$ rpki-client -vvf repo-rpki.idnic.net/repo/fcde1cfd-cbbc-4f08-89cb-435a5911f2c2/0/F95ABFECD1F2CDA83B975C1651646721A611A82E.mft File: F95ABFECD1F2CDA83B975C1651646721A611A82E.mft (raw, json) Hash identifier: COvVbdRF8dZJSogKDWNHhlp6K0j0JSbdTU3+sInmx1Q= Subject key identifier: 4D:52:E5:2A:FD:5B:E2:49:B8:C0:6B:46:49:24:FC:DE:D2:0C:71:87 Authority key identifier: F9:5A:BF:EC:D1:F2:CD:A8:3B:97:5C:16:51:64:67:21:A6:11:A8:2E Certificate issuer: /CN=F95ABFECD1F2CDA83B975C1651646721A611A82E Certificate serial: 739A776EEAA04450B94F5DB7B9E9474A73B10624 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F95ABFECD1F2CDA83B975C1651646721A611A82E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fcde1cfd-cbbc-4f08-89cb-435a5911f2c2/0/F95ABFECD1F2CDA83B975C1651646721A611A82E.mft Manifest number: 01F4 Signing time: Tue 24 Mar 2026 10:32:16 +0000 Manifest this update: Tue 24 Mar 2026 10:27:16 +0000 Manifest next update: Fri 27 Mar 2026 12:21:16 +0000 Files and hashes: 1: F95ABFECD1F2CDA83B975C1651646721A611A82E.crl (hash: DCSQQLW4aSHtHlsRgyXR8IX8WjfKYFZPWUW+CWFLKIY=) 2: 3130332e3132372e3135342e302f32342d3234203d3e20313530353138.roa (hash: G6TGVbIdxDM3PGXqhIliPZL2762vyLXXOxGMZfTWgBw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fcde1cfd-cbbc-4f08-89cb-435a5911f2c2/0/F95ABFECD1F2CDA83B975C1651646721A611A82E.crl rsync://repo-rpki.idnic.net/repo/fcde1cfd-cbbc-4f08-89cb-435a5911f2c2/0/F95ABFECD1F2CDA83B975C1651646721A611A82E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F95ABFECD1F2CDA83B975C1651646721A611A82E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 12:21:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:9a:77:6e:ea:a0:44:50:b9:4f:5d:b7:b9:e9:47:4a:73:b1:06:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F95ABFECD1F2CDA83B975C1651646721A611A82E Validity Not Before: Mar 24 10:27:16 2026 GMT Not After : Mar 27 12:21:16 2026 GMT Subject: CN=4D52E52AFD5BE249B8C06B464924FCDED20C7187 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:51:73:23:17:04:4c:b3:85:f6:c6:65:c0:35: b9:4a:4c:17:ac:cc:a2:6d:db:14:5e:7b:4a:fd:38: 3d:65:03:8d:0e:ae:f3:be:f5:f9:9a:b5:92:15:e8: c3:f3:91:36:da:59:bb:78:55:f4:a2:4a:81:8a:4a: ef:ad:10:d2:bd:9e:95:48:bf:8b:10:fd:45:42:04: 30:67:d7:a1:11:a1:ee:7c:e1:6a:fd:3e:b9:11:17: b3:41:df:cc:80:91:60:ae:24:02:01:8d:13:a0:d9: 7f:35:95:d4:3e:0d:de:39:11:43:ad:09:d9:cc:2c: 79:2f:bd:89:4b:9c:ba:05:fc:58:92:14:0a:4f:f5: f5:10:46:11:db:fd:94:b9:a3:91:68:b1:c1:d0:d3: cd:de:cb:78:42:8b:b2:24:b6:40:8b:2e:2f:f9:ed: 35:d0:12:c9:74:1f:2b:4e:0a:04:25:9f:c1:1c:7a: ea:a8:18:80:b5:72:6e:a3:2e:6c:9b:53:f9:c2:d5: 50:71:99:bf:6d:d0:d4:65:f8:87:16:72:79:61:9e: 18:c2:e8:a1:fe:bc:74:64:f0:cd:5f:f8:96:0f:d1: fa:b4:43:51:26:de:91:25:79:50:2a:40:1c:79:ba: a4:1a:8c:54:2e:bc:68:06:32:25:84:2a:bb:3f:a2: ed:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:52:E5:2A:FD:5B:E2:49:B8:C0:6B:46:49:24:FC:DE:D2:0C:71:87 X509v3 Authority Key Identifier: keyid:F9:5A:BF:EC:D1:F2:CD:A8:3B:97:5C:16:51:64:67:21:A6:11:A8:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fcde1cfd-cbbc-4f08-89cb-435a5911f2c2/0/F95ABFECD1F2CDA83B975C1651646721A611A82E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F95ABFECD1F2CDA83B975C1651646721A611A82E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fcde1cfd-cbbc-4f08-89cb-435a5911f2c2/0/F95ABFECD1F2CDA83B975C1651646721A611A82E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:a8:76:5a:32:c5:f8:71:69:9d:5b:7e:b3:8a:ec:c8:d9:0c: 36:c4:1f:93:59:40:c2:0a:b7:5b:5c:c8:bc:59:06:29:b4:62: 38:41:1e:c8:10:29:3a:c8:81:a4:20:e0:72:98:2a:15:87:d8: ee:e5:56:02:88:ca:2f:31:61:50:e5:0f:f1:ff:c5:40:01:85: a3:9f:2f:d6:9e:81:3b:da:4c:b6:97:71:18:a7:41:13:f0:05: ff:c4:e5:69:27:96:7d:98:4f:33:a3:48:26:af:ab:69:fe:c2: 9d:61:81:57:16:04:62:38:26:4e:f8:10:36:c5:ce:b8:3b:13: 64:1f:c6:62:fa:3f:2e:28:51:6f:c1:fd:35:0e:27:f8:82:5c: a9:38:38:c1:fa:ed:a2:35:10:9a:2e:f8:cc:49:2b:5a:d2:af: 55:9e:1b:0a:e9:59:3a:45:a2:81:45:12:c9:c2:d5:45:4e:13: 3b:ed:62:6a:02:58:13:09:17:56:26:9c:15:08:5d:88:2c:71: 2f:ef:1d:de:3c:47:e1:e3:a4:b1:4d:2f:b9:4d:b4:15:f4:e9: f2:83:9c:77:58:81:1c:48:07:10:8f:3f:82:a6:99:59:d6:77: 0d:c1:53:db:1d:6d:ce:77:c5:c4:53:c6:d6:ba:c6:a1:6c:da: c5:d8:ff:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc5p3buqgRFC5T123uelHSnOxBiQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjk1QUJGRUNEMUYyQ0RBODNCOTc1QzE2NTE2NDY3MjFB NjExQTgyRTAeFw0yNjAzMjQxMDI3MTZaFw0yNjAzMjcxMjIxMTZaMDMxMTAvBgNV BAMTKDRENTJFNTJBRkQ1QkUyNDlCOEMwNkI0NjQ5MjRGQ0RFRDIwQzcxODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCUXMjFwRMs4X2xmXANblKTBes zKJt2xRee0r9OD1lA40OrvO+9fmatZIV6MPzkTbaWbt4VfSiSoGKSu+tENK9npVI v4sQ/UVCBDBn16ERoe584Wr9PrkRF7NB38yAkWCuJAIBjROg2X81ldQ+Dd45EUOt CdnMLHkvvYlLnLoF/FiSFApP9fUQRhHb/ZS5o5FoscHQ083ey3hCi7IktkCLLi/5 7TXQEsl0HytOCgQln8EceuqoGIC1cm6jLmybU/nC1VBxmb9t0NRl+IcWcnlhnhjC 6KH+vHRk8M1f+JYP0fq0Q1Em3pEleVAqQBx5uqQajFQuvGgGMiWEKrs/ou2PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTVLlKv1b4km4wGtGSST83tIMcYcwHwYDVR0j BBgwFoAU+Vq/7NHyzag7l1wWUWRnIaYRqC4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m Y2RlMWNmZC1jYmJjLTRmMDgtODljYi00MzVhNTkxMWYyYzIvMC9GOTVBQkZFQ0Qx RjJDREE4M0I5NzVDMTY1MTY0NjcyMUE2MTFBODJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjk1QUJGRUNEMUYyQ0RBODNCOTc1QzE2NTE2NDY3MjFBNjEx QTgyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmNkZTFjZmQtY2JiYy00ZjA4LTg5 Y2ItNDM1YTU5MTFmMmMyLzAvRjk1QUJGRUNEMUYyQ0RBODNCOTc1QzE2NTE2NDY3 MjFBNjExQTgyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGiodloyxfhxaZ1bfrOK7MjZDDbEH5NZQMIK t1tcyLxZBim0YjhBHsgQKTrIgaQg4HKYKhWH2O7lVgKIyi8xYVDlD/H/xUABhaOf L9aegTvaTLaXcRinQRPwBf/E5Wknln2YTzOjSCavq2n+wp1hgVcWBGI4Jk74EDbF zrg7E2QfxmL6Py4oUW/B/TUOJ/iCXKk4OMH67aI1EJou+MxJK1rSr1WeGwrpWTpF ooFFEsnC1UVOEzvtYmoCWBMJF1YmnBUIXYgscS/vHd48R+HjpLFNL7lNtBX06fKD nHdYgRxIBxCPP4KmmVnWdw3BU9sdbc53xcRTxta6xqFs2sXY/6c= -----END CERTIFICATE-----Generated at Thu Mar 26 11:25:43 2026 by rpki-client