$ rpki-client -vvf repo-rpki.idnic.net/repo/fe330633-a7d1-4d0a-a1cc-b6c3eedfbc17/0/F1F25C19AB419E370912452242B8B55038581157.mft File: F1F25C19AB419E370912452242B8B55038581157.mft (raw, json) Hash identifier: lAfkuEPBHol6p4pyz5ZkLBOqt8q+9r3y+T9aZTSbkcI= Subject key identifier: E5:DF:60:25:13:01:A0:9A:B5:6D:72:19:E5:CD:A6:6C:45:44:0F:CF Authority key identifier: F1:F2:5C:19:AB:41:9E:37:09:12:45:22:42:B8:B5:50:38:58:11:57 Certificate issuer: /CN=F1F25C19AB419E370912452242B8B55038581157 Certificate serial: 6AFB40280BC8A1195021D397AD9C95867B6C80F8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1F25C19AB419E370912452242B8B55038581157.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fe330633-a7d1-4d0a-a1cc-b6c3eedfbc17/0/F1F25C19AB419E370912452242B8B55038581157.mft Manifest number: 01D8 Signing time: Wed 18 Mar 2026 22:31:27 +0000 Manifest this update: Wed 18 Mar 2026 22:26:27 +0000 Manifest next update: Sun 22 Mar 2026 08:49:27 +0000 Files and hashes: 1: 3130332e35342e3136382e302f32332d3233203d3e20313530343833.roa (hash: dCtNGhc0fgrwOVXQbaIlIm3GSMbj9L0gf3wDjj9oeYw=) 2: F1F25C19AB419E370912452242B8B55038581157.crl (hash: gSt4M+f5MQFF8+ITBXFkfrG05GRYJujzTXctGOPrnak=) 3: 3130332e35342e3136382e302f32342d3234203d3e20313530343833.roa (hash: eOGPR+XmzR6iwd4fR/X2P1DRl22V0Tcou40XPVXR0s4=) 4: 3130332e35342e3136392e302f32342d3234203d3e20313530343833.roa (hash: 6LoTr86sobFI0HR6GON0JaZgiMEj0n86cSBlk4WjMNE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fe330633-a7d1-4d0a-a1cc-b6c3eedfbc17/0/F1F25C19AB419E370912452242B8B55038581157.crl rsync://repo-rpki.idnic.net/repo/fe330633-a7d1-4d0a-a1cc-b6c3eedfbc17/0/F1F25C19AB419E370912452242B8B55038581157.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1F25C19AB419E370912452242B8B55038581157.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Mar 2026 08:49:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:fb:40:28:0b:c8:a1:19:50:21:d3:97:ad:9c:95:86:7b:6c:80:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F1F25C19AB419E370912452242B8B55038581157 Validity Not Before: Mar 18 22:26:27 2026 GMT Not After : Mar 22 08:49:27 2026 GMT Subject: CN=E5DF60251301A09AB56D7219E5CDA66C45440FCF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:6a:be:cf:70:26:e2:25:e9:cd:7e:db:db:ec: 63:51:18:d7:5a:f6:d8:69:73:90:ab:de:1b:74:7a: 1e:60:20:0d:56:02:86:23:91:a1:62:7e:13:8e:5e: 82:4c:1b:5b:22:bb:21:97:c6:d8:9b:1a:41:f6:02: cd:d2:be:3b:58:da:88:6b:0c:aa:7c:1a:0d:d2:82: ed:bb:b0:a5:24:90:4f:59:e0:d2:4e:fd:6b:1d:84: c2:df:82:ff:e8:45:e0:f0:fe:89:b7:83:7a:99:1a: cd:ef:5f:84:cb:95:d1:b3:ad:cf:e1:d0:f3:f3:ec: 81:72:07:43:60:ca:69:ab:c7:7b:68:48:c2:ee:cd: ca:61:ba:5d:b2:d0:be:5e:6f:80:8c:96:98:55:9a: 33:fd:12:7a:ac:b3:c9:eb:86:57:23:71:e5:86:cb: d1:8f:84:cd:ff:c4:5d:7c:45:7e:c6:68:e3:6c:0e: 21:28:71:11:8a:74:de:11:90:1f:29:72:15:23:53: b7:4b:96:4f:49:92:ab:96:72:04:d1:ab:08:f0:bc: b9:3c:a8:56:0a:ec:eb:fb:a1:da:ee:1c:dc:1d:eb: 94:3f:6d:bb:c9:d4:43:f9:f4:86:a9:96:16:15:46: 85:06:54:eb:de:84:71:fc:ff:e9:22:48:f8:09:c9: 45:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:DF:60:25:13:01:A0:9A:B5:6D:72:19:E5:CD:A6:6C:45:44:0F:CF X509v3 Authority Key Identifier: keyid:F1:F2:5C:19:AB:41:9E:37:09:12:45:22:42:B8:B5:50:38:58:11:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fe330633-a7d1-4d0a-a1cc-b6c3eedfbc17/0/F1F25C19AB419E370912452242B8B55038581157.