$ rpki-client -vvf repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.mft File: F7D89AF4A6B49559B90BD1A11D2262692C406D9B.mft (raw, json) Hash identifier: 2gSeuimKTPGWmoVs0A4QIoymYWHT4XCQfC6TUsflXjA= Subject key identifier: BA:E8:22:BD:8F:CC:D3:A7:40:D4:9B:36:C3:A6:5B:04:35:AD:D4:EB Authority key identifier: F7:D8:9A:F4:A6:B4:95:59:B9:0B:D1:A1:1D:22:62:69:2C:40:6D:9B Certificate issuer: /CN=F7D89AF4A6B49559B90BD1A11D2262692C406D9B Certificate serial: 6BF5DC48ED4D349AACF43DD4B2FE8F9C1EF8FEBF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.mft Manifest number: 023B Signing time: Wed 25 Mar 2026 00:41:30 +0000 Manifest this update: Wed 25 Mar 2026 00:36:30 +0000 Manifest next update: Sat 28 Mar 2026 03:57:30 +0000 Files and hashes: 1: 3130332e31332e3230352e302f32342d3234203d3e203438343635.roa (hash: /BkZhdhHuWpr0COSSqEa5xQ/tUEnJqvOpL9FKXE/Mm4=) 2: F7D89AF4A6B49559B90BD1A11D2262692C406D9B.crl (hash: iiTrfKuG0d94TsvYkcatiNKDw2rmffiibmU7Nr/1rmg=) 3: 3130332e31332e3230342e302f32342d3234203d3e203634333030.roa (hash: aoGZEwGfwxorrH0vm0ZUZnYbhYMMuOl+o+RcX6GAvoE=) 4: 3130332e31332e3230342e302f32332d3233203d3e203634333030.roa (hash: 2AxkviF5pv7j1kTQ3v8XjI6k7pg1zXnW3iJ2qwjQWV0=) 5: 3130332e31332e3230342e302f32342d3234203d3e203438343635.roa (hash: WBg+Oj5FDShLbz1I5ijbkQnlP4hqNRkJwhL0ngYl8bg=) 6: 3130332e31332e3230352e302f32342d3234203d3e20313532333636.roa (hash: bNck8LpKpp26kW2UN16eMZ1fOvjILY8XEu10GDGQj+I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.crl rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 03:57:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:f5:dc:48:ed:4d:34:9a:ac:f4:3d:d4:b2:fe:8f:9c:1e:f8:fe:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F7D89AF4A6B49559B90BD1A11D2262692C406D9B Validity Not Before: Mar 25 00:36:30 2026 GMT Not After : Mar 28 03:57:30 2026 GMT Subject: CN=BAE822BD8FCCD3A740D49B36C3A65B0435ADD4EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:2d:99:ee:9c:bc:60:4f:4a:79:18:a5:dd:4c: 9a:87:52:d2:a5:c3:01:95:78:d1:94:8a:b8:66:25: 89:30:0c:39:0f:e9:42:fd:c2:e2:61:fa:8d:ba:ee: a7:b1:29:2e:56:55:17:e8:1b:2d:e2:a3:92:1e:69: bb:b5:9e:e0:29:ec:af:90:bd:4a:de:dd:fd:1e:d8: 20:57:16:a1:af:8e:b4:66:b5:3e:4d:c8:d2:7c:1d: 9a:a3:60:fd:e0:44:c2:83:11:37:67:5d:00:7c:5d: 88:b7:16:58:93:c2:75:0f:3a:53:ca:f6:ac:8a:aa: 03:14:96:9e:e6:19:10:c0:89:62:1a:a5:ab:76:81: 2a:1d:89:7b:a3:0b:b8:86:a3:c9:a5:d3:9a:84:56: ff:68:89:c6:ec:bc:9a:cd:8a:fa:32:cb:c5:7e:d2: 7c:21:7e:dd:ef:4d:76:40:1b:d0:b6:8a:a7:18:6b: d5:d1:14:5b:eb:b9:14:dc:9a:4b:94:f3:56:21:9b: 83:7a:58:36:a5:15:ba:a9:82:c0:b6:7b:89:1c:ab: 1e:3b:3b:41:4b:c2:fa:63:02:e4:ef:15:35:a8:a5: 6e:91:a5:9e:b4:12:2c:33:c5:44:87:34:8d:12:6f: 24:37:e4:82:a9:34:f2:6f:71:a5:0f:6b:b6:c8:0d: 32:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:E8:22:BD:8F:CC:D3:A7:40:D4:9B:36:C3:A6:5B:04:35:AD:D4:EB X509v3 Authority Key Identifier: keyid:F7:D8:9A:F4:A6:B4:95:59:B9:0B:D1:A1:1D:22:62:69:2C:40:6D:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:b7:a1:5a:b9:48:17:9a:9f:ee:72:12:89:69:11:e6:c3:09: d3:d7:b3:18:d9:d6:83:0f:88:49:1e:74:7c:83:f1:a7:f8:ca: 3d:7f:22:95:c7:c6:c2:b8:b4:77:33:fa:e9:ce:12:79:61:0b: 69:94:39:09:6c:33:83:2c:19:23:78:10:76:d9:68:9b:4d:36: 25:6e:3a:99:47:db:54:76:1a:bd:e5:32:5b:3c:2f:ed:a6:f6: e1:b3:fd:de:e6:3a:5e:42:ee:4e:9e:a0:5a:9f:a8:81:5d:89: d2:b5:ad:78:76:70:bf:43:3f:3f:0b:f8:e0:5b:ac:66:15:cb: bf:1a:46:67:44:03:b3:54:e6:12:6c:a9:59:3f:2c:72:8a:a2: c3:95:8b:77:9a:08:c9:ed:d1:be:9d:70:27:35:1f:1e:92:a5: 2e:6b:e1:d1:eb:04:a0:5d:18:73:16:00:f0:63:34:b2:f3:65: b1:29:ff:3c:a4:fc:4e:3c:fc:f4:b2:14:7f:1b:29:46:af:2c: bf:03:5f:b7:b8:21:d8:b7:db:ee:9a:43:ba:45:c1:4a:f7:b4: f0:cc:47:2f:1c:c5:31:4f:e9:cf:5c:73:bf:e2:9a:29:79:e7: 5a:8d:22:d4:90:b5:2a:ef:bc:fb:d5:04:a6:f2:26:54:f7:cd: 59:30:6b:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa/XcSO1NNJqs9D3Usv6PnB74/r8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjdEODlBRjRBNkI0OTU1OUI5MEJEMUExMUQyMjYyNjky QzQwNkQ5QjAeFw0yNjAzMjUwMDM2MzBaFw0yNjAzMjgwMzU3MzBaMDMxMTAvBgNV BAMTKEJBRTgyMkJEOEZDQ0QzQTc0MEQ0OUIzNkMzQTY1QjA0MzVBREQ0RUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcLZnunLxgT0p5GKXdTJqHUtKl wwGVeNGUirhmJYkwDDkP6UL9wuJh+o267qexKS5WVRfoGy3io5Ieabu1nuAp7K+Q vUre3f0e2CBXFqGvjrRmtT5NyNJ8HZqjYP3gRMKDETdnXQB8XYi3FliTwnUPOlPK 9qyKqgMUlp7mGRDAiWIapat2gSodiXujC7iGo8ml05qEVv9oicbsvJrNivoyy8V+ 0nwhft3vTXZAG9C2iqcYa9XRFFvruRTcmkuU81Yhm4N6WDalFbqpgsC2e4kcqx47 O0FLwvpjAuTvFTWopW6RpZ60EiwzxUSHNI0SbyQ35IKpNPJvcaUPa7bIDTItAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuugivY/M06dA1Js2w6ZbBDWt1OswHwYDVR0j BBgwFoAU99ia9Ka0lVm5C9GhHSJiaSxAbZswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZmM5MDk2Yy0yOGRjLTQ0ZTQtYjRjZi05NmQ2MzFiNzNhYzAvMC9GN0Q4OUFGNEE2 QjQ5NTU5QjkwQkQxQTExRDIyNjI2OTJDNDA2RDlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjdEODlBRjRBNkI0OTU1OUI5MEJEMUExMUQyMjYyNjkyQzQw NkQ5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmZjOTA5NmMtMjhkYy00NGU0LWI0 Y2YtOTZkNjMxYjczYWMwLzAvRjdEODlBRjRBNkI0OTU1OUI5MEJEMUExMUQyMjYy NjkyQzQwNkQ5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADK3oVq5SBean+5yEolpEebDCdPXsxjZ1oMP iEkedHyD8af4yj1/IpXHxsK4tHcz+unOEnlhC2mUOQlsM4MsGSN4EHbZaJtNNiVu OplH21R2Gr3lMls8L+2m9uGz/d7mOl5C7k6eoFqfqIFdidK1rXh2cL9DPz8L+OBb rGYVy78aRmdEA7NU5hJsqVk/LHKKosOVi3eaCMnt0b6dcCc1Hx6SpS5r4dHrBKBd GHMWAPBjNLLzZbEp/zyk/E48/PSyFH8bKUavLL8DX7e4Idi32+6aQ7pFwUr3tPDM Ry8cxTFP6c9cc7/imil551qNItSQtSrvvPvVBKbyJlT3zVkwa04= -----END CERTIFICATE-----Generated at Thu Mar 26 20:09:53 2026 by rpki-client