$ rpki-client -vvf repo-rpki.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/F71A5EA4A463A015DB17D32923D3F431A6F20F62.mft File: F71A5EA4A463A015DB17D32923D3F431A6F20F62.mft (raw, json) Hash identifier: gimgkWl8krJUIJ4DcbZVBc4Wi5PEm1QNlPlHIFDlbIE= Subject key identifier: 95:1D:37:AA:D4:CE:B2:3E:FF:D9:90:B5:7A:B3:06:6F:FA:98:77:EE Authority key identifier: F7:1A:5E:A4:A4:63:A0:15:DB:17:D3:29:23:D3:F4:31:A6:F2:0F:62 Certificate issuer: /CN=F71A5EA4A463A015DB17D32923D3F431A6F20F62 Certificate serial: 561C0336E6BCE7A9452B762B7721762065195808 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F71A5EA4A463A015DB17D32923D3F431A6F20F62.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/F71A5EA4A463A015DB17D32923D3F431A6F20F62.mft Manifest number: 01FE Signing time: Wed 25 Mar 2026 11:12:06 +0000 Manifest this update: Wed 25 Mar 2026 11:07:06 +0000 Manifest next update: Sat 28 Mar 2026 21:30:06 +0000 Files and hashes: 1: F71A5EA4A463A015DB17D32923D3F431A6F20F62.crl (hash: O4FFp5m2mx48j1NSE27qcj0UGPxGen4VVFRu7rymv/A=) 2: 3130332e37352e36362e302f32332d3234203d3e20313530353231.roa (hash: iletpOTfxixHKxRms6Z2yECRzDZ4SIPJlSYEIU/u2zU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/F71A5EA4A463A015DB17D32923D3F431A6F20F62.crl rsync://repo-rpki.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/F71A5EA4A463A015DB17D32923D3F431A6F20F62.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F71A5EA4A463A015DB17D32923D3F431A6F20F62.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 21:30:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:1c:03:36:e6:bc:e7:a9:45:2b:76:2b:77:21:76:20:65:19:58:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F71A5EA4A463A015DB17D32923D3F431A6F20F62 Validity Not Before: Mar 25 11:07:06 2026 GMT Not After : Mar 28 21:30:06 2026 GMT Subject: CN=951D37AAD4CEB23EFFD990B57AB3066FFA9877EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:41:b6:66:e2:bf:3d:d3:d3:20:40:41:2b:ef: 74:73:ce:b1:bb:23:cd:93:49:1e:1b:0c:ba:06:95: 69:db:77:df:64:f0:d5:26:5b:bf:86:20:f4:c8:93: 9a:20:5b:0b:c1:d3:e0:a9:c7:b7:02:a3:f2:16:15: e0:c7:e5:e9:0a:93:66:44:1e:8c:65:ab:f8:a2:ab: 1d:87:09:1d:30:b7:88:4f:bd:c2:08:82:29:b3:6d: 7b:40:87:75:c6:b0:8e:20:7c:ae:40:e7:f1:74:7d: b6:e6:a0:be:f6:bb:7b:e4:c9:32:51:9e:2f:f0:53: 8d:e0:85:ef:64:44:5f:14:e4:4e:fe:6c:fc:16:48: a2:b8:3d:d4:76:a6:0c:b0:23:30:9c:ee:84:e8:8d: 39:9e:f8:b6:a0:c2:9b:1d:fd:09:45:1b:9c:1b:47: a2:1a:be:37:1d:3f:ac:18:6c:88:11:b0:bc:34:b8: 9d:d8:9e:cc:05:f4:35:7c:51:b7:83:82:de:5c:61: 2d:27:8f:c0:3e:05:a1:2c:35:25:16:0f:02:97:0d: ec:51:6e:45:43:5d:a0:4b:98:15:f8:38:51:cf:88: fa:a8:e3:45:fd:27:e8:ab:95:28:86:60:ac:c5:a2: ac:46:2f:a1:5f:78:ef:5c:a0:fe:89:91:e3:cf:63: 7b:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:1D:37:AA:D4:CE:B2:3E:FF:D9:90:B5:7A:B3:06:6F:FA:98:77:EE X509v3 Authority Key Identifier: keyid:F7:1A:5E:A4:A4:63:A0:15:DB:17:D3:29:23:D3:F4:31:A6:F2:0F:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/F71A5EA4A463A015DB17D32923D3F431A6F20F62.