$ rpki-client -vvf repo-rpki.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.mft File: F027F0676E31F5D61FFCB99138BA71A6A6C2A888.mft (raw, json) Hash identifier: 3Ky0gC5Jm1ullT4ZthzKw/8OA1DC66TeSHqJ/O/N+SQ= Subject key identifier: 9C:15:EB:DB:90:D4:22:D6:AA:69:80:18:B7:B5:37:04:76:73:70:60 Authority key identifier: F0:27:F0:67:6E:31:F5:D6:1F:FC:B9:91:38:BA:71:A6:A6:C2:A8:88 Certificate issuer: /CN=F027F0676E31F5D61FFCB99138BA71A6A6C2A888 Certificate serial: 08671EC7A28A0B66837AC580D430F218FF0EAFA5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.mft Manifest number: 0202 Signing time: Wed 25 Mar 2026 11:51:54 +0000 Manifest this update: Wed 25 Mar 2026 11:46:54 +0000 Manifest next update: Sat 28 Mar 2026 21:46:54 +0000 Files and hashes: 1: 3130332e37392e3233382e302f32342d3234203d3e20313336383431.roa (hash: S3rj42K3zgcLtAy4zNzKlACfc7OoExWsWn2P6hM2xiU=) 2: 3130332e37392e3233392e302f32342d3234203d3e20313336383431.roa (hash: tiiZ5XR5qtoVKRiJyK/ZbstHJPK9DYWkRihRcxcZHeQ=) 3: F027F0676E31F5D61FFCB99138BA71A6A6C2A888.crl (hash: bDzasHDvl5Nz1ZLAoTpRQ8Mf2wHjkFrjG4UfWf1Qp8c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.crl rsync://repo-rpki.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 21:46:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:67:1e:c7:a2:8a:0b:66:83:7a:c5:80:d4:30:f2:18:ff:0e:af:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F027F0676E31F5D61FFCB99138BA71A6A6C2A888 Validity Not Before: Mar 25 11:46:54 2026 GMT Not After : Mar 28 21:46:54 2026 GMT Subject: CN=9C15EBDB90D422D6AA698018B7B5370476737060 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e8:7d:f5:e9:93:05:62:7a:23:75:c5:99:de: ea:f6:38:10:2d:4d:66:99:4e:71:3c:4b:85:6b:08: 3c:47:30:12:71:77:19:c3:de:ee:9d:2c:97:83:e6: 60:95:34:f0:96:b8:34:df:bd:4e:2a:6a:83:d4:30: d6:c0:ee:d4:a9:0e:1d:20:e9:65:b4:92:e5:e3:ec: 36:b9:4b:0a:61:95:d7:8a:43:c0:09:b1:e1:45:ba: cb:56:3d:18:39:42:79:0d:f0:47:56:47:a4:ee:67: aa:83:7a:97:ae:de:fb:5a:ca:2d:dc:cc:4c:21:30: 4d:50:9e:e7:92:a0:29:6b:5d:b4:35:da:c7:e7:83: d5:f7:24:34:09:06:59:dd:f0:0d:2a:c1:c9:00:b7: e5:49:88:35:32:81:2b:d5:74:ba:66:53:c6:f4:f7: 4f:ea:d4:10:7d:fb:e8:bd:c1:c2:88:f4:60:df:2e: f8:93:00:08:9f:b1:fd:93:64:68:32:63:3d:71:66: 8f:59:99:70:30:a4:16:d6:34:06:0f:6b:d8:fa:a1: ed:4b:17:45:90:83:18:49:57:fe:2e:85:46:f3:33: 12:0e:28:44:7a:b3:9c:e0:74:88:54:9e:b6:cd:e7: 78:fd:86:6d:66:8f:fa:d6:1a:9d:f5:dc:4e:fe:dd: d3:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:15:EB:DB:90:D4:22:D6:AA:69:80:18:B7:B5:37:04:76:73:70:60 X509v3 Authority Key Identifier: keyid:F0:27:F0:67:6E:31:F5:D6:1F:FC:B9:91:38:BA:71:A6:A6:C2:A8:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:3c:f7:31:a4:1b:cd:6a:92:2d:96:6d:57:bb:80:c9:ef:37: ce:31:37:e6:ff:ac:ae:3a:c3:09:cb:33:ee:00:0c:0d:de:00: d6:c0:b5:3c:a4:73:57:b4:18:cf:04:fd:0c:0b:54:f5:c4:98: 62:5f:29:9c:0a:21:20:a6:7a:1f:c6:c3:dc:9d:41:d0:b2:e5: 4a:c5:4d:36:37:ff:7c:d3:f8:71:5b:3e:9e:ec:76:71:c0:4c: 8e:f0:35:96:8c:6d:a4:0c:ad:fd:6e:65:58:78:8f:e1:31:61: 25:e1:4e:1c:82:73:6d:63:65:9c:d9:5f:47:bc:9e:f5:62:7c: e8:af:f3:ee:dc:da:ff:ff:d9:31:1a:a5:3b:fb:98:56:75:d0: 1f:65:e9:f8:28:9f:72:47:ab:98:ac:5e:fc:4c:07:40:da:cb: 48:9d:af:fd:e0:f1:ce:3a:b5:59:61:7f:77:93:a6:e7:ff:e6: b4:62:f4:5b:82:eb:dd:44:c3:94:62:01:07:94:d4:f9:bd:3d: 63:43:7a:57:ed:a3:8a:38:57:1a:41:85:dd:ca:65:76:24:07: 51:9c:6c:4d:82:39:03:5d:27:31:fe:9e:a6:7b:87:35:04:28: e5:17:a2:7d:89:93:d6:76:58:b1:ba:0a:8e:fc:9c:c7:f7:61: 32:2a:f1:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCGcex6KKC2aDesWA1DDyGP8Or6UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjAyN0YwNjc2RTMxRjVENjFGRkNCOTkxMzhCQTcxQTZB NkMyQTg4ODAeFw0yNjAzMjUxMTQ2NTRaFw0yNjAzMjgyMTQ2NTRaMDMxMTAvBgNV BAMTKDlDMTVFQkRCOTBENDIyRDZBQTY5ODAxOEI3QjUzNzA0NzY3MzcwNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV6H316ZMFYnojdcWZ3ur2OBAt TWaZTnE8S4VrCDxHMBJxdxnD3u6dLJeD5mCVNPCWuDTfvU4qaoPUMNbA7tSpDh0g 6WW0kuXj7Da5SwphldeKQ8AJseFFustWPRg5QnkN8EdWR6TuZ6qDepeu3vtayi3c zEwhME1QnueSoClrXbQ12sfng9X3JDQJBlnd8A0qwckAt+VJiDUygSvVdLpmU8b0 90/q1BB9++i9wcKI9GDfLviTAAifsf2TZGgyYz1xZo9ZmXAwpBbWNAYPa9j6oe1L F0WQgxhJV/4uhUbzMxIOKER6s5zgdIhUnrbN53j9hm1mj/rWGp313E7+3dMbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnBXr25DUItaqaYAYt7U3BHZzcGAwHwYDVR0j BBgwFoAU8CfwZ24x9dYf/LmROLpxpqbCqIgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NmRmMjY5MS1kYjYyLTQzYjktOGE1Ny0wZTA2ZGExYWNjNjQvMC9GMDI3RjA2NzZF MzFGNUQ2MUZGQ0I5OTEzOEJBNzFBNkE2QzJBODg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjAyN0YwNjc2RTMxRjVENjFGRkNCOTkxMzhCQTcxQTZBNkMy QTg4OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDZkZjI2OTEtZGI2Mi00M2I5LThh NTctMGUwNmRhMWFjYzY0LzAvRjAyN0YwNjc2RTMxRjVENjFGRkNCOTkxMzhCQTcx QTZBNkMyQTg4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADE89zGkG81qki2WbVe7gMnvN84xN+b/rK46 wwnLM+4ADA3eANbAtTykc1e0GM8E/QwLVPXEmGJfKZwKISCmeh/Gw9ydQdCy5UrF TTY3/3zT+HFbPp7sdnHATI7wNZaMbaQMrf1uZVh4j+ExYSXhThyCc21jZZzZX0e8 nvVifOiv8+7c2v//2TEapTv7mFZ10B9l6fgon3JHq5isXvxMB0Day0idr/3g8c46 tVlhf3eTpuf/5rRi9FuC691Ew5RiAQeU1Pm9PWNDelfto4o4VxpBhd3KZXYkB1Gc bE2COQNdJzH+nqZ7hzUEKOUXon2Jk9Z2WLG6Co78nMf3YTIq8SE= -----END CERTIFICATE-----Generated at Thu Mar 26 19:42:14 2026 by rpki-client