$ rpki-client -vvf repo-rpki.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B.mft File: F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B.mft (raw, json) Hash identifier: 3V+bI+yZT3wRi+l35KS5WHZDoVBBNm7mt0eAcCBaxO0= Subject key identifier: B0:90:95:76:08:0A:A3:25:0F:88:85:78:31:20:6F:93:86:D1:1C:F9 Authority key identifier: F5:CC:08:F1:CD:0B:94:57:9D:4F:77:3C:EE:5A:BF:BD:5E:8E:22:0B Certificate issuer: /CN=F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B Certificate serial: 1426962BBBFC58C94C3693D6C5C4B7DD19BE132F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B.mft Manifest number: 029D Signing time: Thu 26 Mar 2026 05:52:19 +0000 Manifest this update: Thu 26 Mar 2026 05:47:19 +0000 Manifest next update: Sun 29 Mar 2026 14:29:19 +0000 Files and hashes: 1: 323430343a363134303a3a2f33322d3438203d3e20313338313433.roa (hash: TgHgsu6QYqZ5L3n6Lalu5pdAbtV44ycXni/ET0cNJvg=) 2: F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B.crl (hash: gdn0QAinYgnxAgbSAJpipYoxjRvAmLS3XnPA+ry+P1Q=) 3: 3130332e3133342e37392e302f32342d3234203d3e20313338313433.roa (hash: 3d+mx0+iwzqvKG0kVcKkiTDes8ajUjlfaMyAG4o8aKI=) 4: 3130332e3133342e37362e302f32342d3234203d3e20313338313433.roa (hash: y+8t5UUINdTPUUm1lJ0KZGSga3Yl3uHzqVqQyt9zoE8=) 5: 3130332e3133342e37372e302f32342d3234203d3e20313338313433.roa (hash: eLmTnlusz2D6JkNd6vhEC+Aix0imNHgU5omxSQWEZDw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B.crl rsync://repo-rpki.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 14:29:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:26:96:2b:bb:fc:58:c9:4c:36:93:d6:c5:c4:b7:dd:19:be:13:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B Validity Not Before: Mar 26 05:47:19 2026 GMT Not After : Mar 29 14:29:19 2026 GMT Subject: CN=B0909576080AA3250F88857831206F9386D11CF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:0e:98:06:28:59:bb:4a:3a:3f:d0:c2:72:ef: e5:d7:19:6c:5e:bb:38:92:f1:b5:f3:f8:6a:43:2a: b3:1f:96:6e:ff:ed:84:78:78:07:7a:58:2a:8f:cd: ba:5c:94:a7:0c:78:a0:bf:3f:db:85:e7:a1:3a:8e: e4:df:d3:c6:b7:06:11:7c:ab:b4:56:46:4b:f1:d0: 7a:6c:aa:b2:b1:c0:dd:dc:89:57:c2:46:93:34:d8: 05:10:8f:97:87:9e:dc:a5:34:7f:c6:8b:aa:14:0b: 56:ff:f8:60:35:60:a6:e8:45:97:85:d9:11:a7:8e: 79:0a:d4:51:57:9d:e5:5c:32:6b:9a:25:2e:eb:31: 41:91:dc:7a:ba:69:9b:18:7e:ca:f2:ee:95:0a:15: f0:8a:dc:11:e7:6e:96:16:a3:17:88:f7:d7:9d:60: c8:2c:ef:0b:4d:99:2a:dc:be:9f:3b:87:dc:39:56: 7b:13:7f:fe:6c:c7:c5:9c:7a:45:99:9c:af:41:5b: 22:69:02:da:1a:cd:7b:75:6f:01:85:d6:33:78:00: 70:26:c5:5b:2e:72:25:1d:74:52:6b:21:ef:20:c1: 4b:1d:f1:28:2d:07:bc:1a:a5:75:f3:1b:58:4b:b7: ed:97:ad:d9:57:98:16:85:01:96:03:d9:9f:84:9c: 39:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:90:95:76:08:0A:A3:25:0F:88:85:78:31:20:6F:93:86:D1:1C:F9 