$ rpki-client -vvf repo-rpki.idnic.net/repo/f239fdcb-c417-4f3f-b1c9-7e369cde21fd/0/F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.mft File: F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.mft (raw, json) Hash identifier: q9QE3Stho3FcLbHZObsxCxCSixyudWdGlMlqJ4zGuGY= Subject key identifier: 7E:51:93:EE:2D:D8:65:E8:9E:64:DF:4E:A8:D0:6A:84:8A:2F:51:C8 Authority key identifier: F3:81:08:E7:3D:42:C7:F2:0A:64:8C:A9:19:3F:BF:B8:EF:E0:EC:27 Certificate issuer: /CN=F38108E73D42C7F20A648CA9193FBFB8EFE0EC27 Certificate serial: 4C7FC6BF68675A25A0267F452CF7D89A1A206C2D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f239fdcb-c417-4f3f-b1c9-7e369cde21fd/0/F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.mft Manifest number: 020D Signing time: Sat 28 Feb 2026 20:01:44 +0000 Manifest this update: Sat 28 Feb 2026 19:56:44 +0000 Manifest next update: Wed 04 Mar 2026 00:16:44 +0000 Files and hashes: 1: F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.crl (hash: 7Fkv5ja998E6QpCH4Mk9PRSxVreTWyQB/qexz2FBSJM=) 2: 3130332e39372e3233312e302f32342d3234203d3e20313530323831.roa (hash: 12t3q8UKsyUaN7ZPmQ7oKlNAYfCglRtEXGNPube8E5U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f239fdcb-c417-4f3f-b1c9-7e369cde21fd/0/F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.crl rsync://repo-rpki.idnic.net/repo/f239fdcb-c417-4f3f-b1c9-7e369cde21fd/0/F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 00:16:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:7f:c6:bf:68:67:5a:25:a0:26:7f:45:2c:f7:d8:9a:1a:20:6c:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F38108E73D42C7F20A648CA9193FBFB8EFE0EC27 Validity Not Before: Feb 28 19:56:44 2026 GMT Not After : Mar 4 00:16:44 2026 GMT Subject: CN=7E5193EE2DD865E89E64DF4EA8D06A848A2F51C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a0:d4:d9:3c:ea:73:11:21:02:c1:2f:69:31: 42:32:7c:e7:82:30:cf:28:95:4d:04:a0:fa:03:a4: d3:d8:eb:3a:a1:71:5f:da:6f:95:c3:d2:25:0b:d2: 52:6e:77:f8:56:9e:53:f2:5b:a3:0c:2e:de:4e:9a: b0:33:98:d0:c6:88:ac:f3:41:04:3e:74:7f:62:70: cd:49:ce:0f:cb:57:55:dd:42:65:11:38:f2:c9:02: a5:d3:7c:27:ff:21:8f:6e:21:d2:5b:57:d9:ea:1f: 2b:3e:28:05:cc:9e:2a:20:40:77:a9:57:e8:28:23: cd:8b:23:a5:89:e0:72:be:34:ad:9e:22:c6:5a:4f: d5:45:6c:b4:d5:59:03:06:86:92:56:03:74:90:88: 48:0e:b5:db:00:28:99:43:58:06:37:d6:9b:73:2f: b5:e1:ab:ed:09:c4:b0:73:82:ba:df:78:c2:e3:d5: 78:f2:df:88:54:43:95:8b:74:2f:cb:7d:a0:8a:ba: 87:99:6e:82:da:d2:4e:4c:bb:50:91:0f:c1:63:8a: e1:e0:c7:68:67:36:ed:e2:f8:db:3e:37:c3:8e:39: bc:65:52:5a:fe:6c:a2:b7:f3:00:1f:cb:36:e5:e0: d8:c2:7d:6e:3a:d2:a8:0f:b7:d6:06:0f:05:fc:25: 8a:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:51:93:EE:2D:D8:65:E8:9E:64:DF:4E:A8:D0:6A:84:8A:2F:51:C8 X509v3 Authority Key Identifier: