$ rpki-client -vvf repo-rpki.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/FF102371565831DDB9C06DF47DF79B1120C9861E.mft File: FF102371565831DDB9C06DF47DF79B1120C9861E.mft (raw, json) Hash identifier: h6XQuX4n86CxF/+IV7PgPY2kM3d4+FT5Qu++LXMPXG4= Subject key identifier: 53:97:DE:2E:DD:B6:A3:0C:EA:7A:01:E7:F7:25:0E:54:EB:6D:88:0E Authority key identifier: FF:10:23:71:56:58:31:DD:B9:C0:6D:F4:7D:F7:9B:11:20:C9:86:1E Certificate issuer: /CN=FF102371565831DDB9C06DF47DF79B1120C9861E Certificate serial: 1C751ED630BE28998C03300E919D838A40DE1960 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF102371565831DDB9C06DF47DF79B1120C9861E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/FF102371565831DDB9C06DF47DF79B1120C9861E.mft Manifest number: 010F Signing time: Tue 24 Mar 2026 13:41:19 +0000 Manifest this update: Tue 24 Mar 2026 13:36:19 +0000 Manifest next update: Fri 27 Mar 2026 18:34:19 +0000 Files and hashes: 1: FF102371565831DDB9C06DF47DF79B1120C9861E.crl (hash: v72O+ktRal9KkSnn2DqTT96e1gQXB+LNx+h1h9ks1Co=) 2: 3130332e332e3233332e302f32342d3234203d3e203538343837.roa (hash: J+VrJkjfilmZKoAgsIWnKv1mOwdSs14Mc87IKiPWNdQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/FF102371565831DDB9C06DF47DF79B1120C9861E.crl rsync://repo-rpki.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/FF102371565831DDB9C06DF47DF79B1120C9861E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF102371565831DDB9C06DF47DF79B1120C9861E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 18:34:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:75:1e:d6:30:be:28:99:8c:03:30:0e:91:9d:83:8a:40:de:19:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF102371565831DDB9C06DF47DF79B1120C9861E Validity Not Before: Mar 24 13:36:19 2026 GMT Not After : Mar 27 18:34:19 2026 GMT Subject: CN=5397DE2EDDB6A30CEA7A01E7F7250E54EB6D880E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:5d:0e:42:bf:dd:37:da:3c:e0:b0:20:81:45: c9:3a:74:dd:40:df:a9:68:93:f4:38:1b:11:74:87: c4:b6:88:6d:38:2f:38:22:a3:88:47:33:28:01:32: c7:fe:01:ac:0b:3e:fc:15:3f:07:42:a6:6c:78:59: e5:87:0c:ce:0f:45:ab:33:d7:80:f2:2a:b1:b3:11: bc:5f:36:b5:de:92:fc:8f:d8:0c:02:f7:de:1b:a2: 8f:52:0e:db:17:ef:98:41:3f:b7:8c:f7:af:82:97: 9d:09:c4:f5:14:78:2a:59:5e:50:e6:83:f2:0b:29: 2c:16:31:46:a4:59:00:b0:ec:4e:36:e0:d8:9e:36: 0e:1b:cb:a5:26:10:82:41:db:76:90:a0:34:72:69: 0b:bb:08:79:50:a6:00:5e:40:2d:b7:96:e9:d1:4a: e1:4c:90:83:44:1b:5e:f8:20:e7:ba:f4:19:9b:ee: e9:1a:9c:86:23:0b:11:35:5c:21:86:ad:cb:6b:fd: 59:3b:90:eb:8b:07:36:8f:92:fd:1d:56:54:ed:9f: 52:13:3d:b2:33:65:c7:bb:f1:94:24:ea:e3:3d:ab: ec:7a:6a:eb:76:91:9b:b7:65:90:28:e3:b3:18:f5: 28:ef:8a:ad:c9:ae:35:66:7c:69:eb:92:d5:56:20: ca:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:97:DE:2E:DD:B6:A3:0C:EA:7A:01:E7:F7:25:0E:54:EB:6D:88:0E X509v3 Authority Key Identifier: