$ rpki-client -vvf repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.mft File: F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.mft (raw, json) Hash identifier: Rw6c9egoFqLEGPsy2qrTRl9MYT2My0GbZXKXFUuTg7E= Subject key identifier: 35:05:7A:25:11:D9:C5:96:F8:6E:40:8C:36:09:18:45:83:6C:DF:CC Authority key identifier: F8:E1:2F:0A:43:3C:8B:73:3B:E3:1D:B5:E0:CD:1E:F2:02:FC:21:EA Certificate issuer: /CN=F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA Certificate serial: 52B624BD1729BFC4189B0BFC157BF86194774FEE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.mft Manifest number: 01FA Signing time: Tue 24 Mar 2026 18:12:12 +0000 Manifest this update: Tue 24 Mar 2026 18:07:12 +0000 Manifest next update: Sat 28 Mar 2026 04:02:12 +0000 Files and hashes: 1: 3130332e3139352e36352e302f32342d3234203d3e20313532333638.roa (hash: nybBbZermRnfCAlPFTR2ETmDBv6TPrDdj8bK6gzLTv0=) 2: 3130332e3139352e36352e302f32342d3234203d3e203234333132.roa (hash: NYY0i2hycJDZMAWkhMI1MwXrSLzfIpid9oGLQQbdYaY=) 3: 3130332e3139352e36352e302f32342d3234203d3e20323131343037.roa (hash: GgMpV6awuEKacj2HVVRDN4z4Htq937tLhpXSx5OCQQw=) 4: 3130332e3139352e36352e302f32342d3234203d3e203530313034.roa (hash: uH7Yykg71jP1VkPGgxNuX7EouajeURB+bw3/u+w3tXE=) 5: 3130332e3139352e36352e302f32342d3234203d3e20323130353337.roa (hash: kIEXLbdHyNVR/2+p4R7baZ0vAlG7dZTeEpJcDfIBOIk=) 6: F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.crl (hash: ovtS8yX2Ho94rpnTPl/KgUD6LKkhfxEw6SxTOsyR2pM=) 7: 3130332e3139352e36352e302f32342d3234203d3e2036393339.roa (hash: T9XYyvCurgMmepMYEsZNDRpjFjN9NnYsijhEUminICw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.crl rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 04:02:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:b6:24:bd:17:29:bf:c4:18:9b:0b:fc:15:7b:f8:61:94:77:4f:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA Validity Not Before: Mar 24 18:07:12 2026 GMT Not After : Mar 28 04:02:12 2026 GMT Subject: CN=35057A2511D9C596F86E408C36091845836CDFCC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:af:04:6e:c7:49:1d:8d:a8:6a:41:da:0a:8a: e1:47:29:d2:b0:38:44:09:a2:de:45:6a:1a:f1:b8: a8:76:3e:44:dc:84:20:e1:6d:46:98:cf:20:9b:5e: 06:fd:a9:15:7a:e9:1b:de:c8:91:62:55:b9:55:d7: be:2c:08:ad:56:31:d2:64:5b:95:9c:cc:5f:0c:60: e7:21:a4:d9:e8:9b:db:c2:4f:e7:b9:5d:88:59:83: 02:67:fd:33:05:15:b6:53:be:97:f4:f7:c0:d3:be: 42:b9:74:03:56:2b:c1:62:9d:8b:58:7a:e7:36:9f: b9:d0:fd:56:2b:aa:d5:ab:96:bd:32:8d:40:8d:aa: e0:74:32:81:d5:0d:ad:9e:50:f2:c3:69:bd:3d:61: db:a3:b0:1c:ae:0b:b0:50:18:de:53:25:37:45:ca: 7b:29:b9:4c:92:46:66:b0:45:b6:1f:ef:a0:12:6c: b2:bc:72:b3:73:83:39:81:a8:c1:ac:cf:3c:9e:0c: 08:88:b2:4d:64:03:33:bd:cc:84:c8:6b:e6:9c:d3: e3:08:00:f8:f0:7b:35:7e:53:2b:db:40:59:d4:88: 51:9b:c9:9e:0b:df:f3:fa:58:cc:01:c1:46:a8:6c: 