$ rpki-client -vvf repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.mft File: F2B4D5C98B0724CE76E212DFB655B4928B4AC325.mft (raw, json) Hash identifier: M34AZzwMwnLxBLfs5e4YW4M3oL18QLQlcW775r4/KqY= Subject key identifier: E3:ED:3F:02:1A:F1:30:65:ED:2F:5C:03:D1:A5:99:07:86:0E:54:C0 Authority key identifier: F2:B4:D5:C9:8B:07:24:CE:76:E2:12:DF:B6:55:B4:92:8B:4A:C3:25 Certificate issuer: /CN=F2B4D5C98B0724CE76E212DFB655B4928B4AC325 Certificate serial: 57BB5E8B0E997CD9B39F93CCF949E87261E959BD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.mft Manifest number: C5 Signing time: Thu 26 Mar 2026 01:52:13 +0000 Manifest this update: Thu 26 Mar 2026 01:47:13 +0000 Manifest next update: Sun 29 Mar 2026 04:37:13 +0000 Files and hashes: 1: F2B4D5C98B0724CE76E212DFB655B4928B4AC325.crl (hash: bDq0ZOfkpBDmeD/Q3B99z0/xedPyRDBptsObWBDwhKo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.crl rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 04:37:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:bb:5e:8b:0e:99:7c:d9:b3:9f:93:cc:f9:49:e8:72:61:e9:59:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2B4D5C98B0724CE76E212DFB655B4928B4AC325 Validity Not Before: Mar 26 01:47:13 2026 GMT Not After : Mar 29 04:37:13 2026 GMT Subject: CN=E3ED3F021AF13065ED2F5C03D1A59907860E54C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:af:4b:47:f2:df:eb:81:58:bb:1b:40:e2:ba: 2a:7e:a4:45:16:2e:6e:2f:a0:b6:cf:32:65:51:cd: 1f:e8:71:6b:d4:88:94:08:64:90:c9:ae:31:b2:6f: 89:09:ed:a1:55:86:78:d0:87:74:66:3d:ac:42:94: 79:42:80:14:d5:05:3b:fe:d2:37:5d:15:fa:8c:46: c1:76:56:ef:4d:71:bd:d1:fb:ca:7f:9e:d3:00:94: 42:2e:fb:0f:3b:81:4b:d9:f2:42:b9:ad:27:30:24: 39:cb:f3:55:61:f2:b6:70:67:45:6a:5a:27:37:dd: 9d:e2:f5:d7:55:3d:8b:da:2b:28:0e:c6:f5:3b:c3: 41:17:6d:3c:97:58:6b:ca:d8:2e:a4:6b:58:02:10: 6e:37:01:2e:ac:21:25:30:d8:e9:c7:36:86:04:ca: 12:b2:8f:48:9b:07:ac:d0:17:ce:32:1c:dd:30:e6: 68:aa:16:68:b9:20:67:f4:1d:c4:fd:97:92:3c:86: 86:aa:f8:dd:0f:70:ab:a7:07:0b:08:3c:8a:e7:90: 76:ac:12:90:f3:f5:ee:0e:5e:90:59:52:4c:b4:1f: 2e:4a:d2:81:6b:ca:8d:3d:15:01:71:ec:16:ce:ed: 01:8c:7b:37:f2:16:42:84:f7:5e:81:16:01:86:64: 55:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:ED:3F:02:1A:F1:30:65:ED:2F:5C:03:D1:A5:99:07:86:0E:54:C0 X509v3 Authority Key Identifier: keyid:F2:B4:D5:C9:8B:07:24:CE:76:E2:12:DF:B6:55:B4:92:8B:4A:C3:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:ba:20:fb:d4:d0:6d:e9:0c:bc:98:3d:a5:3a:f2:ad:02:6b: 