$ rpki-client -vvf repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.mft File: FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.mft (raw, json) Hash identifier: Z84cQsVooEVsJvtgHkDZEy4wtfeILEDgvhiIrzakzwY= Subject key identifier: C4:B7:17:28:82:4E:A5:53:E3:88:3B:EB:D5:37:1D:70:E9:99:0A:0E Authority key identifier: FF:77:50:7E:6D:1F:0E:0B:6E:B0:11:2E:9C:FB:D1:AF:1C:1F:6D:D4 Certificate issuer: /CN=FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4 Certificate serial: 51B5C092750B2340DE4A2E2986896CC1A500059E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.mft Manifest number: 0263 Signing time: Tue 24 Mar 2026 22:12:35 +0000 Manifest this update: Tue 24 Mar 2026 22:07:35 +0000 Manifest next update: Sat 28 Mar 2026 06:29:35 +0000 Files and hashes: 1: FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.crl (hash: UEm8XM67ix3ovrajm3D9vQjzz8twn/yoEP1ZUd+GxyQ=) 2: 3130332e3137372e31342e302f32342d3234203d3e20313437313338.roa (hash: h9dnF3KOw12yt6fcsAbVmRkmtSJxVLoM69P1BMcAcZ8=) 3: 3130332e3137372e31342e302f32332d3233203d3e20313437313338.roa (hash: y+iKNFKKHbs0CSJEt1lYsgu6qhzfE0PgaZ6d5ep/InE=) 4: 3130332e3137372e31352e302f32342d3234203d3e20313437313338.roa (hash: RmcTSNRb4aZHsTyIQG1pExZoYxPr3P86MsdiwAWVKTA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.crl rsync://repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 06:29:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:b5:c0:92:75:0b:23:40:de:4a:2e:29:86:89:6c:c1:a5:00:05:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4 Validity Not Before: Mar 24 22:07:35 2026 GMT Not After : Mar 28 06:29:35 2026 GMT Subject: CN=C4B71728824EA553E3883BEBD5371D70E9990A0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c2:19:15:a8:50:80:30:04:b5:2c:33:60:37: e3:b4:5b:a5:ae:6c:a5:58:80:86:be:10:67:14:7a: 02:3e:50:c9:26:52:42:cb:6a:a6:99:c3:94:76:ee: 62:1d:77:9f:11:5b:0e:35:0e:c1:a1:1d:72:28:f4: e2:89:bb:6b:9c:23:1c:80:7b:3f:c6:62:79:57:75: be:60:6e:2e:40:09:3b:c8:08:0f:61:ad:3c:b7:ce: 68:01:c3:67:4b:be:4b:3f:ea:35:3e:f9:eb:bf:25: e9:db:c8:38:01:56:52:12:5f:31:df:2d:a9:d5:c1: 3b:d1:9f:fa:2a:e3:20:e9:43:00:3b:05:af:76:db: f4:0a:db:d0:63:0b:de:b1:88:06:d6:90:20:3e:3a: f5:c5:b8:0b:65:f2:27:7f:42:de:e5:24:8d:16:85: 80:fd:27:59:b3:5a:33:2b:a0:15:3f:2e:f8:4d:6a: de:83:45:26:89:40:35:27:6a:33:18:c7:b0:df:4a: 30:fe:f2:43:d5:e5:45:1e:ca:ef:37:26:fc:b5:10: 50:07:30:f0:f4:0d:5a:88:98:36:7b:aa:5c:4d:2b: 00:e2:b2:60:ae:ac:9b:96:f5:15:c8:ea:4c:c1:3e: bf:be:39:87:39:8f:59:bb:42:07:26:17:3d:96:52: f9:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:B7:17:28:82:4E:A5:53:E3:88:3B:EB:D5:37:1D:70:E9:99:0A:0E X509v3 Authority Key