$ rpki-client -vvf repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/F999F87E868383FB5DA974A732B21FA770F1AC5C.mft File: F999F87E868383FB5DA974A732B21FA770F1AC5C.mft (raw, json) Hash identifier: zG+jOTQwKOD3krM9LzGfKeZgSQy98u0N6TURRFvr4dQ= Subject key identifier: 44:66:68:85:2A:0A:A5:A2:46:BE:7B:64:54:C6:7C:78:0C:08:12:85 Authority key identifier: F9:99:F8:7E:86:83:83:FB:5D:A9:74:A7:32:B2:1F:A7:70:F1:AC:5C Certificate issuer: /CN=F999F87E868383FB5DA974A732B21FA770F1AC5C Certificate serial: 6023F819F859C88592E8559D0C85F8592249B435 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F999F87E868383FB5DA974A732B21FA770F1AC5C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/F999F87E868383FB5DA974A732B21FA770F1AC5C.mft Manifest number: 0236 Signing time: Wed 25 Mar 2026 14:21:13 +0000 Manifest this update: Wed 25 Mar 2026 14:16:13 +0000 Manifest next update: Sat 28 Mar 2026 17:14:13 +0000 Files and hashes: 1: 3130332e3131372e3138332e302f32342d3234203d3e20313338383833.roa (hash: ixRJi1MWGC1okPSFiKG/jBrV/vpTa13AlLkEe20yP98=) 2: F999F87E868383FB5DA974A732B21FA770F1AC5C.crl (hash: k84g+9DNL+i/Mcn/oAZs3bV32WO36w9vcjMuh7oc8xQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/F999F87E868383FB5DA974A732B21FA770F1AC5C.crl rsync://repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/F999F87E868383FB5DA974A732B21FA770F1AC5C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F999F87E868383FB5DA974A732B21FA770F1AC5C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 17:14:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:23:f8:19:f8:59:c8:85:92:e8:55:9d:0c:85:f8:59:22:49:b4:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F999F87E868383FB5DA974A732B21FA770F1AC5C Validity Not Before: Mar 25 14:16:13 2026 GMT Not After : Mar 28 17:14:13 2026 GMT Subject: CN=446668852A0AA5A246BE7B6454C67C780C081285 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:90:74:f1:58:a2:bc:27:2b:66:7a:6a:25:3d: 9a:a9:86:65:0a:66:0c:b6:66:d5:41:cc:43:2c:0b: 5c:94:f0:e7:d8:87:04:e4:2c:18:7d:d3:36:14:a4: d7:20:79:0c:81:a8:aa:62:77:a7:f5:3a:fa:02:18: 1d:ec:8b:ce:14:e1:34:ac:d1:fd:8b:85:77:6c:aa: 8e:d0:be:86:72:87:dc:d2:b2:55:a6:21:d1:b4:ab: e0:03:a1:e3:31:aa:66:57:df:4f:73:f2:59:24:62: 4a:93:1c:4a:53:d1:dd:20:d7:fc:a7:c1:1a:27:b1: 80:e1:a6:7d:cc:fb:8f:83:81:6b:00:f7:2b:07:a6: 91:84:69:53:3a:c1:ae:08:89:47:34:b3:af:ac:88: b5:3a:6e:b9:67:cf:3d:01:ab:f1:35:6a:db:72:a6: 20:48:7c:5d:d3:39:d1:13:9a:2a:59:c0:c8:5c:16: 73:a9:5d:cc:40:4a:e1:e2:3b:bb:43:47:9b:35:9f: 06:e2:dc:d4:b7:a5:d4:e7:75:90:9f:4d:ca:c1:db: 45:d2:39:ea:01:6d:4e:85:c8:58:66:fc:02:a4:95: 85:36:0c:da:04:e9:41:15:00:62:cb:b0:52:dd:27: 09:27:37:6e:01:5b:43:9a:e2:79:79:89:5f:01:f3: 45:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:66:68:85:2A:0A:A5:A2:46:BE:7B:64:54:C6:7C:78:0C:08:12:85 X509v3 Authority Key Identifier: