$ rpki-client -vvf repo-rpki.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/FF102371565831DDB9C06DF47DF79B1120C9861E.mft File: FF102371565831DDB9C06DF47DF79B1120C9861E.mft (raw, json) Hash identifier: vQh+sFDNeZCnEOQ0jrrCNxCVCK+fGir5OKN0DSfgTnw= Subject key identifier: 5F:50:F8:7D:4E:2D:D1:68:9A:4A:64:E5:C0:03:C0:4D:70:F9:50:49 Authority key identifier: FF:10:23:71:56:58:31:DD:B9:C0:6D:F4:7D:F7:9B:11:20:C9:86:1E Certificate issuer: /CN=FF102371565831DDB9C06DF47DF79B1120C9861E Certificate serial: 3BF66FC563A3CDB2EC5BC8501F36B43CAE0127A3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF102371565831DDB9C06DF47DF79B1120C9861E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/FF102371565831DDB9C06DF47DF79B1120C9861E.mft Manifest number: 010D Signing time: Thu 19 Mar 2026 21:03:37 +0000 Manifest this update: Thu 19 Mar 2026 20:58:37 +0000 Manifest next update: Mon 23 Mar 2026 05:37:37 +0000 Files and hashes: 1: 3130332e332e3233332e302f32342d3234203d3e203538343837.roa (hash: J+VrJkjfilmZKoAgsIWnKv1mOwdSs14Mc87IKiPWNdQ=) 2: FF102371565831DDB9C06DF47DF79B1120C9861E.crl (hash: eSkc+rNfuqnA8iQPBl5XhUVzIuQ20mEl5cOk5kwbQs4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/FF102371565831DDB9C06DF47DF79B1120C9861E.crl rsync://repo-rpki.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/FF102371565831DDB9C06DF47DF79B1120C9861E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF102371565831DDB9C06DF47DF79B1120C9861E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Mar 2026 05:37:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:f6:6f:c5:63:a3:cd:b2:ec:5b:c8:50:1f:36:b4:3c:ae:01:27:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF102371565831DDB9C06DF47DF79B1120C9861E Validity Not Before: Mar 19 20:58:37 2026 GMT Not After : Mar 23 05:37:37 2026 GMT Subject: CN=5F50F87D4E2DD1689A4A64E5C003C04D70F95049 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:96:84:e3:52:11:06:1d:f2:f1:f0:f7:9d:92: e9:b5:63:45:34:14:04:26:89:f3:59:81:c8:3c:5a: 22:a9:ce:50:17:1c:04:eb:e3:14:06:13:cb:0b:60: c2:26:b4:4c:90:59:08:9b:9c:ac:7f:a2:5c:ba:ee: 78:e8:97:21:3d:80:58:72:58:36:04:e1:d2:9e:fc: 2a:a3:04:8b:cb:4e:b1:0c:49:94:c5:7f:77:7e:25: 83:60:cd:08:46:93:f1:0d:9c:ac:94:4b:5f:10:20: e7:87:91:a6:51:63:cb:95:07:c7:94:65:b3:fc:33: 42:63:34:e1:fa:db:e6:f1:00:e8:58:e6:61:0f:51: 41:be:03:28:9f:3e:8c:24:1b:6a:49:c2:22:df:1c: 56:c9:e0:34:63:39:f0:f0:88:8d:cc:95:99:62:ca: 48:8d:b4:7f:20:7c:b3:0c:39:a7:08:7f:46:e4:14: 58:4d:a8:f9:48:de:71:40:2a:44:89:3f:d8:22:62: 01:5f:4b:0e:4f:82:49:56:a1:fd:1a:c3:12:c7:d0: 4e:ce:de:8b:7a:ec:ca:41:38:62:df:4c:c4:88:d6: 87:da:96:9f:8d:d6:69:d7:ea:34:e2:9c:a7:3e:4f: 8d:b9:65:a4:89:53:ce:49:66:45:8f:e8:8d:7f:a0: d7:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:50:F8:7D:4E:2D:D1:68:9A:4A:64:E5:C0:03:C0:4D:70:F9:50:49 X509v3 Authority Key Identifier: