$ rpki-client -vvf repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/F2A96B013D78D9DD2AD046F90529AB07E832FD44.mft File: F2A96B013D78D9DD2AD046F90529AB07E832FD44.mft (raw, json) Hash identifier: jS7zrFIX/8wXOSgW585xsnJm9FURERFkQIhbKjaCHEI= Subject key identifier: 16:BB:2F:14:83:85:F9:A2:B7:02:C9:AB:F2:4A:8D:66:F5:CB:5C:0C Authority key identifier: F2:A9:6B:01:3D:78:D9:DD:2A:D0:46:F9:05:29:AB:07:E8:32:FD:44 Certificate issuer: /CN=F2A96B013D78D9DD2AD046F90529AB07E832FD44 Certificate serial: 369972C2702E40B00D1664A570BB081746E1E799 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2A96B013D78D9DD2AD046F90529AB07E832FD44.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/F2A96B013D78D9DD2AD046F90529AB07E832FD44.mft Manifest number: 01E6 Signing time: Wed 25 Mar 2026 10:32:17 +0000 Manifest this update: Wed 25 Mar 2026 10:27:17 +0000 Manifest next update: Sat 28 Mar 2026 12:47:17 +0000 Files and hashes: 1: F2A96B013D78D9DD2AD046F90529AB07E832FD44.crl (hash: 9D5apqKp6mfNaL1tB3NG9f1FEd+2PBMVtsHZfiVs9h0=) 2: 3130332e3130392e3230342e302f32332d3233203d3e20313530393334.roa (hash: JEvIOsVwGUTyy+ELa7pteKDjLoptkdSCpebP+nyLjgQ=) 3: 3130332e3130392e3230352e302f32342d3234203d3e20313530393334.roa (hash: NQHGEUDRiXIKhlqun6HUzgzAgG6hDFCPy0ofeC6C2yE=) 4: 3130332e3130392e3230342e302f32342d3234203d3e20313530393334.roa (hash: wJLVv3dGJ3iMYrWAOPrHgUOs/cbBFI5PK39xmjvRLuY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/F2A96B013D78D9DD2AD046F90529AB07E832FD44.crl rsync://repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/F2A96B013D78D9DD2AD046F90529AB07E832FD44.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2A96B013D78D9DD2AD046F90529AB07E832FD44.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 12:47:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:99:72:c2:70:2e:40:b0:0d:16:64:a5:70:bb:08:17:46:e1:e7:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2A96B013D78D9DD2AD046F90529AB07E832FD44 Validity Not Before: Mar 25 10:27:17 2026 GMT Not After : Mar 28 12:47:17 2026 GMT Subject: CN=16BB2F148385F9A2B702C9ABF24A8D66F5CB5C0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:88:72:4f:53:90:b3:d1:b9:9e:62:c9:31:83: fb:e7:ef:e7:99:18:ca:5a:ec:ee:9e:a1:51:a4:cc: c6:09:c3:96:c0:39:e9:4c:28:d1:01:ed:26:ca:16: 9c:05:05:8d:7c:e5:4a:ed:5a:ea:47:98:c9:d3:c0: 9f:72:cd:ed:d8:5d:b9:3f:08:b2:31:17:cd:76:55: b2:02:d0:15:0f:bf:1f:f3:60:b2:52:10:b2:0b:c6: c8:94:f0:e6:f8:5c:04:82:5c:cb:d1:d4:de:39:fc: ad:97:e5:2c:7d:52:90:cb:8b:61:e3:b4:d5:58:e7: 29:74:92:c7:e6:cb:2e:1f:6e:e1:81:da:92:60:44: 6a:ab:69:34:a9:3e:bb:23:c9:9f:6f:a6:23:55:24: ae:64:f0:40:37:fa:11:f5:3a:5b:76:ce:85:20:50: 2c:de:ee:0e:96:24:24:dd:12:5c:ff:2e:65:3f:5a: 5c:9a:7d:4d:44:88:4f:8a:1d:91:16:d3:91:44:f5: 41:5c:73:c6:cd:fa:ef:b3:ca:34:e1:54:25:8b:c8: 49:6f:aa:c7:f9:ee:43:6b:6b:71:68:50:5c:ca:d7: 11:3a:63:94:9b:65:59:0f:74:6e:89:a1:46:b6:fa: e6:17:55:66:7c:14:e3:fa:26:8c:5e:77:71:b4:69: d4:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:BB:2F:14:83:85:F9:A2:B7:02:C9:AB:F2:4A:8D:66:F5:CB:5C:0C X509v3 Authority Key Identifier: keyid:F2:A9:6B:01:3D:78:D9:DD:2A:D0:46:F9:05:29:AB:07:E8:32:FD:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/F2A96B013D78D9DD2AD046F90529AB07E832FD44.