:af: 13:a9:63:37:85:d0:bd:fb:1c:8c:cd:84:1a:6e:1e: f1:91:fd:da:42:06:05:d9:de:ae:64:48:ab:f0:50: a6:19:fb:bf:83:bc:4b:a2:ff:47:e5:cb:77:fd:8b: a1:de:ef:31:0a:12:e9:4a:87:39:7f:58:c9:5c:67: be:b1:33:8f:59:69:48:4a:55:73:58:a7:59:57:4a: a4:79:3f:91:31:d6:46:34:59:05:9d:95:ec:69:26: f6:a6:73:e8:d4:63:e3:68:59:b1:fb:b9:37:9f:4e: 97:43:d4:0a:94:b2:5b:f6:9c:9f:be:3e:5a:f6:64: 4c:42:80:31:57:2e:cd:9c:9a:db:54:af:77:d5:7d: aa:19:9d:b3:ae:0d:4a:67:8c:27:a4:ff:10:39:61: 7d:34:aa:c2:8d:3b:5a:24:6d:25:74:2e:8d:5c:bd: 14:28:20:6f:b4:13:fd:37:d1:52:45:c2:d4:47:4c: 83:49:5c:02:dd:7f:84:98:fc:76:8b:8d:44:15:59: 53:aa:49:0d:65:5a:62:8b:34:ea:cb:d0:9c:7b:d7: f5:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:BA:C9:C4:52:4C:42:22:9E:65:7B:41:DF:00:58:8A:F3:41:90:B5 X509v3 Authority Key Identifier: keyid:5F:4C:49:64:1E:16:77:40:8C:44:A0:96:E9:E7:E7:09:A4:58:0B:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/5F4C49641E1677408C44A096E9E7E709A4580B39.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5F4C49641E1677408C44A096E9E7E709A4580B39.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/5F4C49641E1677408C44A096E9E7E709A4580B39.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:dc:a0:8a:f5:27:ab:ce:ef:71:02:68:07:ec:36:0f:bd:48: 57:f9:98:43:e9:c6:d7:10:88:60:f3:f9:47:4f:a3:b1:f7:65: 9f:67:16:b7:76:ef:49:54:9a:12:5a:15:a4:44:08:eb:10:0e: ba:27:71:68:04:01:90:44:b4:13:07:ef:71:8e:c5:55:72:52: 01:bb:c9:72:ea:01:35:9f:c6:85:27:d9:9a:92:6b:13:e7:93: d0:be:65:8c:dc:a4:fe:e8:1f:7e:dd:58:e3:67:80:17:a0:31: 1c:62:be:86:02:bc:b4:37:01:a1:01:90:8b:a9:f8:14:1b:84: 56:e5:e4:cf:f3:a9:8d:98:ce:60:45:b9:cd:45:9e:bb:12:fb: af:ee:19:71:91:d1:b1:45:d3:52:a4:fd:78:f4:56:c8:89:2f: ff:38:08:ee:e6:a3:8f:c9:96:42:10:f1:9e:97:01:2e:7b:a7: 79:4e:fd:a3:df:9e:bb:d0:91:ae:79:b8:e2:31:4b:21:df:a8: d8:68:45:f9:9b:74:4e:56:5d:a3:35:b0:2e:cd:46:c6:c2:5e: fc:5d:4a:22:a3:f9:db:a3:6e:8a:19:1a:91:ab:d1:6f:f5:e7: 29:4b:34:5b:54:bd:07:8e:b3:d0:a5:59:cc:f8:8e:42:72:49: b8:0d:f8:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY3cbVKzLWE0ckAWicLb8SmWOVsYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUY0QzQ5NjQxRTE2Nzc0MDhDNDRBMDk2RTlFN0U3MDlB NDU4MEIzOTAeFw0yNjAzMDExMDI2MTFaFw0yNjAzMDQxNjMwMTFaMDMxMTAvBgNV BAMTKDNCQkFDOUM0NTI0QzQyMjI5RTY1N0I0MURGMDA1ODhBRjM0MTkwQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3F1pnRYQv6qYkdc4shoSIY+Ca 3y41xguAz+ndIb4gx0dVe62ajHCmwxAFrxOpYzeF0L37HIzNhBpuHvGR/dpCBgXZ 3q5kSKvwUKYZ+7+DvEui/0fly3f9i6He7zEKEulKhzl/WMlcZ76xM49ZaUhKVXNY p1lXSqR5P5Ex1kY0WQWdlexpJvamc+jUY+NoWbH7uTefTpdD1AqUslv2nJ++Plr2 ZExCgDFXLs2cmttUr3fVfaoZnbOuDUpnjCek/xA5YX00qsKNO1okbSV0Lo1cvRQo IG+0E/030VJFwtRHTINJXALdf4SY/HaLjUQVWVOqSQ1lWmKLNOrL0Jx71/W9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUO7rJxFJMQiKeZXtB3wBYivNBkLUwHwYDVR0j BBgwFoAUX0xJZB4Wd0CMRKCW6efnCaRYCzkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MTkxZjU1ZC1lMzgyLTQ1ODMtOTljZi03MWE0NzE3ZTdmMDkvMC81RjRDNDk2NDFF MTY3NzQwOEM0NEEwOTZFOUU3RTcwOUE0NTgwQjM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNUY0QzQ5NjQxRTE2Nzc0MDhDNDRBMDk2RTlFN0U3MDlBNDU4 MEIzOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjE5MWY1NWQtZTM4Mi00NTgzLTk5 Y2YtNzFhNDcxN2U3ZjA5LzAvNUY0QzQ5NjQxRTE2Nzc0MDhDNDRBMDk2RTlFN0U3 MDlBNDU4MEIzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ3coIr1J6vO73ECaAfsNg+9SFf5mEPpxtcQ iGDz+UdPo7H3ZZ9nFrd270lUmhJaFaRECOsQDroncWgEAZBEtBMH73GOxVVyUgG7 yXLqATWfxoUn2ZqSaxPnk9C+ZYzcpP7oH37dWONngBegMRxivoYCvLQ3AaEBkIup +BQbhFbl5M/zqY2YzmBFuc1FnrsS+6/uGXGR0bFF01Kk/Xj0VsiJL/84CO7mo4/J lkIQ8Z6XAS57p3lO/aPfnrvQka55uOIxSyHfqNhoRfmbdE5WXaM1sC7NRsbCXvxd SiKj+dujbooZGpGr0W/15ylLNFtUvQeOs9ClWcz4jkJySbgN+H0= -----END CERTIFICATE-----Generated at Mon Mar 2 20:37:46 2026 by rpki-client