$ rpki-client -vvf repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.mft File: FF947BE188D359EA7EDF887D86DA2C7CC7460B70.mft (raw, json) Hash identifier: lfAOfMLYJjI2MuvUZo2slvUwpXnjN0pZ7XGQiEUsi2M= Subject key identifier: 21:60:17:10:92:78:AD:C5:51:AF:29:12:91:53:C4:E2:18:32:EF:59 Authority key identifier: FF:94:7B:E1:88:D3:59:EA:7E:DF:88:7D:86:DA:2C:7C:C7:46:0B:70 Certificate issuer: /CN=FF947BE188D359EA7EDF887D86DA2C7CC7460B70 Certificate serial: 64BE85841E08929EF2D4F9B3419DB76C5C26F234 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.mft Manifest number: 0290 Signing time: Tue 24 Mar 2026 05:22:17 +0000 Manifest this update: Tue 24 Mar 2026 05:17:17 +0000 Manifest next update: Fri 27 Mar 2026 10:20:17 +0000 Files and hashes: 1: FF947BE188D359EA7EDF887D86DA2C7CC7460B70.crl (hash: NNHNZri0XKcM3SVIso+GYIvZS/oGkFIe75cTyzj6N8I=) 2: 3130332e3136322e3134312e302f32342d3234203d3e20313431303833.roa (hash: aO6ag29zhhjNXBpY8yr771GUZ2dWF2vzBvbIftVbJOY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.crl rsync://repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 10:20:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:be:85:84:1e:08:92:9e:f2:d4:f9:b3:41:9d:b7:6c:5c:26:f2:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF947BE188D359EA7EDF887D86DA2C7CC7460B70 Validity Not Before: Mar 24 05:17:17 2026 GMT Not After : Mar 27 10:20:17 2026 GMT Subject: CN=216017109278ADC551AF29129153C4E21832EF59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:5c:62:b5:90:0a:26:dc:22:06:3b:bc:4e:84: ab:63:b2:58:3b:07:83:f7:8a:d6:4e:b2:c1:70:4b: 29:49:fc:ec:0d:38:e3:b1:25:71:15:92:ee:87:ff: ea:40:80:61:ab:bc:46:bf:a0:a0:ea:a0:55:e8:9a: 32:f0:52:d2:32:ba:a3:f5:0a:08:16:fd:ed:1f:11: 27:90:73:f9:e1:05:ad:41:5f:90:ea:df:f9:78:b9: a8:26:ca:75:0a:f2:87:b9:f9:dc:cc:b1:e9:af:a9: f3:84:43:57:70:9c:eb:8b:4f:16:b4:da:e2:f5:c6: 67:e0:4b:74:b1:31:be:85:fa:ec:93:81:dd:30:e2: 05:fd:68:8e:73:9f:d5:75:f0:ee:21:58:bf:af:aa: e5:b3:c2:49:73:93:c1:80:74:09:93:36:20:14:68: 29:93:33:95:1e:3b:f3:14:10:49:7a:84:6a:20:e1: 4a:39:da:df:8f:20:f2:56:1b:bd:e3:53:79:43:73: a5:97:c7:a8:47:31:32:7a:cb:c1:d4:8e:e8:86:81: 48:d4:50:84:38:a3:0e:8b:4a:72:b0:fd:42:eb:c6: cd:57:1f:95:c5:9d:99:d7:69:89:ca:bd:66:07:31: fb:b0:bb:6b:33:ae:f2:d0:81:a6:ef:13:c1:bb:c8: a9:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:60:17:10:92:78:AD:C5:51:AF:29:12:91:53:C4:E2:18:32:EF:59 X509v3 Authority Key Identifier: keyid:FF:94:7B:E1:88:D3:59:EA:7E:DF:88:7D:86:DA:2C:7C:C7:46:0B:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:81:76:2f:69:0f:f8:bf:a0:cb:10:b7:1d:c1:f4:1f:8f:43: 