Identifier: keyid:FF:77:50:7E:6D:1F:0E:0B:6E:B0:11:2E:9C:FB:D1:AF:1C:1F:6D:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:24:e3:1b:e6:c1:ef:fa:b5:46:23:6f:65:ad:9b:78:d8:c9: 2d:1e:d4:ec:71:ad:ff:da:71:af:ce:a1:23:09:3a:26:a5:dc: 2b:ab:d4:8e:05:5f:4f:da:5b:67:95:d4:3b:85:ed:e7:df:85: d4:d8:5b:4e:14:49:fa:03:1e:e4:1c:60:c2:9b:8a:57:43:02: a1:0b:cf:91:6f:3e:98:ab:c1:d4:20:59:f3:d1:b0:1f:2c:fc: 7f:06:92:11:79:9b:5f:64:ed:ff:16:73:73:e3:60:56:91:fa: 4d:f0:a6:08:41:30:99:c1:b3:66:d1:b8:50:50:10:3b:57:26: ea:53:38:2c:a0:fd:5f:1e:bc:b5:aa:b6:51:57:67:94:6b:4a: 07:cc:90:90:5c:22:1f:04:f3:dc:bd:91:56:d5:31:49:59:aa: f1:87:be:2a:da:4e:81:21:17:55:7b:1f:15:04:96:c9:2c:c6: bc:e5:6c:57:f9:46:bb:61:ea:0a:29:dd:fc:5d:0f:b0:f8:24: 7f:ab:70:62:27:9a:ea:83:1a:fc:7c:56:ce:68:fb:44:6d:7a: 12:04:70:af:8f:20:9a:54:bb:5c:df:de:37:93:1e:c7:d1:22: 4a:fa:8d:07:af:01:11:ce:f4:22:c7:e6:63:f0:83:53:5f:7a: 3c:3e:b8:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUbXAknULI0DeSi4pholswaUABZ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY3NzUwN0U2RDFGMEUwQjZFQjAxMTJFOUNGQkQxQUYx QzFGNkRENDAeFw0yNjAzMjQyMjA3MzVaFw0yNjAzMjgwNjI5MzVaMDMxMTAvBgNV BAMTKEM0QjcxNzI4ODI0RUE1NTNFMzg4M0JFQkQ1MzcxRDcwRTk5OTBBMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChwhkVqFCAMAS1LDNgN+O0W6Wu bKVYgIa+EGcUegI+UMkmUkLLaqaZw5R27mIdd58RWw41DsGhHXIo9OKJu2ucIxyA ez/GYnlXdb5gbi5ACTvICA9hrTy3zmgBw2dLvks/6jU++eu/JenbyDgBVlISXzHf LanVwTvRn/oq4yDpQwA7Ba922/QK29BjC96xiAbWkCA+OvXFuAtl8id/Qt7lJI0W hYD9J1mzWjMroBU/LvhNat6DRSaJQDUnajMYx7DfSjD+8kPV5UUeyu83Jvy1EFAH MPD0DVqImDZ7qlxNKwDismCurJuW9RXI6kzBPr++OYc5j1m7QgcmFz2WUvntAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxLcXKIJOpVPjiDvr1TcdcOmZCg4wHwYDVR0j BBgwFoAU/3dQfm0fDgtusBEunPvRrxwfbdQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YmUwNDAzOC1hMWI2LTQzMmMtODU0Yi1jYzZlOGNmMzJlMDYvMC9GRjc3NTA3RTZE MUYwRTBCNkVCMDExMkU5Q0ZCRDFBRjFDMUY2REQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkY3NzUwN0U2RDFGMEUwQjZFQjAxMTJFOUNGQkQxQUYxQzFG NkRENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmJlMDQwMzgtYTFiNi00MzJjLTg1 NGItY2M2ZThjZjMyZTA2LzAvRkY3NzUwN0U2RDFGMEUwQjZFQjAxMTJFOUNGQkQx QUYxQzFGNkRENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMUk4xvmwe/6tUYjb2Wtm3jYyS0e1Oxxrf/a ca/OoSMJOial3Cur1I4FX0/aW2eV1DuF7effhdTYW04USfoDHuQcYMKbildDAqEL z5FvPpirwdQgWfPRsB8s/H8GkhF5m19k7f8Wc3PjYFaR+k3wpghBMJnBs2bRuFBQ EDtXJupTOCyg/V8evLWqtlFXZ5RrSgfMkJBcIh8E89y9kVbVMUlZqvGHviraToEh F1V7HxUElsksxrzlbFf5Rrth6gop3fxdD7D4JH+rcGInmuqDGvx8Vs5o+0RtehIE cK+PIJpUu1zf3jeTHsfRIkr6jQevARHO9CLH5mPwg1Nfejw+uOA= -----END CERTIFICATE-----Generated at Thu Mar 26 16:25:26 2026 by rpki-client