$ rpki-client -vvf repo-rpki.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.mft File: F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.mft (raw, json) Hash identifier: 2XD7JKruPO+YHskSuN/4xJovA9k6wgtSVC5GNsZeL4w= Subject key identifier: 89:E0:66:A9:D4:01:E5:84:30:8E:84:FB:3B:9F:C6:2E:9D:50:55:ED Authority key identifier: F1:0D:F0:FD:3D:45:5B:BA:95:D0:CE:9E:AA:27:EE:38:3E:44:D6:AF Certificate issuer: /CN=F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF Certificate serial: 25F3C277667017E6D55E546CCADA01405444243B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.mft Manifest number: 0329 Signing time: Sun 01 Mar 2026 00:20:57 +0000 Manifest this update: Sun 01 Mar 2026 00:15:57 +0000 Manifest next update: Wed 04 Mar 2026 01:04:57 +0000 Files and hashes: 1: 3130332e3136392e3133362e302f32332d3234203d3e203538383231.roa (hash: JP1YqhEOJY1Cdv/h1dRSKlUNEpZlyXiIJsuj7P3SVio=) 2: F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.crl (hash: N37kBRpstzYyFCB4zJ9NUPGLlHnj/ykWxsZePT2ZDnY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.crl rsync://repo-rpki.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 01:04:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:f3:c2:77:66:70:17:e6:d5:5e:54:6c:ca:da:01:40:54:44:24:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF Validity Not Before: Mar 1 00:15:57 2026 GMT Not After : Mar 4 01:04:57 2026 GMT Subject: CN=89E066A9D401E584308E84FB3B9FC62E9D5055ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a3:e5:4f:d1:69:c6:66:ce:e7:1a:43:ff:3c: 1c:12:fb:52:e0:f9:87:04:20:90:8e:04:64:49:c0: 41:a9:a0:42:07:24:d8:70:3d:d4:27:68:3a:92:f0: 60:c0:8a:08:b8:aa:91:22:80:0e:e2:3d:57:9c:65: ed:fb:f6:69:24:37:4a:95:78:32:88:89:13:ba:2e: d0:ca:33:ad:c6:fb:61:70:e0:11:b7:f7:73:21:eb: e0:c4:52:7b:3c:4a:17:d7:69:fe:98:c1:77:be:4f: 15:59:c2:7c:2d:46:ec:76:2e:a9:cf:55:22:53:28: 86:b1:60:44:20:0d:81:32:71:a2:aa:e1:52:f1:cb: cc:b1:98:26:8a:db:18:b1:a1:59:7e:b2:b2:9b:c6: fd:ba:6f:2e:5a:42:de:37:43:8e:6d:d1:14:af:c9: f9:a4:cd:08:46:52:6f:f9:d8:6c:51:c8:38:e0:c5: 95:3b:8d:a2:7b:14:97:aa:e4:be:f2:a6:f9:4d:cc: 3e:b5:ee:08:dd:54:1e:15:96:72:ea:3c:e3:38:55: 89:3c:fb:21:52:d5:56:80:f6:ca:4b:6c:18:c5:eb: 12:f3:8e:c6:9b:2e:4a:7d:3a:70:3b:a2:23:d1:3f: 79:3d:3b:0a:47:2a:a1:c3:da:b6:41:df:ec:2f:9d: 81:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:E0:66:A9:D4:01:E5:84:30:8E:84:FB:3B:9F:C6:2E:9D:50:55:ED X509v3 Authority Key Identifier: keyid:F1:0D:F0:FD:3D:45:5B:BA:95:D0:CE:9E:AA:27:EE:38:3E:44:D6:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e8:43:fe:f4:0a:af:5e:9f:f5:21:8e:05:1b:79:8f:3e:c7:e3: