$ rpki-client -vvf repo-rpki.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/FF96D30557BDACE26C511E1F48A3514643130EA8.mft File: FF96D30557BDACE26C511E1F48A3514643130EA8.mft (raw, json) Hash identifier: B4ebZ5edb2dOUlCHCzH5Vsq4tVXw0Veahq+T6dkbanY= Subject key identifier: 03:E4:AA:F3:2F:85:E0:90:B5:A7:02:03:34:D1:8C:39:E1:9D:31:A6 Authority key identifier: FF:96:D3:05:57:BD:AC:E2:6C:51:1E:1F:48:A3:51:46:43:13:0E:A8 Certificate issuer: /CN=FF96D30557BDACE26C511E1F48A3514643130EA8 Certificate serial: 0A435822CC1D0FD9371571492D3B06650DB54926 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF96D30557BDACE26C511E1F48A3514643130EA8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/FF96D30557BDACE26C511E1F48A3514643130EA8.mft Manifest number: 010D Signing time: Tue 24 Mar 2026 16:51:39 +0000 Manifest this update: Tue 24 Mar 2026 16:46:38 +0000 Manifest next update: Fri 27 Mar 2026 17:56:38 +0000 Files and hashes: 1: 3130332e3232392e3133312e302f32342d3234203d3e20313530393632.roa (hash: ATfPtcSN9IeC66O3vEUygO5SRQOxL5VmkMshCygiymo=) 2: FF96D30557BDACE26C511E1F48A3514643130EA8.crl (hash: Lmj7jhju5QFeEn67frtqCpRevffXfbiyGM118r5TWs8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/FF96D30557BDACE26C511E1F48A3514643130EA8.crl rsync://repo-rpki.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/FF96D30557BDACE26C511E1F48A3514643130EA8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF96D30557BDACE26C511E1F48A3514643130EA8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 17:56:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:43:58:22:cc:1d:0f:d9:37:15:71:49:2d:3b:06:65:0d:b5:49:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF96D30557BDACE26C511E1F48A3514643130EA8 Validity Not Before: Mar 24 16:46:38 2026 GMT Not After : Mar 27 17:56:38 2026 GMT Subject: CN=03E4AAF32F85E090B5A7020334D18C39E19D31A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:30:89:79:c7:80:12:73:54:c3:91:3f:bc:36: 42:39:0b:51:94:20:ca:97:8f:4d:98:2b:f5:a7:51: a2:6b:c2:cc:f5:ec:9d:c8:59:c5:dd:49:26:23:db: 9c:d1:05:30:bc:a7:4e:fa:f4:a0:ed:1f:cc:25:68: 97:8b:32:6d:b5:24:ae:21:35:86:ce:f7:e0:c8:ea: 1a:00:b4:3b:b0:b2:69:03:c4:36:85:5a:5d:29:5a: df:dd:72:3b:c3:29:1b:41:d6:4e:c2:97:71:92:6a: 8b:de:7b:14:cc:d9:d2:8a:54:6d:5f:e7:fb:ef:2f: 23:f4:44:7c:58:37:d4:ef:68:e9:d4:34:a0:5a:41: 3c:4e:78:ae:69:b8:60:ee:58:14:88:7d:29:29:4c: a3:41:75:bc:e2:15:ca:c6:75:b8:c3:fe:08:22:0a: bd:ba:f6:3c:b7:35:53:e4:fe:0c:11:98:87:22:f6: 39:46:82:64:ee:1c:d3:e7:a8:1d:03:73:f8:f4:aa: df:e8:cc:71:7e:80:f2:f5:bf:ed:d3:a7:2d:89:a5: 82:fc:f3:5f:d6:c6:71:ec:e4:d1:15:b6:a4:5e:0d: 1c:86:a0:b6:2b:4a:b1:1b:ce:35:db:89:64:80:41: 75:f9:76:48:16:ed:bd:57:93:52:33:4a:fe:02:f3: 9b:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:E4:AA:F3:2F:85:E0:90:B5:A7:02:03:34:D1:8C:39:E1:9D:31:A6 X509v3 Authority Key Identifier: keyid:FF:96:D3:05:57:BD:AC:E2:6C:51:1E:1F:48:A3:51:46:43:13:0E:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/FF96D30557BDACE26C511E1F48A3514643130EA8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF96D30557BDACE26C511E1F48A3514643130EA8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/FF96D30557BDACE26C511E1F48A3514643130EA8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:13:04:bc:60:5e:d0:9a:80:e9:4b:24:f7:28:52:a0:5a:d6: 45:1e:70:9a:a9:47:30:98:f0:4b:64:94:58:22:80:7f:0d:fc: 65:92:5b:87:22:0c:1e:72:89:68:ec:91:95:d6:ef:99:13:74: ae:77:43:c4:96:12:12:7c:0c:7d:62:21:7d:46:fe:23:34:90: a7:8d:03:b5:c2:c7:fd:1f:ec:18:7a:e8:02:8b:c0:e8:66:fa: 94:13:ef:b0:03:d3:02:90:b3:e1:e5:a7:41:51:77:04:bc:19: f1:38:cd:b1:f0:49:4f:43:85:00:6b:a2:d5:f0:e6:c2:e6:24: 47:ca:89:94:08:93:f2:55:bd:f3:f3:fe:f1:29:b1:7b:99:87: 8f:10:71:ff:39:35:de:19:41:06:3a:14:01:1b:c1:29:85:e5: e3:2c:fa:96:a6:8e:88:90:9b:5a:f9:e3:de:b1:3c:24:69:49: 6a:d0:00:56:22:9b:5a:19:bd:d4:52:79:12:e9:df:dd:2a:ee: 11:db:20:9e:80:bb:1c:87:42:3c:e9:24:02:f1:44:10:da:b4: b0:a3:79:cb:8f:b3:da:6a:06:6f:18:9b:68:06:95:0c:97:f4: ca:e8:f2:70:9c:5a:18:ba:7c:6d:20:5b:fb:39:9c:4a:65:cb: 14:4a:12:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCkNYIswdD9k3FXFJLTsGZQ21SSYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY5NkQzMDU1N0JEQUNFMjZDNTExRTFGNDhBMzUxNDY0 MzEzMEVBODAeFw0yNjAzMjQxNjQ2MzhaFw0yNjAzMjcxNzU2MzhaMDMxMTAvBgNV BAMTKDAzRTRBQUYzMkY4NUUwOTBCNUE3MDIwMzM0RDE4QzM5RTE5RDMxQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqMIl5x4ASc1TDkT+8NkI5C1GU IMqXj02YK/WnUaJrwsz17J3IWcXdSSYj25zRBTC8p0769KDtH8wlaJeLMm21JK4h NYbO9+DI6hoAtDuwsmkDxDaFWl0pWt/dcjvDKRtB1k7Cl3GSaoveexTM2dKKVG1f 5/vvLyP0RHxYN9TvaOnUNKBaQTxOeK5puGDuWBSIfSkpTKNBdbziFcrGdbjD/ggi Cr269jy3NVPk/gwRmIci9jlGgmTuHNPnqB0Dc/j0qt/ozHF+gPL1v+3Tpy2JpYL8 81/WxnHs5NEVtqReDRyGoLYrSrEbzjXbiWSAQXX5dkgW7b1Xk1IzSv4C85udAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA+Sq8y+F4JC1pwIDNNGMOeGdMaYwHwYDVR0j BBgwFoAU/5bTBVe9rOJsUR4fSKNRRkMTDqgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NDJjMWYzMi04MWFjLTQxMTgtYmUyZi01NzRjYTViNTQxZWEvMC9GRjk2RDMwNTU3 QkRBQ0UyNkM1MTFFMUY0OEEzNTE0NjQzMTMwRUE4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkY5NkQzMDU1N0JEQUNFMjZDNTExRTFGNDhBMzUxNDY0MzEz MEVBOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzQyYzFmMzItODFhYy00MTE4LWJl MmYtNTc0Y2E1YjU0MWVhLzAvRkY5NkQzMDU1N0JEQUNFMjZDNTExRTFGNDhBMzUx NDY0MzEzMEVBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAYTBLxgXtCagOlLJPcoUqBa1kUecJqpRzCY 8EtklFgigH8N/GWSW4ciDB5yiWjskZXW75kTdK53Q8SWEhJ8DH1iIX1G/iM0kKeN A7XCx/0f7Bh66AKLwOhm+pQT77AD0wKQs+Hlp0FRdwS8GfE4zbHwSU9DhQBrotXw 5sLmJEfKiZQIk/JVvfPz/vEpsXuZh48Qcf85Nd4ZQQY6FAEbwSmF5eMs+pamjoiQ m1r5496xPCRpSWrQAFYim1oZvdRSeRLp390q7hHbIJ6AuxyHQjzpJALxRBDatLCj ecuPs9pqBm8Ym2gGlQyX9Mro8nCcWhi6fG0gW/s5nEplyxRKEug= -----END CERTIFICATE-----Generated at Thu Mar 26 07:31:13 2026 by rpki-client