$ rpki-client -vvf repo-rpki.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.mft File: 00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.mft (raw, json) Hash identifier: kjBIQdKIuFyV74DqsXZQWc2DT2dDS64P6R3GolVNT3w= Subject key identifier: D2:DE:BD:C9:B8:29:F7:4C:A9:DC:18:D6:7F:4A:A6:24:75:EE:05:20 Authority key identifier: 00:F9:E3:D4:39:56:F7:75:3B:34:BD:1A:48:76:FF:9F:8D:1B:BF:BD Certificate issuer: /CN=00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD Certificate serial: 6B9222F7B5ADB5F687DA328A39933B37151A03B3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.mft Manifest number: 02B2 Signing time: Wed 25 Mar 2026 14:31:54 +0000 Manifest this update: Wed 25 Mar 2026 14:26:54 +0000 Manifest next update: Sat 28 Mar 2026 22:12:54 +0000 Files and hashes: 1: 00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.crl (hash: IQjKloPFQgvJ9UdPlDZWEenkD9jjCixqwr9EXKdd2Tc=) 2: 3130332e3136362e32362e302f32332d3233203d3e20313431393334.roa (hash: qsNJTbCdEl5g+CtS1gIL++26d6eTd1asuHFx0fLTFCk=) 3: 3130332e3136362e32362e302f32342d3234203d3e20313431393334.roa (hash: WCPD3rvs/h3EKH86SX2zTuUBCPJyhF6J/Q+pVbsSNFQ=) 4: 3130332e3136362e32372e302f32342d3234203d3e20313431393334.roa (hash: sCYWRL7NfwNer5aCHfI6ENS759QdNaShp3p44D+zbuc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.crl rsync://repo-rpki.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:12:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:92:22:f7:b5:ad:b5:f6:87:da:32:8a:39:93:3b:37:15:1a:03:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD Validity Not Before: Mar 25 14:26:54 2026 GMT Not After : Mar 28 22:12:54 2026 GMT Subject: CN=D2DEBDC9B829F74CA9DC18D67F4AA62475EE0520 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f1:46:0c:ff:d6:59:77:a5:05:36:bb:bb:31: 0f:c0:ca:8e:2d:a4:56:d5:2b:9b:33:9d:42:ae:14: 18:af:74:85:7f:72:ab:99:dc:6f:3a:f7:e0:61:ff: 6e:9b:42:bc:c0:06:ef:38:5a:cb:f7:56:30:d9:68: ee:1f:29:4c:8a:da:c4:6b:a6:2f:18:55:46:3d:f2: 35:2a:f1:94:cd:ed:92:47:ae:8a:db:63:11:b8:90: b6:2f:08:40:d6:fb:94:c4:a3:40:0f:6a:20:99:3a: 19:61:3a:0e:fe:c3:6b:57:0a:2d:37:a5:f1:25:ea: 7a:ba:9d:c9:7d:2b:c6:fe:49:13:f7:31:3d:a0:e2: 57:cd:29:43:b7:88:6b:05:02:7b:40:a6:e0:53:84: 4c:8f:3f:66:c4:60:45:cb:28:82:b4:43:f8:83:7e: af:b0:40:15:0c:7c:48:fc:80:ee:fc:dd:0d:8b:bd: dc:fd:84:1a:7f:95:11:2b:c5:7a:82:42:8e:5e:5c: 97:3c:cf:01:80:b4:4a:2f:83:ec:f1:25:26:a1:fb: 2f:66:e1:7c:37:6c:76:5c:b0:cc:d7:74:3b:78:9d: ab:00:e4:8e:e3:79:e9:02:e0:37:38:4a:ac:fa:d0: 26:a8:fb:08:85:74:53:50:8d:cf:5e:b6:dc:93:10: c6:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:DE:BD:C9:B8:29:F7:4C:A9:DC:18:D6:7F:4A:A6:24:75:EE:05:20 X509v3 