$ rpki-client -vvf repo-rpki.idnic.net/repo/fd1fc1a2-ee77-405f-9e31-adc6dfc9b74c/0/F38B6752412BBA5BA6A00E0BD400D0920CA01E22.mft File: F38B6752412BBA5BA6A00E0BD400D0920CA01E22.mft (raw, json) Hash identifier: slS9VnpBg0VqJ4s25FKyuw6TiTFKvW/IIJr/AAnScpQ= Subject key identifier: 08:C6:9A:14:71:AD:44:BF:AB:C5:27:96:9C:60:87:25:70:C0:A1:70 Authority key identifier: F3:8B:67:52:41:2B:BA:5B:A6:A0:0E:0B:D4:00:D0:92:0C:A0:1E:22 Certificate issuer: /CN=F38B6752412BBA5BA6A00E0BD400D0920CA01E22 Certificate serial: 3622903CE152CB0643E96D16BFAA07143AEB0B86 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F38B6752412BBA5BA6A00E0BD400D0920CA01E22.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fd1fc1a2-ee77-405f-9e31-adc6dfc9b74c/0/F38B6752412BBA5BA6A00E0BD400D0920CA01E22.mft Manifest number: 0137 Signing time: Sat 28 Feb 2026 17:02:12 +0000 Manifest this update: Sat 28 Feb 2026 16:57:12 +0000 Manifest next update: Wed 04 Mar 2026 01:14:12 +0000 Files and hashes: 1: 3135372e31352e3231322e302f32342d3234203d3e20313532343036.roa (hash: yE+USKMsb9lpbpjN38Yp2/xMu2avQMNjXPmfwu/UPEs=) 2: F38B6752412BBA5BA6A00E0BD400D0920CA01E22.crl (hash: 6f9vM6GveG+ZiGIfyPwMeJAdX26IOGhF35JzIMaTj2I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fd1fc1a2-ee77-405f-9e31-adc6dfc9b74c/0/F38B6752412BBA5BA6A00E0BD400D0920CA01E22.crl rsync://repo-rpki.idnic.net/repo/fd1fc1a2-ee77-405f-9e31-adc6dfc9b74c/0/F38B6752412BBA5BA6A00E0BD400D0920CA01E22.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F38B6752412BBA5BA6A00E0BD400D0920CA01E22.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 01:14:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:22:90:3c:e1:52:cb:06:43:e9:6d:16:bf:aa:07:14:3a:eb:0b:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F38B6752412BBA5BA6A00E0BD400D0920CA01E22 Validity Not Before: Feb 28 16:57:12 2026 GMT Not After : Mar 4 01:14:12 2026 GMT Subject: CN=08C69A1471AD44BFABC527969C60872570C0A170 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:56:89:39:e3:a0:0a:6e:47:83:06:98:c7:7e: e8:f8:e5:e5:db:cc:b4:6e:47:26:41:e7:95:4f:e0: fd:05:60:4e:c6:5d:27:4d:8f:6b:c7:61:5d:b8:a4: 95:bf:7a:e1:88:81:22:3c:47:a0:25:64:cf:d1:bc: 0d:9b:79:6e:5c:77:f1:05:fa:1d:cc:50:cf:0a:18: 54:6e:1f:10:83:2f:25:f7:54:19:58:5d:26:67:09: 25:b6:01:87:ac:de:af:fc:7a:2c:cc:60:d9:19:2f: e4:70:98:83:29:0a:70:f1:27:ec:a6:25:52:d8:b7: 7c:40:2e:41:5f:3a:28:56:e2:bd:41:a0:90:38:cb: 3c:03:62:70:6e:0d:53:14:d2:d5:29:15:08:5b:f1: e1:cb:c7:b4:5d:4d:d3:a7:69:d3:ed:66:ee:d3:95: 93:5a:e5:04:c2:3a:16:6e:54:ae:ae:f4:76:12:53: 05:86:61:46:97:1c:4c:66:7e:4b:e6:ec:81:76:6f: d4:d5:3a:f0:a9:1b:b4:23:51:3a:4c:26:bd:29:dd: 90:5e:c6:b2:b7:cc:36:97:e5:d9:72:76:f1:e7:fa: fb:08:5e:6d:dd:fb:1d:34:f1:59:9c:c2:e9:88:09: af:61:91:f9:cd:79:ac:7b:81:ac:65:9c:0c:f5:cc: c5:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:C6:9A:14:71:AD:44:BF:AB:C5:27:96:9C:60:87:25:70:C0:A1:70 X509v3 Authority Key Identifier: keyid:F3:8B:67:52:41:2B:BA:5B:A6:A0:0E:0B:D4:00:D0:92:0C:A0:1E:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fd1fc1a2-ee77-405f-9e31-adc6dfc9b74c/0/F38B6752412BBA5BA6A00E0BD400D0920CA01E22.