X509v3 Authority Key Identifier: keyid:F5:CC:08:F1:CD:0B:94:57:9D:4F:77:3C:EE:5A:BF:BD:5E:8E:22:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:c4:a3:e4:e1:01:e8:a2:fe:37:38:92:1c:74:ab:65:15:12: 83:e8:46:e2:3b:af:52:0b:57:17:fa:a0:1c:83:20:96:6d:d7: 06:c9:76:fb:f9:20:46:bf:0d:2c:2b:01:ca:c6:29:a9:a4:af: 9f:62:9a:43:da:15:16:a8:a3:03:10:a4:30:f1:78:ba:e6:fc: de:82:f3:1c:50:bc:b7:85:d9:d7:21:1c:3f:6f:98:43:de:5d: 60:1a:13:f5:78:ec:4d:33:0a:f3:65:92:88:f0:65:79:94:0e: 1a:79:39:49:57:2a:2b:48:b8:3f:c2:8e:5c:fc:10:89:06:2d: 48:d4:65:5a:ea:2b:23:1f:92:ca:b6:3b:a5:2e:3c:4f:9f:c3: a2:b1:82:30:0d:4f:94:63:8a:97:41:72:f6:57:0a:18:2e:c7: 2b:46:2f:50:37:b5:02:e6:11:07:74:2b:c6:15:68:45:e8:af: f1:21:90:d5:06:8c:93:59:08:59:9a:8a:1e:8f:78:9f:30:b0: 0b:b0:bf:2e:e1:fc:d2:83:dc:29:a8:ef:12:01:86:78:9d:77: 3b:9a:8d:cf:2f:d2:63:06:6b:a1:90:00:e7:6e:a7:16:10:8a: 9c:e6:0c:03:ef:d5:b3:ee:4e:15:df:5d:62:ee:e5:13:ec:fb: 8f:0b:a5:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFCaWK7v8WMlMNpPWxcS33Rm+Ey8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjVDQzA4RjFDRDBCOTQ1NzlENEY3NzNDRUU1QUJGQkQ1 RThFMjIwQjAeFw0yNjAzMjYwNTQ3MTlaFw0yNjAzMjkxNDI5MTlaMDMxMTAvBgNV BAMTKEIwOTA5NTc2MDgwQUEzMjUwRjg4ODU3ODMxMjA2RjkzODZEMTFDRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHDpgGKFm7Sjo/0MJy7+XXGWxe uziS8bXz+GpDKrMflm7/7YR4eAd6WCqPzbpclKcMeKC/P9uF56E6juTf08a3BhF8 q7RWRkvx0HpsqrKxwN3ciVfCRpM02AUQj5eHntylNH/Gi6oUC1b/+GA1YKboRZeF 2RGnjnkK1FFXneVcMmuaJS7rMUGR3Hq6aZsYfsry7pUKFfCK3BHnbpYWoxeI99ed YMgs7wtNmSrcvp87h9w5VnsTf/5sx8WcekWZnK9BWyJpAtoazXt1bwGF1jN4AHAm xVsuciUddFJrIe8gwUsd8SgtB7wapXXzG1hLt+2XrdlXmBaFAZYD2Z+EnDkrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsJCVdggKoyUPiIV4MSBvk4bRHPkwHwYDVR0j BBgwFoAU9cwI8c0LlFedT3c87lq/vV6OIgswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDc5NGQzNi02OWY4LTQ0MDYtYmY5Zi0xMjJkZGQxN2Y0NTAvMC9GNUNDMDhGMUNE MEI5NDU3OUQ0Rjc3M0NFRTVBQkZCRDVFOEUyMjBCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjVDQzA4RjFDRDBCOTQ1NzlENEY3NzNDRUU1QUJGQkQ1RThF MjIwQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWQ3OTRkMzYtNjlmOC00NDA2LWJm OWYtMTIyZGRkMTdmNDUwLzAvRjVDQzA4RjFDRDBCOTQ1NzlENEY3NzNDRUU1QUJG QkQ1RThFMjIwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFTEo+ThAeii/jc4khx0q2UVEoPoRuI7r1IL Vxf6oByDIJZt1wbJdvv5IEa/DSwrAcrGKamkr59imkPaFRaoowMQpDDxeLrm/N6C 8xxQvLeF2dchHD9vmEPeXWAaE/V47E0zCvNlkojwZXmUDhp5OUlXKitIuD/Cjlz8 EIkGLUjUZVrqKyMfksq2O6UuPE+fw6KxgjANT5RjipdBcvZXChguxytGL1A3tQLm EQd0K8YVaEXor/EhkNUGjJNZCFmaih6PeJ8wsAuwvy7h/NKD3Cmo7xIBhniddzua jc8v0mMGa6GQAOdupxYQipzmDAPv1bPuThXfXWLu5RPs+48Lpa4= -----END CERTIFICATE-----Generated at Thu Mar 26 11:15:55 2026 by rpki-client