$ rpki-client -vvf repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.mft File: F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.mft (raw, json) Hash identifier: 6mRYEvc1t+F31Xl+s63UGAq4n9Fs7D5f5bU/uWpg79s= Subject key identifier: F1:25:2D:42:3E:C3:7F:49:50:67:7B:24:19:4C:0E:BD:79:23:41:E4 Authority key identifier: F1:B7:1C:4F:9F:FB:EC:16:8C:86:45:DF:F7:9B:A9:06:BE:B2:3F:E8 Certificate issuer: /CN=F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8 Certificate serial: 170C6ABA1140CBAF31E914CE8629847639DFAF8C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.mft Manifest number: 0568 Signing time: Wed 18 Mar 2026 08:00:53 +0000 Manifest this update: Wed 18 Mar 2026 07:55:53 +0000 Manifest next update: Sat 21 Mar 2026 09:33:53 +0000 Files and hashes: 1: F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.crl (hash: MJYB8pdqbXpfznvHfJJrfdy4mn/IeIC9foxGVi+8U1I=) 2: 3131382e3135312e3232332e302f32342d3234203d3e203436303332.roa (hash: o45xNgmjdV7JqlkFiaWnM1npwVHX93KdX+4bHjpCk7Y=) 3: 3131382e3135312e3232302e302f32342d3234203d3e203436303332.roa (hash: JFOIJs50h687qC8bpxxJdwCT4qWgGzzf4owWeGTBCcg=) 4: 3131382e3135312e3232322e302f32342d3234203d3e203436303332.roa (hash: c7lD2035nwAuocF3S+Kkx7XFX+D5GmobD9VRSTS7t1w=) 5: 3131382e3135312e3232312e302f32342d3234203d3e203436303332.roa (hash: omzII3ixbtOuAnPW3RG0el7+Kj2LR6H6b/zYKpPBQBo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.crl rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Mar 2026 09:33:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:0c:6a:ba:11:40:cb:af:31:e9:14:ce:86:29:84:76:39:df:af:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8 Validity Not Before: Mar 18 07:55:53 2026 GMT Not After : Mar 21 09:33:53 2026 GMT Subject: CN=F1252D423EC37F4950677B24194C0EBD792341E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ea:b3:d2:07:7d:a1:1d:0c:3a:3a:c2:17:26: 7c:00:88:49:68:15:3d:e9:fa:d9:fe:9e:43:dc:8d: 0e:4a:9a:fa:5f:94:10:6f:5d:a7:4d:74:06:f2:c3: 04:ac:f9:ba:97:94:6b:73:67:18:13:4f:6f:c9:41: 66:9f:28:4c:c0:52:b2:2c:c8:db:37:5a:8c:07:62: 39:81:00:3f:8b:db:25:5e:b6:2e:54:a9:49:ca:b3: 2a:76:c1:c1:37:6b:52:d9:56:49:75:b9:ca:1b:e5: 00:66:fc:4c:f3:70:1b:28:4b:1d:51:db:99:af:91: ac:50:4c:33:f8:8d:16:9a:30:61:d7:27:cf:5a:0b: e7:8e:0b:e9:3d:88:ac:0f:e4:9f:6c:0a:08:f8:e8: 23:d1:1c:fb:a6:cb:2c:26:0d:12:c1:bd:1e:49:1d: 4a:5c:5d:98:42:3b:33:e0:36:5a:63:87:57:26:74: 29:07:2a:7a:6a:56:2c:56:3d:6b:a3:e8:09:07:45: ff:44:8a:7d:85:f2:1f:bb:36:0c:22:f3:5a:59:8b: 93:cd:b3:bd:1e:59:c2:9a:70:f1:53:de:87:21:fc: 2d:54:ef:e7:93:10:0f:f3:bd:2f:c2:65:d5:9b:d3: 9c:23:85:a5:72:91:8b:a0:e5:24:8a:c8:2e:fc:54: b3:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:25:2D:42:3E:C3:7F:49:50:67:7B:24:19:4C:0E:BD:79:23:41:E4 