$ rpki-client -vvf repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/F52826976E7EBDBF89B93A42A1682E42B84289FB.mft File: F52826976E7EBDBF89B93A42A1682E42B84289FB.mft (raw, json) Hash identifier: Ba/KVfwYhZzVDwzUnmNU1O34hfHTPiapr/f8ovk+jrI= Subject key identifier: 3B:B8:6A:EB:AC:FE:55:8A:08:BA:BA:37:E5:E9:3E:51:20:AE:00:C4 Authority key identifier: F5:28:26:97:6E:7E:BD:BF:89:B9:3A:42:A1:68:2E:42:B8:42:89:FB Certificate issuer: /CN=F52826976E7EBDBF89B93A42A1682E42B84289FB Certificate serial: 583FE95B364A2FF70002C3047A789A113141E4A2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F52826976E7EBDBF89B93A42A1682E42B84289FB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/F52826976E7EBDBF89B93A42A1682E42B84289FB.mft Manifest number: 011A Signing time: Tue 24 Mar 2026 09:52:20 +0000 Manifest this update: Tue 24 Mar 2026 09:47:20 +0000 Manifest next update: Fri 27 Mar 2026 15:59:20 +0000 Files and hashes: 1: 323430313a613565303a3a2f33322d3438203d3e20313532383130.roa (hash: P+pivHFq6sWXzePMBy9uzAKbTKafmuscGwm8u/xXNts=) 2: F52826976E7EBDBF89B93A42A1682E42B84289FB.crl (hash: esIFmont2pexAfiTBb3dSZZOO3RpRykM3l36F3Kl+r8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/F52826976E7EBDBF89B93A42A1682E42B84289FB.crl rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/F52826976E7EBDBF89B93A42A1682E42B84289FB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F52826976E7EBDBF89B93A42A1682E42B84289FB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 15:59:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:3f:e9:5b:36:4a:2f:f7:00:02:c3:04:7a:78:9a:11:31:41:e4:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F52826976E7EBDBF89B93A42A1682E42B84289FB Validity Not Before: Mar 24 09:47:20 2026 GMT Not After : Mar 27 15:59:20 2026 GMT Subject: CN=3BB86AEBACFE558A08BABA37E5E93E5120AE00C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e8:0c:1c:6f:34:92:81:06:d4:37:1b:db:05: e4:19:e1:2a:85:28:ba:19:6b:a6:42:69:08:50:a2: 43:76:e1:92:f9:b4:9f:c8:c5:fa:0e:5d:a5:20:52: b6:b6:35:1e:ac:84:5b:01:09:6e:c0:b4:d1:d2:72: 01:7d:30:23:09:5b:9c:39:6a:51:71:81:e2:98:ef: 13:b9:8e:55:87:f6:e4:3c:09:29:aa:d0:bb:f8:68: b3:b4:e0:ac:b5:48:c5:d5:31:ed:d7:4a:aa:a9:b8: a4:93:6e:1b:98:81:2b:2f:33:41:e8:22:8b:12:03: 93:41:d8:f1:0b:23:cd:57:c3:37:35:6d:37:60:60: d0:f7:ec:c7:ab:db:10:5b:db:cc:b0:9d:eb:55:25: 66:cd:aa:96:20:87:cf:17:b2:e5:d4:24:c2:96:40: d2:e7:b0:00:7d:73:bb:32:f1:18:2c:28:18:be:e3: 45:98:77:9c:84:82:86:50:41:6e:b2:ce:c1:db:8b: b9:bc:71:eb:42:e8:89:eb:48:e7:1b:b9:43:5d:9f: 3f:2a:b2:03:6a:c6:6d:79:56:94:92:7d:be:dc:9d: fa:8c:e5:fa:2e:3a:2d:fa:ca:13:ef:2d:ee:b3:91: 45:53:e2:77:19:ad:14:45:0d:ba:99:63:06:95:54: 5a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:B8:6A:EB:AC:FE:55:8A:08:BA:BA:37:E5:E9:3E:51:20:AE:00:C4 X509v3 Authority Key Identifier: