$ rpki-client -vvf repo-rpki.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/F9F45AEE2535AA139ECA272806E15BF40CC89B98.mft File: F9F45AEE2535AA139ECA272806E15BF40CC89B98.mft (raw, json) Hash identifier: QP4XCyd4KT3qgaWUpKpylNrtBTTCcNxDgX6HfArMiDY= Subject key identifier: 64:94:90:BE:A9:53:5A:FA:B1:1A:1E:AC:BA:52:4A:47:5A:31:62:1A Authority key identifier: F9:F4:5A:EE:25:35:AA:13:9E:CA:27:28:06:E1:5B:F4:0C:C8:9B:98 Certificate issuer: /CN=F9F45AEE2535AA139ECA272806E15BF40CC89B98 Certificate serial: 30847520B209D9042924D741A2BAD7B77BB2B843 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F45AEE2535AA139ECA272806E15BF40CC89B98.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/F9F45AEE2535AA139ECA272806E15BF40CC89B98.mft Manifest number: 01BA Signing time: Tue 24 Mar 2026 16:42:34 +0000 Manifest this update: Tue 24 Mar 2026 16:37:34 +0000 Manifest next update: Fri 27 Mar 2026 19:42:34 +0000 Files and hashes: 1: 3130332e3130352e392e302f32342d3234203d3e20313530393339.roa (hash: hcH6v6RlrdRAjVWDrVOqtAZuasdkitnMnAycrQrkzno=) 2: F9F45AEE2535AA139ECA272806E15BF40CC89B98.crl (hash: 31qFxpdjedvUC9p6CEC0vPhd9LIx/ZFY++necgBZuZk=) 3: 3130332e3130352e382e302f32342d3234203d3e20313530393339.roa (hash: fGeye8pNhq5kvXjnhfQRX7MDbYw/hQQCjNdJBXmX1wE=) 4: 3130332e3130352e382e302f32332d3233203d3e20313530393339.roa (hash: 4goMGkXJ7mvm5yoxzX/P6coIIi1YjH1SZnzH4RGSxEo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/F9F45AEE2535AA139ECA272806E15BF40CC89B98.crl rsync://repo-rpki.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/F9F45AEE2535AA139ECA272806E15BF40CC89B98.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F45AEE2535AA139ECA272806E15BF40CC89B98.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 19:42:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:84:75:20:b2:09:d9:04:29:24:d7:41:a2:ba:d7:b7:7b:b2:b8:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9F45AEE2535AA139ECA272806E15BF40CC89B98 Validity Not Before: Mar 24 16:37:34 2026 GMT Not After : Mar 27 19:42:34 2026 GMT Subject: CN=649490BEA9535AFAB11A1EACBA524A475A31621A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:8a:55:86:d5:8d:95:92:75:d7:12:56:db:3c: 8d:2b:78:bd:78:68:c9:ab:be:0b:c4:09:e2:89:bc: 21:6e:59:a7:f7:23:ec:98:ca:ad:c5:c3:1c:3a:ba: 57:a0:fc:69:52:81:9e:7d:76:91:ce:12:b6:6a:7b: ed:2f:33:fa:84:c1:c1:69:8c:12:9c:d5:61:ac:6a: c3:54:3c:61:9d:05:54:5b:9b:3d:c9:d7:7b:c9:52: f3:16:5a:e7:15:46:9f:af:c3:e7:c5:9d:d7:2e:e9: af:3e:f2:26:18:58:1b:b8:a6:61:f6:a6:9d:54:7d: b0:db:4a:24:74:4e:46:51:1e:15:d2:18:05:72:5a: e0:7c:ad:18:d1:86:42:6d:44:95:29:b5:4f:0d:93: 19:26:fa:72:30:db:1d:82:99:97:90:b3:76:fb:3b: 4f:9e:a3:ff:d0:c4:d8:ee:11:f0:77:bc:a4:58:27: 03:b5:ab:78:68:e6:a1:14:b7:12:a2:b9:7e:c0:bc: 83:4c:43:05:e1:9d:a6:04:23:9a:cb:fc:4b:49:ad: 1b:fe:b3:47:f0:02:41:4e:5f:76:93:74:22:db:de: cf:b9:77:da:e4:c2:68:db:77:7f:5e:8e:05:6f:3b: d1:1b:e7:9d:fd:01:c0:f4:db:03:83:2b:57:89:01: 6e:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:94:90:BE:A9:53:5A:FA:B1:1A:1E:AC:BA:52:4A:47:5A:31:62:1A X509v3 Authority Key Identifier: keyid:F9:F4:5A:EE:25:35:AA:13:9E:CA:27:28:06:E1:5B:F4:0C:C8:9B:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/F9F45AEE2535AA139ECA272806E15BF40CC89B98.