$ rpki-client -vvf repo-rpki.idnic.net/repo/483a1db2-b11e-4cdc-a25c-0f124cae70ee/0/FF467F8613654288ED5F52ACB466941450FA5DF8.mft File: FF467F8613654288ED5F52ACB466941450FA5DF8.mft (raw, json) Hash identifier: OaDcDAo9K9V6oNdqCEeGy6ulxYyw5vjRxgb+1kp9PJc= Subject key identifier: A3:99:4B:E6:AE:C0:80:85:00:91:72:4C:C2:5C:0E:F6:90:CE:19:19 Authority key identifier: FF:46:7F:86:13:65:42:88:ED:5F:52:AC:B4:66:94:14:50:FA:5D:F8 Certificate issuer: /CN=FF467F8613654288ED5F52ACB466941450FA5DF8 Certificate serial: 57F693F455A78B7B34CF7070093EC942887DAEAA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF467F8613654288ED5F52ACB466941450FA5DF8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/483a1db2-b11e-4cdc-a25c-0f124cae70ee/0/FF467F8613654288ED5F52ACB466941450FA5DF8.mft Manifest number: 025D Signing time: Tue 24 Mar 2026 17:21:19 +0000 Manifest this update: Tue 24 Mar 2026 17:16:19 +0000 Manifest next update: Sat 28 Mar 2026 04:00:19 +0000 Files and hashes: 1: 3130332e3136342e3137342e302f32332d3234203d3e20313439393330.roa (hash: 5dMeFoH75yb3wslMxgFX9lE7/v4DQyEis4eWyx6RIyk=) 2: FF467F8613654288ED5F52ACB466941450FA5DF8.crl (hash: A6irw0NI8xq+zlDj79UjkR++wvx9Do03kZVTwTajpQo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/483a1db2-b11e-4cdc-a25c-0f124cae70ee/0/FF467F8613654288ED5F52ACB466941450FA5DF8.crl rsync://repo-rpki.idnic.net/repo/483a1db2-b11e-4cdc-a25c-0f124cae70ee/0/FF467F8613654288ED5F52ACB466941450FA5DF8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF467F8613654288ED5F52ACB466941450FA5DF8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 04:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:f6:93:f4:55:a7:8b:7b:34:cf:70:70:09:3e:c9:42:88:7d:ae:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF467F8613654288ED5F52ACB466941450FA5DF8 Validity Not Before: Mar 24 17:16:19 2026 GMT Not After : Mar 28 04:00:19 2026 GMT Subject: CN=A3994BE6AEC080850091724CC25C0EF690CE1919 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:63:a0:ec:9e:f9:7a:3c:6b:d2:38:bd:24:23: a7:46:df:5a:26:90:f1:43:dd:c0:e3:ff:b6:9a:10: bf:3f:e7:7a:fc:d3:23:fa:3c:c2:9b:53:39:89:b2: d1:25:81:8a:82:79:ab:9d:da:87:d3:83:67:a8:78: ef:0d:8b:e2:90:93:b3:52:c0:2e:f9:23:b8:a8:d5: 20:1d:88:d3:26:b2:61:a1:f3:19:69:a4:9a:00:88: 79:af:dc:3e:69:1d:9e:c9:0b:77:c1:d9:ae:61:c0: fd:4b:d7:f6:d5:cb:fe:1f:32:00:88:7c:43:9f:49: fe:f5:cc:ac:b5:f4:d0:c4:c6:1c:b9:68:95:ee:d5: 2a:35:3f:cc:ac:e2:23:f9:de:e4:a0:bf:a9:9b:73: fc:b9:7c:8c:2e:da:04:20:8f:7a:bc:5e:86:b2:58: 13:d8:30:94:57:07:03:a6:d9:4e:01:2b:89:1b:ac: c6:64:1b:96:36:6b:88:79:bf:06:ed:5f:e3:25:d0: d8:1d:f6:66:0a:76:23:62:e2:7c:15:70:b7:5f:23: b7:56:2e:4d:f6:36:a2:64:25:ba:48:b4:22:d4:7c: 70:be:fc:b3:d9:8d:f6:aa:c4:8d:09:ec:80:7f:ed: 38:15:55:46:44:9e:e0:e1:65:36:81:0f:36:04:70: b4:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:99:4B:E6:AE:C0:80:85:00:91:72:4C:C2:5C:0E:F6:90:CE:19:19 X509v3 Authority Key Identifier: keyid:FF:46:7F:86:13:65:42:88:ED:5F:52:AC:B4:66:94:14:50:FA:5D:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/483a1db2-b11e-4cdc-a25c-0f124cae70ee/0/FF467F8613654288ED5F52ACB466941450FA5DF8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF467F8613654288ED5F52ACB466941450FA5DF8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/483a1db2-b11e-4cdc-a25c-0f124cae70ee/0/FF467F8613654288ED5F52ACB466941450FA5DF8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:91:3a:e7:e3:27:3f:ed:bc:8b:60:54:3f:63:f9:2d:99:ba: 73:e7:32:d7:b9:14:cc:23:ed:4d:1b:19:59:af:4a:9b:24:35: 08:77:c4:81:e0:15:97:89:8a:5f:08:8b:94:79:b5:3d:e0:0c: 52:cd:f2:6d:1a:47:00:da:5b:0c:43:de:30:cf:c6:1a:0e:a2: df:89:7d:6a:06:76:22:38:5f:6d:13:b7:8d:7a:90:e9:91:16: d8:99:21:ff:e5:47:23:68:11:f2:39:ef:85:c8:12:72:ac:90: 7f:8f:9d:82:95:ba:b1:d0:74:e8:fe:c2:11:6b:97:fd:78:89: f6:9e:f5:e6:6c:ff:c1:8f:c1:7a:92:eb:cc:fa:35:da:0b:8b: 23:bb:b7:29:d1:c2:1c:ac:f4:98:de:a4:d0:08:3b:cc:c9:01: 3d:71:a8:bb:a6:15:a1:6e:85:2f:62:a4:ac:0e:d8:90:01:2d: 29:de:76:59:fa:fb:31:7a:00:a6:99:72:53:92:7f:5f:04:21: 6c:3b:a9:4b:af:e8:e5:27:fe:13:de:6a:c9:22:38:f4:33:61: 7b:80:e5:37:48:a1:c0:ff:d3:0d:e0:bb:d8:69:31:26:87:af: a4:db:fb:ce:41:4c:be:d1:44:ee:51:82:fd:63:9c:12:b4:27: b2:d9:ef:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV/aT9FWni3s0z3BwCT7JQoh9rqowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY0NjdGODYxMzY1NDI4OEVENUY1MkFDQjQ2Njk0MTQ1 MEZBNURGODAeFw0yNjAzMjQxNzE2MTlaFw0yNjAzMjgwNDAwMTlaMDMxMTAvBgNV BAMTKEEzOTk0QkU2QUVDMDgwODUwMDkxNzI0Q0MyNUMwRUY2OTBDRTE5MTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBY6Dsnvl6PGvSOL0kI6dG31om kPFD3cDj/7aaEL8/53r80yP6PMKbUzmJstElgYqCeaud2ofTg2eoeO8Ni+KQk7NS wC75I7io1SAdiNMmsmGh8xlppJoAiHmv3D5pHZ7JC3fB2a5hwP1L1/bVy/4fMgCI fEOfSf71zKy19NDExhy5aJXu1So1P8ys4iP53uSgv6mbc/y5fIwu2gQgj3q8Xoay WBPYMJRXBwOm2U4BK4kbrMZkG5Y2a4h5vwbtX+Ml0Ngd9mYKdiNi4nwVcLdfI7dW Lk32NqJkJbpItCLUfHC+/LPZjfaqxI0J7IB/7TgVVUZEnuDhZTaBDzYEcLQ9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUo5lL5q7AgIUAkXJMwlwO9pDOGRkwHwYDVR0j BBgwFoAU/0Z/hhNlQojtX1KstGaUFFD6XfgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ODNhMWRiMi1iMTFlLTRjZGMtYTI1Yy0wZjEyNGNhZTcwZWUvMC9GRjQ2N0Y4NjEz NjU0Mjg4RUQ1RjUyQUNCNDY2OTQxNDUwRkE1REY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkY0NjdGODYxMzY1NDI4OEVENUY1MkFDQjQ2Njk0MTQ1MEZB NURGOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDgzYTFkYjItYjExZS00Y2RjLWEy NWMtMGYxMjRjYWU3MGVlLzAvRkY0NjdGODYxMzY1NDI4OEVENUY1MkFDQjQ2Njk0 MTQ1MEZBNURGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABSROufjJz/tvItgVD9j+S2ZunPnMte5FMwj 7U0bGVmvSpskNQh3xIHgFZeJil8Ii5R5tT3gDFLN8m0aRwDaWwxD3jDPxhoOot+J fWoGdiI4X20Tt416kOmRFtiZIf/lRyNoEfI574XIEnKskH+PnYKVurHQdOj+whFr l/14ifae9eZs/8GPwXqS68z6NdoLiyO7tynRwhys9JjepNAIO8zJAT1xqLumFaFu hS9ipKwO2JABLSnedln6+zF6AKaZclOSf18EIWw7qUuv6OUn/hPeaskiOPQzYXuA 5TdIocD/0w3gu9hpMSaHr6Tb+85BTL7RRO5Rgv1jnBK0J7LZ77Q= -----END CERTIFICATE-----Generated at Thu Mar 26 07:29:29 2026 by rpki-client