$ rpki-client -vvf repo-rpki.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.mft File: F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.mft (raw, json) Hash identifier: Hysk1VbudPLyiU7cfPl5/cZ9bg/G/DqiRtW/5zoUmjM= Subject key identifier: ED:05:6A:C4:A3:11:19:7C:E2:45:74:BD:90:83:8F:ED:FA:6A:A4:EA Authority key identifier: F2:28:6B:78:D2:C9:6C:F3:CD:F0:67:A8:9D:3F:54:81:59:1C:FE:3F Certificate issuer: /CN=F2286B78D2C96CF3CDF067A89D3F5481591CFE3F Certificate serial: 0D05ED0F1D3F76D91BE46D51BBD14113C3D225C7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.mft Manifest number: 0565 Signing time: Thu 26 Mar 2026 05:11:19 +0000 Manifest this update: Thu 26 Mar 2026 05:06:19 +0000 Manifest next update: Sun 29 Mar 2026 15:32:19 +0000 Files and hashes: 1: 3130332e3135352e32362e302f32342d3234203d3e20313431303537.roa (hash: zvD1gWyZUcS44IboIaWL1frQd2y5H3jWJXa/wy/mGcM=) 2: F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.crl (hash: 9K2r6KvCh4rD9plO4eBzM1CZWO1MT/o40wS/VpzHYf8=) 3: 323030313a6466343a616138303a3a2f34382d3438203d3e20313431303537.roa (hash: tTehZh9UKuAWzLXm3C0kYFHgqql5m+DDpx9m9vm/Bjg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.crl rsync://repo-rpki.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 15:32:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:05:ed:0f:1d:3f:76:d9:1b:e4:6d:51:bb:d1:41:13:c3:d2:25:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2286B78D2C96CF3CDF067A89D3F5481591CFE3F Validity Not Before: Mar 26 05:06:19 2026 GMT Not After : Mar 29 15:32:19 2026 GMT Subject: CN=ED056AC4A311197CE24574BD90838FEDFA6AA4EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:fb:0e:2a:d8:bf:77:28:ea:4b:82:b5:0b:fd: 76:61:ed:9e:57:be:70:a8:81:d4:e8:b5:ba:ab:cf: 3d:ca:6e:95:0b:de:ac:f9:b7:51:8b:73:53:a0:77: 9c:67:a1:ce:7e:c1:0c:41:d7:75:de:ea:12:53:bb: 78:89:4c:a8:2e:06:9c:8b:50:ec:6a:6c:58:c1:aa: 6d:02:4d:57:51:aa:8e:8b:cc:a1:56:95:52:73:34: 9b:4f:38:78:5f:d3:f0:05:ff:c5:b6:66:30:b2:f4: 12:7f:e1:97:be:60:d7:db:08:c0:a3:65:7b:5d:91: 1d:15:d6:b2:16:39:97:60:6b:05:dc:a8:1e:64:47: 4e:2e:05:86:76:17:e3:b2:ee:65:07:26:6a:2f:ed: 6e:0a:33:46:a3:8d:76:51:39:23:c7:71:99:be:af: cb:e3:04:e9:ee:24:03:00:f7:da:48:d6:70:5c:cd: 4f:77:0e:0e:7e:86:75:3e:b8:bd:b0:f6:f9:e4:a3: c4:4e:bb:fe:30:e5:4d:f2:62:ad:78:13:d3:34:75: 18:88:ef:0e:ef:37:b8:70:8e:03:2d:41:f8:fa:5e: 3c:e0:72:f4:d1:dd:df:67:b7:77:15:95:f3:8b:b1: 9e:a2:5f:91:02:d5:3c:19:58:a4:00:86:c4:0e:52: dc:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:05:6A:C4:A3:11:19:7C:E2:45:74:BD:90:83:8F:ED:FA:6A:A4:EA X509v3 Authority Key Identifier: keyid:F2:28:6B:78:D2:C9:6C:F3:CD:F0:67:A8:9D:3F:54:81:59:1C:FE:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:75:d5:c4:aa:f0:45:e9:4f:83:13:35:d4:7f:94:69:d9:e8: 0e:a2:06:e7:5f:1b:ff:9d:86:2f:d3:12:e7:2d:89:3b:25:11: 1c:91:5c:e2:fc:ef:02:d9:9f:3d:a3:a1:5d:41:20:98:05:64: c5:bd:58:e6:fd:1b:99:a3:18:a6:72:e1:f2:e6:ec:d6:ec:b6: 20:5b:43:1c:c6:f0:5f:7f:a1:8e:d6:de:47:fd:55:8c:e0:c5: f2:f8:57:6f:ea:38:fc:98:4e:15:05:85:b0:83:bc:e0:0b:9c: 8c:2d:36:2c:a6:00:7a:7e:b8:73:78:7a:69:e4:5a:c7:48:0f: 2b:45:46:ea:01:40:ed:a1:cb:2b:2b:48:8f:e9:85:0c:a8:03: e7:db:ca:13:f8:86:96:1f:ac:09:d4:bc:e3:0e:84:22:a0:ca: c6:0b:1c:aa:4a:bb:24:41:aa:31:cd:57:8d:b9:7a:d5:ed:b3: c9:a4:2f:ea:03:28:d1:45:ab:73:8b:02:8e:e4:69:d7:77:50: ff:7a:a7:24:19:8c:ab:a6:68:8b:19:36:56:26:e8:95:a9:91: c9:24:8d:61:d1:15:66:0f:91:df:e6:54:91:65:30:ca:2e:33: 4a:26:ab:84:14:b8:96:d3:15:03:5d:28:bb:05:cb:0d:d4:d2: df:9d:3e:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDQXtDx0/dtkb5G1Ru9FBE8PSJccwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjIyODZCNzhEMkM5NkNGM0NERjA2N0E4OUQzRjU0ODE1 OTFDRkUzRjAeFw0yNjAzMjYwNTA2MTlaFw0yNjAzMjkxNTMyMTlaMDMxMTAvBgNV BAMTKEVEMDU2QUM0QTMxMTE5N0NFMjQ1NzRCRDkwODM4RkVERkE2QUE0RUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh+w4q2L93KOpLgrUL/XZh7Z5X vnCogdTotbqrzz3KbpUL3qz5t1GLc1Ogd5xnoc5+wQxB13Xe6hJTu3iJTKguBpyL UOxqbFjBqm0CTVdRqo6LzKFWlVJzNJtPOHhf0/AF/8W2ZjCy9BJ/4Ze+YNfbCMCj ZXtdkR0V1rIWOZdgawXcqB5kR04uBYZ2F+Oy7mUHJmov7W4KM0ajjXZROSPHcZm+ r8vjBOnuJAMA99pI1nBczU93Dg5+hnU+uL2w9vnko8ROu/4w5U3yYq14E9M0dRiI 7w7vN7hwjgMtQfj6XjzgcvTR3d9nt3cVlfOLsZ6iX5EC1TwZWKQAhsQOUtwZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7QVqxKMRGXziRXS9kIOP7fpqpOowHwYDVR0j BBgwFoAU8ihreNLJbPPN8GeonT9UgVkc/j8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MjRkYTE1Mi0wMDI0LTQzNmQtOTkwZC0zMjM4MDZlMDE2OTkvMC9GMjI4NkI3OEQy Qzk2Q0YzQ0RGMDY3QTg5RDNGNTQ4MTU5MUNGRTNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjIyODZCNzhEMkM5NkNGM0NERjA2N0E4OUQzRjU0ODE1OTFD RkUzRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzI0ZGExNTItMDAyNC00MzZkLTk5 MGQtMzIzODA2ZTAxNjk5LzAvRjIyODZCNzhEMkM5NkNGM0NERjA2N0E4OUQzRjU0 ODE1OTFDRkUzRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA511cSq8EXpT4MTNdR/lGnZ6A6iBudfG/+d hi/TEuctiTslERyRXOL87wLZnz2joV1BIJgFZMW9WOb9G5mjGKZy4fLm7NbstiBb QxzG8F9/oY7W3kf9VYzgxfL4V2/qOPyYThUFhbCDvOALnIwtNiymAHp+uHN4emnk WsdIDytFRuoBQO2hyysrSI/phQyoA+fbyhP4hpYfrAnUvOMOhCKgysYLHKpKuyRB qjHNV425etXts8mkL+oDKNFFq3OLAo7kadd3UP96pyQZjKumaIsZNlYm6JWpkckk jWHRFWYPkd/mVJFlMMouM0omq4QUuJbTFQNdKLsFyw3U0t+dPss= -----END CERTIFICATE-----Generated at Thu Mar 26 16:20:11 2026 by rpki-client