$ rpki-client -vvf repo-rpki.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/F1364C8B62D0A8EDFF2EB7CE55698011E828988A.mft File: F1364C8B62D0A8EDFF2EB7CE55698011E828988A.mft (raw, json) Hash identifier: M3gHXQCX5VPrzdMY9F97xvRA/wKTSsx28EjIz7tyT7o= Subject key identifier: 14:EB:3B:0B:8B:DF:58:E5:80:54:11:E2:70:59:37:0C:49:73:26:96 Authority key identifier: F1:36:4C:8B:62:D0:A8:ED:FF:2E:B7:CE:55:69:80:11:E8:28:98:8A Certificate issuer: /CN=F1364C8B62D0A8EDFF2EB7CE55698011E828988A Certificate serial: 1179452A138473BC75028D07423F66328EA00B70 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1364C8B62D0A8EDFF2EB7CE55698011E828988A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/F1364C8B62D0A8EDFF2EB7CE55698011E828988A.mft Manifest number: 02F1 Signing time: Tue 24 Mar 2026 04:10:41 +0000 Manifest this update: Tue 24 Mar 2026 04:05:41 +0000 Manifest next update: Fri 27 Mar 2026 15:33:41 +0000 Files and hashes: 1: 3130332e3137382e3135302e302f32332d3233203d3e20313439333234.roa (hash: KyVMhkhG4VtcKnJeiu0MXlT+/JG0ojfS9TufypkTrUA=) 2: 3130332e3137382e3135312e302f32342d3234203d3e20313439333234.roa (hash: 5zbaW1xbLSdresKE5AfyN56h8mwWMq5gXzkIga/AR30=) 3: 3130332e3137382e3135302e302f32342d3234203d3e20313439333234.roa (hash: c3S8Sv0dGIlGjcnrbLjUcHdin3EJiHMEXQSgcY9POBM=) 4: F1364C8B62D0A8EDFF2EB7CE55698011E828988A.crl (hash: K4ipF9z/IYAS11SJIiVGAj7gKMt0yguNYSjtYzopvPI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/F1364C8B62D0A8EDFF2EB7CE55698011E828988A.crl rsync://repo-rpki.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/F1364C8B62D0A8EDFF2EB7CE55698011E828988A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1364C8B62D0A8EDFF2EB7CE55698011E828988A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 15:33:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:79:45:2a:13:84:73:bc:75:02:8d:07:42:3f:66:32:8e:a0:0b:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F1364C8B62D0A8EDFF2EB7CE55698011E828988A Validity Not Before: Mar 24 04:05:41 2026 GMT Not After : Mar 27 15:33:41 2026 GMT Subject: CN=14EB3B0B8BDF58E5805411E27059370C49732696 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d7:de:39:a9:6c:69:fe:2a:01:69:7a:b1:b2: 9c:a8:57:9c:c1:06:e2:7e:99:6f:c4:8b:b3:fa:42: b4:ca:29:48:a6:58:df:09:cd:2a:1d:08:f4:1c:ed: 45:81:71:31:24:1d:fa:c1:42:d3:d2:bc:18:d8:0d: 6f:ab:5d:c4:e2:ec:77:af:8b:39:ff:0f:b8:6c:2d: b5:0b:e5:55:b0:fe:02:9c:7e:ac:ec:d9:17:44:60: cd:c3:8f:e2:db:84:d7:54:c6:86:ef:68:4c:f3:8b: 02:b4:b2:ea:5e:28:b4:bc:d5:a2:31:0b:0c:5e:4b: df:06:03:72:92:03:f4:c4:50:ca:b6:79:3a:67:aa: 59:d1:96:09:8f:a9:e9:d6:b3:c3:d7:3f:ab:38:7f: 5c:29:72:96:3a:51:b6:b7:b8:75:b7:2b:a2:d8:90: b4:9f:16:1f:84:ac:6a:99:de:51:1c:b2:72:99:04: cb:66:ee:8a:f7:4c:c1:68:69:46:42:47:fb:c7:6c: e7:dd:87:0c:c3:4a:e4:42:89:e5:dc:c0:49:d3:80: 6a:40:0c:3e:82:d2:d8:a6:2f:4d:25:af:f9:e2:9a: 61:b7:4d:d1:4c:eb:44:35:5e:13:60:40:94:6b:99: ba:da:93:72:f3:ae:c7:55:73:aa:7d:1d:04:9f:3c: a6:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:EB:3B:0B:8B:DF:58:E5:80:54:11:E2:70:59:37:0C:49:73:26:96 