$ rpki-client -vvf repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.mft File: F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.mft (raw, json) Hash identifier: HZ+vj/45RjdxSpW15LNT4ivOhZntuxhSyyCxXmgHWyA= Subject key identifier: 9B:FC:C8:BC:42:A6:43:5F:F5:B4:EB:13:62:EE:1B:51:2E:32:82:BE Authority key identifier: F8:E1:2F:0A:43:3C:8B:73:3B:E3:1D:B5:E0:CD:1E:F2:02:FC:21:EA Certificate issuer: /CN=F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA Certificate serial: 21DF2DD3F96157F71D9F2747D9FE882CA0928880 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.mft Manifest number: 01F9 Signing time: Sun 22 Mar 2026 11:42:12 +0000 Manifest this update: Sun 22 Mar 2026 11:37:12 +0000 Manifest next update: Wed 25 Mar 2026 18:07:12 +0000 Files and hashes: 1: 3130332e3139352e36352e302f32342d3234203d3e20313532333638.roa (hash: nybBbZermRnfCAlPFTR2ETmDBv6TPrDdj8bK6gzLTv0=) 2: 3130332e3139352e36352e302f32342d3234203d3e2036393339.roa (hash: T9XYyvCurgMmepMYEsZNDRpjFjN9NnYsijhEUminICw=) 3: 3130332e3139352e36352e302f32342d3234203d3e20323131343037.roa (hash: GgMpV6awuEKacj2HVVRDN4z4Htq937tLhpXSx5OCQQw=) 4: 3130332e3139352e36352e302f32342d3234203d3e203530313034.roa (hash: uH7Yykg71jP1VkPGgxNuX7EouajeURB+bw3/u+w3tXE=) 5: F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.crl (hash: MON5PV+ttmLlAbNQFQA+JD9LR4FuFykEBHic1EQqReI=) 6: 3130332e3139352e36352e302f32342d3234203d3e203234333132.roa (hash: NYY0i2hycJDZMAWkhMI1MwXrSLzfIpid9oGLQQbdYaY=) 7: 3130332e3139352e36352e302f32342d3234203d3e20323130353337.roa (hash: kIEXLbdHyNVR/2+p4R7baZ0vAlG7dZTeEpJcDfIBOIk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.crl rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Mar 2026 09:49:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:df:2d:d3:f9:61:57:f7:1d:9f:27:47:d9:fe:88:2c:a0:92:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA Validity Not Before: Mar 22 11:37:12 2026 GMT Not After : Mar 25 18:07:12 2026 GMT Subject: CN=9BFCC8BC42A6435FF5B4EB1362EE1B512E3282BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:bc:67:a1:18:c0:7d:48:97:fe:ac:db:aa:b8: b0:2a:94:e3:4d:02:cb:82:34:7c:56:c1:c8:00:f4: 62:b8:77:43:8f:9a:77:b4:e5:0c:3d:37:0f:fd:80: 07:ec:4c:55:4d:83:09:c3:6a:be:c5:e5:43:5a:74: 32:e3:b2:4e:f1:ef:69:68:58:46:d5:01:9d:73:cb: 5c:e6:f6:de:f8:d1:97:8b:56:0c:ed:5e:11:be:46: 71:a3:86:21:02:1d:38:df:1a:f6:a3:40:31:60:bd: 88:8b:4e:96:75:a1:6d:f5:9f:72:4f:ed:5a:22:35: 30:cd:f5:aa:11:e9:22:05:6a:a2:f2:ea:9d:9f:68: 55:9e:66:94:ef:69:07:c5:56:dc:a5:cb:b4:1d:b8: f2:a0:77:5a:e7:4f:64:c3:a2:88:fd:7e:e7:e0:8a: 55:fa:c4:96:09:41:ec:e5:e1:cd:4a:b4:50:d3:e5: 86:af:b4:d0:73:1f:74:8c:28:94:d3:4a:5e:dd:7c: a7:20:42:f7:cc:50:06:9f:9b:87:ba:56:f7:b1:89: dd:3c:e7:2f:e6:63:04:59:83:0e:39:2c:e8:84:a6: aa:7d:1c:9a:86:f6:59:32:56:4d:e9:b0:8f:6b:f6: