$ rpki-client -vvf repo-rpki.idnic.net/repo/88db7375-12d1-4935-bedd-902e9d432d5a/0/FF7F57218FD61F433A0C56952A393F8F52BD8926.mft File: FF7F57218FD61F433A0C56952A393F8F52BD8926.mft (raw, json) Hash identifier: ddAvMBfo3iMGhxxSaGmX+xWYz02e3EsMPiXD1v9G3F0= Subject key identifier: AE:D8:1C:96:0B:5E:13:B6:32:BE:D8:54:FF:54:11:7F:F8:B6:E9:6A Authority key identifier: FF:7F:57:21:8F:D6:1F:43:3A:0C:56:95:2A:39:3F:8F:52:BD:89:26 Certificate issuer: /CN=FF7F57218FD61F433A0C56952A393F8F52BD8926 Certificate serial: 784DD505F4E1F49E3F81D544B20B7EA17D405852 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF7F57218FD61F433A0C56952A393F8F52BD8926.cer Subject info access: rsync://repo-rpki.idnic.net/repo/88db7375-12d1-4935-bedd-902e9d432d5a/0/FF7F57218FD61F433A0C56952A393F8F52BD8926.mft Manifest number: 0249 Signing time: Wed 25 Mar 2026 13:50:00 +0000 Manifest this update: Wed 25 Mar 2026 13:45:00 +0000 Manifest next update: Sat 28 Mar 2026 15:27:00 +0000 Files and hashes: 1: FF7F57218FD61F433A0C56952A393F8F52BD8926.crl (hash: skr14jyN/VXRyPAzvfZi+RsbYnvhprUcxtOQSuWPHX4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/88db7375-12d1-4935-bedd-902e9d432d5a/0/FF7F57218FD61F433A0C56952A393F8F52BD8926.crl rsync://repo-rpki.idnic.net/repo/88db7375-12d1-4935-bedd-902e9d432d5a/0/FF7F57218FD61F433A0C56952A393F8F52BD8926.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF7F57218FD61F433A0C56952A393F8F52BD8926.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 15:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:4d:d5:05:f4:e1:f4:9e:3f:81:d5:44:b2:0b:7e:a1:7d:40:58:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF7F57218FD61F433A0C56952A393F8F52BD8926 Validity Not Before: Mar 25 13:45:00 2026 GMT Not After : Mar 28 15:27:00 2026 GMT Subject: CN=AED81C960B5E13B632BED854FF54117FF8B6E96A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:fd:27:75:c5:43:97:f0:4a:2a:c8:02:4b:e8: 21:50:81:39:f7:cd:33:7c:39:53:3a:f0:03:d9:52: 5c:7e:11:f4:e0:fa:3b:9a:1e:b0:bf:f5:29:8c:86: c2:e1:31:77:30:22:2d:36:6a:e4:6d:98:e8:a8:80: eb:18:41:03:56:9f:47:63:3c:12:6c:ae:3c:d2:48: 63:a8:97:86:9b:ef:74:a7:c5:39:6c:0e:24:ec:51: 6e:1a:85:a3:38:a6:22:71:6b:a8:80:21:45:6b:37: bd:bc:88:31:be:d4:4a:c2:f1:63:18:3d:2c:65:b9: fa:96:8d:64:5b:d1:4a:3c:1e:d5:6d:74:af:a6:60: 6c:b9:08:19:80:74:54:4c:77:ef:f0:51:d5:95:f5: 77:47:6c:c1:e9:c1:2a:94:cc:be:56:72:c8:9d:c6: 39:e9:94:95:13:a6:2f:fd:ea:9d:da:e3:b2:68:06: 27:47:da:b8:73:73:8d:64:10:ed:0a:88:b6:38:2b: 06:58:da:1e:f1:5c:94:8a:e4:a8:a1:29:a4:bc:94: 00:10:32:06:07:49:75:39:ac:70:9b:12:e4:e8:1a: fb:9c:e7:e1:47:83:6f:e1:85:63:2a:79:f7:e9:39: 06:52:50:ab:20:b1:e6:d0:91:d5:c8:e9:84:9b:e9: b8:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:D8:1C:96:0B:5E:13:B6:32:BE:D8:54:FF:54:11:7F:F8:B6:E9:6A X509v3 Authority Key Identifier: keyid:FF:7F:57:21:8F:D6:1F:43:3A:0C:56:95:2A:39:3F:8F:52:BD:89:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/88db7375-12d1-4935-bedd-902e9d432d5a/0/FF7F57218FD61F433A0C56952A393F8F52BD8926.