1c:71:de:86:57:ca:ec:cc:dc:57:0d:40:18:e5:f7: 4c:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:05:7A:25:11:D9:C5:96:F8:6E:40:8C:36:09:18:45:83:6C:DF:CC X509v3 Authority Key Identifier: keyid:F8:E1:2F:0A:43:3C:8B:73:3B:E3:1D:B5:E0:CD:1E:F2:02:FC:21:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:a7:cf:73:b2:8c:27:f9:c3:17:b1:81:6d:2f:2f:a5:58:8d: 6c:d7:0e:36:44:16:9c:a8:0a:b2:a8:8d:ab:00:12:10:2e:fa: 76:24:f9:57:ef:6b:e0:d6:d7:62:ec:be:7d:78:df:15:ce:47: 38:9b:cf:ba:82:01:16:1d:12:97:c5:3b:b5:ad:9a:b6:90:00: 42:6f:d5:81:7f:69:f4:2c:ac:05:5b:0a:47:ea:fb:d7:9b:f9: c3:b8:f2:e6:85:fa:3f:02:d7:88:8f:b4:0e:b7:00:46:e4:8a: 1f:91:3d:19:b5:7c:a7:cb:88:4f:f6:ad:eb:9c:35:72:c3:df: 17:f6:35:d5:f0:11:9d:37:50:3d:a4:c0:60:1b:77:9e:63:2b: 8a:6e:f1:ca:1e:49:00:72:63:7e:ed:6a:ba:e3:9c:6d:d3:64: 6d:83:1c:aa:32:f0:c9:3a:ca:2b:96:04:d0:04:1c:83:6f:bc: e4:e5:e5:c2:e3:6b:ad:a2:3b:36:2d:43:ae:ee:61:cd:eb:37: 94:67:5b:9a:a0:ce:79:da:6f:a6:e2:e9:cb:46:3a:c7:2f:fc: 6a:86:9a:fe:73:0c:25:fa:52:d5:1e:37:8b:97:27:95:cf:70: a3:a3:15:01:c3:40:d8:2e:4c:53:d7:a4:67:66:f8:13:e1:b7: c6:41:11:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUrYkvRcpv8QYmwv8FXv4YZR3T+4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhFMTJGMEE0MzNDOEI3MzNCRTMxREI1RTBDRDFFRjIw MkZDMjFFQTAeFw0yNjAzMjQxODA3MTJaFw0yNjAzMjgwNDAyMTJaMDMxMTAvBgNV BAMTKDM1MDU3QTI1MTFEOUM1OTZGODZFNDA4QzM2MDkxODQ1ODM2Q0RGQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCurwRux0kdjahqQdoKiuFHKdKw OEQJot5FahrxuKh2PkTchCDhbUaYzyCbXgb9qRV66RveyJFiVblV174sCK1WMdJk W5WczF8MYOchpNnom9vCT+e5XYhZgwJn/TMFFbZTvpf098DTvkK5dANWK8FinYtY euc2n7nQ/VYrqtWrlr0yjUCNquB0MoHVDa2eUPLDab09YdujsByuC7BQGN5TJTdF ynspuUySRmawRbYf76ASbLK8crNzgzmBqMGszzyeDAiIsk1kAzO9zITIa+ac0+MI APjwezV+UyvbQFnUiFGbyZ4L3/P6WMwBwUaobBxx3oZXyuzM3FcNQBjl90zjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNQV6JRHZxZb4bkCMNgkYRYNs38wwHwYDVR0j BBgwFoAU+OEvCkM8i3M74x214M0e8gL8IeowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MGNlNDc5Ni00OWRlLTQzYjEtYTE1Mi1iMThkMTFhZGE1MjkvMC9GOEUxMkYwQTQz M0M4QjczM0JFMzFEQjVFMENEMUVGMjAyRkMyMUVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjhFMTJGMEE0MzNDOEI3MzNCRTMxREI1RTBDRDFFRjIwMkZD MjFFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODBjZTQ3OTYtNDlkZS00M2IxLWEx NTItYjE4ZDExYWRhNTI5LzAvRjhFMTJGMEE0MzNDOEI3MzNCRTMxREI1RTBDRDFF RjIwMkZDMjFFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAinz3OyjCf5wxexgW0vL6VYjWzXDjZEFpyo CrKojasAEhAu+nYk+Vfva+DW12Lsvn143xXORzibz7qCARYdEpfFO7WtmraQAEJv 1YF/afQsrAVbCkfq+9eb+cO48uaF+j8C14iPtA63AEbkih+RPRm1fKfLiE/2reuc NXLD3xf2NdXwEZ03UD2kwGAbd55jK4pu8coeSQByY37tarrjnG3TZG2DHKoy8Mk6 yiuWBNAEHINvvOTl5cLja62iOzYtQ67uYc3rN5RnW5qgznnab6bi6ctGOscv/GqG mv5zDCX6UtUeN4uXJ5XPcKOjFQHDQNguTFPXpGdm+BPht8ZBETA= -----END CERTIFICATE-----Generated at Thu Mar 26 05:43:12 2026 by rpki-client