$ rpki-client -vvf repo-rpki.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.mft File: F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.mft (raw, json) Hash identifier: KDQmXW6jfa4K/34bYskgZoJMGUpsz3PkGQe6qR2u5MQ= Subject key identifier: 9F:6E:97:68:C9:E1:FF:11:BD:6C:99:93:2E:F3:50:CB:06:0E:64:35 Authority key identifier: F2:CC:4B:38:29:5B:A8:B2:11:B5:5A:53:DA:0A:CB:76:DA:63:6E:70 Certificate issuer: /CN=F2CC4B38295BA8B211B55A53DA0ACB76DA636E70 Certificate serial: 73A0625F74E2A29AA0CC4D3579C4CE2F42A22DF1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.mft Manifest number: 03E8 Signing time: Sun 01 Mar 2026 16:02:18 +0000 Manifest this update: Sun 01 Mar 2026 15:57:18 +0000 Manifest next update: Wed 04 Mar 2026 17:20:18 +0000 Files and hashes: 1: 3130332e3136382e34372e302f32342d3234203d3e20313432333130.roa (hash: xdErjCfMk966tDU4iQnRJbOhsmBX3IXD1cFh9Iu8PEY=) 2: 3130332e3136382e34362e302f32342d3234203d3e20313432333130.roa (hash: /hqFM8bn3tDhrg+XA2pNRGjXcuItTuse0QHD782i5/Q=) 3: 3130332e3136382e34362e302f32332d3233203d3e20313432333130.roa (hash: UuTu7e3+zWAM3tqzM1lDC6GDGKFz8QAZ3rF08nv/dYo=) 4: F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.crl (hash: wFVhPykA4RPZoayE0TTSUXzyiFhvuDOhAISTM+d3h/0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.crl rsync://repo-rpki.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 17:20:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:a0:62:5f:74:e2:a2:9a:a0:cc:4d:35:79:c4:ce:2f:42:a2:2d:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2CC4B38295BA8B211B55A53DA0ACB76DA636E70 Validity Not Before: Mar 1 15:57:18 2026 GMT Not After : Mar 4 17:20:18 2026 GMT Subject: CN=9F6E9768C9E1FF11BD6C99932EF350CB060E6435 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:98:85:46:cc:fb:67:21:71:83:58:ce:cc:b6: 67:7c:86:da:f5:25:96:26:fa:0c:ca:e2:f8:75:d8: 17:e6:13:9c:72:77:38:6b:9e:fd:8b:ed:88:d9:9f: 6d:d5:f7:f5:72:de:5d:e5:21:d4:51:25:34:df:6b: 21:21:21:28:b8:33:f2:c8:a6:bc:2f:f0:b3:27:32: a1:5c:58:c4:17:c9:45:d6:4d:14:c8:35:36:de:d9: 6a:39:ce:61:06:27:39:2e:3c:17:27:1e:8e:c9:ad: a1:15:a1:e3:3d:87:3a:50:76:f5:d7:27:8d:69:bc: 9e:47:11:a7:25:78:54:d9:fc:87:02:61:2d:8b:b5: 89:b9:03:6c:fb:a6:a9:40:07:6f:34:bb:d0:c7:20: 80:3f:ad:9b:93:f0:4f:17:9c:bb:32:3c:69:64:6b: 1d:bd:1d:0a:57:30:52:68:89:31:46:3e:45:8e:c3: 1e:72:a8:7e:9d:ce:c4:36:e1:f6:63:38:b7:44:17: de:78:3f:c1:29:41:88:c7:db:a6:d3:67:19:2f:f4: 02:f4:8b:89:d2:8a:f5:9f:e9:50:7e:a6:c9:d8:05: 2e:3e:82:d0:a5:99:65:8b:cc:1a:68:1d:14:d7:1a: 02:d0:a3:36:3b:88:83:4f:65:2e:d7:69:6e:a8:96: 9e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:6E:97:68:C9:E1:FF:11:BD:6C:99:93:2E:F3:50:CB:06:0E:64:35 