keyid:F9:99:F8:7E:86:83:83:FB:5D:A9:74:A7:32:B2:1F:A7:70:F1:AC:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/F999F87E868383FB5DA974A732B21FA770F1AC5C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F999F87E868383FB5DA974A732B21FA770F1AC5C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/F999F87E868383FB5DA974A732B21FA770F1AC5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:95:45:0b:15:44:26:f6:38:33:1d:fe:30:c5:ce:00:3b:69: 98:8d:16:22:be:cc:f0:bc:ce:31:08:df:76:4f:be:9f:1a:5d: dd:a5:d8:fa:d4:32:d2:f4:7a:62:b2:f5:68:d3:ce:9c:5e:a5: cf:d6:66:cc:1f:0d:02:24:7f:42:57:6c:a7:d9:7a:8b:0d:e1: 0e:1f:ff:1a:fc:af:21:16:80:b3:8a:ff:5c:ea:8d:57:a5:92: cd:53:d1:d4:38:7b:0b:16:09:b9:20:61:03:b8:82:f7:1a:64: 42:15:18:55:86:0f:89:97:6b:9c:ec:fa:c7:e3:df:6f:49:57: 1d:9d:39:e3:66:52:bc:e8:67:32:73:c3:fc:7b:19:18:d5:2b: f2:98:f3:af:fc:5d:b4:38:7a:65:ba:59:94:ec:3a:f5:18:2f: ab:59:79:fd:f7:20:4c:21:3f:9c:39:ef:b2:18:26:ea:3e:8b: 65:83:c7:27:e9:31:6f:fb:d1:1b:1a:b1:77:b5:ed:82:e1:d5: 4b:14:57:84:b8:28:58:39:eb:73:ce:41:80:fd:72:59:5e:4d: 92:d1:5d:7e:04:01:68:cc:0c:67:35:53:b0:aa:cc:39:71:0f: 4f:8a:8f:02:5e:b7:a4:c4:7a:b1:fd:b9:2d:98:f1:e9:ab:e7: d8:f8:9b:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYCP4GfhZyIWS6FWdDIX4WSJJtDUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjk5OUY4N0U4NjgzODNGQjVEQTk3NEE3MzJCMjFGQTc3 MEYxQUM1QzAeFw0yNjAzMjUxNDE2MTNaFw0yNjAzMjgxNzE0MTNaMDMxMTAvBgNV BAMTKDQ0NjY2ODg1MkEwQUE1QTI0NkJFN0I2NDU0QzY3Qzc4MEMwODEyODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxkHTxWKK8JytmemolPZqphmUK Zgy2ZtVBzEMsC1yU8OfYhwTkLBh90zYUpNcgeQyBqKpid6f1OvoCGB3si84U4TSs 0f2LhXdsqo7QvoZyh9zSslWmIdG0q+ADoeMxqmZX309z8lkkYkqTHEpT0d0g1/yn wRonsYDhpn3M+4+DgWsA9ysHppGEaVM6wa4IiUc0s6+siLU6brlnzz0Bq/E1atty piBIfF3TOdETmipZwMhcFnOpXcxASuHiO7tDR5s1nwbi3NS3pdTndZCfTcrB20XS OeoBbU6FyFhm/AKklYU2DNoE6UEVAGLLsFLdJwknN24BW0Oa4nl5iV8B80VRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURGZohSoKpaJGvntkVMZ8eAwIEoUwHwYDVR0j BBgwFoAU+Zn4foaDg/tdqXSnMrIfp3DxrFwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YThkYjQyOC0xOTVjLTQ5MGEtYWJjMi0zY2I2ZjBkNTYwYTMvMC9GOTk5Rjg3RTg2 ODM4M0ZCNURBOTc0QTczMkIyMUZBNzcwRjFBQzVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjk5OUY4N0U4NjgzODNGQjVEQTk3NEE3MzJCMjFGQTc3MEYx QUM1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmE4ZGI0MjgtMTk1Yy00OTBhLWFi YzItM2NiNmYwZDU2MGEzLzAvRjk5OUY4N0U4NjgzODNGQjVEQTk3NEE3MzJCMjFG QTc3MEYxQUM1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAaVRQsVRCb2ODMd/jDFzgA7aZiNFiK+zPC8 zjEI33ZPvp8aXd2l2PrUMtL0emKy9WjTzpxepc/WZswfDQIkf0JXbKfZeosN4Q4f /xr8ryEWgLOK/1zqjVelks1T0dQ4ewsWCbkgYQO4gvcaZEIVGFWGD4mXa5zs+sfj 329JVx2dOeNmUrzoZzJzw/x7GRjVK/KY86/8XbQ4emW6WZTsOvUYL6tZef33IEwh P5w577IYJuo+i2WDxyfpMW/70RsasXe17YLh1UsUV4S4KFg563POQYD9clleTZLR XX4EAWjMDGc1U7CqzDlxD0+KjwJet6TEerH9uS2Y8emr59j4m78= -----END CERTIFICATE-----Generated at Thu Mar 26 12:47:44 2026 by rpki-client