$ rpki-client -vvf repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.mft File: F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.mft (raw, json) Hash identifier: +wJhlRfk47gS2P40eOVb52KQIT4qcdtyNe48MFOo1qM= Subject key identifier: 9E:24:CB:EF:CA:22:9B:66:43:76:0A:06:37:58:09:36:10:AF:19:6B Authority key identifier: F1:B7:1C:4F:9F:FB:EC:16:8C:86:45:DF:F7:9B:A9:06:BE:B2:3F:E8 Certificate issuer: /CN=F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8 Certificate serial: 2C72DD7E78D3B4B20543D5FE2B9644FE916A5CF5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.mft Manifest number: 056B Signing time: Tue 24 Mar 2026 20:20:54 +0000 Manifest this update: Tue 24 Mar 2026 20:15:54 +0000 Manifest next update: Sat 28 Mar 2026 05:23:54 +0000 Files and hashes: 1: 3131382e3135312e3232312e302f32342d3234203d3e203436303332.roa (hash: omzII3ixbtOuAnPW3RG0el7+Kj2LR6H6b/zYKpPBQBo=) 2: 3131382e3135312e3232322e302f32342d3234203d3e203436303332.roa (hash: c7lD2035nwAuocF3S+Kkx7XFX+D5GmobD9VRSTS7t1w=) 3: 3131382e3135312e3232332e302f32342d3234203d3e203436303332.roa (hash: o45xNgmjdV7JqlkFiaWnM1npwVHX93KdX+4bHjpCk7Y=) 4: F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.crl (hash: RnUPrnb7NJY+orpGkptQ5/5WOuQUC6yQFCiax9oRqFA=) 5: 3131382e3135312e3232302e302f32342d3234203d3e203436303332.roa (hash: JFOIJs50h687qC8bpxxJdwCT4qWgGzzf4owWeGTBCcg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.crl rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 05:23:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:72:dd:7e:78:d3:b4:b2:05:43:d5:fe:2b:96:44:fe:91:6a:5c:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8 Validity Not Before: Mar 24 20:15:54 2026 GMT Not After : Mar 28 05:23:54 2026 GMT Subject: CN=9E24CBEFCA229B6643760A063758093610AF196B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:a6:40:7f:0e:84:13:3e:c2:56:78:97:06:1f: a3:9c:cb:55:f9:35:da:58:7e:c4:5b:a5:e9:58:67: 70:53:2d:51:e7:60:bc:84:33:18:7d:ae:c9:1e:bf: d8:df:ed:b5:15:e8:73:ea:93:db:aa:88:40:fb:2d: 36:0f:c3:45:61:dd:40:1c:20:1b:96:fe:73:e5:4b: 7b:0d:31:c5:d9:52:d8:00:7f:a9:7a:61:68:25:47: 85:e1:ea:ca:b6:98:b6:b4:aa:58:a7:14:ae:ab:a0: 78:20:45:a9:07:ef:6c:8c:78:13:66:0e:a6:54:e6: db:1b:53:c9:c3:6f:81:d2:cc:ac:24:87:d6:3b:d9: dd:b9:31:93:d9:49:a0:5c:dc:25:1d:b5:79:09:01: 1b:8f:e0:4a:f3:28:96:13:fe:d8:1b:cd:c7:1a:89: 0c:a5:90:fb:14:ba:03:fd:3d:25:1b:7a:c2:bf:41: 8b:a0:9b:b8:38:29:b6:29:70:e6:6b:b9:08:f1:14: 4e:e3:50:49:d6:62:b5:3d:d6:2e:a7:02:64:41:0e: 66:40:56:b2:ce:4f:b9:89:de:52:87:5c:a8:3f:cf: 0f:49:46:ea:61:70:62:22:60:29:46:ba:c6:e6:21: af:d3:5a:74:80:4a:f7:22:4f:ff:9b:64:76:c8:6c: 24:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:24:CB:EF:CA:22:9B:66:43:76:0A:06:37:58:09:36:10:AF:19:6B