$ rpki-client -vvf repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.mft File: F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.mft (raw, json) Hash identifier: J56PMnpAaIaL4TokAnY6fQ0HZ1UUih3oSwOL8cNrwgY= Subject key identifier: 55:B1:FD:45:D4:59:6D:1D:36:3A:C5:69:0F:8A:79:95:03:05:1A:74 Authority key identifier: F9:F2:1F:18:D0:C5:65:6D:8F:24:B3:FF:EE:0B:17:A1:70:FA:D4:A5 Certificate issuer: /CN=F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5 Certificate serial: 0BE162E5B6D754631DB317489596959799B21F89 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.mft Manifest number: 0557 Signing time: Tue 17 Mar 2026 00:31:49 +0000 Manifest this update: Tue 17 Mar 2026 00:26:49 +0000 Manifest next update: Fri 20 Mar 2026 04:51:49 +0000 Files and hashes: 1: 3130332e31352e33372e302f32342d3234203d3e203538343939.roa (hash: zeTi7BqNqgcikPyjG0SatRxWNjs6zr4KOqjWgwcH3go=) 2: 323030313a6466303a6338303a3a2f34382d3438203d3e203538343939.roa (hash: +tOA/QTi1erDkh8xjg35ATQ0nh241kswkzy+opupzr4=) 3: 3130332e31352e33362e302f32342d3234203d3e203538343939.roa (hash: Ib6AjQYHIsLwQhK435dkfw2SbJ0i4m47zXiCaGZl8vU=) 4: 3130332e31352e33362e302f32332d3233203d3e203538343939.roa (hash: tsFXcVi2vQ7ookPqbCA3Q2goRlJZ3P3EWx7MteHU17w=) 5: F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.crl (hash: X+xJlW8k5fvA4kW8vuHmXJAIzt7c93gil9hIKuQnJuo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.crl rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Mar 2026 04:51:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:e1:62:e5:b6:d7:54:63:1d:b3:17:48:95:96:95:97:99:b2:1f:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5 Validity Not Before: Mar 17 00:26:49 2026 GMT Not After : Mar 20 04:51:49 2026 GMT Subject: CN=55B1FD45D4596D1D363AC5690F8A799503051A74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e1:5b:be:c7:08:26:17:1e:cc:10:a9:13:93: 59:97:37:9f:57:1e:ab:26:ec:81:7a:27:ab:4c:9b: 9c:a5:8e:ef:3d:50:9c:4a:e9:53:d6:52:06:df:a0: 1f:ab:7a:f0:b4:89:dc:06:3c:e5:8b:fc:2c:44:f1: 29:c7:dc:2c:ca:70:27:ef:44:cc:48:aa:64:43:2e: ac:cd:59:d1:bf:09:43:fd:52:71:f8:5f:fe:c2:10: f0:1b:53:02:a7:fa:59:92:a1:bd:fd:e1:67:ac:12: ba:43:3d:53:5b:73:6b:9d:23:a6:42:36:ea:3b:23: 7b:61:44:17:bb:89:85:9e:8d:6d:ae:1e:7b:e3:a1: 84:cb:4e:9e:c5:47:50:90:0f:8d:be:0e:ac:7c:33: f6:2f:67:cb:1d:70:e3:e5:5e:c8:d1:5d:c1:75:02: 8d:1a:01:83:09:96:85:60:7a:f5:22:20:c3:71:81: 15:a8:61:bf:9d:7f:0f:db:eb:d7:ea:c4:05:b2:7d: 03:e2:46:e0:c2:3e:1a:ab:c8:ad:89:d9:2e:7d:af: ae:25:eb:74:21:b7:40:b7:0a:28:46:17:e1:f4:8e: 3d:eb:75:94:a6:1e:51:ba:3f:32:d2:be:10:5d:9b: 02:1e:f6:a1:cf:e7:3d:72:f8:e8:42:3c:2f:7b:d3: 95:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:B1:FD:45:D4:59:6D:1D:36:3A:C5:69:0F:8A:79:95:03:05:1A:74 