33:f7:0a:1b:e5:30:ac:1e:0c:a9:db:eb:e5:f7:da:b4:b3:ec: 49:d0:45:38:91:75:f4:62:cd:fa:ba:0e:90:ad:61:23:ae:a5: 5a:e8:8a:1e:42:d1:bf:20:94:41:4b:66:9b:52:dc:bc:ab:61: 38:88:d5:83:51:f9:56:34:85:2e:2a:38:ea:d2:b6:05:ec:b7: bb:7f:74:2f:dd:33:ca:2b:a7:0a:c5:1c:7c:1d:f4:e9:76:ee: c2:0d:6d:47:17:35:25:d6:61:0a:89:65:aa:4e:a2:71:bd:88: 68:70:b9:99:f2:8e:64:78:c6:a3:c1:39:40:51:88:0c:eb:34: 48:33:c5:b2:91:45:03:57:d1:ac:40:b8:5a:e3:77:ae:ef:c2: 1d:fa:40:ec:01:77:7d:27:86:89:1b:19:29:cf:3a:1f:63:c9: b2:a6:0f:d8:5c:9e:41:79:9b:c9:5c:b0:69:e3:ca:7f:91:4a: fc:47:f8:b5:05:27:40:75:ed:99:48:25:90:df:45:2b:ab:79: b5:0a:48:fa:ca:13:8a:29:7a:d7:9b:11:66:47:52:28:c5:b3: 92:f3:fe:a3:b3:2b:55:27:c6:5e:fc:db:f0:82:d6:06:c0:3e: 74:0c:34:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZL6FhB4Ikp7y1PmzQZ23bFwm8jQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY5NDdCRTE4OEQzNTlFQTdFREY4ODdEODZEQTJDN0ND NzQ2MEI3MDAeFw0yNjAzMjQwNTE3MTdaFw0yNjAzMjcxMDIwMTdaMDMxMTAvBgNV BAMTKDIxNjAxNzEwOTI3OEFEQzU1MUFGMjkxMjkxNTNDNEUyMTgzMkVGNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjXGK1kAom3CIGO7xOhKtjslg7 B4P3itZOssFwSylJ/OwNOOOxJXEVku6H/+pAgGGrvEa/oKDqoFXomjLwUtIyuqP1 CggW/e0fESeQc/nhBa1BX5Dq3/l4uagmynUK8oe5+dzMsemvqfOEQ1dwnOuLTxa0 2uL1xmfgS3SxMb6F+uyTgd0w4gX9aI5zn9V18O4hWL+vquWzwklzk8GAdAmTNiAU aCmTM5UeO/MUEEl6hGog4Uo52t+PIPJWG73jU3lDc6WXx6hHMTJ6y8HUjuiGgUjU UIQ4ow6LSnKw/ULrxs1XH5XFnZnXaYnKvWYHMfuwu2szrvLQgabvE8G7yKmLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIWAXEJJ4rcVRrykSkVPE4hgy71kwHwYDVR0j BBgwFoAU/5R74YjTWep+34h9htosfMdGC3AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OGE5MjM3YS03MjZjLTRjMTktOWI0ZS03Yjk0YjE0MjRjNGIvMC9GRjk0N0JFMTg4 RDM1OUVBN0VERjg4N0Q4NkRBMkM3Q0M3NDYwQjcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkY5NDdCRTE4OEQzNTlFQTdFREY4ODdEODZEQTJDN0NDNzQ2 MEI3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZThhOTIzN2EtNzI2Yy00YzE5LTli NGUtN2I5NGIxNDI0YzRiLzAvRkY5NDdCRTE4OEQzNTlFQTdFREY4ODdEODZEQTJD N0NDNzQ2MEI3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAESBdi9pD/i/oMsQtx3B9B+PQzP3ChvlMKwe DKnb6+X32rSz7EnQRTiRdfRizfq6DpCtYSOupVroih5C0b8glEFLZptS3LyrYTiI 1YNR+VY0hS4qOOrStgXst7t/dC/dM8orpwrFHHwd9Ol27sINbUcXNSXWYQqJZapO onG9iGhwuZnyjmR4xqPBOUBRiAzrNEgzxbKRRQNX0axAuFrjd67vwh36QOwBd30n hokbGSnPOh9jybKmD9hcnkF5m8lcsGnjyn+RSvxH+LUFJ0B17ZlIJZDfRSurebUK SPrKE4opetebEWZHUijFs5Lz/qOzK1Unxl782/CC1gbAPnQMNJE= -----END CERTIFICATE-----Generated at Thu Mar 26 10:05:45 2026 by rpki-client