$ rpki-client -vvf repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/F61D0A85B56D8F824658A8287BE8D4F659680324.mft File: F61D0A85B56D8F824658A8287BE8D4F659680324.mft (raw, json) Hash identifier: 0kOXV7fvU4D3JiAR+2jB1hyBIponIWabV0rcDlJgvJc= Subject key identifier: A9:2E:5D:43:1E:D6:01:3B:BC:DC:F0:DA:05:20:81:56:15:45:73:34 Authority key identifier: F6:1D:0A:85:B5:6D:8F:82:46:58:A8:28:7B:E8:D4:F6:59:68:03:24 Certificate issuer: /CN=F61D0A85B56D8F824658A8287BE8D4F659680324 Certificate serial: 387171C44255FF4C06F614990FFFF920B7688A6F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F61D0A85B56D8F824658A8287BE8D4F659680324.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/F61D0A85B56D8F824658A8287BE8D4F659680324.mft Manifest number: 027F Signing time: Tue 24 Mar 2026 17:32:33 +0000 Manifest this update: Tue 24 Mar 2026 17:27:33 +0000 Manifest next update: Fri 27 Mar 2026 21:31:33 +0000 Files and hashes: 1: 3130332e3138362e39372e302f32342d3234203d3e20313439363933.roa (hash: WnciReR37Q3sZkKiPgEqiE1RTQq39mIcAnatYEQxD2I=) 2: 3130332e3138362e39362e302f32342d3234203d3e20313439363933.roa (hash: fk5h/S4jSQI4thBEqEx+ocxOCOpDquhTLg33I3n6VV0=) 3: F61D0A85B56D8F824658A8287BE8D4F659680324.crl (hash: MIzvvd2oH1YfiVYVYRkMdyGSMJL7kCVoghfO3wTKhoU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/F61D0A85B56D8F824658A8287BE8D4F659680324.crl rsync://repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/F61D0A85B56D8F824658A8287BE8D4F659680324.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F61D0A85B56D8F824658A8287BE8D4F659680324.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 21:31:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:71:71:c4:42:55:ff:4c:06:f6:14:99:0f:ff:f9:20:b7:68:8a:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F61D0A85B56D8F824658A8287BE8D4F659680324 Validity Not Before: Mar 24 17:27:33 2026 GMT Not After : Mar 27 21:31:33 2026 GMT Subject: CN=A92E5D431ED6013BBCDCF0DA0520815615457334 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:70:9b:84:12:2e:ff:d0:d0:85:36:c1:ef:6b: 93:62:32:0b:14:70:27:f0:32:5c:a1:a0:73:5e:8a: 84:51:c4:ac:df:2f:43:97:ed:3c:86:03:4a:4a:28: 2f:89:f9:48:6d:a7:0f:ff:7f:c4:3e:e5:f1:82:ab: a5:6b:85:7e:90:39:f7:0b:f1:50:8a:5c:d0:ca:c6: 7d:3e:10:4f:9b:1b:c5:6c:8b:3c:ef:2e:89:99:ac: 0b:a7:97:16:2b:b0:53:dd:57:ac:a0:0d:40:a5:c7: 10:b6:c4:b8:8c:6c:d7:38:6f:c3:20:18:59:05:8b: b8:4a:69:5c:03:5c:84:96:84:09:79:a3:11:23:e5: bb:c0:c5:e4:81:4b:c1:9b:1a:18:6e:9c:69:81:cf: 08:da:eb:bb:14:01:62:5b:32:2b:36:cc:f6:08:e0: c0:6d:77:b9:c1:ab:84:68:1a:98:15:73:04:d2:bb: 76:38:7b:f0:ab:45:20:89:af:1e:d3:20:15:5b:78: de:50:0e:c2:23:65:10:f2:93:55:e5:24:ff:1a:56: 73:06:e6:bd:32:de:94:e5:c0:aa:b9:99:8f:98:a0: 99:71:c9:a6:92:30:c2:d8:c1:a9:9f:20:2f:ca:bd: 38:a8:64:1d:d6:4a:3a:42:f8:c6:90:9c:c9:77:f5: 88:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:2E:5D:43:1E:D6:01:3B:BC:DC:F0:DA:05:20:81:56:15:45:73:34 X509v3 Authority Key Identifier: keyid:F6:1D:0A:85:B5:6D:8F:82:46:58:A8:28:7B:E8:D4:F6:59:68:03:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/F61D0A85B56D8F824658A8287BE8D4F659680324.