X509v3 Authority Key Identifier: keyid:F1:36:4C:8B:62:D0:A8:ED:FF:2E:B7:CE:55:69:80:11:E8:28:98:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/F1364C8B62D0A8EDFF2EB7CE55698011E828988A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1364C8B62D0A8EDFF2EB7CE55698011E828988A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/F1364C8B62D0A8EDFF2EB7CE55698011E828988A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:9d:98:96:74:21:ab:b1:0b:8a:e2:30:64:b0:69:a6:c7:ab: 28:41:01:66:87:06:0b:7f:27:6c:24:bf:e0:14:cd:16:db:30: ad:db:ff:25:f1:90:9d:77:f0:d3:d3:32:50:e5:24:1c:7a:0c: d4:32:44:d7:8c:e5:93:bc:1a:b9:60:4c:2c:12:13:10:74:00: d8:07:b8:33:37:da:ac:a6:a1:19:24:86:79:aa:80:af:59:41: 2c:c6:83:a0:d1:f8:b3:37:aa:7c:b1:83:33:60:8b:34:c6:be: d9:6f:8f:0b:8d:54:61:c3:91:dd:88:5c:a3:a6:d8:41:6b:fc: 52:3f:ed:74:31:27:dd:44:73:04:ba:69:15:81:21:fd:0e:ed: 74:30:df:80:98:f7:dd:e5:23:ec:6c:78:d8:3b:3b:0f:f0:e5: 80:30:63:c8:d1:6c:c7:d8:19:28:51:ea:94:3a:bb:89:ac:0d: e5:53:8e:85:69:59:38:d8:d1:41:e9:ed:3d:42:d1:15:d2:ce: 83:9d:40:f0:3c:95:4a:c7:51:b9:5d:a9:e6:5e:19:78:7d:82: d2:a0:1b:9c:2c:47:26:39:b1:bb:78:ff:f2:dd:65:ce:b6:44: ce:87:1c:3a:dc:2d:79:f6:74:2e:b1:38:48:2a:ae:1a:05:51: 1d:41:5c:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEXlFKhOEc7x1Ao0HQj9mMo6gC3AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjEzNjRDOEI2MkQwQThFREZGMkVCN0NFNTU2OTgwMTFF ODI4OTg4QTAeFw0yNjAzMjQwNDA1NDFaFw0yNjAzMjcxNTMzNDFaMDMxMTAvBgNV BAMTKDE0RUIzQjBCOEJERjU4RTU4MDU0MTFFMjcwNTkzNzBDNDk3MzI2OTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw1945qWxp/ioBaXqxspyoV5zB BuJ+mW/Ei7P6QrTKKUimWN8JzSodCPQc7UWBcTEkHfrBQtPSvBjYDW+rXcTi7Hev izn/D7hsLbUL5VWw/gKcfqzs2RdEYM3Dj+LbhNdUxobvaEzziwK0supeKLS81aIx CwxeS98GA3KSA/TEUMq2eTpnqlnRlgmPqenWs8PXP6s4f1wpcpY6Uba3uHW3K6LY kLSfFh+ErGqZ3lEcsnKZBMtm7or3TMFoaUZCR/vHbOfdhwzDSuRCieXcwEnTgGpA DD6C0timL00lr/nimmG3TdFM60Q1XhNgQJRrmbrak3LzrsdVc6p9HQSfPKZnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFOs7C4vfWOWAVBHicFk3DElzJpYwHwYDVR0j BBgwFoAU8TZMi2LQqO3/LrfOVWmAEegomIowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NjVmYTk4Zi0xZTg1LTQ2MzgtYmI5ZC0yODczNzhhNGNlODcvMC9GMTM2NEM4QjYy RDBBOEVERkYyRUI3Q0U1NTY5ODAxMUU4Mjg5ODhBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjEzNjRDOEI2MkQwQThFREZGMkVCN0NFNTU2OTgwMTFFODI4 OTg4QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDY1ZmE5OGYtMWU4NS00NjM4LWJi OWQtMjg3Mzc4YTRjZTg3LzAvRjEzNjRDOEI2MkQwQThFREZGMkVCN0NFNTU2OTgw MTFFODI4OTg4QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAadmJZ0IauxC4riMGSwaabHqyhBAWaHBgt/ J2wkv+AUzRbbMK3b/yXxkJ138NPTMlDlJBx6DNQyRNeM5ZO8GrlgTCwSExB0ANgH uDM32qymoRkkhnmqgK9ZQSzGg6DR+LM3qnyxgzNgizTGvtlvjwuNVGHDkd2IXKOm 2EFr/FI/7XQxJ91EcwS6aRWBIf0O7XQw34CY993lI+xseNg7Ow/w5YAwY8jRbMfY GShR6pQ6u4msDeVTjoVpWTjY0UHp7T1C0RXSzoOdQPA8lUrHUbldqeZeGXh9gtKg G5wsRyY5sbt4//LdZc62RM6HHDrcLXn2dC6xOEgqrhoFUR1BXLE= -----END CERTIFICATE-----Generated at Thu Mar 26 14:15:01 2026 by rpki-client