X509v3 Authority Key Identifier: keyid:F9:F2:1F:18:D0:C5:65:6D:8F:24:B3:FF:EE:0B:17:A1:70:FA:D4:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:d8:20:56:fa:ad:fd:fe:cc:96:a3:30:4f:fd:12:45:3a:52: 3c:a5:dc:be:06:e8:96:1f:fe:5c:22:fd:c2:ea:9e:5e:ec:fe: f3:09:33:a3:cf:ef:4b:e3:49:d2:e4:46:f2:88:57:bb:07:d8: b0:70:60:7b:f1:03:52:d6:10:15:94:56:b9:8c:f2:bd:70:da: ff:b6:b7:6b:bf:41:27:d3:89:53:b0:82:90:6c:40:d2:e8:45: b7:4e:13:01:71:da:64:6e:3c:5e:47:6c:c5:47:30:2f:90:f6: 21:fe:ab:0f:48:42:08:41:35:94:27:3d:ab:b7:ff:54:49:43: 98:1e:dc:61:5e:67:ac:36:be:77:c8:c4:84:58:63:e5:e8:23: 9b:aa:f9:8a:0b:75:3f:1a:18:7f:16:e3:4a:6d:05:72:f7:2d: 54:76:b0:25:92:e2:50:1c:7f:e3:62:3b:ab:e3:d6:6f:1f:d6: 26:e5:22:1e:00:a5:ee:b4:1f:2f:66:79:0a:13:99:d2:c4:e7: 53:70:21:b7:70:29:12:10:28:c6:3b:ff:cb:14:f7:7b:18:3b: d1:a5:c2:b1:18:7a:a8:a7:d8:dd:2b:99:36:dd:31:09:1b:6b: 50:b0:57:2b:04:a3:2f:c2:0d:46:c0:b4:a0:ff:f4:79:4e:4b: 97:4a:fc:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC+Fi5bbXVGMdsxdIlZaVl5myH4kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlGMjFGMThEMEM1NjU2RDhGMjRCM0ZGRUUwQjE3QTE3 MEZBRDRBNTAeFw0yNjAzMTcwMDI2NDlaFw0yNjAzMjAwNDUxNDlaMDMxMTAvBgNV BAMTKDU1QjFGRDQ1RDQ1OTZEMUQzNjNBQzU2OTBGOEE3OTk1MDMwNTFBNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC44Vu+xwgmFx7MEKkTk1mXN59X Hqsm7IF6J6tMm5ylju89UJxK6VPWUgbfoB+revC0idwGPOWL/CxE8SnH3CzKcCfv RMxIqmRDLqzNWdG/CUP9UnH4X/7CEPAbUwKn+lmSob394WesErpDPVNbc2udI6ZC Nuo7I3thRBe7iYWejW2uHnvjoYTLTp7FR1CQD42+Dqx8M/YvZ8sdcOPlXsjRXcF1 Ao0aAYMJloVgevUiIMNxgRWoYb+dfw/b69fqxAWyfQPiRuDCPhqryK2J2S59r64l 63Qht0C3CihGF+H0jj3rdZSmHlG6PzLSvhBdmwIe9qHP5z1y+OhCPC9705VnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVbH9RdRZbR02OsVpD4p5lQMFGnQwHwYDVR0j BBgwFoAU+fIfGNDFZW2PJLP/7gsXoXD61KUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YjFjOTU3OS01NmJhLTRhNzAtYmExMy0zYjA1YTZjY2IyMWUvMC9GOUYyMUYxOEQw QzU2NTZEOEYyNEIzRkZFRTBCMTdBMTcwRkFENEE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjlGMjFGMThEMEM1NjU2RDhGMjRCM0ZGRUUwQjE3QTE3MEZB RDRBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWIxYzk1NzktNTZiYS00YTcwLWJh MTMtM2IwNWE2Y2NiMjFlLzAvRjlGMjFGMThEMEM1NjU2RDhGMjRCM0ZGRUUwQjE3 QTE3MEZBRDRBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALbYIFb6rf3+zJajME/9EkU6Ujyl3L4G6JYf /lwi/cLqnl7s/vMJM6PP70vjSdLkRvKIV7sH2LBwYHvxA1LWEBWUVrmM8r1w2v+2 t2u/QSfTiVOwgpBsQNLoRbdOEwFx2mRuPF5HbMVHMC+Q9iH+qw9IQghBNZQnPau3 /1RJQ5ge3GFeZ6w2vnfIxIRYY+XoI5uq+YoLdT8aGH8W40ptBXL3LVR2sCWS4lAc f+NiO6vj1m8f1iblIh4Ape60Hy9meQoTmdLE51NwIbdwKRIQKMY7/8sU93sYO9Gl wrEYeqin2N0rmTbdMQkba1CwVysEoy/CDUbAtKD/9HlOS5dK/JQ= -----END CERTIFICATE-----Generated at Wed Mar 18 09:37:19 2026 by rpki-client