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F61D0A85B56D8F824658A8287BE8D4F659680324.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/F61D0A85B56D8F824658A8287BE8D4F659680324.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:43:2f:70:d6:35:47:d8:d0:48:48:91:0e:32:06:8e:12:7c: ee:57:50:c9:8d:e4:6c:ec:2f:8d:8f:d0:b8:0c:de:04:45:21: 0d:ea:a1:c9:72:96:fb:52:b1:c3:59:9d:b0:61:25:6f:40:85: 27:22:d0:ab:b5:8e:89:51:59:e2:a5:4c:ea:19:57:55:5f:a3: 57:6f:6d:b2:1e:88:21:f8:03:15:25:40:66:3e:b3:1f:00:c2: 6a:8d:b1:89:08:48:a6:9e:22:e1:da:7f:4b:9f:df:f2:0c:03: eb:f1:1c:18:15:f8:8d:8e:97:b3:2b:dc:cf:cc:e3:cb:e0:79: fc:ee:03:e8:bf:88:1e:a3:73:df:a9:4f:0e:3c:35:31:85:50: 92:f8:e7:d9:a2:76:0d:2a:54:4b:ad:03:6f:6d:1f:72:7c:1e: 5e:00:75:41:00:ba:9e:97:b6:4a:1c:b3:16:a5:55:00:1b:e3: 16:67:39:fc:ae:71:75:d4:e3:5f:e1:ef:9a:e6:89:70:c8:49: ab:6e:57:6b:91:a2:b3:ed:1a:d5:19:c8:55:d2:d7:95:4d:0e: c0:1a:02:5e:1a:f4:30:89:39:7d:9b:d2:88:2a:80:5c:0c:b3: 5a:ad:d0:7e:79:7e:96:6f:13:1d:54:12:f3:3b:59:4e:db:b7: 4c:b5:82:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOHFxxEJV/0wG9hSZD//5ILdoim8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjYxRDBBODVCNTZEOEY4MjQ2NThBODI4N0JFOEQ0RjY1 OTY4MDMyNDAeFw0yNjAzMjQxNzI3MzNaFw0yNjAzMjcyMTMxMzNaMDMxMTAvBgNV BAMTKEE5MkU1RDQzMUVENjAxM0JCQ0RDRjBEQTA1MjA4MTU2MTU0NTczMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkcJuEEi7/0NCFNsHva5NiMgsU cCfwMlyhoHNeioRRxKzfL0OX7TyGA0pKKC+J+Uhtpw//f8Q+5fGCq6VrhX6QOfcL 8VCKXNDKxn0+EE+bG8VsizzvLomZrAunlxYrsFPdV6ygDUClxxC2xLiMbNc4b8Mg GFkFi7hKaVwDXISWhAl5oxEj5bvAxeSBS8GbGhhunGmBzwja67sUAWJbMis2zPYI 4MBtd7nBq4RoGpgVcwTSu3Y4e/CrRSCJrx7TIBVbeN5QDsIjZRDyk1XlJP8aVnMG 5r0y3pTlwKq5mY+YoJlxyaaSMMLYwamfIC/KvTioZB3WSjpC+MaQnMl39YhXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqS5dQx7WATu83PDaBSCBVhVFczQwHwYDVR0j BBgwFoAU9h0KhbVtj4JGWKgoe+jU9lloAyQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NjFlOWRlMi1hNGVjLTQ3YTItOWJiOC0xMDgyMWRkYTY3ZjMvMC9GNjFEMEE4NUI1 NkQ4RjgyNDY1OEE4Mjg3QkU4RDRGNjU5NjgwMzI0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjYxRDBBODVCNTZEOEY4MjQ2NThBODI4N0JFOEQ0RjY1OTY4 MDMyNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzYxZTlkZTItYTRlYy00N2EyLTli YjgtMTA4MjFkZGE2N2YzLzAvRjYxRDBBODVCNTZEOEY4MjQ2NThBODI4N0JFOEQ0 RjY1OTY4MDMyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH5DL3DWNUfY0EhIkQ4yBo4SfO5XUMmN5Gzs L42P0LgM3gRFIQ3qoclylvtSscNZnbBhJW9AhSci0Ku1jolRWeKlTOoZV1Vfo1dv bbIeiCH4AxUlQGY+sx8AwmqNsYkISKaeIuHaf0uf3/IMA+vxHBgV+I2Ol7Mr3M/M 48vgefzuA+i/iB6jc9+pTw48NTGFUJL459midg0qVEutA29tH3J8Hl4AdUEAup6X tkocsxalVQAb4xZnOfyucXXU41/h75rmiXDISatuV2uRorPtGtUZyFXS15VNDsAa Al4a9DCJOX2b0ogqgFwMs1qt0H55fpZvEx1UEvM7WU7bt0y1gpg= -----END CERTIFICATE-----Generated at Thu Mar 26 07:25:04 2026 by rpki-client