$ rpki-client -vvf repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/1F609817DD084C4559EEB9B06E8013157EB82DB8.mft File: 1F609817DD084C4559EEB9B06E8013157EB82DB8.mft (raw, json) Hash identifier: nzYxRyAf7IBStmXZSzdX7ErbaGwTvCYmLjztmWgXa9c= Subject key identifier: B6:0A:DC:20:F2:A9:E9:86:36:2B:E4:A0:EA:CC:E0:7F:04:82:FA:01 Authority key identifier: 1F:60:98:17:DD:08:4C:45:59:EE:B9:B0:6E:80:13:15:7E:B8:2D:B8 Certificate issuer: /CN=1F609817DD084C4559EEB9B06E8013157EB82DB8 Certificate serial: 3790CA10D018CE241AD5501B2197228690CD5C8F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F609817DD084C4559EEB9B06E8013157EB82DB8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/1F609817DD084C4559EEB9B06E8013157EB82DB8.mft Manifest number: D0 Signing time: Sat 28 Feb 2026 06:31:50 +0000 Manifest this update: Sat 28 Feb 2026 06:26:50 +0000 Manifest next update: Tue 03 Mar 2026 14:54:50 +0000 Files and hashes: 1: 1F609817DD084C4559EEB9B06E8013157EB82DB8.crl (hash: irm8GndQMW4IqqA/lAahnve4TlmAS/BKf7IbmCsAxtc=) 2: 34352e3132332e3134312e302f32342d3234203d3e20313532303439.roa (hash: mxAwK/MKmBpPTXvB+y7TO9Vx/LAA3W9mHnGSKrGKpTI=) 3: 34352e3132332e3134302e302f32342d3234203d3e20313532303439.roa (hash: eyKVqxooc3TAGiXmLnd8fFBCsIdu4PICiXyXT8Mjh6M=) 4: 34352e3132332e3134302e302f32332d3234203d3e20313532303439.roa (hash: RD/RO/ie3tKJhpXhiY1wvpRhxWsn6xjmVmvMhdZr4lk=) 5: 34352e3132332e3134302e302f32332d3233203d3e20313532303439.roa (hash: PHcAVEeTYthOcGmorVA2c1r7wtqCpaWxCrN7FWMDJio=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/1F609817DD084C4559EEB9B06E8013157EB82DB8.crl rsync://repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/1F609817DD084C4559EEB9B06E8013157EB82DB8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F609817DD084C4559EEB9B06E8013157EB82DB8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 14:54:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:90:ca:10:d0:18:ce:24:1a:d5:50:1b:21:97:22:86:90:cd:5c:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F609817DD084C4559EEB9B06E8013157EB82DB8 Validity Not Before: Feb 28 06:26:50 2026 GMT Not After : Mar 3 14:54:50 2026 GMT Subject: CN=B60ADC20F2A9E986362BE4A0EACCE07F0482FA01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:60:58:68:00:5e:68:ad:f7:e3:e3:1e:49:75: 2d:e3:f7:4e:3c:f0:44:f1:41:f5:6c:a4:ff:ab:4d: 3e:46:92:a1:61:4f:70:6a:63:b5:7c:f4:5b:ad:5a: c0:ac:ef:d9:49:34:ab:9f:ee:ff:33:c5:49:6b:29: a1:47:ad:09:92:f3:f8:43:d6:e6:71:5e:b0:fd:fa: 49:c2:ae:2a:0e:05:3c:44:63:53:2d:bb:60:4c:22: 81:58:5b:e5:6f:0e:8f:9a:a5:c3:21:62:64:40:62: 99:4f:1a:a7:0a:e3:cd:d9:a5:0b:a6:76:96:89:e5: 9c:0a:ad:01:e7:65:7d:17:5c:f2:6f:8e:da:25:0b: 41:85:a2:c3:e6:c3:d9:22:83:52:8e:db:b1:fd:f8: 31:84:70:9d:38:18:a7:3b:d6:e8:1f:c5:13:3e:2b: 84:26:de:c9:f7:29:fc:89:ce:2d:66:77:57:6f:9f: 65:15:ff:8a:f6:47:64:6d:f1:4d:f8:a0:7f:62:f3: d6:3a:c3:8d:a8:cb:f8:f6:be:0b:9d:58:94:23:59: 67:4d:f1:1d:7b:0e:cc:65:31:7f:81:25:87:b1:94: f4:94:ea:28:5b:89:46:f3:8d:85:e1:5e:61:4a:21: bc:9b:29:69:ea:d3:bd:e3:fa:8e:ec:02:c0:20:92: 