$ rpki-client -vvf repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.mft File: F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.mft (raw, json) Hash identifier: Oam9qjJi7wSCocxewuhwLlZsCcwo/su51JVZy8ybIMU= Subject key identifier: B7:98:D2:C0:06:4B:9F:EF:12:BD:72:50:0F:25:7D:CB:F5:96:F6:87 Authority key identifier: F5:58:D9:AA:4E:66:D7:B6:E4:CB:29:EC:87:79:53:D3:ED:6C:D7:66 Certificate issuer: /CN=F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766 Certificate serial: 053C1F0CFBD4E0CAE9E657FBD8D8337BD6174925 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.cer Subject info access: rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.mft Manifest number: 0333 Signing time: Tue 24 Mar 2026 12:30:03 +0000 Manifest this update: Tue 24 Mar 2026 12:25:03 +0000 Manifest next update: Fri 27 Mar 2026 16:12:03 +0000 Files and hashes: 1: F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.crl (hash: nO6Ek+XbpNk46gY1lfr6b8sU+NN0p7Lq6KrCe18PlF0=) 2: 3130332e3133322e3233362e302f32342d3234203d3e20313338313239.roa (hash: UVuZpXFyrqhiOKN105Da6oazN9yog27beBkdQnj5+yc=) 3: 3130332e3133322e3233362e302f32322d3234203d3e20313338313239.roa (hash: 2g7rbutz6JGpSI0ieoT3F+50As6HjTWRVSvDXVVxKnA=) 4: 3130332e3133322e3233372e302f32342d3234203d3e20313338313239.roa (hash: 4jYUGHzgqlt6RurnGux/NFBAQbNpobmY9uiPuWWXUgU=) 5: 323430343a343234303a3a2f33322d3438203d3e20313338313239.roa (hash: 9++yUwhwlSbkLR01RfXkFXxsjocjqNk14mv+oISczLY=) 6: 3130332e3133322e3233392e302f32342d3234203d3e20313338313239.roa (hash: AevEhKshEQeFKNgoJ4MfmjtnuZlVYICKC2fhDAgNA8s=) 7: 323430343a343234303a3133383a3a2f34382d3438203d3e20313338313239.roa (hash: Fq5zYbjTJ0/FkCGLpNsGsRowFiN3w336hqMcVhjrspg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.crl rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 16:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:3c:1f:0c:fb:d4:e0:ca:e9:e6:57:fb:d8:d8:33:7b:d6:17:49:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766 Validity Not Before: Mar 24 12:25:03 2026 GMT Not After : Mar 27 16:12:03 2026 GMT Subject: CN=B798D2C0064B9FEF12BD72500F257DCBF596F687 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:dd:0e:af:a4:0f:9e:ce:f9:e7:ff:ae:63:44: 8d:06:70:71:dd:15:de:f5:7c:1c:64:09:3e:99:90: 80:6a:b5:89:1a:00:57:66:2c:36:20:67:30:6e:34: a3:0f:36:b6:bb:30:e5:3f:cc:d2:bc:f2:a1:33:5a: c1:3a:a3:90:b8:f4:cb:13:16:2e:27:45:2b:3a:18: 0b:97:06:78:05:e3:45:ba:d8:b6:18:27:bc:b8:98: 8a:56:8b:db:5c:6c:6e:8c:f5:fc:ed:f7:1c:26:ab: e3:c5:d0:d4:98:41:06:fd:18:9e:ac:e3:1a:42:83: 22:88:2d:38:1a:32:69:5b:8f:d1:30:ab:6b:85:a9: 20:f2:c4:27:39:52:f1:d6:7e:39:7b:75:41:8c:f2: 79:b8:19:48:fc:8b:f1:19:de:46:c2:12:ca:89:78: 64:b1:35:d6:71:94:82:10:c3:fb:f3:6e:96:e6:5a: dd:bd:83:92:34:9e:bd:2a:9a:18:6f:fd:aa:ab:a1: 98:9e:1b:4e:e1:93:59:a3:74:78:d2:e8:15:d5:5d: 87:5a:7a:db:b1:cf:a3:82:be:ea:ab:54:2e:a0:9a: c0:49:40:33:6c:39:ca:23:d2:f3:fc:ad:09:51:6e: 36:0a:65:17:3d:50:61:0a:25:32:0a:9c:00:71:57: 67:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:98:D2:C0:06:4B:9F:EF:12:BD:72:50:0F:25:7D:CB:F5:96:F6:87 X509v3 Authority Key Identifier: keyid:F5:58:D9:AA:4E:66:D7:B6:E4:CB:29:EC:87:79:53:D3:ED:6C:D7:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:5d:c3:13:85:45:5b:6e:99:8d:ba:f3:1b:96:20:dc:1e:29: 6d:74:b4:67:1a:f8:1a:d7:f6:81:63:28:f5:07:45:05:ad:f5: 10:54:54:5b:2b:04:26:e7:54:3a:8b:7c:b2:60:6b:93:34:2e: 9f:d2:19:29:73:65:c2:ba:3d:3d:b5:e7:65:bb:a4:9d:79:86: 51:4d:27:15:6b:c6:ba:79:ef:01:19:6c:eb:19:7a:39:37:55: 11:05:3c:31:18:29:03:14:a5:38:89:c1:b4:f1:4c:33:5e:85: 5f:f2:3d:ad:15:b4:f5:f0:f0:6f:31:6d:21:31:3b:69:bf:c3: 42:c5:75:51:97:4c:1a:36:14:53:97:c3:99:9f:1b:5b:da:ca: 25:31:2d:c1:5d:8e:ea:31:e4:fa:e3:87:f4:d7:9f:0a:f6:fe: 39:34:eb:de:cf:eb:8a:22:51:b4:03:95:de:f2:46:1a:2f:f9: fa:e1:b5:32:2d:09:22:81:e8:88:50:74:31:4a:10:ed:d3:cb: c1:01:61:b3:4c:b2:06:a7:b0:d1:3f:f5:dd:53:4b:ff:f1:7b: ed:4b:48:9e:29:98:7a:4c:1b:dd:c0:84:e1:79:1e:6f:72:26: c8:2e:29:cd:67:f4:62:6a:98:9d:3d:f8:de:2e:af:09:0d:a8: 05:a5:82:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBTwfDPvU4Mrp5lf72Ngze9YXSSUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjU1OEQ5QUE0RTY2RDdCNkU0Q0IyOUVDODc3OTUzRDNF RDZDRDc2NjAeFw0yNjAzMjQxMjI1MDNaFw0yNjAzMjcxNjEyMDNaMDMxMTAvBgNV BAMTKEI3OThEMkMwMDY0QjlGRUYxMkJENzI1MDBGMjU3RENCRjU5NkY2ODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr3Q6vpA+ezvnn/65jRI0GcHHd Fd71fBxkCT6ZkIBqtYkaAFdmLDYgZzBuNKMPNra7MOU/zNK88qEzWsE6o5C49MsT Fi4nRSs6GAuXBngF40W62LYYJ7y4mIpWi9tcbG6M9fzt9xwmq+PF0NSYQQb9GJ6s 4xpCgyKILTgaMmlbj9Ewq2uFqSDyxCc5UvHWfjl7dUGM8nm4GUj8i/EZ3kbCEsqJ eGSxNdZxlIIQw/vzbpbmWt29g5I0nr0qmhhv/aqroZieG07hk1mjdHjS6BXVXYda etuxz6OCvuqrVC6gmsBJQDNsOcoj0vP8rQlRbjYKZRc9UGEKJTIKnABxV2clAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt5jSwAZLn+8SvXJQDyV9y/WW9ocwHwYDVR0j BBgwFoAU9VjZqk5m17bkyynsh3lT0+1s12YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NDljODY4MC1iZDBmLTRhNGYtOTk2ZC0yMTAyYTA1MzUzNzQvMC9GNTU4RDlBQTRF NjZEN0I2RTRDQjI5RUM4Nzc5NTNEM0VENkNENzY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjU1OEQ5QUE0RTY2RDdCNkU0Q0IyOUVDODc3OTUzRDNFRDZD RDc2Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTQ5Yzg2ODAtYmQwZi00YTRmLTk5 NmQtMjEwMmEwNTM1Mzc0LzAvRjU1OEQ5QUE0RTY2RDdCNkU0Q0IyOUVDODc3OTUz RDNFRDZDRDc2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADBdwxOFRVtumY268xuWINweKW10tGca+BrX 9oFjKPUHRQWt9RBUVFsrBCbnVDqLfLJga5M0Lp/SGSlzZcK6PT2152W7pJ15hlFN JxVrxrp57wEZbOsZejk3VREFPDEYKQMUpTiJwbTxTDNehV/yPa0VtPXw8G8xbSEx O2m/w0LFdVGXTBo2FFOXw5mfG1vayiUxLcFdjuox5Prjh/TXnwr2/jk0697P64oi UbQDld7yRhov+frhtTItCSKB6IhQdDFKEO3Ty8EBYbNMsgansNE/9d1TS//xe+1L SJ4pmHpMG93AhOF5Hm9yJsguKc1n9GJqmJ09+N4urwkNqAWlglU= -----END CERTIFICATE-----Generated at Thu Mar 26 15:08:00 2026 by rpki-client