15:e5:ec:93:c1:f6:31:3e:da:49:f8:02:27:61:6d:12:83:ca: c1:70:d0:b3:ff:bc:38:81:46:35:19:de:c1:69:72:e3:d6:c7: 3a:ac:56:ef:66:46:56:db:c6:8b:4c:eb:48:97:b8:3a:92:29: 2a:87:16:ff:bf:e2:a3:ad:47:9e:0f:b1:c4:db:53:f8:61:76: 3c:70:62:0e:9b:ae:0b:75:79:4b:ec:ec:95:b8:25:4b:88:5d: 21:98:8c:c5:36:24:42:cd:8c:1a:9b:e4:01:77:9d:93:96:75: 63:6f:67:5b:06:8c:90:bb:7d:e7:7d:d9:68:dd:07:7e:44:eb: 6e:4a:40:ab:45:e4:03:9b:28:9b:b3:d4:28:08:04:78:78:b3: 83:1b:70:96:d6:27:6b:5b:07:c5:9e:1f:f7:c3:63:68:2b:72: f9:83:1e:5d:4a:63:c5:e6:3f:51:bc:72:c5:be:d6:d8:bc:33: d4:40:4c:6d:5b:54:8e:9d:9b:61:5f:ab:76:cf:fa:0e:73:3d: 7b:83:71:71:a9:bc:f2:83:65:12:63:db:55:e0:b2:c6:6f:e3: 53:dc:48:13:8d:c3:f3:86:7c:88:ed:5a:ba:b0:ee:46:64:71: 87:d8:8c:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV7teiw6ZfNmzn5PM+UnocmHpWb0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjJCNEQ1Qzk4QjA3MjRDRTc2RTIxMkRGQjY1NUI0OTI4 QjRBQzMyNTAeFw0yNjAzMjYwMTQ3MTNaFw0yNjAzMjkwNDM3MTNaMDMxMTAvBgNV BAMTKEUzRUQzRjAyMUFGMTMwNjVFRDJGNUMwM0QxQTU5OTA3ODYwRTU0QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlr0tH8t/rgVi7G0Diuip+pEUW Lm4voLbPMmVRzR/ocWvUiJQIZJDJrjGyb4kJ7aFVhnjQh3RmPaxClHlCgBTVBTv+ 0jddFfqMRsF2Vu9Ncb3R+8p/ntMAlEIu+w87gUvZ8kK5rScwJDnL81Vh8rZwZ0Vq Wic33Z3i9ddVPYvaKygOxvU7w0EXbTyXWGvK2C6ka1gCEG43AS6sISUw2OnHNoYE yhKyj0ibB6zQF84yHN0w5miqFmi5IGf0HcT9l5I8hoaq+N0PcKunBwsIPIrnkHas EpDz9e4OXpBZUky0Hy5K0oFryo09FQFx7BbO7QGMezfyFkKE916BFgGGZFWLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4+0/AhrxMGXtL1wD0aWZB4YOVMAwHwYDVR0j BBgwFoAU8rTVyYsHJM524hLftlW0kotKwyUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDhlZjExOS03ZGRmLTQ1ZTUtODYzNC0zOGI3NzI1OGNiY2MvMS9GMkI0RDVDOThC MDcyNENFNzZFMjEyREZCNjU1QjQ5MjhCNEFDMzI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjJCNEQ1Qzk4QjA3MjRDRTc2RTIxMkRGQjY1NUI0OTI4QjRB QzMyNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWQ4ZWYxMTktN2RkZi00NWU1LTg2 MzQtMzhiNzcyNThjYmNjLzEvRjJCNEQ1Qzk4QjA3MjRDRTc2RTIxMkRGQjY1NUI0 OTI4QjRBQzMyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADa6IPvU0G3pDLyYPaU68q0CaxXl7JPB9jE+ 2kn4AidhbRKDysFw0LP/vDiBRjUZ3sFpcuPWxzqsVu9mRlbbxotM60iXuDqSKSqH Fv+/4qOtR54PscTbU/hhdjxwYg6brgt1eUvs7JW4JUuIXSGYjMU2JELNjBqb5AF3 nZOWdWNvZ1sGjJC7fed92WjdB35E625KQKtF5AObKJuz1CgIBHh4s4MbcJbWJ2tb B8WeH/fDY2grcvmDHl1KY8XmP1G8csW+1ti8M9RATG1bVI6dm2Ffq3bP+g5zPXuD cXGpvPKDZRJj21XgssZv41PcSBONw/OGfIjtWrqw7kZkcYfYjJY= -----END CERTIFICATE-----Generated at Thu Mar 26 14:28:02 2026 by rpki-client