$ rpki-client -vvf repo-rpki.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/FF1246B1AF5B158EA26E75654D7B7A6DED645787.mft File: FF1246B1AF5B158EA26E75654D7B7A6DED645787.mft (raw, json) Hash identifier: v4qRphJtUVuJFSoMdaA6YOsr+0CaIu7k90huLH0wRls= Subject key identifier: 6D:5C:DE:AC:FA:D3:6E:57:BD:40:6B:C3:A3:2D:9E:89:54:9B:7E:A2 Authority key identifier: FF:12:46:B1:AF:5B:15:8E:A2:6E:75:65:4D:7B:7A:6D:ED:64:57:87 Certificate issuer: /CN=FF1246B1AF5B158EA26E75654D7B7A6DED645787 Certificate serial: 626B6AEA202A3D347FECB128B0DCAE738F915F55 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF1246B1AF5B158EA26E75654D7B7A6DED645787.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/FF1246B1AF5B158EA26E75654D7B7A6DED645787.mft Manifest number: 0130 Signing time: Thu 26 Mar 2026 10:32:17 +0000 Manifest this update: Thu 26 Mar 2026 10:27:17 +0000 Manifest next update: Sun 29 Mar 2026 17:30:17 +0000 Files and hashes: 1: FF1246B1AF5B158EA26E75654D7B7A6DED645787.crl (hash: KQqzfpsTp0q8t6FWHAfxtQS7Wbiklon3HjeuX+Rn6fg=) 2: 3130332e3136312e3130382e302f32342d3234203d3e20313431393132.roa (hash: K9NpV52vuntZKpwQF+Kz1UmNJo+CR6II9fQsq0M7K5Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/FF1246B1AF5B158EA26E75654D7B7A6DED645787.crl rsync://repo-rpki.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/FF1246B1AF5B158EA26E75654D7B7A6DED645787.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF1246B1AF5B158EA26E75654D7B7A6DED645787.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 17:30:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:6b:6a:ea:20:2a:3d:34:7f:ec:b1:28:b0:dc:ae:73:8f:91:5f:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF1246B1AF5B158EA26E75654D7B7A6DED645787 Validity Not Before: Mar 26 10:27:17 2026 GMT Not After : Mar 29 17:30:17 2026 GMT Subject: CN=6D5CDEACFAD36E57BD406BC3A32D9E89549B7EA2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:eb:74:5a:82:56:4e:98:3e:bd:dc:83:b6:c1: 4c:00:15:28:b6:33:d1:55:4f:a1:3b:fe:28:45:7e: ac:aa:44:0c:93:34:15:4d:c1:19:6e:dc:64:98:33: d4:46:c9:c7:9d:46:17:6e:24:6a:7f:78:00:de:41: bf:26:00:29:5f:42:a1:11:fd:03:f3:59:b4:57:28: fe:33:25:d5:f4:60:04:62:cf:41:7d:88:28:44:28: bc:70:5e:90:92:83:37:0e:75:a8:95:1a:bc:11:6f: 0a:c9:a9:a9:59:05:6a:f9:ec:54:f1:14:ea:0a:1a: ec:89:b9:55:20:4d:4d:ec:c0:4b:5d:52:95:a8:30: 4b:b9:7e:55:4c:c9:55:58:b0:57:5e:75:49:f8:e1: d7:ad:c2:eb:d5:d2:a5:33:60:19:39:c6:a2:48:34: 73:43:71:c1:b5:68:80:72:82:b0:9d:ba:a8:73:6e: 1f:a4:a2:a4:a1:32:49:16:7e:b5:66:05:98:f3:0c: 82:2e:aa:1c:b9:d0:ad:dc:de:24:27:da:ea:95:10: ad:cd:e4:59:97:0d:ce:21:20:16:af:80:e3:a0:2e: 93:73:61:18:b0:75:2e:b8:7e:1e:37:77:e6:a8:a5: 48:34:74:ee:8c:29:6e:be:77:91:04:ae:94:ae:f5: 66:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:5C:DE:AC:FA:D3:6E:57:BD:40:6B:C3:A3:2D:9E:89:54:9B:7E:A2 X509v3 Authority Key Identifier: keyid:FF:12:46:B1:AF:5B:15:8E:A2:6E:75:65:4D:7B:7A:6D:ED:64:57:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/FF1246B1AF5B158EA26E75654D7B7A6DED645787.