keyid:F5:28:26:97:6E:7E:BD:BF:89:B9:3A:42:A1:68:2E:42:B8:42:89:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/F52826976E7EBDBF89B93A42A1682E42B84289FB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F52826976E7EBDBF89B93A42A1682E42B84289FB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/F52826976E7EBDBF89B93A42A1682E42B84289FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:13:e5:f5:0a:12:c5:0c:b3:b4:fa:56:45:11:32:21:a6:bf: 9f:53:f4:0e:04:3c:36:2a:e7:2d:8e:0e:53:c3:4c:ec:b9:68: 0d:2b:18:b9:ca:a2:07:6a:f9:7e:a8:b6:b5:db:3e:a3:94:20: 78:0d:ca:a0:7d:8d:b0:66:4a:e2:08:2c:54:0d:c1:3c:e0:87: df:8c:b7:7e:cb:ce:bf:ca:3b:c3:52:34:8d:06:e5:ca:6e:c7: 7c:d7:e5:08:f8:5e:00:cc:f8:e3:43:dc:a5:4c:19:ce:7c:b1: 74:41:12:0a:6a:04:56:69:18:fc:0b:f7:cb:a6:27:75:49:7a: 84:1f:40:0d:b2:39:f4:f1:fb:a0:17:1b:2a:32:e8:74:65:ea: c4:36:e2:a6:f8:82:d3:0e:79:4b:22:1f:33:72:92:c0:0c:7c: 57:47:bb:51:d7:3b:c6:a5:6a:16:12:6f:07:94:33:5f:9a:87: c1:17:2f:76:db:a4:e1:b2:3a:85:c8:36:26:c5:84:68:f0:3e: a9:da:35:60:0d:25:6b:29:e7:87:63:52:62:fa:eb:6e:60:be: 94:bb:78:e3:a8:59:ed:33:ad:af:a8:ad:b9:0c:94:ce:a6:ee: 5a:e2:05:2f:49:c5:e9:33:08:8a:3d:d9:0c:4f:b6:83:3c:fd: 68:e6:90:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWD/pWzZKL/cAAsMEeniaETFB5KIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjUyODI2OTc2RTdFQkRCRjg5QjkzQTQyQTE2ODJFNDJC ODQyODlGQjAeFw0yNjAzMjQwOTQ3MjBaFw0yNjAzMjcxNTU5MjBaMDMxMTAvBgNV BAMTKDNCQjg2QUVCQUNGRTU1OEEwOEJBQkEzN0U1RTkzRTUxMjBBRTAwQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI6AwcbzSSgQbUNxvbBeQZ4SqF KLoZa6ZCaQhQokN24ZL5tJ/IxfoOXaUgUra2NR6shFsBCW7AtNHScgF9MCMJW5w5 alFxgeKY7xO5jlWH9uQ8CSmq0Lv4aLO04Ky1SMXVMe3XSqqpuKSTbhuYgSsvM0Ho IosSA5NB2PELI81Xwzc1bTdgYND37Mer2xBb28ywnetVJWbNqpYgh88XsuXUJMKW QNLnsAB9c7sy8RgsKBi+40WYd5yEgoZQQW6yzsHbi7m8cetC6InrSOcbuUNdnz8q sgNqxm15VpSSfb7cnfqM5fouOi36yhPvLe6zkUVT4ncZrRRFDbqZYwaVVFrxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUO7hq66z+VYoIuro35ek+USCuAMQwHwYDVR0j BBgwFoAU9Sgml25+vb+JuTpCoWguQrhCifswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NDc1MzM4ZC03YWNiLTRhYTctYmVkYy1kNjQ1OWZkMTM1MDQvMS9GNTI4MjY5NzZF N0VCREJGODlCOTNBNDJBMTY4MkU0MkI4NDI4OUZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjUyODI2OTc2RTdFQkRCRjg5QjkzQTQyQTE2ODJFNDJCODQy ODlGQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODQ3NTMzOGQtN2FjYi00YWE3LWJl ZGMtZDY0NTlmZDEzNTA0LzEvRjUyODI2OTc2RTdFQkRCRjg5QjkzQTQyQTE2ODJF NDJCODQyODlGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEwT5fUKEsUMs7T6VkURMiGmv59T9A4EPDYq 5y2ODlPDTOy5aA0rGLnKogdq+X6otrXbPqOUIHgNyqB9jbBmSuIILFQNwTzgh9+M t37Lzr/KO8NSNI0G5cpux3zX5Qj4XgDM+OND3KVMGc58sXRBEgpqBFZpGPwL98um J3VJeoQfQA2yOfTx+6AXGyoy6HRl6sQ24qb4gtMOeUsiHzNyksAMfFdHu1HXO8al ahYSbweUM1+ah8EXL3bbpOGyOoXINibFhGjwPqnaNWANJWsp54djUmL6625gvpS7 eOOoWe0zra+orbkMlM6m7lriBS9JxekzCIo92QxPtoM8/WjmkDY= -----END CERTIFICATE-----Generated at Thu Mar 26 09:12:50 2026 by rpki-client