X509v3 Authority Key Identifier: keyid:F1:B7:1C:4F:9F:FB:EC:16:8C:86:45:DF:F7:9B:A9:06:BE:B2:3F:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:93:1b:4a:b0:b3:8b:63:c4:88:88:36:0d:c7:1e:2b:73:3f: ed:75:fe:53:bc:58:3d:8c:d8:aa:88:16:71:f2:44:88:75:71: 47:1b:a0:0f:1c:33:f6:87:db:77:c9:07:1f:4b:9b:eb:23:dd: 47:fb:97:68:38:8a:8e:e8:3a:17:f0:72:a9:a6:cc:c9:83:5f: a7:1e:05:d9:c3:c2:45:b6:30:45:e9:44:7d:98:bb:ea:2a:6b: 09:68:b8:2b:72:1f:ff:2f:fb:16:06:ed:5a:9a:8f:b5:83:d0: 83:4a:5b:66:73:1a:2b:e3:49:95:04:33:fe:19:0a:9a:fe:9b: b8:c9:f1:d3:13:20:e0:7f:e3:79:3a:72:58:fc:f0:76:c5:1b: 03:66:e8:0f:8d:40:de:bf:30:d2:18:98:a5:04:01:ac:10:64: c4:e4:ac:2f:91:91:e1:97:fb:16:4e:8b:53:fc:5c:ba:17:0a: 8e:a0:03:4d:aa:5c:d9:99:34:e9:b4:de:ed:4a:59:81:90:29: 4a:ae:c1:9d:12:42:48:ea:b1:8c:5f:28:5a:09:8f:47:2f:c7: f2:69:d0:0b:76:da:16:71:40:85:d5:dc:c7:23:8a:dc:3e:bc: 56:77:a2:83:28:7a:d4:34:65:9a:38:d1:54:da:12:35:2a:90: 09:0e:d5:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFwxquhFAy68x6RTOhimEdjnfr4wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjFCNzFDNEY5RkZCRUMxNjhDODY0NURGRjc5QkE5MDZC RUIyM0ZFODAeFw0yNjAzMTgwNzU1NTNaFw0yNjAzMjEwOTMzNTNaMDMxMTAvBgNV BAMTKEYxMjUyRDQyM0VDMzdGNDk1MDY3N0IyNDE5NEMwRUJENzkyMzQxRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC96rPSB32hHQw6OsIXJnwAiElo FT3p+tn+nkPcjQ5KmvpflBBvXadNdAbywwSs+bqXlGtzZxgTT2/JQWafKEzAUrIs yNs3WowHYjmBAD+L2yVeti5UqUnKsyp2wcE3a1LZVkl1ucob5QBm/EzzcBsoSx1R 25mvkaxQTDP4jRaaMGHXJ89aC+eOC+k9iKwP5J9sCgj46CPRHPumyywmDRLBvR5J HUpcXZhCOzPgNlpjh1cmdCkHKnpqVixWPWuj6AkHRf9Ein2F8h+7Ngwi81pZi5PN s70eWcKacPFT3och/C1U7+eTEA/zvS/CZdWb05wjhaVykYug5SSKyC78VLMlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8SUtQj7Df0lQZ3skGUwOvXkjQeQwHwYDVR0j BBgwFoAU8bccT5/77BaMhkXf95upBr6yP+gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NTdiOTBjYi04ZWJkLTRjN2ItOGMzMS0xMzNhOGI0ZWQ2OWMvMC9GMUI3MUM0RjlG RkJFQzE2OEM4NjQ1REZGNzlCQTkwNkJFQjIzRkU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjFCNzFDNEY5RkZCRUMxNjhDODY0NURGRjc5QkE5MDZCRUIy M0ZFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzU3YjkwY2ItOGViZC00YzdiLThj MzEtMTMzYThiNGVkNjljLzAvRjFCNzFDNEY5RkZCRUMxNjhDODY0NURGRjc5QkE5 MDZCRUIyM0ZFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHyTG0qws4tjxIiINg3HHitzP+11/lO8WD2M 2KqIFnHyRIh1cUcboA8cM/aH23fJBx9Lm+sj3Uf7l2g4io7oOhfwcqmmzMmDX6ce BdnDwkW2MEXpRH2Yu+oqawlouCtyH/8v+xYG7Vqaj7WD0INKW2ZzGivjSZUEM/4Z Cpr+m7jJ8dMTIOB/43k6clj88HbFGwNm6A+NQN6/MNIYmKUEAawQZMTkrC+RkeGX +xZOi1P8XLoXCo6gA02qXNmZNOm03u1KWYGQKUquwZ0SQkjqsYxfKFoJj0cvx/Jp 0At22hZxQIXV3Mcjitw+vFZ3ooMoetQ0ZZo40VTaEjUqkAkO1do= -----END CERTIFICATE-----Generated at Thu Mar 19 14:56:25 2026 by rpki-client