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2A96B013D78D9DD2AD046F90529AB07E832FD44.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/F2A96B013D78D9DD2AD046F90529AB07E832FD44.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:48:68:20:25:73:ae:6a:a1:4a:8b:5e:91:e5:b0:62:9f:ed: b8:bf:09:8a:f9:3e:ff:b3:c4:66:96:40:13:11:d4:e8:80:49: a7:f9:ab:f4:07:aa:74:5c:79:c3:8f:67:3e:b9:49:f8:cf:89: 11:23:31:c4:3f:96:b4:97:dd:d1:2e:da:5d:d5:13:55:5f:7d: d6:1c:fb:6c:da:4a:e1:31:96:51:2d:9a:69:f2:6e:dc:e2:0e: ad:0f:e3:7b:40:af:d7:09:f0:70:56:c8:69:dd:64:4b:a5:6a: a3:e8:cf:af:e9:b5:ab:aa:9e:99:60:94:46:6f:28:2c:f5:b8: 90:9d:a0:0f:98:4d:b8:46:b5:a1:77:46:48:41:24:90:7d:fb: 1c:bc:4c:94:18:af:74:1b:1a:a0:48:9c:0b:ed:01:49:61:1e: 71:9a:71:07:2b:aa:5b:7e:fd:bb:cb:ac:a2:a2:0a:18:6f:16: 58:08:26:74:a5:6c:40:12:bb:bc:e9:e2:de:17:b6:93:14:01: 8d:7f:62:48:dd:11:ce:9c:e3:79:6c:ac:32:cf:85:e3:48:64: 31:f6:69:7a:c7:58:d5:6c:35:19:9d:3a:b9:60:a0:63:c6:99: 46:1a:a0:39:c1:0c:c7:b5:e9:ef:f1:6e:be:97:73:e1:fa:85: 06:14:96:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNplywnAuQLANFmSlcLsIF0bh55kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjJBOTZCMDEzRDc4RDlERDJBRDA0NkY5MDUyOUFCMDdF ODMyRkQ0NDAeFw0yNjAzMjUxMDI3MTdaFw0yNjAzMjgxMjQ3MTdaMDMxMTAvBgNV BAMTKDE2QkIyRjE0ODM4NUY5QTJCNzAyQzlBQkYyNEE4RDY2RjVDQjVDMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAiHJPU5Cz0bmeYskxg/vn7+eZ GMpa7O6eoVGkzMYJw5bAOelMKNEB7SbKFpwFBY185UrtWupHmMnTwJ9yze3YXbk/ CLIxF812VbIC0BUPvx/zYLJSELILxsiU8Ob4XASCXMvR1N45/K2X5Sx9UpDLi2Hj tNVY5yl0ksfmyy4fbuGB2pJgRGqraTSpPrsjyZ9vpiNVJK5k8EA3+hH1Olt2zoUg UCze7g6WJCTdElz/LmU/WlyafU1EiE+KHZEW05FE9UFcc8bN+u+zyjThVCWLyElv qsf57kNra3FoUFzK1xE6Y5SbZVkPdG6JoUa2+uYXVWZ8FOP6Joxed3G0adTLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFrsvFIOF+aK3Asmr8kqNZvXLXAwwHwYDVR0j BBgwFoAU8qlrAT142d0q0Eb5BSmrB+gy/UQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YzRlMTY2OS02OGY3LTRhMzktYWNjMC01N2M3MTg3YjZjYjcvMC9GMkE5NkIwMTNE NzhEOUREMkFEMDQ2RjkwNTI5QUIwN0U4MzJGRDQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjJBOTZCMDEzRDc4RDlERDJBRDA0NkY5MDUyOUFCMDdFODMy RkQ0NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmM0ZTE2NjktNjhmNy00YTM5LWFj YzAtNTdjNzE4N2I2Y2I3LzAvRjJBOTZCMDEzRDc4RDlERDJBRDA0NkY5MDUyOUFC MDdFODMyRkQ0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHZIaCAlc65qoUqLXpHlsGKf7bi/CYr5Pv+z xGaWQBMR1OiASaf5q/QHqnRcecOPZz65SfjPiREjMcQ/lrSX3dEu2l3VE1VffdYc +2zaSuExllEtmmnybtziDq0P43tAr9cJ8HBWyGndZEulaqPoz6/ptauqnplglEZv KCz1uJCdoA+YTbhGtaF3RkhBJJB9+xy8TJQYr3QbGqBInAvtAUlhHnGacQcrqlt+ /bvLrKKiChhvFlgIJnSlbEASu7zp4t4XtpMUAY1/YkjdEc6c43lsrDLPheNIZDH2 aXrHWNVsNRmdOrlgoGPGmUYaoDnBDMe16e/xbr6Xc+H6hQYUlts= -----END CERTIFICATE-----Generated at Thu Mar 26 08:56:44 2026 by rpki-client