$ rpki-client -vvf repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.mft File: FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.mft (raw, json) Hash identifier: 4pjp76xc8wqtQo4Miac0WcWNwH9XJnmYZoSehMGYOrU= Subject key identifier: A0:DA:64:8E:3F:7B:03:E1:47:E8:40:40:C2:68:16:B4:41:6B:1E:7E Authority key identifier: FF:3F:06:6A:5E:9A:B8:F9:88:B8:E1:7C:7A:56:DD:2E:00:A6:6A:D8 Certificate issuer: /CN=FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8 Certificate serial: 6DDB6EB8E1FF8482C4AC6A7CE80C2DC1ACE7C7DD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.mft Manifest number: 012B Signing time: Thu 26 Mar 2026 05:22:37 +0000 Manifest this update: Thu 26 Mar 2026 05:17:37 +0000 Manifest next update: Sun 29 Mar 2026 15:38:37 +0000 Files and hashes: 1: 3135372e31352e38322e302f32342d3234203d3e20313532333633.roa (hash: LhdUiZ829jnCYzP+T/q1kR6KjN+CYgUrJ54OONbPWMo=) 2: 3135372e31352e38322e302f32332d3233203d3e20313532333633.roa (hash: TxbDMhKSioNeR20MqOvnLPpYmLwOjXBp9YQNGW/Dswg=) 3: 3135372e31352e38332e302f32342d3234203d3e20313532333633.roa (hash: tmwMaZpoyniOHlrA1Ev0DGw1sFkx/sRTma2ZD2CnpMQ=) 4: FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.crl (hash: k8jJ6PBupdaqWBZcirbN6gwuHn4HzVpmBMdc8hQx160=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.crl rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 14:23:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:db:6e:b8:e1:ff:84:82:c4:ac:6a:7c:e8:0c:2d:c1:ac:e7:c7:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8 Validity Not Before: Mar 26 05:17:37 2026 GMT Not After : Mar 29 15:38:37 2026 GMT Subject: CN=A0DA648E3F7B03E147E84040C26816B4416B1E7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d8:04:4c:db:46:1e:36:93:72:f3:13:27:b5: 5c:51:54:ee:03:6f:9b:d5:f3:7d:72:81:57:3d:6e: 22:4b:30:76:0b:a0:36:89:d6:7b:a0:a3:9d:a3:bf: e6:cb:d5:52:2b:d9:f0:e5:00:16:5b:52:97:16:f2: ed:c2:f3:00:eb:95:dd:c7:aa:45:14:ba:ff:c1:65: 8c:dc:38:80:9f:92:d8:42:32:db:ca:2c:51:13:01: 7c:d6:77:8f:a2:e9:ac:46:74:3a:09:cc:58:f9:16: 5c:b0:73:f2:f3:fd:37:f5:ae:9e:c1:23:fe:fe:22: 26:5a:d3:76:88:9b:a0:eb:78:14:97:0b:35:9c:f4: 7c:0f:0b:0a:11:c9:64:1d:f0:7d:74:cd:5d:87:f8: c4:11:98:94:5e:73:a9:9f:05:1b:bd:84:28:5c:28: 61:8f:7a:3c:fc:ab:dc:35:00:a4:31:6f:fd:e5:61: 6a:7b:2f:e7:75:90:bc:82:9c:ee:30:92:a0:f2:8a: a7:1b:37:c0:c2:62:2f:44:ab:e6:4a:d8:24:9c:19: 4b:52:28:24:51:3a:5f:74:5e:86:a5:9a:55:93:9b: d6:2b:93:09:52:ef:b5:8d:f5:71:cb:92:79:00:14: d1:6d:41:0e:fe:27:b6:95:25:2c:92:0e:c7:3a:cd: d8:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:DA:64:8E:3F:7B:03:E1:47:E8:40:40:C2:68:16:B4:41:6B:1E:7E X509v3 Authority Key Identifier: keyid:FF:3F:06:6A:5E:9A:B8:F9:88:B8:E1:7C:7A:56:DD:2E:00:A6:6A:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:5c:a1:52:21:6c:c5:fc:38:d2:b0:26:64:79:af:26:4f:a2: c8:21:3d:84:f6:94:17:40:78:ad:7a:74:73:10:0a:95:77:b7: 54:87:5d:ad:4c:ba:30:6e:c7:56:8b:c1:e3:bc:d6:ea:a3:a1: b6:bd:52:d4:c0:90:d6:66:74:07:25:90:ae:3f:6e:9f:66:00: aa:7b:5b:fc:0c:74:eb:28:24:5b:69:9e:7e:a4:84:94:93:03: 5d:8a:90:f2:ae:c1:7f:2a:66:e8:ee:64:c7:a3:da:16:a2:10: 60:e2:29:98:d5:28:9c:1b:b5:a1:87:3b:09:a8:be:63:b2:c1: e9:4c:0d:14:67:93:84:69:02:0f:16:b8:e8:89:0c:28:f6:53: 49:8f:7e:26:c1:d8:bc:d1:9c:43:ec:34:0c:24:3b:e0:a4:af: 1b:8b:9c:65:33:b0:ec:bf:a9:90:69:67:04:27:d4:4b:1e:bd: 67:20:e7:65:a0:19:9f:1e:06:6a:0c:14:b9:4e:3f:79:d1:dc: d7:d6:c6:2e:03:d0:69:99:f1:d9:e5:17:09:bd:45:d0:ea:d1: 28:73:6a:da:28:80:2d:a3:f2:38:84:76:20:c6:e7:10:c6:3a: 56:ef:cc:af:35:87:7f:9c:14:98:53:69:e9:da:7d:7c:1d:b0: d9:be:49:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbdtuuOH/hILErGp86Awtwaznx90wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkYzRjA2NkE1RTlBQjhGOTg4QjhFMTdDN0E1NkREMkUw MEE2NkFEODAeFw0yNjAzMjYwNTE3MzdaFw0yNjAzMjkxNTM4MzdaMDMxMTAvBgNV BAMTKEEwREE2NDhFM0Y3QjAzRTE0N0U4NDA0MEMyNjgxNkI0NDE2QjFFN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh2ARM20YeNpNy8xMntVxRVO4D b5vV831ygVc9biJLMHYLoDaJ1nugo52jv+bL1VIr2fDlABZbUpcW8u3C8wDrld3H qkUUuv/BZYzcOICfkthCMtvKLFETAXzWd4+i6axGdDoJzFj5Flywc/Lz/Tf1rp7B I/7+IiZa03aIm6DreBSXCzWc9HwPCwoRyWQd8H10zV2H+MQRmJRec6mfBRu9hChc KGGPejz8q9w1AKQxb/3lYWp7L+d1kLyCnO4wkqDyiqcbN8DCYi9Eq+ZK2CScGUtS KCRROl90XoalmlWTm9YrkwlS77WN9XHLknkAFNFtQQ7+J7aVJSySDsc6zdjXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoNpkjj97A+FH6EBAwmgWtEFrHn4wHwYDVR0j BBgwFoAU/z8Gal6auPmIuOF8elbdLgCmatgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZDAxMWExYy1hMGFkLTRkOTMtODZhZi0zZjBhYWRkOTY4NGYvMC9GRjNGMDY2QTVF OUFCOEY5ODhCOEUxN0M3QTU2REQyRTAwQTY2QUQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkYzRjA2NkE1RTlBQjhGOTg4QjhFMTdDN0E1NkREMkUwMEE2 NkFEOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWQwMTFhMWMtYTBhZC00ZDkzLTg2 YWYtM2YwYWFkZDk2ODRmLzAvRkYzRjA2NkE1RTlBQjhGOTg4QjhFMTdDN0E1NkRE MkUwMEE2NkFEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFNcoVIhbMX8ONKwJmR5ryZPosghPYT2lBdA eK16dHMQCpV3t1SHXa1MujBux1aLweO81uqjoba9UtTAkNZmdAclkK4/bp9mAKp7 W/wMdOsoJFtpnn6khJSTA12KkPKuwX8qZujuZMej2haiEGDiKZjVKJwbtaGHOwmo vmOywelMDRRnk4RpAg8WuOiJDCj2U0mPfibB2LzRnEPsNAwkO+CkrxuLnGUzsOy/ qZBpZwQn1EsevWcg52WgGZ8eBmoMFLlOP3nR3NfWxi4D0GmZ8dnlFwm9RdDq0Shz atoogC2j8jiEdiDG5xDGOlbvzK81h3+cFJhTaenafXwdsNm+SS0= -----END CERTIFICATE-----Generated at Thu Mar 26 18:03:13 2026 by rpki-client