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F38B6752412BBA5BA6A00E0BD400D0920CA01E22.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fd1fc1a2-ee77-405f-9e31-adc6dfc9b74c/0/F38B6752412BBA5BA6A00E0BD400D0920CA01E22.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:36:6f:c7:61:09:ff:92:61:b9:94:80:73:3d:a5:bb:18:3a: b9:71:c0:31:ae:94:ee:56:f9:1d:07:5f:c5:a0:79:1a:a8:da: 93:a8:5a:26:80:e7:68:90:45:f8:f0:52:96:23:a2:8b:34:e9: 87:1b:0f:fc:8c:e0:cd:e5:10:45:90:9d:57:3d:99:84:52:b1: 59:98:6d:4b:4f:df:07:54:2a:c5:4b:90:fa:d0:67:d0:58:97: 82:90:a3:83:66:ec:5a:17:bd:93:45:b8:72:e8:a8:8b:42:6e: c7:9e:fd:9d:c6:7c:dc:ef:4e:46:fa:c4:e1:5b:53:7a:92:ac: 96:59:d0:69:52:b5:81:ff:da:18:23:cb:dd:3b:d3:2f:cf:2d: 85:60:f7:ab:bc:bb:5a:9a:86:1a:0b:84:c0:44:eb:79:d9:af: 91:40:7d:5b:10:28:30:2e:e6:d8:56:c1:1f:f0:9d:26:03:ef: 89:9c:c3:5e:e5:64:ae:ce:90:67:a1:96:42:ba:85:b2:1d:32: 55:47:8f:5d:77:98:4c:81:f6:a0:f2:cd:02:44:d4:a5:58:03: ec:e2:4a:34:24:d0:dc:cb:af:81:a1:2e:96:b8:15:38:f1:b6: 3e:6f:f9:ba:b4:80:84:06:bd:a4:40:b3:98:ab:a0:b0:22:c0: 10:a4:8f:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNiKQPOFSywZD6W0Wv6oHFDrrC4YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM4QjY3NTI0MTJCQkE1QkE2QTAwRTBCRDQwMEQwOTIw Q0EwMUUyMjAeFw0yNjAyMjgxNjU3MTJaFw0yNjAzMDQwMTE0MTJaMDMxMTAvBgNV BAMTKDA4QzY5QTE0NzFBRDQ0QkZBQkM1Mjc5NjlDNjA4NzI1NzBDMEExNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDVok546AKbkeDBpjHfuj45eXb zLRuRyZB55VP4P0FYE7GXSdNj2vHYV24pJW/euGIgSI8R6AlZM/RvA2beW5cd/EF +h3MUM8KGFRuHxCDLyX3VBlYXSZnCSW2AYes3q/8eizMYNkZL+RwmIMpCnDxJ+ym JVLYt3xALkFfOihW4r1BoJA4yzwDYnBuDVMU0tUpFQhb8eHLx7RdTdOnadPtZu7T lZNa5QTCOhZuVK6u9HYSUwWGYUaXHExmfkvm7IF2b9TVOvCpG7QjUTpMJr0p3ZBe xrK3zDaX5dlydvHn+vsIXm3d+x008VmcwumICa9hkfnNeax7gaxlnAz1zMWTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCMaaFHGtRL+rxSeWnGCHJXDAoXAwHwYDVR0j BBgwFoAU84tnUkErulumoA4L1ADQkgygHiIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZDFmYzFhMi1lZTc3LTQwNWYtOWUzMS1hZGM2ZGZjOWI3NGMvMC9GMzhCNjc1MjQx MkJCQTVCQTZBMDBFMEJENDAwRDA5MjBDQTAxRTIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjM4QjY3NTI0MTJCQkE1QkE2QTAwRTBCRDQwMEQwOTIwQ0Ew MUUyMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmQxZmMxYTItZWU3Ny00MDVmLTll MzEtYWRjNmRmYzliNzRjLzAvRjM4QjY3NTI0MTJCQkE1QkE2QTAwRTBCRDQwMEQw OTIwQ0EwMUUyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACQ2b8dhCf+SYbmUgHM9pbsYOrlxwDGulO5W +R0HX8WgeRqo2pOoWiaA52iQRfjwUpYjoos06YcbD/yM4M3lEEWQnVc9mYRSsVmY bUtP3wdUKsVLkPrQZ9BYl4KQo4Nm7FoXvZNFuHLoqItCbsee/Z3GfNzvTkb6xOFb U3qSrJZZ0GlStYH/2hgjy9070y/PLYVg96u8u1qahhoLhMBE63nZr5FAfVsQKDAu 5thWwR/wnSYD74mcw17lZK7OkGehlkK6hbIdMlVHj113mEyB9qDyzQJE1KVYA+zi SjQk0NzLr4GhLpa4FTjxtj5v+bq0gIQGvaRAs5iroLAiwBCkjxE= -----END CERTIFICATE-----Generated at Mon Mar 2 12:50:36 2026 by rpki-client