$ rpki-client -vvf repo-rpki.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/F2E8B493535CE192E2A343E44990C2B86B854E0F.mft File: F2E8B493535CE192E2A343E44990C2B86B854E0F.mft (raw, json) Hash identifier: uyyy5awKbTfxGDibUK2/Da+j1Wh+zCECEYql10G6qXw= Subject key identifier: F9:DC:78:C2:B1:B2:58:F6:02:B8:8A:A4:AB:13:19:07:E5:5E:A1:30 Authority key identifier: F2:E8:B4:93:53:5C:E1:92:E2:A3:43:E4:49:90:C2:B8:6B:85:4E:0F Certificate issuer: /CN=F2E8B493535CE192E2A343E44990C2B86B854E0F Certificate serial: 39FFABDB2C72B4148652607031FCE8FC9171E92D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F2E8B493535CE192E2A343E44990C2B86B854E0F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/F2E8B493535CE192E2A343E44990C2B86B854E0F.mft Manifest number: 0118 Signing time: Wed 25 Mar 2026 04:21:10 +0000 Manifest this update: Wed 25 Mar 2026 04:16:10 +0000 Manifest next update: Sat 28 Mar 2026 06:58:10 +0000 Files and hashes: 1: F2E8B493535CE192E2A343E44990C2B86B854E0F.crl (hash: mDWZw0QjafSa8rWn76S73vJZ9AY64shXGUGT8uEQ/Fg=) 2: 3136302e31392e38392e302f32342d3234203d3e20313532373839.roa (hash: a18oOGl6pVPvZKJuyn1ADVOAC3RXX1wTEnjdHNjeTew=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/F2E8B493535CE192E2A343E44990C2B86B854E0F.crl rsync://repo-rpki.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/F2E8B493535CE192E2A343E44990C2B86B854E0F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F2E8B493535CE192E2A343E44990C2B86B854E0F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 06:58:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:ff:ab:db:2c:72:b4:14:86:52:60:70:31:fc:e8:fc:91:71:e9:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2E8B493535CE192E2A343E44990C2B86B854E0F Validity Not Before: Mar 25 04:16:10 2026 GMT Not After : Mar 28 06:58:10 2026 GMT Subject: CN=F9DC78C2B1B258F602B88AA4AB131907E55EA130 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:6d:1b:ff:e5:d0:ed:92:d5:36:5c:01:75:d3: 41:2d:e8:df:4b:61:54:ba:25:e9:28:64:6c:42:47: 4d:a3:6b:d6:dd:00:98:3f:45:15:80:45:6a:92:44: d9:f7:bb:0a:bc:07:3c:b9:82:4a:59:2f:b7:5e:c2: a5:99:30:59:01:d0:0b:4e:4d:d9:0b:9e:29:d8:e5: 19:0c:71:90:10:e6:ce:50:78:cd:41:f3:99:2f:db: 2d:bc:de:2a:a8:d6:82:ab:24:03:9d:c0:7d:cc:81: 49:0f:9d:21:d0:a0:3f:6a:38:bb:86:c0:ab:73:d7: 62:d9:92:09:41:92:49:ab:1e:81:04:50:1c:d5:cd: 8b:25:7c:ce:dc:cc:1d:49:b0:8e:ed:48:c8:cd:c0: cb:f1:f8:99:07:17:7c:a8:6b:48:db:85:46:c9:51: a5:95:f1:d4:7d:97:3f:51:a8:68:7f:69:c9:e7:47: 06:e1:3e:f7:da:7e:f8:a9:af:42:4d:ac:04:f1:25: 3d:57:5c:a1:dd:85:34:05:f4:01:8b:ce:6b:a7:c9: 3d:42:06:f5:87:ea:4e:15:81:5a:14:0e:44:3d:ff: d8:89:8b:45:0f:1c:3e:52:bb:9d:7a:13:e8:54:97: d8:e9:df:d8:06:9c:14:25:76:26:e7:fb:9b:ac:54: 26:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:DC:78:C2:B1:B2:58:F6:02:B8:8A:A4:AB:13:19:07:E5:5E:A1:30 X509v3 Authority Key Identifier: keyid:F2:E8:B4:93:53:5C:E1:92:E2:A3:43:E4:49:90:C2:B8:6B:85:4E:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/F2E8B493535CE192E2A343E44990C2B86B854E0F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F2E8B493535CE192E2A343E44990C2B86B854E0F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/F2E8B493535CE192E2A343E44990C2B86B854E0F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:8a:5b:9a:36:4a:9b:55:50:f9:12:dd:08:47:69:b0:0f:f1: 2f:d7:51:95:5e:34:64:9b:35:4f:5d:8d:78:e1:5e:ac:8c:f0: b9:56:76:c6:17:33:73:c1:bf:c1:36:39:8d:1b:b2:15:78:3e: e2:60:99:55:eb:1b:59:e1:cb:07:83:18:38:64:9e:1f:58:e1: a7:5b:2e:14:e2:5b:35:3e:69:0e:a8:ef:63:d8:d0:be:b1:7b: 75:8f:4e:fc:27:a2:68:91:2c:55:d5:18:ba:6d:0c:d2:48:da: 4e:6a:22:ef:72:1b:30:e1:94:c7:14:de:27:22:69:49:83:6f: dc:5f:fb:73:00:51:69:3b:60:2e:50:49:98:73:1a:5f:1c:92: 62:8b:73:bb:c3:84:93:13:b4:9a:18:36:07:9a:04:f3:c2:f2: e3:a4:1b:61:c7:63:ea:49:e5:be:6b:78:20:75:43:1c:cc:b3: 83:1b:4b:e8:43:d4:17:f4:5c:6b:10:09:09:56:cc:77:51:6f: 4c:c6:7b:2e:e2:6c:f8:80:6e:fc:10:c2:12:29:c7:3f:3f:16: 24:86:27:03:ab:3b:c1:8b:a6:c9:17:4c:55:4e:4e:0c:0f:e4: 1e:2a:d1:ab:bb:80:8e:50:53:7f:3b:b0:e5:62:85:37:de:5d: d9:93:bd:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOf+r2yxytBSGUmBwMfzo/JFx6S0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjJFOEI0OTM1MzVDRTE5MkUyQTM0M0U0NDk5MEMyQjg2 Qjg1NEUwRjAeFw0yNjAzMjUwNDE2MTBaFw0yNjAzMjgwNjU4MTBaMDMxMTAvBgNV BAMTKEY5REM3OEMyQjFCMjU4RjYwMkI4OEFBNEFCMTMxOTA3RTU1RUExMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwbRv/5dDtktU2XAF100Et6N9L YVS6JekoZGxCR02ja9bdAJg/RRWARWqSRNn3uwq8Bzy5gkpZL7dewqWZMFkB0AtO TdkLninY5RkMcZAQ5s5QeM1B85kv2y283iqo1oKrJAOdwH3MgUkPnSHQoD9qOLuG wKtz12LZkglBkkmrHoEEUBzVzYslfM7czB1JsI7tSMjNwMvx+JkHF3yoa0jbhUbJ UaWV8dR9lz9RqGh/acnnRwbhPvfafvipr0JNrATxJT1XXKHdhTQF9AGLzmunyT1C BvWH6k4VgVoUDkQ9/9iJi0UPHD5Su516E+hUl9jp39gGnBQldibn+5usVCZvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+dx4wrGyWPYCuIqkqxMZB+VeoTAwHwYDVR0j BBgwFoAU8ui0k1Nc4ZLio0PkSZDCuGuFTg8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZGMxMDA3ZC1mZDYxLTQ1NDMtOGY1Zi0zZmRmZmE0YjAxZTYvMC9GMkU4QjQ5MzUz NUNFMTkyRTJBMzQzRTQ0OTkwQzJCODZCODU0RTBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjJFOEI0OTM1MzVDRTE5MkUyQTM0M0U0NDk5MEMyQjg2Qjg1 NEUwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGRjMTAwN2QtZmQ2MS00NTQzLThm NWYtM2ZkZmZhNGIwMWU2LzAvRjJFOEI0OTM1MzVDRTE5MkUyQTM0M0U0NDk5MEMy Qjg2Qjg1NEUwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADCKW5o2SptVUPkS3QhHabAP8S/XUZVeNGSb NU9djXjhXqyM8LlWdsYXM3PBv8E2OY0bshV4PuJgmVXrG1nhyweDGDhknh9Y4adb LhTiWzU+aQ6o72PY0L6xe3WPTvwnomiRLFXVGLptDNJI2k5qIu9yGzDhlMcU3ici aUmDb9xf+3MAUWk7YC5QSZhzGl8ckmKLc7vDhJMTtJoYNgeaBPPC8uOkG2HHY+pJ 5b5reCB1QxzMs4MbS+hD1Bf0XGsQCQlWzHdRb0zGey7ibPiAbvwQwhIpxz8/FiSG JwOrO8GLpskXTFVOTgwP5B4q0au7gI5QU387sOVihTfeXdmTvZo= -----END CERTIFICATE-----Generated at Thu Mar 26 14:17:55 2026 by rpki-client