$ rpki-client -vvf repo-rpki.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.mft File: 00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.mft (raw, json) Hash identifier: 8B7zW40jSJ0/V0hyuuyjvjlMKIP/nwKOEkKj+eKA4+8= Subject key identifier: 3C:4C:DC:8F:84:7F:2A:1E:4D:CA:FF:BC:F4:01:D0:51:FC:F9:37:33 Authority key identifier: 00:F9:E3:D4:39:56:F7:75:3B:34:BD:1A:48:76:FF:9F:8D:1B:BF:BD Certificate issuer: /CN=00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD Certificate serial: 3030F2FB81B7CA3F2262EF19F1310A810545E01D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.mft Manifest number: 02A7 Signing time: Sun 01 Mar 2026 15:41:53 +0000 Manifest this update: Sun 01 Mar 2026 15:36:53 +0000 Manifest next update: Wed 04 Mar 2026 17:26:53 +0000 Files and hashes: 1: 00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.crl (hash: Ku1vGFVuel4FY9HCWO9m3xMIsIKSEx+d5YPM9KcvuGU=) 2: 3130332e3136362e32362e302f32342d3234203d3e20313431393334.roa (hash: WCPD3rvs/h3EKH86SX2zTuUBCPJyhF6J/Q+pVbsSNFQ=) 3: 3130332e3136362e32372e302f32342d3234203d3e20313431393334.roa (hash: sCYWRL7NfwNer5aCHfI6ENS759QdNaShp3p44D+zbuc=) 4: 3130332e3136362e32362e302f32332d3233203d3e20313431393334.roa (hash: qsNJTbCdEl5g+CtS1gIL++26d6eTd1asuHFx0fLTFCk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.crl rsync://repo-rpki.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 17:26:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:30:f2:fb:81:b7:ca:3f:22:62:ef:19:f1:31:0a:81:05:45:e0:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD Validity Not Before: Mar 1 15:36:53 2026 GMT Not After : Mar 4 17:26:53 2026 GMT Subject: CN=3C4CDC8F847F2A1E4DCAFFBCF401D051FCF93733 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:24:08:e6:a3:c9:ca:be:b6:e1:2d:3b:ee:c0: 30:cc:89:56:0d:f1:dc:c8:c0:c4:ae:ed:43:43:17: 62:86:f7:0b:9d:0a:b0:be:e8:4c:c3:2a:ed:bf:e9: 1c:66:4c:38:0b:47:1e:4a:ef:87:07:d8:f2:d4:cd: 4a:8c:f2:fa:86:30:c2:3b:96:77:7b:bc:95:aa:3c: e3:22:a7:ea:d1:61:25:a1:4a:e4:0a:28:c5:c7:b0: 6a:d6:ff:1c:f1:17:4d:4e:40:77:4a:47:c6:49:fe: bc:d7:21:cf:99:4c:c9:6c:1f:9c:fb:53:4b:c9:f1: 0f:b0:66:bd:a9:62:a9:0b:29:6f:79:42:11:36:a0: a9:fd:8f:c3:a5:c8:d2:4e:05:e7:8d:3f:36:c6:32: 88:6f:cd:ba:c0:a5:76:95:f7:eb:bc:3c:a5:7d:70: 6b:66:12:1b:b5:87:83:19:e7:10:67:50:25:18:58: d6:87:7b:e4:3b:6f:04:25:50:ab:32:ca:e9:11:fb: 30:b5:9d:ee:e1:6a:55:5b:be:0a:31:7d:7b:38:21: 21:0d:75:84:1b:98:7c:ce:ee:b1:39:ad:33:c0:cd: 84:fa:fe:27:01:53:ad:cf:fa:21:06:b0:b8:87:35: c7:5c:fc:9c:18:4b:52:03:6c:57:6c:cd:61:07:25: d5:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:4C:DC:8F:84:7F:2A:1E:4D:CA:FF:BC:F4:01:D0:51:FC:F9:37:33 X509v3 