e8:87:b7:98:5a:36:8f:5c:07:19:92:6e:3e:cc:13: 74:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:FC:C8:BC:42:A6:43:5F:F5:B4:EB:13:62:EE:1B:51:2E:32:82:BE X509v3 Authority Key Identifier: keyid:F8:E1:2F:0A:43:3C:8B:73:3B:E3:1D:B5:E0:CD:1E:F2:02:FC:21:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:f9:2d:29:aa:ee:b3:f1:f4:8f:a7:92:a2:93:97:c0:fb:60: d9:fe:19:61:d5:49:9a:98:34:54:50:27:a8:bb:a5:a1:26:4c: a9:f6:15:58:73:6a:1b:b9:c8:52:73:09:85:5f:10:65:3a:e8: b0:bc:b7:5f:b6:65:1d:fc:99:62:c1:37:0c:dc:28:62:e9:06: 4b:7a:b5:88:15:86:e1:d5:5d:21:f5:7f:7c:15:e0:58:fb:3a: fa:e2:d1:b6:54:52:3b:ad:3a:75:39:c5:a5:b0:72:40:a5:f9: 7e:77:50:f8:0a:ae:fa:bd:bc:fe:ff:a0:f0:3b:f0:ef:74:20: cc:14:2f:ae:c7:b4:fa:74:2c:52:89:52:e2:66:a2:c4:e8:25: 78:03:62:ff:b9:73:00:58:d8:2c:8c:40:67:84:20:14:68:fc: e9:87:78:06:65:48:68:15:29:e8:b1:d0:18:b8:bf:d3:c3:aa: 01:14:09:df:8b:2b:b4:d7:06:80:0c:ee:77:9a:85:f5:e2:b1: d0:50:f8:54:0a:bd:1b:90:bb:98:8c:7e:9a:02:f3:a2:7b:0b: 3c:24:cb:44:0a:04:a6:0e:57:ea:ff:e8:c4:b8:46:e5:3f:b0: 5a:07:12:47:d7:9d:83:6a:57:a6:81:d1:ae:14:b8:e8:f8:b5: 42:bd:e7:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUId8t0/lhV/cdnydH2f6ILKCSiIAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhFMTJGMEE0MzNDOEI3MzNCRTMxREI1RTBDRDFFRjIw MkZDMjFFQTAeFw0yNjAzMjIxMTM3MTJaFw0yNjAzMjUxODA3MTJaMDMxMTAvBgNV BAMTKDlCRkNDOEJDNDJBNjQzNUZGNUI0RUIxMzYyRUUxQjUxMkUzMjgyQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbvGehGMB9SJf+rNuquLAqlONN AsuCNHxWwcgA9GK4d0OPmne05Qw9Nw/9gAfsTFVNgwnDar7F5UNadDLjsk7x72lo WEbVAZ1zy1zm9t740ZeLVgztXhG+RnGjhiECHTjfGvajQDFgvYiLTpZ1oW31n3JP 7VoiNTDN9aoR6SIFaqLy6p2faFWeZpTvaQfFVtyly7QduPKgd1rnT2TDooj9fufg ilX6xJYJQezl4c1KtFDT5YavtNBzH3SMKJTTSl7dfKcgQvfMUAafm4e6Vvexid08 5y/mYwRZgw45LOiEpqp9HJqG9lkyVk3psI9r9uiHt5haNo9cBxmSbj7ME3R5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm/zIvEKmQ1/1tOsTYu4bUS4ygr4wHwYDVR0j BBgwFoAU+OEvCkM8i3M74x214M0e8gL8IeowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MGNlNDc5Ni00OWRlLTQzYjEtYTE1Mi1iMThkMTFhZGE1MjkvMC9GOEUxMkYwQTQz M0M4QjczM0JFMzFEQjVFMENEMUVGMjAyRkMyMUVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjhFMTJGMEE0MzNDOEI3MzNCRTMxREI1RTBDRDFFRjIwMkZD MjFFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODBjZTQ3OTYtNDlkZS00M2IxLWEx NTItYjE4ZDExYWRhNTI5LzAvRjhFMTJGMEE0MzNDOEI3MzNCRTMxREI1RTBDRDFF RjIwMkZDMjFFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEr5LSmq7rPx9I+nkqKTl8D7YNn+GWHVSZqY NFRQJ6i7paEmTKn2FVhzahu5yFJzCYVfEGU66LC8t1+2ZR38mWLBNwzcKGLpBkt6 tYgVhuHVXSH1f3wV4Fj7Ovri0bZUUjutOnU5xaWwckCl+X53UPgKrvq9vP7/oPA7 8O90IMwUL67HtPp0LFKJUuJmosToJXgDYv+5cwBY2CyMQGeEIBRo/OmHeAZlSGgV Keix0Bi4v9PDqgEUCd+LK7TXBoAM7neahfXisdBQ+FQKvRuQu5iMfpoC86J7Czwk y0QKBKYOV+r/6MS4RuU/sFoHEkfXnYNqV6aB0a4UuOj4tUK9594= -----END CERTIFICATE-----Generated at Sun Mar 22 16:39:48 2026 by rpki-client