$ rpki-client -vvf repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.mft File: FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.mft (raw, json) Hash identifier: Xlh8ovzHg0O8FaAaBEo9h5a2VbepbCmIMifyYo67Csg= Subject key identifier: 61:A1:AC:68:EE:A1:2C:9C:1B:23:6F:51:5B:84:7C:28:DB:0A:84:0B Authority key identifier: FF:77:50:7E:6D:1F:0E:0B:6E:B0:11:2E:9C:FB:D1:AF:1C:1F:6D:D4 Certificate issuer: /CN=FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4 Certificate serial: 3F1C54F13930A7D33D43E62DCF263E27D4A6FE41 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.mft Manifest number: 0257 Signing time: Mon 02 Mar 2026 11:52:33 +0000 Manifest this update: Mon 02 Mar 2026 11:47:33 +0000 Manifest next update: Thu 05 Mar 2026 14:29:33 +0000 Files and hashes: 1: 3130332e3137372e31352e302f32342d3234203d3e20313437313338.roa (hash: eF9NB+BjEkYpNET986L8/mFTnt6eJT0/RWpF2VpYMW8=) 2: FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.crl (hash: eT+0jr04bqpGmHpWjUD9v4CTWHJmpucdQUD70MPLTqo=) 3: 3130332e3137372e31342e302f32332d3233203d3e20313437313338.roa (hash: 5z8wRtouH3UZuHrJrJfhmhXWcm8bh9b9rb8I23FOiCg=) 4: 3130332e3137372e31342e302f32342d3234203d3e20313437313338.roa (hash: 2HLKDZ4NotrKv5eD+avvVTu9dBP+/6Ewaq5ipG+lyWE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.crl rsync://repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:1c:54:f1:39:30:a7:d3:3d:43:e6:2d:cf:26:3e:27:d4:a6:fe:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4 Validity Not Before: Mar 2 11:47:33 2026 GMT Not After : Mar 5 14:29:33 2026 GMT Subject: CN=61A1AC68EEA12C9C1B236F515B847C28DB0A840B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ad:c6:25:08:25:6d:44:bb:55:b8:81:5b:09: ce:a8:81:ae:72:64:fa:4f:1f:4b:5b:23:6b:6f:f3: b2:d0:b2:b2:19:7a:d2:79:e6:1b:e6:0b:30:71:7e: f5:32:d6:8f:ac:84:8f:a6:5c:cc:ac:53:67:ea:21: 45:bc:a5:90:ac:0d:9a:24:bd:7e:1f:04:9c:9a:78: fc:59:e3:18:86:22:bb:7a:86:35:c3:3d:c2:a9:73: 70:25:f2:3f:54:4a:90:61:1c:b8:c9:16:8b:d8:64: de:61:a1:06:d9:e0:9b:a4:f1:ea:11:dc:54:3a:21: 8a:a0:52:f7:1a:aa:ff:f9:8c:15:a8:43:f4:31:58: d7:e4:75:ec:02:20:34:b0:f6:1b:b2:6f:d0:e3:72: 89:4c:9c:43:0c:24:7e:c0:71:e8:0d:44:a3:ff:ef: 96:f8:47:1c:e9:ac:14:88:5a:4a:d3:d7:44:57:9b: e7:96:a5:9e:75:17:41:db:cf:2b:26:7e:98:b2:02: 5c:c7:22:ec:91:b5:c3:2b:f8:e5:10:7c:23:02:cc: f8:46:d4:05:64:c2:94:c1:bc:6a:ea:d7:50:48:81: 65:20:0a:09:ec:4b:a9:11:98:8f:57:7a:78:7f:f3: 26:dc:5c:0d:a0:cc:9f:d8:2f:79:a0:56:d5:68:1a: bb:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:A1:AC:68:EE:A1:2C:9C:1B:23:6F:51:5B:84:7C:28:DB:0A:84:0B X509v3 Authority Key Identifier: keyid:FF:77:50:7E:6D:1F:0E:0B:6E:B0:11:2E:9C:FB:D1:AF:1C:1F:6D:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:b5:02:a8:eb:8c:ca:c0:3d:dc:9d:58:61:46:9e:b9:d1:7f: fd:66:71:b5:c4:95:2c:5d:09:0d:44:5d:3a:a6:08:59:0e:2d: d6:73:09:20:07:36:34:01:f7:4d:76:ba:00:7f:c3:f3:b2:20: ec:7c:ea:0f:e5:ee:4a:50:70:5f:ce:b9:7d:00:56:ce:99:9d: cf:47:ca:54:cd:7e:73:e0:d7:08:8c:cf:d1:9b:dc:94:1b:c4: c2:96:22:2c:7c:95:2e:12:cf:98:f2:30:15:d6:cc:f2:a3:05: f8:95:c8:c0:87:e6:2c:00:b4:aa:ab:ac:02:64:72:c3:f5:b2: e0:c9:4b:f0:65:11:44:b6:b6:3c:71:81:5b:a5:a7:24:e1:8e: ab:6f:3d:45:ea:15:c7:80:50:73:78:3f:5e:a9:f9:39:bf:62: 6d:6b:1f:bb:8d:54:1a:07:64:12:64:9c:17:83:31:ae:f7:c4: d0:8a:c3:eb:99:bb:c8:2f:d1:81:86:b2:c7:29:0b:ba:6f:a8: 58:d4:97:19:2f:54:a4:24:2f:38:59:bc:50:99:85:d1:b7:4e: b9:bf:c2:76:62:ad:67:f5:e4:55:94:a6:94:b6:eb:28:13:f0: 8a:c1:05:97:46:a3:1b:90:b8:ee:10:39:26:9c:08:b0:fb:68: cc:c8:f1:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPxxU8Tkwp9M9Q+YtzyY+J9Sm/kEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY3NzUwN0U2RDFGMEUwQjZFQjAxMTJFOUNGQkQxQUYx QzFGNkRENDAeFw0yNjAzMDIxMTQ3MzNaFw0yNjAzMDUxNDI5MzNaMDMxMTAvBgNV BAMTKDYxQTFBQzY4RUVBMTJDOUMxQjIzNkY1MTVCODQ3QzI4REIwQTg0MEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQrcYlCCVtRLtVuIFbCc6oga5y ZPpPH0tbI2tv87LQsrIZetJ55hvmCzBxfvUy1o+shI+mXMysU2fqIUW8pZCsDZok vX4fBJyaePxZ4xiGIrt6hjXDPcKpc3Al8j9USpBhHLjJFovYZN5hoQbZ4Juk8eoR 3FQ6IYqgUvcaqv/5jBWoQ/QxWNfkdewCIDSw9huyb9DjcolMnEMMJH7AcegNRKP/ 75b4RxzprBSIWkrT10RXm+eWpZ51F0HbzysmfpiyAlzHIuyRtcMr+OUQfCMCzPhG 1AVkwpTBvGrq11BIgWUgCgnsS6kRmI9Xenh/8ybcXA2gzJ/YL3mgVtVoGrtFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYaGsaO6hLJwbI29RW4R8KNsKhAswHwYDVR0j BBgwFoAU/3dQfm0fDgtusBEunPvRrxwfbdQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YmUwNDAzOC1hMWI2LTQzMmMtODU0Yi1jYzZlOGNmMzJlMDYvMC9GRjc3NTA3RTZE MUYwRTBCNkVCMDExMkU5Q0ZCRDFBRjFDMUY2REQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkY3NzUwN0U2RDFGMEUwQjZFQjAxMTJFOUNGQkQxQUYxQzFG NkRENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmJlMDQwMzgtYTFiNi00MzJjLTg1 NGItY2M2ZThjZjMyZTA2LzAvRkY3NzUwN0U2RDFGMEUwQjZFQjAxMTJFOUNGQkQx QUYxQzFGNkRENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALK1AqjrjMrAPdydWGFGnrnRf/1mcbXElSxd CQ1EXTqmCFkOLdZzCSAHNjQB9012ugB/w/OyIOx86g/l7kpQcF/OuX0AVs6Znc9H ylTNfnPg1wiMz9Gb3JQbxMKWIix8lS4Sz5jyMBXWzPKjBfiVyMCH5iwAtKqrrAJk csP1suDJS/BlEUS2tjxxgVulpyThjqtvPUXqFceAUHN4P16p+Tm/Ym1rH7uNVBoH ZBJknBeDMa73xNCKw+uZu8gv0YGGsscpC7pvqFjUlxkvVKQkLzhZvFCZhdG3Trm/ wnZirWf15FWUppS26ygT8IrBBZdGoxuQuO4QOSacCLD7aMzI8Wk= -----END CERTIFICATE-----Generated at Mon Mar 2 15:15:34 2026 by rpki-client