keyid:FF:10:23:71:56:58:31:DD:B9:C0:6D:F4:7D:F7:9B:11:20:C9:86:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/FF102371565831DDB9C06DF47DF79B1120C9861E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF102371565831DDB9C06DF47DF79B1120C9861E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/FF102371565831DDB9C06DF47DF79B1120C9861E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:b1:6d:00:b8:e8:99:06:76:c7:3f:78:06:dd:80:e5:1a:66: 93:e1:b5:62:c1:7f:95:83:da:fe:cb:06:2e:8f:6b:cd:8e:a9: b3:2e:73:ba:46:80:5c:0e:28:4d:a8:7f:64:84:ea:25:d1:ec: 0c:ff:c9:94:e8:dc:e7:a0:8f:3e:b5:ca:c4:30:49:cb:31:0b: ec:d8:fa:07:88:08:dd:30:f7:3e:ae:f6:7f:b5:27:bc:05:ed: 76:b0:56:fb:03:bc:9a:48:51:c4:ca:af:ae:35:2b:cf:97:9e: 25:2c:1b:99:23:a6:0a:74:21:c4:2e:ed:0e:44:4c:ef:31:4c: da:7d:b4:ed:5e:97:d9:7e:81:d4:5b:4a:bb:35:4a:aa:9d:88: eb:d5:a4:bb:48:39:6a:3f:b3:bd:c6:6c:f4:2e:ee:39:d2:87: e6:f4:6a:2f:80:cf:c2:55:fa:68:3f:2e:a3:e0:c4:23:90:c4: b9:9b:a8:eb:cd:d8:5b:20:ca:b4:16:bc:65:8a:bb:da:b3:49: d5:6c:24:73:2d:db:80:4c:ab:a5:85:5a:d3:15:6b:c8:89:a4: e5:d1:e5:ca:56:5c:7a:47:c4:cf:d7:47:52:39:f5:e7:dd:67: dd:12:95:dd:04:53:61:14:c6:6f:1f:b0:c5:45:36:27:dd:c3: d0:a9:4b:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO/ZvxWOjzbLsW8hQHza0PK4BJ6MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkYxMDIzNzE1NjU4MzFEREI5QzA2REY0N0RGNzlCMTEy MEM5ODYxRTAeFw0yNjAzMTkyMDU4MzdaFw0yNjAzMjMwNTM3MzdaMDMxMTAvBgNV BAMTKDVGNTBGODdENEUyREQxNjg5QTRBNjRFNUMwMDNDMDRENzBGOTUwNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVloTjUhEGHfLx8Pedkum1Y0U0 FAQmifNZgcg8WiKpzlAXHATr4xQGE8sLYMImtEyQWQibnKx/oly67njolyE9gFhy WDYE4dKe/CqjBIvLTrEMSZTFf3d+JYNgzQhGk/ENnKyUS18QIOeHkaZRY8uVB8eU ZbP8M0JjNOH62+bxAOhY5mEPUUG+AyifPowkG2pJwiLfHFbJ4DRjOfDwiI3MlZli ykiNtH8gfLMMOacIf0bkFFhNqPlI3nFAKkSJP9giYgFfSw5PgklWof0awxLH0E7O 3ot67MpBOGLfTMSI1ofalp+N1mnX6jTinKc+T425ZaSJU85JZkWP6I1/oNcZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUX1D4fU4t0WiaSmTlwAPATXD5UEkwHwYDVR0j BBgwFoAU/xAjcVZYMd25wG30ffebESDJhh4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NDNmMjllYS04NzRhLTRkMWEtYWJjYy03NTI5M2NiNTFhNmQvMC9GRjEwMjM3MTU2 NTgzMUREQjlDMDZERjQ3REY3OUIxMTIwQzk4NjFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkYxMDIzNzE1NjU4MzFEREI5QzA2REY0N0RGNzlCMTEyMEM5 ODYxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzQzZjI5ZWEtODc0YS00ZDFhLWFi Y2MtNzUyOTNjYjUxYTZkLzAvRkYxMDIzNzE1NjU4MzFEREI5QzA2REY0N0RGNzlC MTEyMEM5ODYxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIaxbQC46JkGdsc/eAbdgOUaZpPhtWLBf5WD 2v7LBi6Pa82OqbMuc7pGgFwOKE2of2SE6iXR7Az/yZTo3Oegjz61ysQwScsxC+zY +geICN0w9z6u9n+1J7wF7XawVvsDvJpIUcTKr641K8+XniUsG5kjpgp0IcQu7Q5E TO8xTNp9tO1el9l+gdRbSrs1SqqdiOvVpLtIOWo/s73GbPQu7jnSh+b0ai+Az8JV +mg/LqPgxCOQxLmbqOvN2FsgyrQWvGWKu9qzSdVsJHMt24BMq6WFWtMVa8iJpOXR 5cpWXHpHxM/XR1I59efdZ90Sld0EU2EUxm8fsMVFNifdw9CpS1M= -----END CERTIFICATE-----Generated at Thu Mar 19 23:30:52 2026 by rpki-client