$ rpki-client -vvf repo-rpki.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/F8F2A2C885D477DE76A5B2E75D699D5C06240751.mft File: F8F2A2C885D477DE76A5B2E75D699D5C06240751.mft (raw, json) Hash identifier: tw2DLEQs032U2zOgg2l1L3qwOQ3Bs9NXij3nkpipsHE= Subject key identifier: A9:C8:24:88:0E:CF:30:8A:A1:64:CD:ED:EE:C8:4D:36:89:7B:13:30 Authority key identifier: F8:F2:A2:C8:85:D4:77:DE:76:A5:B2:E7:5D:69:9D:5C:06:24:07:51 Certificate issuer: /CN=F8F2A2C885D477DE76A5B2E75D699D5C06240751 Certificate serial: 37B82187ADD0C8F0F24A07C053ABE1442152B0F9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8F2A2C885D477DE76A5B2E75D699D5C06240751.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/F8F2A2C885D477DE76A5B2E75D699D5C06240751.mft Manifest number: 04F2 Signing time: Wed 18 Mar 2026 11:02:07 +0000 Manifest this update: Wed 18 Mar 2026 10:57:07 +0000 Manifest next update: Sat 21 Mar 2026 14:42:07 +0000 Files and hashes: 1: 3130332e3136302e39342e302f32342d3234203d3e20313431353739.roa (hash: MbvKBjhGVKXrhTAYqLQTkHHlmqfGdIcd1OSrPlpqfSU=) 2: 3130332e3136302e39342e302f32332d3233203d3e20313431353739.roa (hash: 0gt4Ot6+F7fSlrKRykoZVwa5I+j2zIdyxVjYLmEYd1w=) 3: F8F2A2C885D477DE76A5B2E75D699D5C06240751.crl (hash: RjNGl3rK3PfkyxDrJNfTCiBn5GO/7XPGLG+Q1Y6Gcxw=) 4: 3130332e3136302e39352e302f32342d3234203d3e20313431353739.roa (hash: APKnqzs0AhNltyzReDLYt5pEaL3GFsO7SJudc2pHP5w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/F8F2A2C885D477DE76A5B2E75D699D5C06240751.crl rsync://repo-rpki.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/F8F2A2C885D477DE76A5B2E75D699D5C06240751.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8F2A2C885D477DE76A5B2E75D699D5C06240751.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Mar 2026 14:42:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:b8:21:87:ad:d0:c8:f0:f2:4a:07:c0:53:ab:e1:44:21:52:b0:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8F2A2C885D477DE76A5B2E75D699D5C06240751 Validity Not Before: Mar 18 10:57:07 2026 GMT Not After : Mar 21 14:42:07 2026 GMT Subject: CN=A9C824880ECF308AA164CDEDEEC84D36897B1330 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:83:c1:10:bc:e4:b0:18:00:dd:bd:47:5f:3d: c5:24:3d:70:6b:2f:cf:dc:0b:50:dd:b1:ca:0b:f0: 15:9a:d5:77:27:23:d7:05:a6:2a:5a:f2:5d:1c:2e: e7:5b:c0:af:c7:e9:ea:b9:c7:99:34:17:ef:28:98: 74:0b:c4:3d:d9:a0:db:08:ca:3d:52:26:fb:ee:b2: 30:0b:39:2b:79:9e:c7:e1:16:33:df:b2:25:cb:bc: 93:fd:6b:13:d9:c3:e5:a5:7b:7b:4e:6f:d0:63:5a: d4:2d:ff:83:20:3f:eb:1e:e5:c6:52:c8:a3:45:43: 88:3a:ed:14:fb:13:7d:9e:5a:e1:ef:a0:c0:04:ad: f3:d4:b6:fa:ea:fe:6e:f6:aa:9d:38:95:cf:b8:8c: 2d:68:65:35:0f:34:5e:5f:bb:1b:74:a6:f0:37:fc: 7a:8f:9b:62:b2:a9:17:55:1d:c9:57:ca:a6:41:36: b3:0b:1b:7d:27:4a:23:e3:f5:ce:14:cf:3d:26:bf: 99:51:0a:7b:24:5c:b1:43:1f:d4:77:09:3e:0b:94: 94:d2:44:8f:27:df:cd:2f:b0:4c:8b:b9:0d:83:b9: 0b:84:41:17:76:49:34:e2:44:c2:86:f8:f6:d0:60: 8e:c3:29:21:f8:2f:2e:1b:12:96:93:34:2d:ee:9a: 24:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:C8:24:88:0E:CF:30:8A:A1:64:CD:ED:EE:C8:4D:36:89:7B:13:30 X509v3 Authority Key Identifier: keyid:F8:F2:A2:C8:85:D4:77:DE:76:A5:B2:E7:5D:69:9D:5C:06:24:07:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/F8F2A2C885D477DE76A5B2E75D699D5C06240751.