$ rpki-client -vvf repo-rpki.idnic.net/repo/c883fe75-91e4-4989-bc5e-6a26082dc334/0/F55642EAEBD83D2B9D92B6DB7987FBE6D36839C6.mft File: F55642EAEBD83D2B9D92B6DB7987FBE6D36839C6.mft (raw, json) Hash identifier: JVJxHnc7Z6fykCaN3PCICE4gr+q7UaiLVf+qNXVng6w= Subject key identifier: DF:B4:C2:3F:46:14:A7:A4:43:10:5E:AE:56:79:3F:92:1F:DD:1C:88 Authority key identifier: F5:56:42:EA:EB:D8:3D:2B:9D:92:B6:DB:79:87:FB:E6:D3:68:39:C6 Certificate issuer: /CN=F55642EAEBD83D2B9D92B6DB7987FBE6D36839C6 Certificate serial: 6050925DA2725EE0BF2D1AE9F6E5004653E43295 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F55642EAEBD83D2B9D92B6DB7987FBE6D36839C6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c883fe75-91e4-4989-bc5e-6a26082dc334/0/F55642EAEBD83D2B9D92B6DB7987FBE6D36839C6.mft Manifest number: 01D2 Signing time: Wed 25 Mar 2026 16:22:33 +0000 Manifest this update: Wed 25 Mar 2026 16:17:33 +0000 Manifest next update: Sat 28 Mar 2026 22:34:33 +0000 Files and hashes: 1: F55642EAEBD83D2B9D92B6DB7987FBE6D36839C6.crl (hash: Gd97sv6zJeTVV/h6NDD/h1yGhhJimFY/SiU0W0qwGCM=) 2: 3130332e3139332e3134342e302f32332d3234203d3e203538383231.roa (hash: WXc+BvD0DzFQRQMGsQgdGtPJthyAUb5KL6wbFtn7l60=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c883fe75-91e4-4989-bc5e-6a26082dc334/0/F55642EAEBD83D2B9D92B6DB7987FBE6D36839C6.crl rsync://repo-rpki.idnic.net/repo/c883fe75-91e4-4989-bc5e-6a26082dc334/0/F55642EAEBD83D2B9D92B6DB7987FBE6D36839C6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F55642EAEBD83D2B9D92B6DB7987FBE6D36839C6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:34:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:50:92:5d:a2:72:5e:e0:bf:2d:1a:e9:f6:e5:00:46:53:e4:32:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F55642EAEBD83D2B9D92B6DB7987FBE6D36839C6 Validity Not Before: Mar 25 16:17:33 2026 GMT Not After : Mar 28 22:34:33 2026 GMT Subject: CN=DFB4C23F4614A7A443105EAE56793F921FDD1C88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:da:aa:97:d2:57:91:9e:6f:21:c5:dc:c1:bb: 30:54:29:ec:be:4c:85:e1:b9:0a:b6:07:63:48:9f: 05:e0:2a:64:aa:b9:27:50:6f:dd:99:ac:4c:ff:b0: 59:c8:7d:f5:46:0c:b2:17:1d:94:8c:a4:87:c7:43: 56:f2:c1:a3:b4:4b:e4:03:65:54:10:99:c9:ab:d9: 71:31:5a:74:fc:ef:fd:0e:04:e4:54:23:7b:1b:99: b9:c7:30:67:aa:b4:fa:a9:3c:0a:dc:ac:e3:54:02: 0e:1f:b0:42:98:18:f5:07:76:1f:44:8a:c4:63:33: 95:9b:d1:40:5a:55:42:18:5f:4a:25:d9:be:76:6a: 2f:cb:15:ef:64:33:87:1f:0e:a6:01:a4:be:c3:11: 8a:10:6a:d4:69:64:ea:bf:ce:c9:87:c4:8a:28:66: 1e:26:05:c9:9c:cc:36:7c:45:8f:28:5e:ac:46:8f: 25:40:2a:7e:d6:54:a9:ea:20:d9:7c:30:58:21:0a: 37:a0:64:39:38:d0:a9:52:54:94:3f:9b:f9:cb:cc: 39:86:14:9f:f1:bf:7b:c9:d4:c0:b7:e0:55:3c:4f: 2e:b2:87:a9:8d:75:e9:3c:0c:ec:57:90:9c:2c:5d: 91:47:65:aa:eb:0a:95:4b:f1:ed:58:dc:25:f4:9f: 01:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:B4:C2:3F:46:14:A7:A4:43:10:5E:AE:56:79:3F:92:1F:DD:1C:88 X509v3 Authority Key Identifier: keyid:F5:56:42:EA:EB:D8:3D:2B:9D:92:B6:DB:79:87:FB:E6:D3:68:39:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c883fe75-91e4-4989-bc5e-6a26082dc334/0/F55642EAEBD83D2B9D92B6DB7987FBE6D36839C6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F55642EAEBD83D2B9D92B6DB7987FBE6D36839C6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c883fe75-91e4-4989-bc5e-6a26082dc334/0/F55642EAEBD83D2B9D92B6DB7987FBE6D36839C6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:ba:0f:86:70:02:f0:5d:cf:52:83:81:d2:62:87:0a:c3:d8: 63:a1:e7:6a:77:b5:5f:b9:44:fe:8f:4a:99:3a:3f:13:2a:ba: ab:f0:15:a6:26:6b:f0:d0:9e:bd:16:31:99:28:76:17:8d:26: 4e:eb:b3:78:00:8c:3f:2b:3c:ba:46:a0:17:d9:ab:32:5b:0b: 76:00:a0:ff:cf:4e:9d:5d:39:61:f6:58:16:2f:d7:51:26:46: c1:82:70:47:56:53:43:61:cf:98:36:fa:be:58:9c:06:e7:55: f5:95:64:f8:21:a2:15:74:d7:73:3e:c0:0a:ce:4e:ec:0b:a8: 4d:e3:c2:4e:b3:54:01:97:59:e4:4f:5b:7f:db:63:57:49:8d: b2:ea:db:69:f3:a5:31:e4:91:70:33:e0:5b:68:e6:83:96:44: f6:82:f4:b1:fc:0c:c6:81:ef:80:3e:66:7e:da:a3:53:94:f7: 4e:83:e0:f2:0e:7a:a9:cd:92:ea:de:82:16:bd:47:99:de:8b: 98:a2:56:0e:15:76:a2:63:8c:0c:02:e2:d2:36:31:74:de:12: e5:ce:7c:f2:98:b5:21:73:3c:6c:0e:a0:51:97:06:68:27:04: a1:db:fb:25:ab:3e:0f:eb:ad:9d:35:94:28:d8:b1:e9:9a:2e: 1d:39:0d:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYFCSXaJyXuC/LRrp9uUARlPkMpUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjU1NjQyRUFFQkQ4M0QyQjlEOTJCNkRCNzk4N0ZCRTZE MzY4MzlDNjAeFw0yNjAzMjUxNjE3MzNaFw0yNjAzMjgyMjM0MzNaMDMxMTAvBgNV BAMTKERGQjRDMjNGNDYxNEE3QTQ0MzEwNUVBRTU2NzkzRjkyMUZERDFDODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL2qqX0leRnm8hxdzBuzBUKey+ TIXhuQq2B2NInwXgKmSquSdQb92ZrEz/sFnIffVGDLIXHZSMpIfHQ1bywaO0S+QD ZVQQmcmr2XExWnT87/0OBORUI3sbmbnHMGeqtPqpPArcrONUAg4fsEKYGPUHdh9E isRjM5Wb0UBaVUIYX0ol2b52ai/LFe9kM4cfDqYBpL7DEYoQatRpZOq/zsmHxIoo Zh4mBcmczDZ8RY8oXqxGjyVAKn7WVKnqINl8MFghCjegZDk40KlSVJQ/m/nLzDmG FJ/xv3vJ1MC34FU8Ty6yh6mNdek8DOxXkJwsXZFHZarrCpVL8e1Y3CX0nwFfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU37TCP0YUp6RDEF6uVnk/kh/dHIgwHwYDVR0j BBgwFoAU9VZC6uvYPSudkrbbeYf75tNoOcYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ODgzZmU3NS05MWU0LTQ5ODktYmM1ZS02YTI2MDgyZGMzMzQvMC9GNTU2NDJFQUVC RDgzRDJCOUQ5MkI2REI3OTg3RkJFNkQzNjgzOUM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjU1NjQyRUFFQkQ4M0QyQjlEOTJCNkRCNzk4N0ZCRTZEMzY4 MzlDNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzg4M2ZlNzUtOTFlNC00OTg5LWJj NWUtNmEyNjA4MmRjMzM0LzAvRjU1NjQyRUFFQkQ4M0QyQjlEOTJCNkRCNzk4N0ZC RTZEMzY4MzlDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIS6D4ZwAvBdz1KDgdJihwrD2GOh52p3tV+5 RP6PSpk6PxMquqvwFaYma/DQnr0WMZkodheNJk7rs3gAjD8rPLpGoBfZqzJbC3YA oP/PTp1dOWH2WBYv11EmRsGCcEdWU0Nhz5g2+r5YnAbnVfWVZPghohV013M+wArO TuwLqE3jwk6zVAGXWeRPW3/bY1dJjbLq22nzpTHkkXAz4Fto5oOWRPaC9LH8DMaB 74A+Zn7ao1OU906D4PIOeqnNkuregha9R5nei5iiVg4VdqJjjAwC4tI2MXTeEuXO fPKYtSFzPGwOoFGXBmgnBKHb+yWrPg/rrZ01lCjYsemaLh05DWQ= -----END CERTIFICATE-----Generated at Thu Mar 26 16:04:41 2026 by rpki-client