Authority Key Identifier: keyid:00:F9:E3:D4:39:56:F7:75:3B:34:BD:1A:48:76:FF:9F:8D:1B:BF:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:34:a7:66:95:ae:32:85:60:dc:74:46:eb:4a:c1:07:45:ae: 5b:b4:dc:96:30:d3:2d:28:9c:d2:f3:76:6a:59:e4:3e:fa:61: 0b:56:12:38:71:ac:92:18:d6:9a:b6:3e:a7:84:56:b0:0b:84: 6c:f9:9c:2f:cc:d9:21:ea:29:3e:03:f1:46:1c:67:39:e6:a3: 88:d7:cd:6f:96:00:72:6f:67:67:48:87:be:97:b7:00:84:a9: 65:b7:9f:b9:ff:95:ae:dd:0a:d9:35:7a:b8:45:9b:bd:9d:92: 38:16:98:e1:a9:a9:cf:4d:2d:fa:4a:d0:81:9c:82:04:0e:d1: ce:a0:ef:60:4f:db:5e:31:cc:9e:ed:f2:a9:f7:80:3f:7c:ba: cf:99:e7:c3:76:bf:38:92:bc:62:d7:bc:0f:2d:c9:c9:19:62: 32:20:4a:f2:2d:b1:ac:24:f8:c5:8a:2e:2b:8f:d1:cf:30:ed: 50:8b:12:6d:11:57:e6:ab:01:32:fc:2d:20:dc:93:4c:24:45: 2c:f2:96:3a:30:15:5c:d4:b0:d7:b7:0b:3d:1b:5a:c8:d5:0a: c6:a3:95:8d:88:b6:fb:8e:d8:0f:5b:5f:9f:aa:13:40:2c:37: cf:30:e9:e1:19:0b:cb:d4:9b:97:b9:e7:6c:4f:a9:4c:d7:74: ad:2f:bb:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMDDy+4G3yj8iYu8Z8TEKgQVF4B0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDBGOUUzRDQzOTU2Rjc3NTNCMzRCRDFBNDg3NkZGOUY4 RDFCQkZCRDAeFw0yNjAzMDExNTM2NTNaFw0yNjAzMDQxNzI2NTNaMDMxMTAvBgNV BAMTKDNDNENEQzhGODQ3RjJBMUU0RENBRkZCQ0Y0MDFEMDUxRkNGOTM3MzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4JAjmo8nKvrbhLTvuwDDMiVYN 8dzIwMSu7UNDF2KG9wudCrC+6EzDKu2/6RxmTDgLRx5K74cH2PLUzUqM8vqGMMI7 lnd7vJWqPOMip+rRYSWhSuQKKMXHsGrW/xzxF01OQHdKR8ZJ/rzXIc+ZTMlsH5z7 U0vJ8Q+wZr2pYqkLKW95QhE2oKn9j8OlyNJOBeeNPzbGMohvzbrApXaV9+u8PKV9 cGtmEhu1h4MZ5xBnUCUYWNaHe+Q7bwQlUKsyyukR+zC1ne7halVbvgoxfXs4ISEN dYQbmHzO7rE5rTPAzYT6/icBU63P+iEGsLiHNcdc/JwYS1IDbFdszWEHJdU7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPEzcj4R/Kh5Nyv+89AHQUfz5NzMwHwYDVR0j BBgwFoAUAPnj1DlW93U7NL0aSHb/n40bv70wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YTQxNTQzOC1hZDAxLTQyZGMtOGM5Mi0xNTFiYzhjMjcyMWYvMC8wMEY5RTNENDM5 NTZGNzc1M0IzNEJEMUE0ODc2RkY5RjhEMUJCRkJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDBGOUUzRDQzOTU2Rjc3NTNCMzRCRDFBNDg3NkZGOUY4RDFC QkZCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmE0MTU0MzgtYWQwMS00MmRjLThj OTItMTUxYmM4YzI3MjFmLzAvMDBGOUUzRDQzOTU2Rjc3NTNCMzRCRDFBNDg3NkZG OUY4RDFCQkZCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJo0p2aVrjKFYNx0RutKwQdFrlu03JYw0y0o nNLzdmpZ5D76YQtWEjhxrJIY1pq2PqeEVrALhGz5nC/M2SHqKT4D8UYcZznmo4jX zW+WAHJvZ2dIh76XtwCEqWW3n7n/la7dCtk1erhFm72dkjgWmOGpqc9NLfpK0IGc ggQO0c6g72BP214xzJ7t8qn3gD98us+Z58N2vziSvGLXvA8tyckZYjIgSvItsawk +MWKLiuP0c8w7VCLEm0RV+arATL8LSDck0wkRSzyljowFVzUsNe3Cz0bWsjVCsaj lY2ItvuO2A9bX5+qE0AsN88w6eEZC8vUm5e552xPqUzXdK0vu40= -----END CERTIFICATE-----Generated at Mon Mar 2 16:32:44 2026 by rpki-client