Authority Key Identifier: keyid:00:F9:E3:D4:39:56:F7:75:3B:34:BD:1A:48:76:FF:9F:8D:1B:BF:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:68:0a:1b:ee:83:b5:47:27:e3:66:4e:62:bf:0e:6e:4a:6b: 3e:78:e2:ad:9b:00:d8:56:e3:a1:e3:f6:91:a1:8f:ae:02:b2: 1d:3d:46:19:7c:44:4e:d5:f0:16:ca:6e:06:71:61:5c:a8:e7: 1d:11:4d:8f:da:83:73:39:fc:00:a7:5c:ea:d2:2e:95:65:5f: 39:d3:b3:cd:ff:f1:91:0e:13:ba:bd:cc:34:e4:05:27:cc:2a: af:cf:c8:13:04:b1:a9:7a:81:84:b8:e6:03:96:f7:9c:95:73: 76:ce:27:5f:a3:6e:e7:aa:8a:f9:e2:bd:e4:42:4e:aa:bd:57: 34:bc:e2:15:b0:21:19:61:c6:5d:0e:d8:58:fc:16:73:16:a7: 23:11:ba:7e:03:f4:3e:d2:38:a7:1f:7f:17:9c:28:56:91:6e: c5:5d:5e:9b:32:4d:93:0d:b7:f4:c3:39:1c:68:af:80:b7:2e: 90:0a:61:78:82:d8:d7:bd:47:c5:2b:00:6c:bd:2e:d5:0f:d7: e9:91:7e:5e:a4:5b:44:4e:70:98:f7:0f:d1:c3:73:42:81:4d: 0d:81:f1:fc:42:df:ee:6c:77:ee:35:9a:d9:1e:2e:6a:c5:fa: e0:dc:4d:4c:98:67:4e:57:87:98:df:6e:b5:3b:67:dc:95:1e: 96:e2:a2:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa5Ii97WttfaH2jKKOZM7NxUaA7MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDBGOUUzRDQzOTU2Rjc3NTNCMzRCRDFBNDg3NkZGOUY4 RDFCQkZCRDAeFw0yNjAzMjUxNDI2NTRaFw0yNjAzMjgyMjEyNTRaMDMxMTAvBgNV BAMTKEQyREVCREM5QjgyOUY3NENBOURDMThENjdGNEFBNjI0NzVFRTA1MjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx8UYM/9ZZd6UFNru7MQ/Ayo4t pFbVK5sznUKuFBivdIV/cquZ3G869+Bh/26bQrzABu84Wsv3VjDZaO4fKUyK2sRr pi8YVUY98jUq8ZTN7ZJHrorbYxG4kLYvCEDW+5TEo0APaiCZOhlhOg7+w2tXCi03 pfEl6nq6ncl9K8b+SRP3MT2g4lfNKUO3iGsFAntApuBThEyPP2bEYEXLKIK0Q/iD fq+wQBUMfEj8gO783Q2Lvdz9hBp/lRErxXqCQo5eXJc8zwGAtEovg+zxJSah+y9m 4Xw3bHZcsMzXdDt4nasA5I7jeekC4Dc4Sqz60Cao+wiFdFNQjc9ettyTEMZjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0t69ybgp90yp3BjWf0qmJHXuBSAwHwYDVR0j BBgwFoAUAPnj1DlW93U7NL0aSHb/n40bv70wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YTQxNTQzOC1hZDAxLTQyZGMtOGM5Mi0xNTFiYzhjMjcyMWYvMC8wMEY5RTNENDM5 NTZGNzc1M0IzNEJEMUE0ODc2RkY5RjhEMUJCRkJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDBGOUUzRDQzOTU2Rjc3NTNCMzRCRDFBNDg3NkZGOUY4RDFC QkZCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmE0MTU0MzgtYWQwMS00MmRjLThj OTItMTUxYmM4YzI3MjFmLzAvMDBGOUUzRDQzOTU2Rjc3NTNCMzRCRDFBNDg3NkZG OUY4RDFCQkZCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGVoChvug7VHJ+NmTmK/Dm5Kaz544q2bANhW 46Hj9pGhj64Csh09Rhl8RE7V8BbKbgZxYVyo5x0RTY/ag3M5/ACnXOrSLpVlXznT s83/8ZEOE7q9zDTkBSfMKq/PyBMEsal6gYS45gOW95yVc3bOJ1+jbueqivniveRC Tqq9VzS84hWwIRlhxl0O2Fj8FnMWpyMRun4D9D7SOKcffxecKFaRbsVdXpsyTZMN t/TDORxor4C3LpAKYXiC2Ne9R8UrAGy9LtUP1+mRfl6kW0ROcJj3D9HDc0KBTQ2B 8fxC3+5sd+41mtkeLmrF+uDcTUyYZ05Xh5jfbrU7Z9yVHpbioqk= -----END CERTIFICATE-----Generated at Thu Mar 26 21:13:16 2026 by rpki-client