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F71A5EA4A463A015DB17D32923D3F431A6F20F62.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/F71A5EA4A463A015DB17D32923D3F431A6F20F62.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:79:a8:8d:3b:d3:33:07:ce:2c:3d:1a:15:3a:14:ac:ce:8a: c7:f8:98:f6:5e:9b:07:f8:db:84:74:60:03:ba:a9:60:ba:d6: a3:d8:d3:2f:e3:4b:ce:d5:ae:13:a4:ef:01:d0:c6:b8:fe:b5: 73:b6:7a:f9:fb:3a:ab:0a:e3:55:59:88:61:ec:7c:45:55:17: f2:0b:6e:db:db:2d:0a:0b:c4:71:b1:6f:df:bc:d6:67:3b:fa: ad:3e:38:44:26:eb:5b:e7:9c:9d:1e:c4:e1:11:ec:a4:7c:22: f6:86:70:9d:9d:02:b8:ad:66:45:e7:51:18:49:aa:3b:43:13: 9e:c6:d7:03:18:3e:5d:b5:26:37:ad:13:06:87:56:b6:06:d1: 1c:4b:28:17:12:f2:64:ca:26:f6:b3:31:86:5d:be:23:61:c0: 49:94:97:ab:73:86:f5:23:d8:78:00:1e:3b:28:9a:29:03:80: 5e:93:f2:1a:35:aa:27:14:cc:b2:a9:e1:cd:31:98:82:5a:af: 0e:ce:39:3b:68:a6:8e:cc:6c:47:ad:19:05:04:e2:8f:ca:36: 3d:d8:cd:40:5a:ee:8f:3f:d3:db:3e:c9:7a:06:11:10:76:14: 34:76:44:d6:7c:2b:e8:15:bf:6e:77:ee:db:f2:60:d0:f5:78: 3d:c9:f6:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVhwDNua856lFK3YrdyF2IGUZWAgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjcxQTVFQTRBNDYzQTAxNURCMTdEMzI5MjNEM0Y0MzFB NkYyMEY2MjAeFw0yNjAzMjUxMTA3MDZaFw0yNjAzMjgyMTMwMDZaMDMxMTAvBgNV BAMTKDk1MUQzN0FBRDRDRUIyM0VGRkQ5OTBCNTdBQjMwNjZGRkE5ODc3RUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUQbZm4r8909MgQEEr73RzzrG7 I82TSR4bDLoGlWnbd99k8NUmW7+GIPTIk5ogWwvB0+Cpx7cCo/IWFeDH5ekKk2ZE Hoxlq/iiqx2HCR0wt4hPvcIIgimzbXtAh3XGsI4gfK5A5/F0fbbmoL72u3vkyTJR ni/wU43ghe9kRF8U5E7+bPwWSKK4PdR2pgywIzCc7oTojTme+Lagwpsd/QlFG5wb R6IavjcdP6wYbIgRsLw0uJ3YnswF9DV8UbeDgt5cYS0nj8A+BaEsNSUWDwKXDexR bkVDXaBLmBX4OFHPiPqo40X9J+irlSiGYKzFoqxGL6FfeO9coP6JkePPY3uHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlR03qtTOsj7/2ZC1erMGb/qYd+4wHwYDVR0j BBgwFoAU9xpepKRjoBXbF9MpI9P0MabyD2IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j M2Y3NmM2ZC1mODUwLTRjNDktODU0Yy01NWYzODI4NDRjOTcvMC9GNzFBNUVBNEE0 NjNBMDE1REIxN0QzMjkyM0QzRjQzMUE2RjIwRjYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjcxQTVFQTRBNDYzQTAxNURCMTdEMzI5MjNEM0Y0MzFBNkYy MEY2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzNmNzZjNmQtZjg1MC00YzQ5LTg1 NGMtNTVmMzgyODQ0Yzk3LzAvRjcxQTVFQTRBNDYzQTAxNURCMTdEMzI5MjNEM0Y0 MzFBNkYyMEY2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE95qI070zMHziw9GhU6FKzOisf4mPZemwf4 24R0YAO6qWC61qPY0y/jS87VrhOk7wHQxrj+tXO2evn7OqsK41VZiGHsfEVVF/IL btvbLQoLxHGxb9+81mc7+q0+OEQm61vnnJ0exOER7KR8IvaGcJ2dAritZkXnURhJ qjtDE57G1wMYPl21JjetEwaHVrYG0RxLKBcS8mTKJvazMYZdviNhwEmUl6tzhvUj 2HgAHjsomikDgF6T8ho1qicUzLKp4c0xmIJarw7OOTtopo7MbEetGQUE4o/KNj3Y zUBa7o8/09s+yXoGERB2FDR2RNZ8K+gVv2537tvyYND1eD3J9tg= -----END CERTIFICATE-----Generated at Thu Mar 26 18:57:27 2026 by rpki-client