$ rpki-client -vvf repo-rpki.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.mft File: F3C45071697AB68FDEAEBF5820E70DDD1B494B58.mft (raw, json) Hash identifier: SrrSgZOoRGt8dxD6uiFMD1sXHrf/KUihDk/dJSRjplk= Subject key identifier: B2:60:E4:B8:D2:59:C2:2E:07:90:A9:B7:EE:51:01:2D:CC:30:4D:BA Authority key identifier: F3:C4:50:71:69:7A:B6:8F:DE:AE:BF:58:20:E7:0D:DD:1B:49:4B:58 Certificate issuer: /CN=F3C45071697AB68FDEAEBF5820E70DDD1B494B58 Certificate serial: 69C20DA84A3C87EE6F1EA581F83E8705F1ECCCBA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.mft Manifest number: F8 Signing time: Thu 05 Mar 2026 21:01:30 +0000 Manifest this update: Thu 05 Mar 2026 20:56:30 +0000 Manifest next update: Mon 09 Mar 2026 05:36:30 +0000 Files and hashes: 1: F3C45071697AB68FDEAEBF5820E70DDD1B494B58.crl (hash: E3iok9ICztrpPCfLfEuiXQy35pQfBOJQaTkjsGmb1y0=) 2: 3136302e31392e3131302e302f32332d3234203d3e20313532373733.roa (hash: H3T3VBAkYGZBVt4prOPaCEzHSlQDxm09XEH58hbRsm0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.crl rsync://repo-rpki.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 05:36:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:c2:0d:a8:4a:3c:87:ee:6f:1e:a5:81:f8:3e:87:05:f1:ec:cc:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3C45071697AB68FDEAEBF5820E70DDD1B494B58 Validity Not Before: Mar 5 20:56:30 2026 GMT Not After : Mar 9 05:36:30 2026 GMT Subject: CN=B260E4B8D259C22E0790A9B7EE51012DCC304DBA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:53:71:21:56:27:8d:dd:c8:e3:4f:c8:4b:d2: 43:be:1a:1a:db:ad:1c:2a:87:a9:50:15:42:7d:e7: 54:3e:1d:24:ab:93:09:c4:00:7b:52:ef:c4:12:0a: 02:ba:80:d0:b4:85:8f:6b:42:90:5f:36:7a:4a:94: 54:d1:9f:80:51:4a:01:33:a1:d0:4b:30:6c:4e:58: e7:d0:8d:28:eb:92:2c:e6:c4:7a:71:5d:1d:b2:5e: c1:65:08:f4:c5:d9:20:5f:bb:f4:4f:af:b0:3a:e0: 69:de:7a:2d:69:8b:fd:27:0a:60:0b:92:5d:5b:58: 8a:8f:38:1b:b2:9a:14:0d:3a:e0:06:20:4a:85:5c: f9:f6:16:27:53:90:45:8e:24:70:d4:eb:62:0d:e1: cd:0d:10:d3:70:c9:2a:d9:db:4d:80:7d:7d:1f:f3: b5:bb:ff:a2:9f:41:69:99:e5:17:cf:c5:5a:f6:04: 0d:45:5f:c7:d7:0b:5c:e6:af:49:d9:af:d2:02:4e: 22:29:53:b1:65:94:0a:b9:1b:44:a0:9e:fb:bf:5c: b3:57:03:b7:be:78:ce:f7:27:25:96:68:4a:a8:7f: c1:8c:7b:ae:29:87:fc:b7:e5:d4:1b:45:60:7c:20: 7c:10:4a:00:06:05:7e:d8:5d:ff:04:aa:68:42:91: f4:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:60:E4:B8:D2:59:C2:2E:07:90:A9:B7:EE:51:01:2D:CC:30:4D:BA X509v3 Authority Key Identifier: keyid:F3:C4:50:71:69:7A:B6:8F:DE:AE:BF:58:20:E7:0D:DD:1B:49:4B:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:c9:a0:bf:6e:6f:a5:ba:a8:00:fd:e0:96:37:61:af:c6:cf: bf:39:49:9f:ab:bd:2b:9e:8a:0a:54:8c:00:18:fd:e6:2e:fe: 1c:f4:b4:ff:60:1f:64:4d:88:55:8b:cb:a4:4d:a2:61:1b:4d: f5:b8:ad:7b:e9:e8:08:0f:c6:5a:64:18:49:31:7e:6e:88:b0: ea:c9:19:57:e0:16:79:17:58:64:b4:1b:41:60:95:17:c6:a5: 12:22:c2:ee:ae:ad:ba:fa:19:73:f4:24:4a:62:b9:1a:83:70: ed:17:52:50:2b:ed:58:9a:82:04:3c:31:bb:55:b5:a7:58:69: 5b:47:98:b0:11:d9:5b:80:aa:db:bb:c5:c6:13:e0:0f:f7:46: 2b:4a:83:d2:4c:b4:ab:0b:f2:0a:ab:7e:d7:f5:c3:e4:1d:e0: 2e:0e:f1:76:20:ac:7f:f8:b8:08:2a:b2:01:56:ca:ed:50:ad: 35:6e:9a:64:5a:49:1f:ee:a9:fa:12:2e:89:67:a1:c0:bb:42: df:c6:ff:5a:78:41:1e:af:0e:5b:ee:c7:f1:2c:de:23:43:88: 09:39:4b:ee:ee:a2:a6:66:60:1e:a5:5c:15:77:a8:0c:7c:ec: 0a:6e:1d:04:2c:5d:a9:66:41:21:4e:8f:4b:1e:ce:45:a8:0b: 6b:95:7f:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUacINqEo8h+5vHqWB+D6HBfHszLowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjNDNDUwNzE2OTdBQjY4RkRFQUVCRjU4MjBFNzBEREQx QjQ5NEI1ODAeFw0yNjAzMDUyMDU2MzBaFw0yNjAzMDkwNTM2MzBaMDMxMTAvBgNV BAMTKEIyNjBFNEI4RDI1OUMyMkUwNzkwQTlCN0VFNTEwMTJEQ0MzMDREQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaU3EhVieN3cjjT8hL0kO+Ghrb rRwqh6lQFUJ951Q+HSSrkwnEAHtS78QSCgK6gNC0hY9rQpBfNnpKlFTRn4BRSgEz odBLMGxOWOfQjSjrkizmxHpxXR2yXsFlCPTF2SBfu/RPr7A64Gneei1pi/0nCmAL kl1bWIqPOBuymhQNOuAGIEqFXPn2FidTkEWOJHDU62IN4c0NENNwySrZ202AfX0f 87W7/6KfQWmZ5RfPxVr2BA1FX8fXC1zmr0nZr9ICTiIpU7FllAq5G0Sgnvu/XLNX A7e+eM73JyWWaEqof8GMe64ph/y35dQbRWB8IHwQSgAGBX7YXf8EqmhCkfQjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsmDkuNJZwi4HkKm37lEBLcwwTbowHwYDVR0j BBgwFoAU88RQcWl6to/err9YIOcN3RtJS1gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZDliMzUxOS0zZGYzLTQ0MDYtODI4Zi0zZWJiOTFkOTI5NDQvMC9GM0M0NTA3MTY5 N0FCNjhGREVBRUJGNTgyMEU3MERERDFCNDk0QjU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjNDNDUwNzE2OTdBQjY4RkRFQUVCRjU4MjBFNzBEREQxQjQ5 NEI1OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGQ5YjM1MTktM2RmMy00NDA2LTgy OGYtM2ViYjkxZDkyOTQ0LzAvRjNDNDUwNzE2OTdBQjY4RkRFQUVCRjU4MjBFNzBE REQxQjQ5NEI1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGLJoL9ub6W6qAD94JY3Ya/Gz785SZ+rvSue igpUjAAY/eYu/hz0tP9gH2RNiFWLy6RNomEbTfW4rXvp6AgPxlpkGEkxfm6IsOrJ GVfgFnkXWGS0G0FglRfGpRIiwu6urbr6GXP0JEpiuRqDcO0XUlAr7ViaggQ8MbtV tadYaVtHmLAR2VuAqtu7xcYT4A/3RitKg9JMtKsL8gqrftf1w+Qd4C4O8XYgrH/4 uAgqsgFWyu1QrTVummRaSR/uqfoSLolnocC7Qt/G/1p4QR6vDlvux/Es3iNDiAk5 S+7uoqZmYB6lXBV3qAx87ApuHQQsXalmQSFOj0sezkWoC2uVf1o= -----END CERTIFICATE-----Generated at Sat Mar 7 17:50:41 2026 by rpki-client