a8:71:94:9c:8a:a7:e4:fd:e6:d8:75:a5:e8:51:0c:70:a9:54: ef:77:3c:1c:51:94:fb:da:51:8d:25:ae:21:ec:a1:d5:e5:69: 49:dc:3a:73:2f:23:48:02:3c:66:0f:26:92:90:7c:55:d4:e6: ce:21:02:b4:ea:d7:d5:8e:7d:99:d7:9b:f2:3c:bb:32:6d:87: 99:6d:c5:84:cb:92:39:61:1f:37:d7:76:2c:a5:83:78:79:d7: 6b:2c:dd:8f:0e:ea:06:dc:f1:ac:8d:3d:40:73:41:46:71:7c: 6e:37:e1:4f:f0:cd:38:a5:fe:df:28:72:b8:41:92:a1:b8:5e: fa:08:29:88:ad:6a:15:4e:36:39:18:fc:95:a4:90:70:76:78: a8:0e:0c:73:a8:ae:42:9b:dc:91:95:7c:c4:2c:e5:5d:df:15: 68:b1:a5:be:32:78:da:27:15:67:0e:41:bd:6d:31:d3:bb:3c: 7c:36:10:f6:a5:41:e5:b5:65:37:9c:be:05:74:ba:7f:5f:e2: fa:dd:19:07:f1:0a:df:53:16:31:41:b4:7e:69:82:00:2d:2d: 7c:9e:b2:a5:73:03:e9:21:8d:77:4a:d2:dd:4a:bf:ad:36:1a: b0:92:c1:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJfPCd2ZwF+bVXlRsytoBQFREJDswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjEwREYwRkQzRDQ1NUJCQTk1RDBDRTlFQUEyN0VFMzgz RTQ0RDZBRjAeFw0yNjAzMDEwMDE1NTdaFw0yNjAzMDQwMTA0NTdaMDMxMTAvBgNV BAMTKDg5RTA2NkE5RDQwMUU1ODQzMDhFODRGQjNCOUZDNjJFOUQ1MDU1RUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGo+VP0WnGZs7nGkP/PBwS+1Lg +YcEIJCOBGRJwEGpoEIHJNhwPdQnaDqS8GDAigi4qpEigA7iPVecZe379mkkN0qV eDKIiRO6LtDKM63G+2Fw4BG393Mh6+DEUns8ShfXaf6YwXe+TxVZwnwtRux2LqnP VSJTKIaxYEQgDYEycaKq4VLxy8yxmCaK2xixoVl+srKbxv26by5aQt43Q45t0RSv yfmkzQhGUm/52GxRyDjgxZU7jaJ7FJeq5L7ypvlNzD617gjdVB4VlnLqPOM4VYk8 +yFS1VaA9spLbBjF6xLzjsabLkp9OnA7oiPRP3k9OwpHKqHD2rZB3+wvnYEZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUieBmqdQB5YQwjoT7O5/GLp1QVe0wHwYDVR0j BBgwFoAU8Q3w/T1FW7qV0M6eqifuOD5E1q8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MWNiMmU4ZS1hMWEyLTRjYTAtODBiMC0yMjU1MThmZmFlMTQvMC9GMTBERjBGRDNE NDU1QkJBOTVEMENFOUVBQTI3RUUzODNFNDRENkFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjEwREYwRkQzRDQ1NUJCQTk1RDBDRTlFQUEyN0VFMzgzRTQ0 RDZBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjFjYjJlOGUtYTFhMi00Y2EwLTgw YjAtMjI1NTE4ZmZhZTE0LzAvRjEwREYwRkQzRDQ1NUJCQTk1RDBDRTlFQUEyN0VF MzgzRTQ0RDZBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOhD/vQKr16f9SGOBRt5jz7H46hxlJyKp+T9 5th1pehRDHCpVO93PBxRlPvaUY0lriHsodXlaUncOnMvI0gCPGYPJpKQfFXU5s4h ArTq19WOfZnXm/I8uzJth5ltxYTLkjlhHzfXdiylg3h512ss3Y8O6gbc8ayNPUBz QUZxfG434U/wzTil/t8ocrhBkqG4XvoIKYitahVONjkY/JWkkHB2eKgODHOorkKb 3JGVfMQs5V3fFWixpb4yeNonFWcOQb1tMdO7PHw2EPalQeW1ZTecvgV0un9f4vrd GQfxCt9TFjFBtH5pggAtLXyesqVzA+khjXdK0t1Kv602GrCSwTc= -----END CERTIFICATE-----Generated at Sun Mar 1 23:54:40 2026 by rpki-client