X509v3 Authority Key Identifier: keyid:F2:CC:4B:38:29:5B:A8:B2:11:B5:5A:53:DA:0A:CB:76:DA:63:6E:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:cc:74:58:79:01:3e:5f:d5:7f:f1:2b:c2:fa:7a:68:52:fc: d1:ef:bb:e6:6b:95:dd:6a:94:45:bf:12:08:34:60:42:09:58: b4:27:c3:6d:96:6b:b8:9e:01:da:e0:d6:41:2d:54:12:62:83: 47:5a:0d:59:5d:8a:92:2d:04:0d:57:43:51:d2:5b:b6:52:5c: 74:5d:4a:eb:e2:ab:42:59:95:63:7e:3b:5f:6b:31:8f:12:c0: e2:14:86:a7:8d:ec:bf:de:2f:06:29:6c:3e:11:16:19:10:a5: c9:4e:c0:e4:7d:20:a1:e9:80:51:22:a1:96:db:05:7d:9b:53: 42:ad:03:04:37:a3:91:79:39:8a:28:97:d1:b1:bb:ba:7b:93: 10:c6:ec:38:d1:da:af:49:d9:a3:5d:c3:e4:9c:35:90:73:a5: af:f8:ea:c9:09:48:69:1e:3b:39:13:e2:b5:15:ef:37:94:6a: f1:65:af:f9:2e:40:fd:2e:f1:c6:5e:7f:12:e7:91:ef:bc:9d: 3e:25:31:6a:45:a6:8e:4a:f9:50:03:c3:a8:8c:3b:05:18:30: 1f:08:3b:95:69:e0:b7:fb:fb:7f:f3:9b:d8:31:a0:55:84:38: a7:8d:9e:62:3c:27:a2:22:3e:6c:4f:4c:11:70:ee:ca:bc:3b: a3:5e:73:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc6BiX3TiopqgzE01ecTOL0KiLfEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjJDQzRCMzgyOTVCQThCMjExQjU1QTUzREEwQUNCNzZE QTYzNkU3MDAeFw0yNjAzMDExNTU3MThaFw0yNjAzMDQxNzIwMThaMDMxMTAvBgNV BAMTKDlGNkU5NzY4QzlFMUZGMTFCRDZDOTk5MzJFRjM1MENCMDYwRTY0MzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCmIVGzPtnIXGDWM7Mtmd8htr1 JZYm+gzK4vh12BfmE5xydzhrnv2L7YjZn23V9/Vy3l3lIdRRJTTfayEhISi4M/LI prwv8LMnMqFcWMQXyUXWTRTINTbe2Wo5zmEGJzkuPBcnHo7JraEVoeM9hzpQdvXX J41pvJ5HEacleFTZ/IcCYS2LtYm5A2z7pqlAB280u9DHIIA/rZuT8E8XnLsyPGlk ax29HQpXMFJoiTFGPkWOwx5yqH6dzsQ24fZjOLdEF954P8EpQYjH26bTZxkv9AL0 i4nSivWf6VB+psnYBS4+gtClmWWLzBpoHRTXGgLQozY7iINPZS7XaW6olp4DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUn26XaMnh/xG9bJmTLvNQywYOZDUwHwYDVR0j BBgwFoAU8sxLOClbqLIRtVpT2grLdtpjbnAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NDI5M2M2NC1lYTAwLTQxM2YtOTA5MC0yYjE5MGIxYTQ1YWYvMC9GMkNDNEIzODI5 NUJBOEIyMTFCNTVBNTNEQTBBQ0I3NkRBNjM2RTcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjJDQzRCMzgyOTVCQThCMjExQjU1QTUzREEwQUNCNzZEQTYz NkU3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjQyOTNjNjQtZWEwMC00MTNmLTkw OTAtMmIxOTBiMWE0NWFmLzAvRjJDQzRCMzgyOTVCQThCMjExQjU1QTUzREEwQUNC NzZEQTYzNkU3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADDMdFh5AT5f1X/xK8L6emhS/NHvu+Zrld1q lEW/Egg0YEIJWLQnw22Wa7ieAdrg1kEtVBJig0daDVldipItBA1XQ1HSW7ZSXHRd Suviq0JZlWN+O19rMY8SwOIUhqeN7L/eLwYpbD4RFhkQpclOwOR9IKHpgFEioZbb BX2bU0KtAwQ3o5F5OYool9Gxu7p7kxDG7DjR2q9J2aNdw+ScNZBzpa/46skJSGke OzkT4rUV7zeUavFlr/kuQP0u8cZefxLnke+8nT4lMWpFpo5K+VADw6iMOwUYMB8I O5Vp4Lf7+3/zm9gxoFWEOKeNnmI8J6IiPmxPTBFw7sq8O6NecwA= -----END CERTIFICATE-----Generated at Mon Mar 2 14:26:22 2026 by rpki-client