$ rpki-client -vvf repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.mft File: F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.mft (raw, json) Hash identifier: ejDX5keX0MGP7HsqCSPBw/sBy6ppRyB+WmU9SmsQG/4= Subject key identifier: 7C:F9:38:CC:84:20:75:CB:B2:E0:77:0C:00:92:27:AE:C0:F7:1F:5C Authority key identifier: F1:BD:A5:72:CF:8D:79:20:C2:10:DB:CA:14:54:B1:90:4F:1C:1D:5F Certificate issuer: /CN=F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F Certificate serial: 2D204806B4FC6DE53148A2464D4E58C49CE99290 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.mft Manifest number: 01D3 Signing time: Wed 25 Mar 2026 15:50:46 +0000 Manifest this update: Wed 25 Mar 2026 15:45:46 +0000 Manifest next update: Sat 28 Mar 2026 17:29:46 +0000 Files and hashes: 1: 3130332e3136342e35382e302f32342d3234203d3e20313431393130.roa (hash: Ztu1zC4P//Wr/D7wJOmEtvMGkjEYCJfDGpTLJpsLi2U=) 2: 3130332e3136342e35382e302f32332d3233203d3e20313431393130.roa (hash: /paKxP4QMOl7o/KwSLXztrknLwkFvyAYdzpHPBDGP60=) 3: 3130332e3136342e35392e302f32342d3234203d3e20313431393130.roa (hash: qlhe8ugwsxt3uspMmDDw6M2qCFy+W45YSb6JDOgXmxg=) 4: F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.crl (hash: MD9/EeqvPJzlIajUDsipm492HtKY01p1RKeAOfbME7E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.crl rsync://repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 17:29:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:20:48:06:b4:fc:6d:e5:31:48:a2:46:4d:4e:58:c4:9c:e9:92:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F Validity Not Before: Mar 25 15:45:46 2026 GMT Not After : Mar 28 17:29:46 2026 GMT Subject: CN=7CF938CC842075CBB2E0770C009227AEC0F71F5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:d0:80:d7:d0:79:e8:7a:3c:d1:66:8a:52:84: a9:04:89:3c:f3:c4:15:0a:30:b5:e6:f1:7c:57:71: 9e:2b:ed:91:ef:1c:99:9a:2a:e1:b8:6b:0a:b5:92: a5:74:f6:68:54:c8:ed:d3:f8:77:b2:de:59:3c:e4: 19:62:91:3d:fd:e0:43:98:c7:1b:c5:81:8e:69:d4: 49:1e:9e:e9:93:e7:09:77:37:b3:b7:6a:e4:a7:75: 0c:2b:df:9c:a5:4c:cc:6a:ac:3e:93:3d:90:e7:2e: 59:cc:a4:2c:4c:45:9a:e9:16:f6:98:22:31:ef:04: 27:3e:51:77:e2:63:97:cc:ba:7c:15:a2:44:49:08: cb:8a:02:38:a9:b6:7b:e5:09:f4:95:64:19:a9:6f: ac:b8:72:0f:d2:d0:20:7d:ed:20:af:1c:01:06:92: ef:bc:75:01:d7:6e:36:47:43:77:b9:a4:1f:87:07: 2b:4e:ff:c1:d6:c1:49:84:1c:99:1f:5b:54:3d:98: 93:f7:61:37:f3:7e:36:16:56:31:9d:3a:bd:51:93: 85:38:6c:64:51:b7:ac:74:ae:51:f1:6b:05:3d:b6: c2:d6:2a:e2:43:66:cd:20:4f:7f:cf:02:46:24:51: c7:6d:a0:71:45:db:5a:ac:31:7a:52:d7:8b:b8:a1: 19:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:F9:38:CC:84:20:75:CB:B2:E0:77:0C:00:92:27:AE:C0:F7:1F:5C X509v3 Authority Key