keyid:FF:10:23:71:56:58:31:DD:B9:C0:6D:F4:7D:F7:9B:11:20:C9:86:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/FF102371565831DDB9C06DF47DF79B1120C9861E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF102371565831DDB9C06DF47DF79B1120C9861E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/FF102371565831DDB9C06DF47DF79B1120C9861E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:2b:55:ba:7c:5d:e3:c0:e7:db:c6:ca:8f:04:be:6b:f0:d1: 91:35:16:4c:d3:fa:19:97:12:6c:8a:53:3b:ee:f2:80:f2:f7: 94:47:92:49:56:15:8e:71:55:19:71:42:a6:44:a2:2b:9a:28: b1:43:03:84:9f:1f:6b:5b:38:08:ea:74:dd:e4:d3:00:be:68: c6:66:6c:e2:70:48:2c:99:76:b7:4c:6d:6e:d4:c1:e0:b0:a1: 4c:2a:34:1f:5c:81:ab:87:8e:ac:71:1e:4e:70:29:28:38:f7: f2:43:70:55:ca:7d:df:31:11:48:7c:75:23:ee:0b:71:9f:37: 22:92:7d:f7:16:94:ae:ef:9e:21:ed:d4:58:9d:f8:67:1e:bd: d5:d0:e9:ee:f7:8e:dc:ed:14:1b:76:76:c9:c3:5f:94:bc:c0: 95:c7:ba:32:32:2c:37:39:30:6e:73:e0:0f:b0:3d:dd:57:e0: 32:4b:e6:3d:71:03:0b:82:53:a4:27:d0:9f:be:a5:a9:14:c5: 3e:c8:54:a4:fd:f1:51:96:41:65:1c:1b:3f:4e:3d:a5:0a:69: fd:d8:a7:45:f0:50:59:2e:f1:f0:91:84:78:a8:c8:04:50:cb: ad:d1:70:34:26:af:97:a8:b1:e0:7a:a0:7a:34:ec:3f:b4:e4: 14:55:26:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHHUe1jC+KJmMAzAOkZ2DikDeGWAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkYxMDIzNzE1NjU4MzFEREI5QzA2REY0N0RGNzlCMTEy MEM5ODYxRTAeFw0yNjAzMjQxMzM2MTlaFw0yNjAzMjcxODM0MTlaMDMxMTAvBgNV BAMTKDUzOTdERTJFRERCNkEzMENFQTdBMDFFN0Y3MjUwRTU0RUI2RDg4MEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhXQ5Cv9032jzgsCCBRck6dN1A 36lok/Q4GxF0h8S2iG04Lzgio4hHMygBMsf+AawLPvwVPwdCpmx4WeWHDM4PRasz 14DyKrGzEbxfNrXekvyP2AwC994boo9SDtsX75hBP7eM96+Cl50JxPUUeCpZXlDm g/ILKSwWMUakWQCw7E424NieNg4by6UmEIJB23aQoDRyaQu7CHlQpgBeQC23lunR SuFMkINEG174IOe69Bmb7ukanIYjCxE1XCGGrctr/Vk7kOuLBzaPkv0dVlTtn1IT PbIzZce78ZQk6uM9q+x6aut2kZu3ZZAo47MY9Sjviq3JrjVmfGnrktVWIMpxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUU5feLt22owzqegHn9yUOVOttiA4wHwYDVR0j BBgwFoAU/xAjcVZYMd25wG30ffebESDJhh4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NDNmMjllYS04NzRhLTRkMWEtYWJjYy03NTI5M2NiNTFhNmQvMC9GRjEwMjM3MTU2 NTgzMUREQjlDMDZERjQ3REY3OUIxMTIwQzk4NjFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkYxMDIzNzE1NjU4MzFEREI5QzA2REY0N0RGNzlCMTEyMEM5 ODYxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzQzZjI5ZWEtODc0YS00ZDFhLWFi Y2MtNzUyOTNjYjUxYTZkLzAvRkYxMDIzNzE1NjU4MzFEREI5QzA2REY0N0RGNzlC MTEyMEM5ODYxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEcrVbp8XePA59vGyo8Evmvw0ZE1FkzT+hmX EmyKUzvu8oDy95RHkklWFY5xVRlxQqZEoiuaKLFDA4SfH2tbOAjqdN3k0wC+aMZm bOJwSCyZdrdMbW7UweCwoUwqNB9cgauHjqxxHk5wKSg49/JDcFXKfd8xEUh8dSPu C3GfNyKSffcWlK7vniHt1Fid+GcevdXQ6e73jtztFBt2dsnDX5S8wJXHujIyLDc5 MG5z4A+wPd1X4DJL5j1xAwuCU6Qn0J++pakUxT7IVKT98VGWQWUcGz9OPaUKaf3Y p0XwUFku8fCRhHioyARQy63RcDQmr5eoseB6oHo07D+05BRVJtg= -----END CERTIFICATE-----Generated at Thu Mar 26 13:00:44 2026 by rpki-client