$ rpki-client -vvf repo-rpki.idnic.net/repo/fcde1cfd-cbbc-4f08-89cb-435a5911f2c2/0/F95ABFECD1F2CDA83B975C1651646721A611A82E.mft File: F95ABFECD1F2CDA83B975C1651646721A611A82E.mft (raw, json) Hash identifier: z9wxVoTD0z+4NQN4p4+kF8m+CYFrLAC72AFWx9+3usA= Subject key identifier: 58:76:6F:69:F5:6A:38:30:09:AF:88:CD:61:01:87:1D:C7:89:04:87 Authority key identifier: F9:5A:BF:EC:D1:F2:CD:A8:3B:97:5C:16:51:64:67:21:A6:11:A8:2E Certificate issuer: /CN=F95ABFECD1F2CDA83B975C1651646721A611A82E Certificate serial: 1F4CB1EEA697EC867803DB44F1C7FDEA86A0AB9E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F95ABFECD1F2CDA83B975C1651646721A611A82E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fcde1cfd-cbbc-4f08-89cb-435a5911f2c2/0/F95ABFECD1F2CDA83B975C1651646721A611A82E.mft Manifest number: 01EA Signing time: Sun 01 Mar 2026 17:52:08 +0000 Manifest this update: Sun 01 Mar 2026 17:47:08 +0000 Manifest next update: Wed 04 Mar 2026 21:09:08 +0000 Files and hashes: 1: F95ABFECD1F2CDA83B975C1651646721A611A82E.crl (hash: dtorzWPJSaWhsxeVb38VFrvOmNy8o3Gjzs85morX07o=) 2: 3130332e3132372e3135342e302f32342d3234203d3e20313530353138.roa (hash: G6TGVbIdxDM3PGXqhIliPZL2762vyLXXOxGMZfTWgBw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fcde1cfd-cbbc-4f08-89cb-435a5911f2c2/0/F95ABFECD1F2CDA83B975C1651646721A611A82E.crl rsync://repo-rpki.idnic.net/repo/fcde1cfd-cbbc-4f08-89cb-435a5911f2c2/0/F95ABFECD1F2CDA83B975C1651646721A611A82E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F95ABFECD1F2CDA83B975C1651646721A611A82E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 21:09:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:4c:b1:ee:a6:97:ec:86:78:03:db:44:f1:c7:fd:ea:86:a0:ab:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F95ABFECD1F2CDA83B975C1651646721A611A82E Validity Not Before: Mar 1 17:47:08 2026 GMT Not After : Mar 4 21:09:08 2026 GMT Subject: CN=58766F69F56A383009AF88CD6101871DC7890487 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d4:52:50:ec:91:74:cb:25:35:eb:9c:d4:3a: 65:f7:4c:e6:e4:8a:43:04:44:e0:6b:73:97:26:0d: f0:74:3c:9b:d9:da:63:ee:cf:89:c4:fa:e3:60:e1: 30:27:5c:7c:9f:a0:73:c6:c7:91:c7:cb:81:b8:51: b7:d3:37:da:ce:5c:9b:9a:1e:23:59:38:8b:25:bf: ad:57:32:7c:8d:f5:8b:59:13:d7:52:56:45:2e:73: d7:88:c1:e5:3a:31:88:cf:37:3c:fb:e2:c4:a2:6f: ec:e3:fd:2f:b9:df:d4:a4:c4:b7:b1:96:72:1d:f4: d9:cd:bd:a2:2f:99:ff:e3:42:a6:6c:99:11:98:41: 97:e2:5b:f1:b9:ce:d9:26:81:0a:46:fc:a9:3f:19: 89:aa:60:75:83:ca:8e:e9:33:43:7f:08:4d:ba:91: ab:8b:b5:8b:c6:13:46:89:42:c9:ff:2e:58:0f:66: e2:f6:0a:0b:e9:0d:f1:e4:1a:d2:41:c2:79:94:ba: 10:21:0b:9c:8b:58:d5:21:35:47:52:c1:a9:2c:e4: a2:06:7f:b0:19:51:69:b7:cd:62:6d:a6:e6:f8:70: 52:87:77:d2:cc:32:de:f9:0c:14:8f:8d:cc:95:f8: ad:62:1e:65:03:f9:ce:25:fa:d5:9b:ba:ff:1c:e9: 15:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:76:6F:69:F5:6A:38:30:09:AF:88:CD:61:01:87:1D:C7:89:04:87 X509v3 Authority Key Identifier: keyid:F9:5A:BF:EC:D1:F2:CD:A8:3B:97:5C:16:51:64:67:21:A6:11:A8:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fcde1cfd-cbbc-4f08-89cb-435a5911f2c2/0/F95ABFECD1F2CDA83B975C1651646721A611A82E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F95ABFECD1F2CDA83B975C1651646721A611A82E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fcde1cfd-cbbc-4f08-89cb-435a5911f2c2/0/F95ABFECD1F2CDA83B975C1651646721A611A82E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:3c:5e:cb:0d:72:22:eb:1a:3b:6b:2c:5a:5a:f3:63:94:ae: ba:9f:a6:f4:84:5b:ed:d6:39:1c:53:9d:88:74:77:8f:d3:1b: 97:c9:65:86:8e:f6:09:98:7a:91:c1:b1:60:08:b9:3a:cd:e5: 49:c9:7c:c4:98:05:4e:e9:c3:0c:76:9f:ed:af:eb:4b:2c:c1: a5:8e:f5:88:ae:7d:06:89:c2:b5:3c:5c:4b:a1:31:7c:8d:19: 6f:45:54:7e:0e:22:43:aa:99:3a:f9:9f:50:c3:35:09:81:9d: bc:ea:d3:52:ef:74:07:d9:d7:89:6a:6e:bc:5e:7b:b5:89:0c: c0:c5:89:27:b1:f8:b2:cc:88:87:fa:07:41:e0:68:f8:07:9a: d1:3f:3a:cc:fb:0a:28:a9:7a:95:00:1b:86:47:53:c2:95:b6: ae:85:d2:41:ad:7b:27:a9:52:9b:24:f4:de:cf:69:50:0c:81: 02:a1:7b:6c:b5:6c:92:83:15:7a:ae:47:f3:e7:e4:03:73:27: 85:7c:1d:c9:d9:05:e1:c4:50:bd:ef:07:e8:cc:5d:95:ad:e0: c5:71:b6:f2:87:cf:54:07:7a:ce:8a:28:fc:71:8f:40:fa:99: 75:fd:5f:14:3c:d9:ee:19:25:47:ea:14:7d:af:d1:a0:aa:af: 1a:3f:00:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH0yx7qaX7IZ4A9tE8cf96oagq54wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjk1QUJGRUNEMUYyQ0RBODNCOTc1QzE2NTE2NDY3MjFB NjExQTgyRTAeFw0yNjAzMDExNzQ3MDhaFw0yNjAzMDQyMTA5MDhaMDMxMTAvBgNV BAMTKDU4NzY2RjY5RjU2QTM4MzAwOUFGODhDRDYxMDE4NzFEQzc4OTA0ODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP1FJQ7JF0yyU165zUOmX3TObk ikMEROBrc5cmDfB0PJvZ2mPuz4nE+uNg4TAnXHyfoHPGx5HHy4G4UbfTN9rOXJua HiNZOIslv61XMnyN9YtZE9dSVkUuc9eIweU6MYjPNzz74sSib+zj/S+539SkxLex lnId9NnNvaIvmf/jQqZsmRGYQZfiW/G5ztkmgQpG/Kk/GYmqYHWDyo7pM0N/CE26 kauLtYvGE0aJQsn/LlgPZuL2CgvpDfHkGtJBwnmUuhAhC5yLWNUhNUdSwaks5KIG f7AZUWm3zWJtpub4cFKHd9LMMt75DBSPjcyV+K1iHmUD+c4l+tWbuv8c6RXJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWHZvafVqODAJr4jNYQGHHceJBIcwHwYDVR0j BBgwFoAU+Vq/7NHyzag7l1wWUWRnIaYRqC4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m Y2RlMWNmZC1jYmJjLTRmMDgtODljYi00MzVhNTkxMWYyYzIvMC9GOTVBQkZFQ0Qx RjJDREE4M0I5NzVDMTY1MTY0NjcyMUE2MTFBODJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjk1QUJGRUNEMUYyQ0RBODNCOTc1QzE2NTE2NDY3MjFBNjEx QTgyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmNkZTFjZmQtY2JiYy00ZjA4LTg5 Y2ItNDM1YTU5MTFmMmMyLzAvRjk1QUJGRUNEMUYyQ0RBODNCOTc1QzE2NTE2NDY3 MjFBNjExQTgyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF88XssNciLrGjtrLFpa82OUrrqfpvSEW+3W ORxTnYh0d4/TG5fJZYaO9gmYepHBsWAIuTrN5UnJfMSYBU7pwwx2n+2v60sswaWO 9YiufQaJwrU8XEuhMXyNGW9FVH4OIkOqmTr5n1DDNQmBnbzq01LvdAfZ14lqbrxe e7WJDMDFiSex+LLMiIf6B0HgaPgHmtE/Osz7CiipepUAG4ZHU8KVtq6F0kGteyep Upsk9N7PaVAMgQKhe2y1bJKDFXquR/Pn5ANzJ4V8HcnZBeHEUL3vB+jMXZWt4MVx tvKHz1QHes6KKPxxj0D6mXX9XxQ82e4ZJUfqFH2v0aCqrxo/APw= -----END CERTIFICATE-----Generated at Mon Mar 2 07:27:25 2026 by rpki-client