keyid:F3:81:08:E7:3D:42:C7:F2:0A:64:8C:A9:19:3F:BF:B8:EF:E0:EC:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f239fdcb-c417-4f3f-b1c9-7e369cde21fd/0/F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f239fdcb-c417-4f3f-b1c9-7e369cde21fd/0/F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:ca:03:3f:13:7c:1e:b9:b6:cd:eb:0f:f1:6f:74:88:3d:7d: 36:f9:6f:cd:f4:e4:4d:d9:11:13:bc:b7:57:7f:cc:03:86:e9: da:8b:83:51:89:6e:fc:8a:41:f1:94:20:64:46:f8:a4:e4:f9: a7:7f:32:8f:9f:a0:08:97:b0:c8:03:d3:1e:5a:5e:66:30:8e: 9b:b0:ff:07:04:b0:f8:f9:6a:86:93:35:27:b6:56:5e:15:25: 92:bf:d9:0b:e6:d6:94:ad:76:05:8e:f9:b7:9a:f1:c2:f2:78: 6c:36:67:1a:e0:2b:db:ad:b5:56:72:28:d7:a9:fd:7d:11:aa: 8f:72:fe:5e:2e:fa:39:22:28:cc:30:f1:e2:7c:52:0b:6c:52: bb:e1:15:73:ce:f8:73:da:95:fc:ae:df:31:da:21:83:27:a2: 8e:b6:b2:5e:90:fa:12:90:1c:e3:2d:55:76:e3:34:f0:6c:1d: 59:6a:42:de:92:35:31:fd:11:57:0c:c4:e6:d0:21:80:3e:68: 6b:86:2f:2e:e8:7e:e3:b8:6f:24:f0:bd:41:6d:76:55:00:fc: 18:a7:8f:dd:62:16:a6:35:68:4a:27:75:cd:c5:61:40:6a:c0: b1:ee:9f:41:cd:bc:96:bf:cc:23:18:b1:1f:b1:fa:d1:6b:98: 43:ae:1f:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTH/Gv2hnWiWgJn9FLPfYmhogbC0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM4MTA4RTczRDQyQzdGMjBBNjQ4Q0E5MTkzRkJGQjhF RkUwRUMyNzAeFw0yNjAyMjgxOTU2NDRaFw0yNjAzMDQwMDE2NDRaMDMxMTAvBgNV BAMTKDdFNTE5M0VFMkREODY1RTg5RTY0REY0RUE4RDA2QTg0OEEyRjUxQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAoNTZPOpzESECwS9pMUIyfOeC MM8olU0EoPoDpNPY6zqhcV/ab5XD0iUL0lJud/hWnlPyW6MMLt5OmrAzmNDGiKzz QQQ+dH9icM1Jzg/LV1XdQmUROPLJAqXTfCf/IY9uIdJbV9nqHys+KAXMniogQHep V+goI82LI6WJ4HK+NK2eIsZaT9VFbLTVWQMGhpJWA3SQiEgOtdsAKJlDWAY31ptz L7Xhq+0JxLBzgrrfeMLj1Xjy34hUQ5WLdC/LfaCKuoeZboLa0k5Mu1CRD8FjiuHg x2hnNu3i+Ns+N8OOObxlUlr+bKK38wAfyzbl4NjCfW460qgPt9YGDwX8JYpBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUflGT7i3YZeieZN9OqNBqhIovUcgwHwYDVR0j BBgwFoAU84EI5z1Cx/IKZIypGT+/uO/g7CcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MjM5ZmRjYi1jNDE3LTRmM2YtYjFjOS03ZTM2OWNkZTIxZmQvMC9GMzgxMDhFNzNE NDJDN0YyMEE2NDhDQTkxOTNGQkZCOEVGRTBFQzI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjM4MTA4RTczRDQyQzdGMjBBNjQ4Q0E5MTkzRkJGQjhFRkUw RUMyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjIzOWZkY2ItYzQxNy00ZjNmLWIx YzktN2UzNjljZGUyMWZkLzAvRjM4MTA4RTczRDQyQzdGMjBBNjQ4Q0E5MTkzRkJG QjhFRkUwRUMyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAvKAz8TfB65ts3rD/FvdIg9fTb5b8305E3Z ERO8t1d/zAOG6dqLg1GJbvyKQfGUIGRG+KTk+ad/Mo+foAiXsMgD0x5aXmYwjpuw /wcEsPj5aoaTNSe2Vl4VJZK/2Qvm1pStdgWO+bea8cLyeGw2ZxrgK9uttVZyKNep /X0Rqo9y/l4u+jkiKMww8eJ8UgtsUrvhFXPO+HPalfyu3zHaIYMnoo62sl6Q+hKQ HOMtVXbjNPBsHVlqQt6SNTH9EVcMxObQIYA+aGuGLy7ofuO4byTwvUFtdlUA/Bin j91iFqY1aEondc3FYUBqwLHun0HNvJa/zCMYsR+x+tFrmEOuHyM= -----END CERTIFICATE-----Generated at Mon Mar 2 00:35:17 2026 by rpki-client