$ rpki-client -vvf repo-rpki.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.mft File: FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.mft (raw, json) Hash identifier: 9F9yEchECjg+2iKdexlCDkHarvWyEKQEqrcGPVmF1Og= Subject key identifier: 39:76:E6:4A:95:E3:56:D6:9A:CC:55:63:05:35:E6:E4:B0:2B:51:38 Authority key identifier: FF:75:AE:DD:C6:05:9E:8A:2B:83:0E:48:7D:72:BE:77:E3:30:BE:EF Certificate issuer: /CN=FF75AEDDC6059E8A2B830E487D72BE77E330BEEF Certificate serial: 653D8190F6DC5B83F81DB6A8A54A58F7FAD0A609 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.mft Manifest number: 0204 Signing time: Tue 24 Mar 2026 23:41:37 +0000 Manifest this update: Tue 24 Mar 2026 23:36:37 +0000 Manifest next update: Sat 28 Mar 2026 01:17:37 +0000 Files and hashes: 1: FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.crl (hash: YOtpALMFtqqH5XQ9C3ut7yEB4ynGdNqeK2SDd6yCDEA=) 2: 3130332e3132312e3133342e302f32332d3234203d3e20313335343738.roa (hash: YYTZNty3sg6WbwJZplWjBQqyNGraOYIziE5EjfxvIWA=) 3: 3130332e3132312e3133322e302f32332d3234203d3e20313335343738.roa (hash: +aJ3urDYDAdZbLVxgK3efiShr+akQCYv1/hl/FmSvgY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.crl rsync://repo-rpki.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 01:17:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:3d:81:90:f6:dc:5b:83:f8:1d:b6:a8:a5:4a:58:f7:fa:d0:a6:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF75AEDDC6059E8A2B830E487D72BE77E330BEEF Validity Not Before: Mar 24 23:36:37 2026 GMT Not After : Mar 28 01:17:37 2026 GMT Subject: CN=3976E64A95E356D69ACC55630535E6E4B02B5138 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:10:25:80:fd:9d:d2:1d:7c:a5:53:5f:17:2e: 4d:bf:fc:8d:8e:d8:86:29:41:ae:47:dc:43:31:8a: 75:e0:25:05:c3:98:9e:a6:fa:31:2b:f9:54:3b:c3: 3a:5b:35:e7:67:e3:f3:4d:0d:c3:b8:1c:4f:13:b0: e8:99:8e:34:ff:59:11:e5:65:1b:75:89:9d:40:35: e5:d6:8f:26:2b:3c:0b:bb:7f:a9:a0:96:90:4c:54: 82:97:f7:b3:83:1c:99:10:aa:35:6c:84:3e:14:bc: 9d:f7:9c:bf:c0:11:b3:18:1a:e9:eb:b1:f0:ea:49: a6:99:6f:9c:5d:5a:3d:8d:6c:b2:86:8c:47:e5:78: d1:88:2a:a4:ae:32:5f:50:69:00:57:12:e1:8f:c6: 01:77:1a:d2:69:62:e5:6a:07:ce:40:44:bb:73:1c: 07:88:9c:02:76:8a:36:ba:96:c0:e7:64:97:e7:0c: b9:78:d1:91:1e:9a:a6:6c:ba:aa:2d:fa:e6:6c:06: 47:ed:5a:05:46:27:fc:de:d8:49:19:c7:75:b7:d2: 1a:db:b3:65:02:54:45:35:72:0a:7d:48:e2:0d:a1: a7:60:d0:21:1e:2e:31:ee:a2:e6:19:d8:c6:de:d5: b9:58:21:f5:08:eb:72:8b:a8:36:9d:69:4b:7a:87: b7:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:76:E6:4A:95:E3:56:D6:9A:CC:55:63:05:35:E6:E4:B0:2B:51:38 X509v3 Authority Key Identifier: keyid:FF:75:AE:DD:C6:05:9E:8A:2B:83:0E:48:7D:72:BE:77:E3:30:BE:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:41:b9:73:a8:b0:12:5a:e0:22:1f:fa:d9:8b:23:85:c2:e9: 06:c6:2a:fd:4e:95:ac:6f:e2:20:4e:38:ba:a8:87:64:99:b9: 4b:b7:c1:8c:3d:be:9d:af:55:8d:fc:e2:5a:cb:56:d0:24:02: 9a:f9:62:76:06:31:ae:93:fb:6f:18:ba:03:93:84:35:b9:96: 5b:94:1c:c2:4b:1c:81:58:22:f1:58:49:b4:7c:8a:ec:29:07: f0:51:9c:bb:aa:a4:6c:76:ff:78:cd:4d:ef:73:14:5f:80:ee: a9:c6:52:bb:9e:2b:3f:7a:43:6a:aa:84:ca:b7:ef:a0:63:66: c6:4d:f9:89:f7:ec:9b:91:cf:eb:3e:32:67:b6:53:d6:c5:3a: 72:ca:6e:c3:7d:42:74:c4:71:75:18:8b:62:24:5b:82:9d:ef: f4:f0:e0:71:53:8c:39:b7:1b:20:1a:5a:d4:bd:a3:47:5a:c4: 43:3c:9f:d9:47:7f:7e:0f:c7:6b:ec:01:2e:e3:db:ef:7e:a3: 1b:a9:3a:bc:34:81:43:af:7f:e7:56:0c:2d:19:4e:00:7c:f8: af:c9:d4:fc:77:37:43:ca:8d:4d:58:8b:27:d4:18:e1:2e:a6: d2:fa:a8:e5:85:4b:bb:01:b1:e9:af:c5:51:7a:e5:81:d1:50: 3b:c0:8b:ea -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZT2BkPbcW4P4HbaopUpY9/rQpgkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY3NUFFRERDNjA1OUU4QTJCODMwRTQ4N0Q3MkJFNzdF MzMwQkVFRjAeFw0yNjAzMjQyMzM2MzdaFw0yNjAzMjgwMTE3MzdaMDMxMTAvBgNV BAMTKDM5NzZFNjRBOTVFMzU2RDY5QUNDNTU2MzA1MzVFNkU0QjAyQjUxMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiECWA/Z3SHXylU18XLk2//I2O 2IYpQa5H3EMxinXgJQXDmJ6m+jEr+VQ7wzpbNedn4/NNDcO4HE8TsOiZjjT/WRHl ZRt1iZ1ANeXWjyYrPAu7f6mglpBMVIKX97ODHJkQqjVshD4UvJ33nL/AEbMYGunr sfDqSaaZb5xdWj2NbLKGjEfleNGIKqSuMl9QaQBXEuGPxgF3GtJpYuVqB85ARLtz HAeInAJ2ija6lsDnZJfnDLl40ZEemqZsuqot+uZsBkftWgVGJ/ze2EkZx3W30hrb s2UCVEU1cgp9SOINoadg0CEeLjHuouYZ2Mbe1blYIfUI63KLqDadaUt6h7cPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOXbmSpXjVtaazFVjBTXm5LArUTgwHwYDVR0j BBgwFoAU/3Wu3cYFnoorgw5IfXK+d+Mwvu8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YjM3ODRmZS1mOWZlLTRjYmUtODc2OC0yNjNhNzY5ODZhM2EvMC9GRjc1QUVEREM2 MDU5RThBMkI4MzBFNDg3RDcyQkU3N0UzMzBCRUVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkY3NUFFRERDNjA1OUU4QTJCODMwRTQ4N0Q3MkJFNzdFMzMw QkVFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWIzNzg0ZmUtZjlmZS00Y2JlLTg3 NjgtMjYzYTc2OTg2YTNhLzAvRkY3NUFFRERDNjA1OUU4QTJCODMwRTQ4N0Q3MkJF NzdFMzMwQkVFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGRBuXOosBJa4CIf+tmLI4XC6QbGKv1Olaxv 4iBOOLqoh2SZuUu3wYw9vp2vVY384lrLVtAkApr5YnYGMa6T+28YugOThDW5lluU HMJLHIFYIvFYSbR8iuwpB/BRnLuqpGx2/3jNTe9zFF+A7qnGUrueKz96Q2qqhMq3 76BjZsZN+Yn37JuRz+s+Mme2U9bFOnLKbsN9QnTEcXUYi2IkW4Kd7/Tw4HFTjDm3 GyAaWtS9o0daxEM8n9lHf34Px2vsAS7j2+9+oxupOrw0gUOvf+dWDC0ZTgB8+K/J 1Px3N0PKjU1YiyfUGOEuptL6qOWFS7sBsemvxVF65YHRUDvAi+o= -----END CERTIFICATE-----Generated at Thu Mar 26 10:57:04 2026 by rpki-client