8a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:0A:DC:20:F2:A9:E9:86:36:2B:E4:A0:EA:CC:E0:7F:04:82:FA:01 X509v3 Authority Key Identifier: keyid:1F:60:98:17:DD:08:4C:45:59:EE:B9:B0:6E:80:13:15:7E:B8:2D:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/1F609817DD084C4559EEB9B06E8013157EB82DB8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F609817DD084C4559EEB9B06E8013157EB82DB8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/1F609817DD084C4559EEB9B06E8013157EB82DB8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:49:1f:8a:d0:b9:c2:0a:e2:6b:3e:e5:f1:51:e1:cc:67:a8: 17:06:e0:d1:5b:ad:d5:4a:bf:e2:b5:36:07:d5:34:4b:fa:b1: d7:23:b8:5e:2f:02:79:fb:9f:96:24:d0:a7:c8:d9:9b:db:05: e8:ee:2c:fd:26:21:c7:64:8f:60:b0:fc:12:c2:28:7a:19:4c: 4d:3b:6d:57:10:27:a2:46:f3:26:7e:7f:eb:e7:8b:c1:9c:8d: 70:5c:7e:d9:b9:da:98:e8:9f:47:59:64:8e:e9:2d:54:52:fd: a9:64:53:6c:d5:c9:13:5b:56:fc:e9:87:f1:58:dc:fa:70:31: 75:ae:69:80:f6:44:3a:04:fa:3e:77:96:6b:b8:81:f2:6f:73: 72:9f:c6:f8:bb:53:86:d8:72:ec:5a:e1:4d:04:3b:d3:19:42: a1:a4:ba:99:11:58:91:e2:f5:d6:ba:48:4a:fe:58:00:11:6e: 77:0b:dc:4a:21:56:aa:d7:9e:d6:80:a9:02:9a:30:a8:53:ad: e6:51:94:c3:7a:39:44:9d:99:4d:6f:7d:38:2a:c6:5c:ca:71: b0:fe:e4:2c:ff:06:23:6e:5f:d0:1a:ad:cc:a3:ba:43:d1:88: d9:05:5b:fc:2b:fd:eb:6c:43:93:53:99:fc:09:26:e8:4c:18: 70:b5:00:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN5DKENAYziQa1VAbIZcihpDNXI8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUY2MDk4MTdERDA4NEM0NTU5RUVCOUIwNkU4MDEzMTU3 RUI4MkRCODAeFw0yNjAyMjgwNjI2NTBaFw0yNjAzMDMxNDU0NTBaMDMxMTAvBgNV BAMTKEI2MEFEQzIwRjJBOUU5ODYzNjJCRTRBMEVBQ0NFMDdGMDQ4MkZBMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQYFhoAF5orffj4x5JdS3j9048 8ETxQfVspP+rTT5GkqFhT3BqY7V89FutWsCs79lJNKuf7v8zxUlrKaFHrQmS8/hD 1uZxXrD9+knCrioOBTxEY1Mtu2BMIoFYW+VvDo+apcMhYmRAYplPGqcK483ZpQum dpaJ5ZwKrQHnZX0XXPJvjtolC0GFosPmw9kig1KO27H9+DGEcJ04GKc71ugfxRM+ K4Qm3sn3KfyJzi1md1dvn2UV/4r2R2Rt8U34oH9i89Y6w42oy/j2vgudWJQjWWdN 8R17DsxlMX+BJYexlPSU6ihbiUbzjYXhXmFKIbybKWnq073j+o7sAsAgkoqHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtgrcIPKp6YY2K+Sg6szgfwSC+gEwHwYDVR0j BBgwFoAUH2CYF90ITEVZ7rmwboATFX64LbgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZjdhN2Q5OC0yMzM4LTRkNzctOTY2Mi1mMzNlYTY4Yzg2ZjIvMC8xRjYwOTgxN0RE MDg0QzQ1NTlFRUI5QjA2RTgwMTMxNTdFQjgyREI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUY2MDk4MTdERDA4NEM0NTU5RUVCOUIwNkU4MDEzMTU3RUI4 MkRCOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmY3YTdkOTgtMjMzOC00ZDc3LTk2 NjItZjMzZWE2OGM4NmYyLzAvMUY2MDk4MTdERDA4NEM0NTU5RUVCOUIwNkU4MDEz MTU3RUI4MkRCOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJlJH4rQucIK4ms+5fFR4cxnqBcG4NFbrdVK v+K1NgfVNEv6sdcjuF4vAnn7n5Yk0KfI2ZvbBejuLP0mIcdkj2Cw/BLCKHoZTE07 bVcQJ6JG8yZ+f+vni8GcjXBcftm52pjon0dZZI7pLVRS/alkU2zVyRNbVvzph/FY 3PpwMXWuaYD2RDoE+j53lmu4gfJvc3Kfxvi7U4bYcuxa4U0EO9MZQqGkupkRWJHi 9da6SEr+WAARbncL3EohVqrXntaAqQKaMKhTreZRlMN6OUSdmU1vfTgqxlzKcbD+ 5Cz/BiNuX9AarcyjukPRiNkFW/wr/etsQ5NTmfwJJuhMGHC1AMs= -----END CERTIFICATE-----Generated at Mon Mar 2 08:19:05 2026 by rpki-client