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF7F57218FD61F433A0C56952A393F8F52BD8926.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/88db7375-12d1-4935-bedd-902e9d432d5a/0/FF7F57218FD61F433A0C56952A393F8F52BD8926.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:c8:25:eb:de:2a:f6:3c:2e:18:5f:9d:fa:d4:6c:f1:2f:e8: 16:d7:fa:fa:ed:36:66:74:76:15:82:25:f2:ea:33:38:48:27: 2c:d4:89:47:ca:5b:ff:79:9f:cb:52:ae:09:50:04:1d:ac:15: 28:a5:eb:9c:dc:55:50:9f:18:e7:0e:46:42:76:8d:12:94:56: ec:b2:ef:7d:7a:9b:44:f8:53:40:76:4d:bf:5a:19:89:10:ea: 42:35:bc:06:74:67:66:f5:15:89:bb:fb:b1:39:ba:48:8c:39: 5d:42:7b:1d:a3:52:76:00:66:b9:bf:e3:1b:ff:61:76:40:6a: fa:25:08:90:25:83:e1:6a:09:ae:89:3c:e7:f1:ee:2b:33:e9: 6a:a3:52:9f:ce:d6:99:93:04:53:8e:ad:95:3a:ce:18:42:b1: 68:e5:02:d6:ba:3b:f8:a0:da:a9:e0:1f:e7:f2:78:bf:5e:75: 5c:df:c2:de:18:cd:a9:39:a3:81:22:8a:80:fb:8b:f5:70:73: 23:1c:ba:5e:6b:1b:68:a9:06:9a:13:f8:74:d9:ab:61:61:82: 28:58:4d:3b:0a:14:08:b4:25:54:0b:92:cd:e1:2a:c4:f0:57: 69:48:c8:69:72:1a:3a:2e:73:26:d7:45:5f:43:e0:a3:d1:8d: 75:b9:b2:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeE3VBfTh9J4/gdVEsgt+oX1AWFIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY3RjU3MjE4RkQ2MUY0MzNBMEM1Njk1MkEzOTNGOEY1 MkJEODkyNjAeFw0yNjAzMjUxMzQ1MDBaFw0yNjAzMjgxNTI3MDBaMDMxMTAvBgNV BAMTKEFFRDgxQzk2MEI1RTEzQjYzMkJFRDg1NEZGNTQxMTdGRjhCNkU5NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDt/Sd1xUOX8EoqyAJL6CFQgTn3 zTN8OVM68APZUlx+EfTg+juaHrC/9SmMhsLhMXcwIi02auRtmOiogOsYQQNWn0dj PBJsrjzSSGOol4ab73SnxTlsDiTsUW4ahaM4piJxa6iAIUVrN728iDG+1ErC8WMY PSxlufqWjWRb0Uo8HtVtdK+mYGy5CBmAdFRMd+/wUdWV9XdHbMHpwSqUzL5Wcsid xjnplJUTpi/96p3a47JoBidH2rhzc41kEO0KiLY4KwZY2h7xXJSK5KihKaS8lAAQ MgYHSXU5rHCbEuToGvuc5+FHg2/hhWMqeffpOQZSUKsgsebQkdXI6YSb6bjhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrtgclgteE7YyvthU/1QRf/i26WowHwYDVR0j BBgwFoAU/39XIY/WH0M6DFaVKjk/j1K9iSYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OGRiNzM3NS0xMmQxLTQ5MzUtYmVkZC05MDJlOWQ0MzJkNWEvMC9GRjdGNTcyMThG RDYxRjQzM0EwQzU2OTUyQTM5M0Y4RjUyQkQ4OTI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkY3RjU3MjE4RkQ2MUY0MzNBMEM1Njk1MkEzOTNGOEY1MkJE ODkyNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODhkYjczNzUtMTJkMS00OTM1LWJl ZGQtOTAyZTlkNDMyZDVhLzAvRkY3RjU3MjE4RkQ2MUY0MzNBMEM1Njk1MkEzOTNG OEY1MkJEODkyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAInIJeveKvY8LhhfnfrUbPEv6BbX+vrtNmZ0 dhWCJfLqMzhIJyzUiUfKW/95n8tSrglQBB2sFSil65zcVVCfGOcORkJ2jRKUVuyy 7316m0T4U0B2Tb9aGYkQ6kI1vAZ0Z2b1FYm7+7E5ukiMOV1Cex2jUnYAZrm/4xv/ YXZAavolCJAlg+FqCa6JPOfx7isz6WqjUp/O1pmTBFOOrZU6zhhCsWjlAta6O/ig 2qngH+fyeL9edVzfwt4Yzak5o4EiioD7i/VwcyMcul5rG2ipBpoT+HTZq2FhgihY TTsKFAi0JVQLks3hKsTwV2lIyGlyGjoucybXRV9D4KPRjXW5sjM= -----END CERTIFICATE-----Generated at Thu Mar 26 14:17:50 2026 by rpki-client