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F45AEE2535AA139ECA272806E15BF40CC89B98.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/F9F45AEE2535AA139ECA272806E15BF40CC89B98.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:df:a6:74:48:fc:4f:7b:50:2d:e9:3f:7d:af:9e:60:9c:00: 06:e1:43:2e:50:d0:e0:ef:b8:4c:13:34:e3:a9:4b:83:af:a9: 58:15:48:dc:24:1f:ed:68:d3:70:fa:4a:c5:bb:52:ea:89:dc: 36:41:6b:a3:e8:ff:64:22:6f:51:c0:a6:3b:e7:d5:cc:ef:ee: c2:63:04:2f:9d:e5:43:d5:13:0b:ed:1f:3b:a5:f1:03:1e:90: 15:0a:53:b3:14:1c:c0:bf:d6:be:0c:38:40:e3:e4:d2:07:c8: 67:67:5b:82:af:85:95:80:aa:d4:d0:25:73:db:49:55:7e:1c: fa:8f:38:00:4a:76:ad:dd:87:41:ce:1a:f2:08:28:bd:9c:b6: a4:59:f1:48:e4:8e:a8:b9:0a:58:7a:7a:c6:bd:f2:62:04:02: a7:8d:2e:f5:ea:9d:e8:5e:7b:62:7d:d0:e8:3d:d6:3a:c9:d0: c8:cf:7b:84:15:01:a2:8a:21:9f:a7:e0:0b:7c:8f:6c:92:81: 62:ce:4a:84:07:f6:54:75:0e:94:48:e1:71:3e:8b:b3:2c:2a: 98:21:03:9b:0f:b8:c7:c8:9d:9a:42:a1:e0:c3:c7:63:d8:8b: 09:97:60:8a:91:9b:97:2a:dd:be:30:6d:de:b8:67:c0:5b:65: be:bc:b4:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMIR1ILIJ2QQpJNdBorrXt3uyuEMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlGNDVBRUUyNTM1QUExMzlFQ0EyNzI4MDZFMTVCRjQw Q0M4OUI5ODAeFw0yNjAzMjQxNjM3MzRaFw0yNjAzMjcxOTQyMzRaMDMxMTAvBgNV BAMTKDY0OTQ5MEJFQTk1MzVBRkFCMTFBMUVBQ0JBNTI0QTQ3NUEzMTYyMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoilWG1Y2VknXXElbbPI0reL14 aMmrvgvECeKJvCFuWaf3I+yYyq3Fwxw6uleg/GlSgZ59dpHOErZqe+0vM/qEwcFp jBKc1WGsasNUPGGdBVRbmz3J13vJUvMWWucVRp+vw+fFndcu6a8+8iYYWBu4pmH2 pp1UfbDbSiR0TkZRHhXSGAVyWuB8rRjRhkJtRJUptU8Nkxkm+nIw2x2CmZeQs3b7 O0+eo//QxNjuEfB3vKRYJwO1q3ho5qEUtxKiuX7AvINMQwXhnaYEI5rL/EtJrRv+ s0fwAkFOX3aTdCLb3s+5d9rkwmjbd39ejgVvO9Eb5539AcD02wODK1eJAW7PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZJSQvqlTWvqxGh6sulJKR1oxYhowHwYDVR0j BBgwFoAU+fRa7iU1qhOeyicoBuFb9AzIm5gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NjdhN2YwZS04ZDA3LTQ1ZGUtODI1Mi0zYmZmYzA1ZTU2NDkvMC9GOUY0NUFFRTI1 MzVBQTEzOUVDQTI3MjgwNkUxNUJGNDBDQzg5Qjk4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjlGNDVBRUUyNTM1QUExMzlFQ0EyNzI4MDZFMTVCRjQwQ0M4 OUI5OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTY3YTdmMGUtOGQwNy00NWRlLTgy NTItM2JmZmMwNWU1NjQ5LzAvRjlGNDVBRUUyNTM1QUExMzlFQ0EyNzI4MDZFMTVC RjQwQ0M4OUI5OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKzfpnRI/E97UC3pP32vnmCcAAbhQy5Q0ODv uEwTNOOpS4OvqVgVSNwkH+1o03D6SsW7UuqJ3DZBa6Po/2Qib1HApjvn1czv7sJj BC+d5UPVEwvtHzul8QMekBUKU7MUHMC/1r4MOEDj5NIHyGdnW4KvhZWAqtTQJXPb SVV+HPqPOABKdq3dh0HOGvIIKL2ctqRZ8Ujkjqi5Clh6esa98mIEAqeNLvXqnehe e2J90Og91jrJ0MjPe4QVAaKKIZ+n4At8j2ySgWLOSoQH9lR1DpRI4XE+i7MsKpgh A5sPuMfInZpCoeDDx2PYiwmXYIqRm5cq3b4wbd64Z8BbZb68tPw= -----END CERTIFICATE-----Generated at Thu Mar 26 14:13:34 2026 by rpki-client