$ rpki-client -vvf repo-rpki.idnic.net/repo/032f98a0-0947-4f7a-bee7-ffc3d05b940e/0/F5BC050A20C516FEBC061A1B70E488BB426444BC.mft File: F5BC050A20C516FEBC061A1B70E488BB426444BC.mft (raw, json) Hash identifier: 4ccwlojcGFcrxFeUu89vmj9DsDdLQohi7atT/oh7b6E= Subject key identifier: FA:87:B0:68:A7:ED:D6:4F:A7:E5:DC:CF:87:7F:43:4E:37:46:97:91 Authority key identifier: F5:BC:05:0A:20:C5:16:FE:BC:06:1A:1B:70:E4:88:BB:42:64:44:BC Certificate issuer: /CN=F5BC050A20C516FEBC061A1B70E488BB426444BC Certificate serial: 73093FA4B16AF0551CA92ED35BBC03A5C75F009E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F5BC050A20C516FEBC061A1B70E488BB426444BC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/032f98a0-0947-4f7a-bee7-ffc3d05b940e/0/F5BC050A20C516FEBC061A1B70E488BB426444BC.mft Manifest number: DD Signing time: Tue 24 Mar 2026 04:31:33 +0000 Manifest this update: Tue 24 Mar 2026 04:26:33 +0000 Manifest next update: Fri 27 Mar 2026 16:15:33 +0000 Files and hashes: 1: 3135372e36362e3137322e302f32332d3234203d3e20313533313339.roa (hash: IcWkQYDLFcPwwtzYdPcj5i2iEcvHXh39BUHPHZLmTXs=) 2: F5BC050A20C516FEBC061A1B70E488BB426444BC.crl (hash: HOo+/ftQBIAUOZkHknWr7mWzwKRBE/r6nDiooVBC+Kw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/032f98a0-0947-4f7a-bee7-ffc3d05b940e/0/F5BC050A20C516FEBC061A1B70E488BB426444BC.crl rsync://repo-rpki.idnic.net/repo/032f98a0-0947-4f7a-bee7-ffc3d05b940e/0/F5BC050A20C516FEBC061A1B70E488BB426444BC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F5BC050A20C516FEBC061A1B70E488BB426444BC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 16:15:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:09:3f:a4:b1:6a:f0:55:1c:a9:2e:d3:5b:bc:03:a5:c7:5f:00:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F5BC050A20C516FEBC061A1B70E488BB426444BC Validity Not Before: Mar 24 04:26:33 2026 GMT Not After : Mar 27 16:15:33 2026 GMT Subject: CN=FA87B068A7EDD64FA7E5DCCF877F434E37469791 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:5e:05:0e:03:a4:57:b3:08:35:d4:41:1d:63: 33:70:e0:e5:ee:32:52:9d:c9:7f:ba:51:9c:a3:bb: 58:ba:23:cf:0b:a4:46:64:c9:7a:fa:04:61:91:a5: 85:da:6c:49:e4:7c:0d:8d:65:88:1a:34:04:11:1d: 8a:1e:26:28:0c:7e:dd:4c:09:d2:8b:36:de:53:34: 4f:ed:bd:73:80:02:36:5d:7e:09:fa:92:0c:db:b8: d2:c1:b9:0a:ef:bf:47:64:e2:2a:e0:c7:37:ad:68: 99:8b:ba:2a:68:79:e4:0d:91:12:3a:e8:c0:d2:8b: 5c:c9:77:94:7e:63:69:99:ee:5d:67:d5:d3:a8:d4: 8a:d9:cc:83:fe:b2:d2:20:0c:1e:34:67:db:2a:e3: f1:58:13:56:e0:b7:2a:2c:af:d2:0f:06:ae:e5:2e: b6:80:83:74:93:41:91:98:db:39:ff:9d:49:ee:3f: 15:a9:2a:b4:e4:df:50:13:40:30:f4:21:1a:25:45: ad:f3:9a:75:8b:bf:6a:71:d8:d1:62:4f:24:6f:5b: 9f:4a:bc:d7:79:24:2b:f9:83:78:45:09:92:ec:fe: 29:74:4d:7b:e8:fb:c2:11:b9:0f:fc:c5:fe:a2:88: cc:9a:3a:da:a8:cd:4e:7b:72:8a:09:e1:07:3f:71: 64:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:87:B0:68:A7:ED:D6:4F:A7:E5:DC:CF:87:7F:43:4E:37:46:97:91 X509v3 Authority Key Identifier: keyid:F5:BC:05:0A:20:C5:16:FE:BC:06:1A:1B:70:E4:88:BB:42:64:44:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/032f98a0-0947-4f7a-bee7-ffc3d05b940e/0/F5BC050A20C516FEBC061A1B70E488BB426444BC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F5BC050A20C516FEBC061A1B70E488BB426444BC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/032f98a0-0947-4f7a-bee7-ffc3d05b940e/0/F5BC050A20C516FEBC061A1B70E488BB426444BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:3f:66:5c:86:8d:13:f5:ca:e8:f4:4a:d8:6f:a9:33:51:bd: 3d:8c:ad:9b:40:77:e3:7a:7d:a5:a1:3a:f5:af:1e:a4:27:b1: bc:86:01:7e:cb:0b:34:1a:1e:51:bd:2d:7f:38:08:2e:29:51: 75:bc:fd:25:74:c3:b5:06:cc:0f:8c:f0:57:ab:ba:89:39:33: 37:65:a9:10:31:98:48:1e:3c:e1:89:8e:eb:57:2d:18:c1:dc: e2:20:d1:95:d3:0e:45:3e:f3:1a:44:de:88:8a:a9:9a:f0:35: 8d:8e:51:b9:89:f5:b4:9f:ea:b0:9d:bb:90:97:f8:5e:3b:d0: 96:b8:66:dd:9b:ce:20:71:e0:7c:08:18:7f:a5:21:1f:fd:d8: ff:07:74:a2:e0:34:cb:1c:0b:d5:76:c6:a4:9a:05:41:e0:c3: 1a:5e:7d:cc:42:c6:a0:f1:64:f9:0a:f9:85:70:a2:ab:df:e4: 79:de:83:37:3c:c2:d4:5e:88:d4:9c:18:0e:fb:03:8b:5e:d7: 7a:ce:48:66:26:cf:b5:b9:6c:ab:1f:7d:ff:21:d4:8e:e3:97: 06:c2:3c:64:6f:19:f4:3b:2e:4b:28:f1:b4:69:d1:92:0d:bb: 99:6f:cd:59:17:d9:f0:90:2c:16:db:7c:52:a2:fb:62:2e:e5: 9c:0c:af:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcwk/pLFq8FUcqS7TW7wDpcdfAJ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjVCQzA1MEEyMEM1MTZGRUJDMDYxQTFCNzBFNDg4QkI0 MjY0NDRCQzAeFw0yNjAzMjQwNDI2MzNaFw0yNjAzMjcxNjE1MzNaMDMxMTAvBgNV BAMTKEZBODdCMDY4QTdFREQ2NEZBN0U1RENDRjg3N0Y0MzRFMzc0Njk3OTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbXgUOA6RXswg11EEdYzNw4OXu MlKdyX+6UZyju1i6I88LpEZkyXr6BGGRpYXabEnkfA2NZYgaNAQRHYoeJigMft1M CdKLNt5TNE/tvXOAAjZdfgn6kgzbuNLBuQrvv0dk4irgxzetaJmLuipoeeQNkRI6 6MDSi1zJd5R+Y2mZ7l1n1dOo1IrZzIP+stIgDB40Z9sq4/FYE1bgtyosr9IPBq7l LraAg3STQZGY2zn/nUnuPxWpKrTk31ATQDD0IRolRa3zmnWLv2px2NFiTyRvW59K vNd5JCv5g3hFCZLs/il0TXvo+8IRuQ/8xf6iiMyaOtqozU57cooJ4Qc/cWRhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+oewaKft1k+n5dzPh39DTjdGl5EwHwYDVR0j BBgwFoAU9bwFCiDFFv68BhobcOSIu0JkRLwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MzJmOThhMC0wOTQ3LTRmN2EtYmVlNy1mZmMzZDA1Yjk0MGUvMC9GNUJDMDUwQTIw QzUxNkZFQkMwNjFBMUI3MEU0ODhCQjQyNjQ0NEJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjVCQzA1MEEyMEM1MTZGRUJDMDYxQTFCNzBFNDg4QkI0MjY0 NDRCQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDMyZjk4YTAtMDk0Ny00ZjdhLWJl ZTctZmZjM2QwNWI5NDBlLzAvRjVCQzA1MEEyMEM1MTZGRUJDMDYxQTFCNzBFNDg4 QkI0MjY0NDRCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEU/ZlyGjRP1yuj0SthvqTNRvT2MrZtAd+N6 faWhOvWvHqQnsbyGAX7LCzQaHlG9LX84CC4pUXW8/SV0w7UGzA+M8Feruok5Mzdl qRAxmEgePOGJjutXLRjB3OIg0ZXTDkU+8xpE3oiKqZrwNY2OUbmJ9bSf6rCdu5CX +F470Ja4Zt2bziBx4HwIGH+lIR/92P8HdKLgNMscC9V2xqSaBUHgwxpefcxCxqDx ZPkK+YVwoqvf5Hnegzc8wtReiNScGA77A4te13rOSGYmz7W5bKsfff8h1I7jlwbC PGRvGfQ7Lkso8bRp0ZINu5lvzVkX2fCQLBbbfFKi+2Iu5ZwMrwc= -----END CERTIFICATE-----Generated at Thu Mar 26 17:04:44 2026 by rpki-client