$ rpki-client -vvf repo-rpki.idnic.net/repo/f2744dde-7c1f-4cba-93c0-9f0669eeed92/0/FDE6ABEE1B952F4DF85D632A8923FE58A818792A.mft File: FDE6ABEE1B952F4DF85D632A8923FE58A818792A.mft (raw, json) Hash identifier: /z+/8+u7+5dVQn3LoyKLaQvOAsExsPZxARdJL8IKdbs= Subject key identifier: F1:D1:6F:9B:43:EB:5E:99:92:F8:5E:B3:09:14:E1:5C:1C:3A:71:BE Authority key identifier: FD:E6:AB:EE:1B:95:2F:4D:F8:5D:63:2A:89:23:FE:58:A8:18:79:2A Certificate issuer: /CN=FDE6ABEE1B952F4DF85D632A8923FE58A818792A Certificate serial: 09D51D3C6BD52FD2E9E0018CC433FEEB9C231BF2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FDE6ABEE1B952F4DF85D632A8923FE58A818792A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f2744dde-7c1f-4cba-93c0-9f0669eeed92/0/FDE6ABEE1B952F4DF85D632A8923FE58A818792A.mft Manifest number: 01FF Signing time: Mon 02 Mar 2026 03:11:11 +0000 Manifest this update: Mon 02 Mar 2026 03:06:11 +0000 Manifest next update: Thu 05 Mar 2026 08:24:11 +0000 Files and hashes: 1: 3130332e3136302e3138322e302f32332d3234203d3e20313530323038.roa (hash: nYxGm+wXBB6BnWlg8cahicWVzy6cw/+GSLhfcV6lfLY=) 2: FDE6ABEE1B952F4DF85D632A8923FE58A818792A.crl (hash: wUZGrxZ3lxIB7DG4fqmUA+Q1p7FSVVb3tF2mxz+wO9c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f2744dde-7c1f-4cba-93c0-9f0669eeed92/0/FDE6ABEE1B952F4DF85D632A8923FE58A818792A.crl rsync://repo-rpki.idnic.net/repo/f2744dde-7c1f-4cba-93c0-9f0669eeed92/0/FDE6ABEE1B952F4DF85D632A8923FE58A818792A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FDE6ABEE1B952F4DF85D632A8923FE58A818792A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:d5:1d:3c:6b:d5:2f:d2:e9:e0:01:8c:c4:33:fe:eb:9c:23:1b:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FDE6ABEE1B952F4DF85D632A8923FE58A818792A Validity Not Before: Mar 2 03:06:11 2026 GMT Not After : Mar 5 08:24:11 2026 GMT Subject: CN=F1D16F9B43EB5E9992F85EB30914E15C1C3A71BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:04:b3:24:a4:b9:bd:8c:d5:79:cd:9a:c0:36: e0:18:b6:81:59:82:4f:c6:82:c3:ea:68:71:ec:c6: f8:41:78:c0:29:46:d7:a3:08:c5:59:61:39:df:60: 4a:68:2a:dc:5a:c6:fa:cc:89:3d:74:be:f6:c3:8c: 60:8b:b8:ee:78:42:b8:9f:ba:5e:28:54:26:3a:74: ce:91:89:5a:00:32:47:0c:5b:26:71:8b:c5:ce:af: 0c:09:62:1f:61:04:cd:75:04:61:05:68:81:b5:6c: 71:86:21:06:1b:87:1f:01:d0:19:54:fd:cc:9d:f7: 4b:f2:da:ca:b1:90:29:54:cf:9c:64:d2:2a:38:07: 95:9f:8b:e7:c6:7e:b8:9b:28:99:6a:0e:5f:99:1a: e5:52:31:a0:6e:24:c4:4d:08:79:15:f5:89:e7:9a: b9:9d:0d:b9:eb:04:eb:fc:27:5d:b4:01:60:27:d3: a2:ff:c2:03:3e:a6:aa:42:50:a3:c8:63:fc:4a:01: 57:96:47:9c:b8:0a:ce:c2:ac:9a:b6:ec:3b:21:8b: 73:18:17:1c:98:7b:c9:62:2e:86:be:73:61:c0:d7: 24:73:02:2f:44:79:73:9a:95:11:2a:eb:bb:94:24: 29:b7:e1:0b:84:e6:2e:ff:f8:4f:b6:fb:3b:66:a8: 47:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:D1:6F:9B:43:EB:5E:99:92:F8:5E:B3:09:14:E1:5C:1C:3A:71:BE X509v3 Authority Key Identifier: keyid:FD:E6:AB:EE:1B:95:2F:4D:F8:5D:63:2A:89:23:FE:58:A8:18:79:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f2744dde-7c1f-4cba-93c0-9f0669eeed92/0/FDE6ABEE1B952F4DF85D632A8923FE58A818792A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FDE6ABEE1B952F4DF85D632A8923FE58A818792A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2744dde-7c1f-4cba-93c0-9f0669eeed92/0/FDE6ABEE1B952F4DF85D632A8923FE58A818792A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:33:14:15:23:f6:e6:8e:10:87:f5:8c:01:50:a0:00:6b:48: cb:0e:ad:9d:bb:30:44:a7:5e:c7:ec:7b:5d:dd:15:a6:be:12: d3:05:7e:3d:77:02:3b:5e:db:4d:2f:ed:03:a1:bc:8b:35:6c: e4:92:ac:d7:e2:94:e9:a9:4d:f4:a9:41:da:fa:22:00:2e:41: 57:15:e0:4e:75:38:79:79:3b:38:cf:e3:55:bd:b9:08:e6:39: 1f:3d:c8:c8:21:45:af:f0:2e:3f:2d:43:ab:96:72:9a:58:6e: 02:00:7b:31:56:58:a1:a1:89:ca:9d:58:f6:a2:0b:e7:05:2c: e0:da:ac:84:2d:3b:e2:25:02:84:99:e2:24:98:55:c9:d4:dd: 2c:3f:f1:a7:cf:39:bf:6f:79:86:cc:ba:94:b9:d0:a1:11:38: a6:78:c0:f1:e7:8e:a5:c1:7e:98:0f:07:9c:47:12:b2:3d:f2: 22:16:1d:51:83:84:b6:ce:95:99:e9:66:07:69:86:6b:72:9c: fb:96:5b:41:f6:6d:d1:f4:21:1b:ae:42:1d:db:b3:8d:fe:ed: 9d:4f:25:3c:e0:40:d5:15:e7:f4:4b:0b:6d:2d:52:d2:47:fe: 7b:68:78:9f:c6:5b:3c:83:f3:e4:2c:3e:d0:47:59:e7:cc:05: 1a:a1:90:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCdUdPGvVL9Lp4AGMxDP+65wjG/IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkRFNkFCRUUxQjk1MkY0REY4NUQ2MzJBODkyM0ZFNThB ODE4NzkyQTAeFw0yNjAzMDIwMzA2MTFaFw0yNjAzMDUwODI0MTFaMDMxMTAvBgNV BAMTKEYxRDE2RjlCNDNFQjVFOTk5MkY4NUVCMzA5MTRFMTVDMUMzQTcxQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCBLMkpLm9jNV5zZrANuAYtoFZ gk/GgsPqaHHsxvhBeMApRtejCMVZYTnfYEpoKtxaxvrMiT10vvbDjGCLuO54Qrif ul4oVCY6dM6RiVoAMkcMWyZxi8XOrwwJYh9hBM11BGEFaIG1bHGGIQYbhx8B0BlU /cyd90vy2sqxkClUz5xk0io4B5Wfi+fGfribKJlqDl+ZGuVSMaBuJMRNCHkV9Ynn mrmdDbnrBOv8J120AWAn06L/wgM+pqpCUKPIY/xKAVeWR5y4Cs7CrJq27Dshi3MY FxyYe8liLoa+c2HA1yRzAi9EeXOalREq67uUJCm34QuE5i7/+E+2+ztmqEfZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8dFvm0PrXpmS+F6zCRThXBw6cb4wHwYDVR0j BBgwFoAU/ear7huVL034XWMqiSP+WKgYeSowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m Mjc0NGRkZS03YzFmLTRjYmEtOTNjMC05ZjA2NjllZWVkOTIvMC9GREU2QUJFRTFC OTUyRjRERjg1RDYzMkE4OTIzRkU1OEE4MTg3OTJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkRFNkFCRUUxQjk1MkY0REY4NUQ2MzJBODkyM0ZFNThBODE4 NzkyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjI3NDRkZGUtN2MxZi00Y2JhLTkz YzAtOWYwNjY5ZWVlZDkyLzAvRkRFNkFCRUUxQjk1MkY0REY4NUQ2MzJBODkyM0ZF NThBODE4NzkyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALYzFBUj9uaOEIf1jAFQoABrSMsOrZ27MESn Xsfse13dFaa+EtMFfj13Ajte200v7QOhvIs1bOSSrNfilOmpTfSpQdr6IgAuQVcV 4E51OHl5OzjP41W9uQjmOR89yMghRa/wLj8tQ6uWcppYbgIAezFWWKGhicqdWPai C+cFLODarIQtO+IlAoSZ4iSYVcnU3Sw/8afPOb9veYbMupS50KEROKZ4wPHnjqXB fpgPB5xHErI98iIWHVGDhLbOlZnpZgdphmtynPuWW0H2bdH0IRuuQh3bs43+7Z1P JTzgQNUV5/RLC20tUtJH/ntoeJ/GWzyD8+QsPtBHWefMBRqhkOw= -----END CERTIFICATE-----Generated at Mon Mar 2 12:43:02 2026 by rpki-client