Identifier: keyid:F1:BD:A5:72:CF:8D:79:20:C2:10:DB:CA:14:54:B1:90:4F:1C:1D:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:16:44:0b:17:54:28:3f:80:e8:be:07:a6:ee:6b:6c:44:ec: ce:5b:1d:4d:cf:be:0e:1a:e4:cd:ee:23:26:82:74:8e:f8:82: bc:43:85:dd:d7:95:24:10:cc:c0:22:e2:d6:f0:ba:79:2c:e8: 6c:a5:f0:e5:3e:9c:cc:23:da:0b:47:2b:5f:87:a8:98:48:a9: 0e:bf:34:2f:c1:2a:74:7f:3a:01:7c:18:49:20:8a:46:ac:84: b0:1d:8e:d8:8f:9b:c3:4e:65:2a:14:ad:25:79:4e:c8:ab:26: 23:14:7e:21:bb:d5:70:08:45:89:5a:26:21:2d:ce:5f:10:8d: 3d:6e:e1:f7:51:8d:f3:79:87:67:91:d3:60:3b:18:9c:50:1e: b1:80:86:fa:ed:f0:f0:51:99:f0:f4:7b:c1:32:0d:0c:fb:3f: 3a:47:30:bc:38:62:08:6e:a4:88:00:f3:d3:58:7e:9d:89:27: 3a:87:d6:92:b0:b7:c7:55:f1:7d:bc:14:a2:49:52:2f:66:00: bf:34:44:07:6c:24:d6:bf:5d:b3:90:ab:f9:1a:ae:dd:02:78: 1f:d9:bf:5f:a9:36:2d:ab:d3:b6:77:75:56:76:3c:14:d0:3f: db:9f:4f:4a:3a:20:85:03:23:10:70:58:3b:ef:d8:f5:50:9d: 48:1e:e0:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULSBIBrT8beUxSKJGTU5YxJzpkpAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjFCREE1NzJDRjhENzkyMEMyMTBEQkNBMTQ1NEIxOTA0 RjFDMUQ1RjAeFw0yNjAzMjUxNTQ1NDZaFw0yNjAzMjgxNzI5NDZaMDMxMTAvBgNV BAMTKDdDRjkzOENDODQyMDc1Q0JCMkUwNzcwQzAwOTIyN0FFQzBGNzFGNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDq0IDX0HnoejzRZopShKkEiTzz xBUKMLXm8XxXcZ4r7ZHvHJmaKuG4awq1kqV09mhUyO3T+Hey3lk85BlikT394EOY xxvFgY5p1EkenumT5wl3N7O3auSndQwr35ylTMxqrD6TPZDnLlnMpCxMRZrpFvaY IjHvBCc+UXfiY5fMunwVokRJCMuKAjiptnvlCfSVZBmpb6y4cg/S0CB97SCvHAEG ku+8dQHXbjZHQ3e5pB+HBytO/8HWwUmEHJkfW1Q9mJP3YTfzfjYWVjGdOr1Rk4U4 bGRRt6x0rlHxawU9tsLWKuJDZs0gT3/PAkYkUcdtoHFF21qsMXpS14u4oRkXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfPk4zIQgdcuy4HcMAJInrsD3H1wwHwYDVR0j BBgwFoAU8b2lcs+NeSDCENvKFFSxkE8cHV8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NTAxY2RmOS01MmUxLTRjOTgtOWFiMy1hZmI3MGZhYzM3N2MvMC9GMUJEQTU3MkNG OEQ3OTIwQzIxMERCQ0ExNDU0QjE5MDRGMUMxRDVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjFCREE1NzJDRjhENzkyMEMyMTBEQkNBMTQ1NEIxOTA0RjFD MUQ1Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDUwMWNkZjktNTJlMS00Yzk4LTlh YjMtYWZiNzBmYWMzNzdjLzAvRjFCREE1NzJDRjhENzkyMEMyMTBEQkNBMTQ1NEIx OTA0RjFDMUQ1Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALcWRAsXVCg/gOi+B6bua2xE7M5bHU3Pvg4a 5M3uIyaCdI74grxDhd3XlSQQzMAi4tbwunks6Gyl8OU+nMwj2gtHK1+HqJhIqQ6/ NC/BKnR/OgF8GEkgikashLAdjtiPm8NOZSoUrSV5TsirJiMUfiG71XAIRYlaJiEt zl8QjT1u4fdRjfN5h2eR02A7GJxQHrGAhvrt8PBRmfD0e8EyDQz7PzpHMLw4Yghu pIgA89NYfp2JJzqH1pKwt8dV8X28FKJJUi9mAL80RAdsJNa/XbOQq/kart0CeB/Z v1+pNi2r07Z3dVZ2PBTQP9ufT0o6IIUDIxBwWDvv2PVQnUge4II= -----END CERTIFICATE-----Generated at Thu Mar 26 13:34:08 2026 by rpki-client