X509v3 Authority Key Identifier: keyid:F1:B7:1C:4F:9F:FB:EC:16:8C:86:45:DF:F7:9B:A9:06:BE:B2:3F:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:e6:01:87:e6:94:5f:68:90:16:05:fa:19:c2:3d:95:0a:ed: 77:b6:ec:98:94:64:94:96:d5:2f:36:37:40:fb:8e:49:50:9b: 3b:9b:9d:ea:f9:d2:db:cd:f1:be:5d:90:d8:69:55:dc:40:b3: b3:17:e3:3b:b3:84:a9:c2:cc:48:f2:9b:0b:7d:04:38:8f:7a: cb:1c:41:52:fe:be:58:c4:d7:22:3d:dc:0d:f1:5a:e7:70:d1: 94:8b:8e:59:c2:b2:c3:4b:ba:8f:10:13:ae:fe:64:c0:74:83: 27:7a:16:f5:b9:84:e6:72:53:97:00:ed:1f:6d:00:dc:8c:4e: 7d:b6:37:dd:c6:18:71:61:75:9b:96:f4:c3:99:49:d8:5d:a9: 17:9b:53:e8:e6:34:57:0e:8d:03:d3:59:e1:85:a2:2d:c5:53: c5:c7:d1:fc:b5:42:4f:ac:a4:34:89:5f:d6:a0:27:68:d1:46: b3:7f:09:55:75:d8:71:6f:d0:e8:ce:13:e6:83:3d:44:73:06: 8c:80:28:cb:58:85:6c:2e:d2:81:93:47:4c:7a:d1:7b:44:c0: dc:65:56:a8:dc:b6:92:ec:74:af:87:85:d5:5b:5d:3c:89:6b: 0d:5d:50:3e:76:2b:91:7c:40:27:89:d6:81:89:46:9a:3e:d5: 5b:b7:da:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULHLdfnjTtLIFQ9X+K5ZE/pFqXPUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjFCNzFDNEY5RkZCRUMxNjhDODY0NURGRjc5QkE5MDZC RUIyM0ZFODAeFw0yNjAzMjQyMDE1NTRaFw0yNjAzMjgwNTIzNTRaMDMxMTAvBgNV BAMTKDlFMjRDQkVGQ0EyMjlCNjY0Mzc2MEEwNjM3NTgwOTM2MTBBRjE5NkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcpkB/DoQTPsJWeJcGH6Ocy1X5 NdpYfsRbpelYZ3BTLVHnYLyEMxh9rskev9jf7bUV6HPqk9uqiED7LTYPw0Vh3UAc IBuW/nPlS3sNMcXZUtgAf6l6YWglR4Xh6sq2mLa0qlinFK6roHggRakH72yMeBNm DqZU5tsbU8nDb4HSzKwkh9Y72d25MZPZSaBc3CUdtXkJARuP4ErzKJYT/tgbzcca iQylkPsUugP9PSUbesK/QYugm7g4KbYpcOZruQjxFE7jUEnWYrU91i6nAmRBDmZA VrLOT7mJ3lKHXKg/zw9JRuphcGIiYClGusbmIa/TWnSASvciT/+bZHbIbCQhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUniTL78oim2ZDdgoGN1gJNhCvGWswHwYDVR0j BBgwFoAU8bccT5/77BaMhkXf95upBr6yP+gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NTdiOTBjYi04ZWJkLTRjN2ItOGMzMS0xMzNhOGI0ZWQ2OWMvMC9GMUI3MUM0RjlG RkJFQzE2OEM4NjQ1REZGNzlCQTkwNkJFQjIzRkU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjFCNzFDNEY5RkZCRUMxNjhDODY0NURGRjc5QkE5MDZCRUIy M0ZFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzU3YjkwY2ItOGViZC00YzdiLThj MzEtMTMzYThiNGVkNjljLzAvRjFCNzFDNEY5RkZCRUMxNjhDODY0NURGRjc5QkE5 MDZCRUIyM0ZFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACXmAYfmlF9okBYF+hnCPZUK7Xe27JiUZJSW 1S82N0D7jklQmzubner50tvN8b5dkNhpVdxAs7MX4zuzhKnCzEjymwt9BDiPessc QVL+vljE1yI93A3xWudw0ZSLjlnCssNLuo8QE67+ZMB0gyd6FvW5hOZyU5cA7R9t ANyMTn22N93GGHFhdZuW9MOZSdhdqRebU+jmNFcOjQPTWeGFoi3FU8XH0fy1Qk+s pDSJX9agJ2jRRrN/CVV12HFv0OjOE+aDPURzBoyAKMtYhWwu0oGTR0x60XtEwNxl VqjctpLsdK+HhdVbXTyJaw1dUD52K5F8QCeJ1oGJRpo+1Vu32uY= -----END CERTIFICATE-----Generated at Thu Mar 26 11:18:28 2026 by rpki-client