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8F2A2C885D477DE76A5B2E75D699D5C06240751.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/F8F2A2C885D477DE76A5B2E75D699D5C06240751.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:54:38:fb:a5:f6:91:76:a0:f0:44:eb:a7:36:29:21:1a:bc: b9:9e:a1:5e:d8:d4:c4:4d:0f:e7:a5:e1:24:05:85:8a:67:bc: d7:81:e2:1f:e7:ba:05:04:75:d9:85:53:99:19:09:68:0a:2d: f6:92:7f:51:b2:c3:7c:a8:3d:dd:81:02:96:e2:8f:8e:39:34: b5:26:a0:ee:7e:1a:eb:3d:b7:5f:43:9d:22:71:86:51:98:1f: 36:d0:e0:7d:9e:c9:40:0c:d7:11:9b:97:40:cb:8c:a5:00:4d: 84:16:4b:ae:15:62:5b:1c:33:f7:48:78:e2:20:b6:54:62:30: 36:22:f9:7d:d4:2b:c9:71:e8:87:6b:20:ff:f1:b3:4b:34:cc: 3e:b0:df:fc:7b:5d:a2:ef:7c:af:99:6d:0c:a4:f0:46:14:78: b9:29:88:00:36:29:ba:24:68:7f:64:48:da:a9:41:48:4b:12: bc:85:39:cb:a3:3e:75:3e:aa:e4:55:ee:7f:ba:0e:40:67:c7: a8:4f:e0:6b:9b:9e:0f:a1:5b:28:19:fe:65:ea:2b:5f:ed:01: 13:56:e4:3e:c0:b4:e1:53:d4:f3:cc:16:92:89:2c:50:7f:78: 1a:a8:24:53:10:5d:ce:5b:8b:b6:4d:ea:96:d8:97:37:2a:0f: 06:a4:be:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN7ghh63QyPDySgfAU6vhRCFSsPkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhGMkEyQzg4NUQ0NzdERTc2QTVCMkU3NUQ2OTlENUMw NjI0MDc1MTAeFw0yNjAzMTgxMDU3MDdaFw0yNjAzMjExNDQyMDdaMDMxMTAvBgNV BAMTKEE5QzgyNDg4MEVDRjMwOEFBMTY0Q0RFREVFQzg0RDM2ODk3QjEzMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8g8EQvOSwGADdvUdfPcUkPXBr L8/cC1DdscoL8BWa1XcnI9cFpipa8l0cLudbwK/H6eq5x5k0F+8omHQLxD3ZoNsI yj1SJvvusjALOSt5nsfhFjPfsiXLvJP9axPZw+Wle3tOb9BjWtQt/4MgP+se5cZS yKNFQ4g67RT7E32eWuHvoMAErfPUtvrq/m72qp04lc+4jC1oZTUPNF5fuxt0pvA3 /HqPm2KyqRdVHclXyqZBNrMLG30nSiPj9c4Uzz0mv5lRCnskXLFDH9R3CT4LlJTS RI8n380vsEyLuQ2DuQuEQRd2STTiRMKG+PbQYI7DKSH4Ly4bEpaTNC3umiRDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqcgkiA7PMIqhZM3t7shNNol7EzAwHwYDVR0j BBgwFoAU+PKiyIXUd952pbLnXWmdXAYkB1EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NTllNTY1OC1hYjEwLTQyOTctOTJmNC1mNmEyNjYzZTU0YzAvMC9GOEYyQTJDODg1 RDQ3N0RFNzZBNUIyRTc1RDY5OUQ1QzA2MjQwNzUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjhGMkEyQzg4NUQ0NzdERTc2QTVCMkU3NUQ2OTlENUMwNjI0 MDc1MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTU5ZTU2NTgtYWIxMC00Mjk3LTky ZjQtZjZhMjY2M2U1NGMwLzAvRjhGMkEyQzg4NUQ0NzdERTc2QTVCMkU3NUQ2OTlE NUMwNjI0MDc1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB9UOPul9pF2oPBE66c2KSEavLmeoV7Y1MRN D+el4SQFhYpnvNeB4h/nugUEddmFU5kZCWgKLfaSf1Gyw3yoPd2BApbij445NLUm oO5+Gus9t19DnSJxhlGYHzbQ4H2eyUAM1xGbl0DLjKUATYQWS64VYlscM/dIeOIg tlRiMDYi+X3UK8lx6IdrIP/xs0s0zD6w3/x7XaLvfK+ZbQyk8EYUeLkpiAA2Kbok aH9kSNqpQUhLEryFOcujPnU+quRV7n+6DkBnx6hP4Gubng+hWygZ/mXqK1/tARNW 5D7AtOFT1PPMFpKJLFB/eBqoJFMQXc5bi7ZN6pbYlzcqDwakvhU= -----END CERTIFICATE-----Generated at Thu Mar 19 09:41:53 2026 by rpki-client