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1F25C19AB419E370912452242B8B55038581157.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fe330633-a7d1-4d0a-a1cc-b6c3eedfbc17/0/F1F25C19AB419E370912452242B8B55038581157.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e4:6e:5c:6d:47:38:eb:02:f8:06:ff:a2:f4:fa:1e:91:92:e3: de:25:06:76:7c:37:55:48:34:99:72:a2:18:04:80:dc:ab:7d: b9:9d:a8:54:c0:1b:b1:91:e3:5f:2c:c1:28:4b:80:d4:bf:8e: 6f:44:4d:8a:62:80:e2:ed:11:3b:ac:a7:9f:ee:10:7f:4a:c5: 06:bc:a2:7d:3c:04:66:a5:17:21:dc:33:8d:b6:dd:1d:8e:57: 89:72:a1:7d:15:dc:30:3f:01:24:ea:ad:41:de:6f:25:d4:49: cd:c4:b2:47:37:4f:c1:dd:ac:40:f0:5b:60:ad:5e:d4:ac:79: 25:2b:3c:f2:a8:d4:1e:8b:84:31:da:f3:f8:4d:22:8c:fb:0d: 3d:1f:bd:db:49:06:16:9f:41:26:b0:2f:d0:b9:de:b0:a5:c7: a8:b5:9a:ca:9f:cc:8d:57:ef:f7:38:fc:92:47:7d:54:1a:ad: 95:74:f0:cd:8a:7b:21:38:8f:2d:97:9e:44:95:47:28:5b:71: 0a:b8:16:a6:6d:5a:db:24:e5:95:0b:5f:a6:82:84:2b:97:9a: c0:85:5a:a8:92:94:3b:69:9c:53:75:96:c9:40:7b:f8:de:07: 9c:77:b1:3d:5e:02:59:f8:36:cd:e2:ff:b3:5d:13:8c:a3:43: c8:ed:b9:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUavtAKAvIoRlQIdOXrZyVhntsgPgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjFGMjVDMTlBQjQxOUUzNzA5MTI0NTIyNDJCOEI1NTAz ODU4MTE1NzAeFw0yNjAzMTgyMjI2MjdaFw0yNjAzMjIwODQ5MjdaMDMxMTAvBgNV BAMTKEU1REY2MDI1MTMwMUEwOUFCNTZENzIxOUU1Q0RBNjZDNDU0NDBGQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEar7PcCbiJenNftvb7GNRGNda 9thpc5Cr3ht0eh5gIA1WAoYjkaFifhOOXoJMG1siuyGXxtibGkH2As3SvjtY2ohr DKp8Gg3Sgu27sKUkkE9Z4NJO/WsdhMLfgv/oReDw/om3g3qZGs3vX4TLldGzrc/h 0PPz7IFyB0Ngymmrx3toSMLuzcphul2y0L5eb4CMlphVmjP9Enqss8nrhlcjceWG y9GPhM3/xF18RX7GaONsDiEocRGKdN4RkB8pchUjU7dLlk9JkquWcgTRqwjwvLk8 qFYK7Ov7odruHNwd65Q/bbvJ1EP59IaplhYVRoUGVOvehHH8/+kiSPgJyUW9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5d9gJRMBoJq1bXIZ5c2mbEVED88wHwYDVR0j BBgwFoAU8fJcGatBnjcJEkUiQri1UDhYEVcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZTMzMDYzMy1hN2QxLTRkMGEtYTFjYy1iNmMzZWVkZmJjMTcvMC9GMUYyNUMxOUFC NDE5RTM3MDkxMjQ1MjI0MkI4QjU1MDM4NTgxMTU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjFGMjVDMTlBQjQxOUUzNzA5MTI0NTIyNDJCOEI1NTAzODU4 MTE1Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmUzMzA2MzMtYTdkMS00ZDBhLWEx Y2MtYjZjM2VlZGZiYzE3LzAvRjFGMjVDMTlBQjQxOUUzNzA5MTI0NTIyNDJCOEI1 NTAzODU4MTE1Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAORuXG1HOOsC+Ab/ovT6HpGS494lBnZ8N1VI NJlyohgEgNyrfbmdqFTAG7GR418swShLgNS/jm9ETYpigOLtETusp5/uEH9KxQa8 on08BGalFyHcM4223R2OV4lyoX0V3DA/ASTqrUHebyXUSc3Eskc3T8HdrEDwW2Ct XtSseSUrPPKo1B6LhDHa8/hNIoz7DT0fvdtJBhafQSawL9C53rClx6i1msqfzI1X 7/c4/JJHfVQarZV08M2KeyE4jy2XnkSVRyhbcQq4FqZtWtsk5ZULX6aChCuXmsCF WqiSlDtpnFN1lslAe/jeB5x3sT1eAln4Ns3i/7NdE4yjQ8jtuWo= -----END CERTIFICATE-----Generated at Thu Mar 19 09:40:25 2026 by rpki-client