$ rpki-client -vvf repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.mft File: FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.mft (raw, json) Hash identifier: 0sfreXnHeebi6s8cs7ybhyCb7jtNxrknIz2eSrRAVK8= Subject key identifier: 34:D7:90:D0:2D:45:AE:E3:31:3B:E0:70:3E:47:03:60:3A:E3:7D:79 Authority key identifier: FF:89:F2:3B:CB:C4:26:35:E9:7A:E1:5A:7F:B6:9E:1E:09:A9:7D:AF Certificate issuer: /CN=FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF Certificate serial: 547A4F47DCB678E0C5A1C87EF639D79B5BE38FE2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.mft Manifest number: 02EE Signing time: Mon 23 Mar 2026 21:42:36 +0000 Manifest this update: Mon 23 Mar 2026 21:37:36 +0000 Manifest next update: Fri 27 Mar 2026 09:40:36 +0000 Files and hashes: 1: 3130332e3136332e3138352e302f32342d3234203d3e20313432333636.roa (hash: pdL/jDmC/bRYeiHS8cnl+uvo57Pja48iQZSIZZK07no=) 2: 3130332e3136332e3138342e302f32342d3234203d3e20313432333636.roa (hash: siPS5QoYum/BXEiNROt4IMRxgn1AB6K77rmnuo2DlKI=) 3: FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.crl (hash: k/BuDiLwas9Ndw5gM9RxYHQU5Gq7xPI2FLGQGnYA6n4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.crl rsync://repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 09:40:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:7a:4f:47:dc:b6:78:e0:c5:a1:c8:7e:f6:39:d7:9b:5b:e3:8f:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF Validity Not Before: Mar 23 21:37:36 2026 GMT Not After : Mar 27 09:40:36 2026 GMT Subject: CN=34D790D02D45AEE3313BE0703E4703603AE37D79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1f:04:fd:51:7b:33:f6:3e:b5:c1:c9:c9:6c: 4a:25:f6:e1:45:67:f1:f1:69:e2:4f:8c:cf:9e:0c: 74:58:a3:d2:17:d3:04:46:3e:a6:06:9d:bb:e8:f7: 02:d3:b0:a6:66:81:1e:57:d9:4e:44:b0:ce:e6:55: e7:cd:a3:22:ec:12:b3:2a:70:30:85:26:e9:39:bc: 37:2a:f3:87:cd:6c:3c:88:44:b2:64:2c:ba:2d:14: 62:0f:8f:06:51:b3:07:cb:cc:1a:e8:1c:76:92:cf: 12:e5:3e:53:4d:1e:72:95:ac:4e:af:ba:80:75:67: 17:3d:d6:52:9b:63:38:3c:da:a5:3a:40:c0:cd:ab: a6:60:ca:5c:61:36:7a:9b:26:77:aa:cd:d8:b2:88: 5c:3b:6b:30:48:e8:8d:d0:95:ae:81:9f:0d:69:d3: 0e:78:26:64:03:ac:af:af:0a:a8:d0:6b:fb:f0:34: 7c:ef:4a:de:20:42:3f:8c:8f:0c:05:b1:81:c1:d3: 89:a8:f6:4b:18:3e:79:a8:30:39:7d:ac:87:48:b5: ac:31:5b:97:09:db:76:45:29:f1:94:b6:86:90:12: bc:2c:79:e7:f9:b6:41:9a:78:e4:62:85:62:49:8e: 1e:1c:bb:79:03:fc:20:e3:bb:8e:c1:80:06:ec:7f: 35:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:D7:90:D0:2D:45:AE:E3:31:3B:E0:70:3E:47:03:60:3A:E3:7D:79 X509v3 Authority Key Identifier: keyid:FF:89:F2:3B:CB:C4:26:35:E9:7A:E1:5A:7F:B6:9E:1E:09:A9:7D:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:e0:26:5d:bb:bb:85:bc:d0:7b:d5:b9:7a:2e:4d:7c:cc:57: 55:b6:07:5d:1e:fe:e4:1e:4e:ba:30:d7:f8:e5:ee:93:29:ee: 91:0a:48:02:13:b1:40:c2:7c:22:da:95:c5:9f:6d:0e:43:94: 1a:95:8e:1f:86:65:94:74:59:24:9c:85:c6:d1:64:fe:eb:f8: 10:76:b3:db:43:7d:29:2b:90:fb:4b:b9:fc:b1:0c:0e:54:9e: 20:7a:0a:ac:21:91:fa:4d:73:f9:ac:13:c5:e6:d2:8e:a5:08: eb:ee:a1:89:73:80:56:fb:00:40:64:ef:ad:22:6e:8a:b4:25: 43:1f:10:05:57:7e:2e:3c:a3:28:74:72:49:20:b9:7c:fc:92: 46:b4:a5:30:f1:bc:b8:aa:38:7c:c4:8e:47:bc:61:73:07:93: 90:ec:34:14:60:b0:a3:09:68:bb:c1:0d:9a:23:a2:de:66:9a: 76:a4:f9:b1:13:15:77:37:5e:7d:f2:9a:e5:11:bd:69:d3:1e: e2:df:2b:98:b0:de:57:8b:4b:31:8f:7d:a2:e1:44:9b:75:7b: 70:87:9c:8a:67:df:8b:6b:86:13:08:e7:bc:b8:b8:9b:07:dc: 54:11:d3:d9:32:03:8c:fd:ba:7d:26:bf:94:08:56:62:5a:a7: 54:0e:33:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVHpPR9y2eODFoch+9jnXm1vjj+IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY4OUYyM0JDQkM0MjYzNUU5N0FFMTVBN0ZCNjlFMUUw OUE5N0RBRjAeFw0yNjAzMjMyMTM3MzZaFw0yNjAzMjcwOTQwMzZaMDMxMTAvBgNV BAMTKDM0RDc5MEQwMkQ0NUFFRTMzMTNCRTA3MDNFNDcwMzYwM0FFMzdENzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxHwT9UXsz9j61wcnJbEol9uFF Z/HxaeJPjM+eDHRYo9IX0wRGPqYGnbvo9wLTsKZmgR5X2U5EsM7mVefNoyLsErMq cDCFJuk5vDcq84fNbDyIRLJkLLotFGIPjwZRswfLzBroHHaSzxLlPlNNHnKVrE6v uoB1Zxc91lKbYzg82qU6QMDNq6ZgylxhNnqbJneqzdiyiFw7azBI6I3Qla6Bnw1p 0w54JmQDrK+vCqjQa/vwNHzvSt4gQj+MjwwFsYHB04mo9ksYPnmoMDl9rIdItawx W5cJ23ZFKfGUtoaQErwseef5tkGaeORihWJJjh4cu3kD/CDju47BgAbsfzUxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNNeQ0C1FruMxO+BwPkcDYDrjfXkwHwYDVR0j BBgwFoAU/4nyO8vEJjXpeuFaf7aeHgmpfa8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YjE2NjRhNy1jOWM5LTQ0NDItODcxOC05YWVjOWUyMTEwYTIvMC9GRjg5RjIzQkNC QzQyNjM1RTk3QUUxNUE3RkI2OUUxRTA5QTk3REFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkY4OUYyM0JDQkM0MjYzNUU5N0FFMTVBN0ZCNjlFMUUwOUE5 N0RBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGIxNjY0YTctYzljOS00NDQyLTg3 MTgtOWFlYzllMjExMGEyLzAvRkY4OUYyM0JDQkM0MjYzNUU5N0FFMTVBN0ZCNjlF MUUwOUE5N0RBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFHgJl27u4W80HvVuXouTXzMV1W2B10e/uQe Trow1/jl7pMp7pEKSAITsUDCfCLalcWfbQ5DlBqVjh+GZZR0WSSchcbRZP7r+BB2 s9tDfSkrkPtLufyxDA5UniB6CqwhkfpNc/msE8Xm0o6lCOvuoYlzgFb7AEBk760i boq0JUMfEAVXfi48oyh0ckkguXz8kka0pTDxvLiqOHzEjke8YXMHk5DsNBRgsKMJ aLvBDZojot5mmnak+bETFXc3Xn3ymuURvWnTHuLfK5iw3leLSzGPfaLhRJt1e3CH nIpn34trhhMI57y4uJsH3FQR09kyA4z9un0mv5QIVmJap1QOM+E= -----END CERTIFICATE-----Generated at Thu Mar 26 06:04:33 2026 by rpki-client