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF1246B1AF5B158EA26E75654D7B7A6DED645787.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/FF1246B1AF5B158EA26E75654D7B7A6DED645787.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:c5:f4:03:1d:9b:33:c1:0c:7a:14:55:95:25:14:d8:7c:28: 7f:71:b1:bb:02:ec:25:2a:82:1e:7c:01:93:6a:73:a9:b3:22: b8:f5:bf:24:ab:93:bd:43:a6:06:e0:b9:f2:6c:c5:fa:e8:ea: d9:98:e1:ea:08:41:59:a2:59:bb:59:91:ab:fc:f2:0e:a3:86: 5b:39:26:ba:f8:61:b8:35:24:a7:a7:eb:6c:45:a7:4f:b6:3e: 4c:df:b5:87:90:02:18:b5:34:40:75:14:a7:5d:6a:06:c3:20: bb:df:64:13:25:c2:3b:7e:a7:27:19:94:91:09:b6:f4:25:a3: 2d:97:cb:3f:ef:e3:96:6d:37:49:1c:fc:f0:41:30:ae:3f:3c: 95:6c:b1:8a:f7:f6:b7:d8:59:23:c6:da:db:3d:32:59:78:6a: 7d:69:69:e9:45:ad:b5:12:4a:36:74:7b:9b:4e:94:30:52:5e: 00:05:da:90:ed:99:50:28:70:e7:2b:69:4b:7e:6f:b3:df:c9: 31:18:a6:e8:f1:86:33:7f:8d:05:c3:07:f8:ea:7f:77:fd:dd: 90:e1:d8:c4:d5:ad:99:2d:31:bd:c7:33:b5:97:56:f5:5f:d4: 18:76:38:e9:26:09:63:49:f2:e5:81:cf:8b:5e:6a:2a:3e:d8: 48:96:c7:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYmtq6iAqPTR/7LEosNyuc4+RX1UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkYxMjQ2QjFBRjVCMTU4RUEyNkU3NTY1NEQ3QjdBNkRF RDY0NTc4NzAeFw0yNjAzMjYxMDI3MTdaFw0yNjAzMjkxNzMwMTdaMDMxMTAvBgNV BAMTKDZENUNERUFDRkFEMzZFNTdCRDQwNkJDM0EzMkQ5RTg5NTQ5QjdFQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe63RaglZOmD693IO2wUwAFSi2 M9FVT6E7/ihFfqyqRAyTNBVNwRlu3GSYM9RGycedRhduJGp/eADeQb8mAClfQqER /QPzWbRXKP4zJdX0YARiz0F9iChEKLxwXpCSgzcOdaiVGrwRbwrJqalZBWr57FTx FOoKGuyJuVUgTU3swEtdUpWoMEu5flVMyVVYsFdedUn44detwuvV0qUzYBk5xqJI NHNDccG1aIBygrCduqhzbh+koqShMkkWfrVmBZjzDIIuqhy50K3c3iQn2uqVEK3N 5FmXDc4hIBavgOOgLpNzYRiwdS64fh43d+aopUg0dO6MKW6+d5EErpSu9WZZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbVzerPrTble9QGvDoy2eiVSbfqIwHwYDVR0j BBgwFoAU/xJGsa9bFY6ibnVlTXt6be1kV4cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ODlhMDY2MS0zMWVlLTQ5YTItYWU5Zi1mNmQ1NzNhMTdkZjcvMC9GRjEyNDZCMUFG NUIxNThFQTI2RTc1NjU0RDdCN0E2REVENjQ1Nzg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkYxMjQ2QjFBRjVCMTU4RUEyNkU3NTY1NEQ3QjdBNkRFRDY0 NTc4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTg5YTA2NjEtMzFlZS00OWEyLWFl OWYtZjZkNTczYTE3ZGY3LzAvRkYxMjQ2QjFBRjVCMTU4RUEyNkU3NTY1NEQ3QjdB NkRFRDY0NTc4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAILF9AMdmzPBDHoUVZUlFNh8KH9xsbsC7CUq gh58AZNqc6mzIrj1vySrk71DpgbgufJsxfro6tmY4eoIQVmiWbtZkav88g6jhls5 Jrr4Ybg1JKen62xFp0+2PkzftYeQAhi1NEB1FKddagbDILvfZBMlwjt+pycZlJEJ tvQloy2Xyz/v45ZtN0kc/PBBMK4/PJVssYr39rfYWSPG2ts9Mll4an1paelFrbUS SjZ0e5tOlDBSXgAF2pDtmVAocOcraUt+b7PfyTEYpujxhjN/jQXDB/jqf3f93ZDh 2MTVrZktMb3HM7WXVvVf1Bh2OOkmCWNJ8uWBz4teaio+2EiWx0s= -----END CERTIFICATE-----Generated at Fri Mar 27 00:36:31 2026 by rpki-client