$ rpki-client -vvf repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.mft File: F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.mft (raw, json) Hash identifier: FtzQdFoHXi28GL/h4qi2mpAsldx6QGu18MAn+OXuopI= Subject key identifier: 98:44:37:58:B5:31:AE:52:23:6C:32:44:58:E8:74:7C:8A:78:C3:F3 Authority key identifier: F8:FA:AE:F9:7E:D3:DB:A7:D2:72:43:70:7C:7C:0D:16:05:89:6B:AF Certificate issuer: /CN=F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF Certificate serial: 1FAE9940A35691B5F6C54CEAF3873A2C017E8720 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.mft Manifest number: 013B Signing time: Sat 07 Mar 2026 05:51:11 +0000 Manifest this update: Sat 07 Mar 2026 05:46:11 +0000 Manifest next update: Tue 10 Mar 2026 09:45:11 +0000 Files and hashes: 1: 3135372e32302e3133302e302f32342d3234203d3e20313532343134.roa (hash: XsyvDRA0TNZEIvbyLzo4xfiEE9IebAVqTJNT7CQxRoY=) 2: 3135372e32302e3133312e302f32342d3234203d3e20313532343134.roa (hash: 8cewFPLuyArtugKlZDxPydivdpl6gb8C4w3o7gohs6Q=) 3: F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.crl (hash: 0M9FYMIpH/BdvK7VwsthC/tbm/HmUNQ1IcW6d1+3Z4I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.crl rsync://repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 08:48:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:ae:99:40:a3:56:91:b5:f6:c5:4c:ea:f3:87:3a:2c:01:7e:87:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF Validity Not Before: Mar 7 05:46:11 2026 GMT Not After : Mar 10 09:45:11 2026 GMT Subject: CN=98443758B531AE52236C324458E8747C8A78C3F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:24:4e:29:fd:56:6c:70:e9:fb:39:81:c0:13: 28:d7:bf:98:5e:fe:4f:8d:e1:09:20:b6:a3:fd:7c: db:5b:79:6f:ac:0b:7f:1c:d6:78:10:fe:b2:eb:b7: 22:01:6f:5d:58:5a:31:ea:30:31:ab:fc:36:ff:b9: 18:be:06:f5:e6:aa:31:3f:8e:88:f3:2b:89:3f:2c: 0a:27:fd:02:b9:6a:49:3c:2b:db:56:92:43:df:15: 9f:cf:7a:75:2b:85:b0:20:3c:b1:60:bd:1e:52:d7: 19:cc:b8:bc:8d:1d:76:6f:c7:47:c5:7d:0e:42:99: 2d:76:ee:64:a5:59:91:4e:29:55:b6:46:74:bb:2f: 5c:62:db:a4:98:69:d6:14:71:18:89:f5:4d:fe:89: 60:d9:ef:ec:6d:e8:e2:dc:e8:09:25:04:4c:1e:3f: e4:40:cb:8b:b9:c9:22:e5:a3:08:4c:81:5d:1c:50: 7b:51:d7:86:b5:00:c0:10:38:c9:3f:a3:84:f7:88: 27:2e:9c:94:04:07:9f:3f:e2:b0:8c:96:ab:a5:d3: 74:db:77:6f:97:9a:57:d8:9c:23:c4:1c:e3:11:55: ad:8c:c2:ec:6b:5f:c2:d3:81:24:64:fe:43:77:51: 60:fb:6e:b8:5e:43:65:f9:32:cb:93:a6:5e:71:4c: 7e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:44:37:58:B5:31:AE:52:23:6C:32:44:58:E8:74:7C:8A:78:C3:F3 X509v3 Authority Key Identifier: keyid:F8:FA:AE:F9:7E:D3:DB:A7:D2:72:43:70:7C:7C:0D:16:05:89:6B:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:3d:fe:3d:27:f1:f7:9e:52:16:c8:b7:84:73:d3:61:78:b9: fc:ab:cc:36:74:d1:d4:bf:99:a5:a7:d4:17:29:7b:ea:fa:c7: 9c:cd:d4:aa:74:56:4b:8b:14:2d:5d:b4:86:36:5d:8e:10:26: fd:47:9c:af:ef:f1:07:62:d0:0b:18:c4:7f:01:84:d3:72:06: 48:c8:f0:89:ba:ca:65:93:57:02:26:f6:ef:be:53:d5:5f:b3: 16:45:b1:d9:1f:f7:be:d3:9c:2a:70:6b:4d:df:54:d2:f2:1a: 8e:71:42:7c:24:a6:40:8a:d7:e2:bf:3b:63:7b:8a:f3:5a:cf: 0e:9f:3c:d8:19:6e:9b:f9:28:19:78:79:68:86:3c:bb:ba:a4: 62:66:e3:5d:8a:3c:ed:ef:64:7b:cf:0e:28:fb:92:b9:6e:99: 35:01:7d:f8:eb:02:e1:e2:d0:ad:d9:35:c9:55:b6:e2:f8:92: 5e:6e:28:e2:ca:24:fe:c5:e4:7d:ba:01:c5:2f:82:a7:8e:0c: a0:f4:fd:51:10:51:bb:d1:a5:be:44:04:bf:50:1d:6d:41:a1: c5:53:73:07:6f:08:e9:40:66:b2:5c:73:22:c0:91:ea:d6:58: 90:89:7d:3a:23:1e:e6:28:d6:74:64:94:d4:bb:2a:bc:97:1a: 48:50:73:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH66ZQKNWkbX2xUzq84c6LAF+hyAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhGQUFFRjk3RUQzREJBN0QyNzI0MzcwN0M3QzBEMTYw NTg5NkJBRjAeFw0yNjAzMDcwNTQ2MTFaFw0yNjAzMTAwOTQ1MTFaMDMxMTAvBgNV BAMTKDk4NDQzNzU4QjUzMUFFNTIyMzZDMzI0NDU4RTg3NDdDOEE3OEMzRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvJE4p/VZscOn7OYHAEyjXv5he /k+N4QkgtqP9fNtbeW+sC38c1ngQ/rLrtyIBb11YWjHqMDGr/Db/uRi+BvXmqjE/ jojzK4k/LAon/QK5akk8K9tWkkPfFZ/PenUrhbAgPLFgvR5S1xnMuLyNHXZvx0fF fQ5CmS127mSlWZFOKVW2RnS7L1xi26SYadYUcRiJ9U3+iWDZ7+xt6OLc6AklBEwe P+RAy4u5ySLlowhMgV0cUHtR14a1AMAQOMk/o4T3iCcunJQEB58/4rCMlqul03Tb d2+XmlfYnCPEHOMRVa2MwuxrX8LTgSRk/kN3UWD7brheQ2X5MsuTpl5xTH5vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmEQ3WLUxrlIjbDJEWOh0fIp4w/MwHwYDVR0j BBgwFoAU+Pqu+X7T26fSckNwfHwNFgWJa68wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ODZmZjI2NC1mZjI1LTRmZTYtODZlZi1kODRiN2QyODgzNTQvMC9GOEZBQUVGOTdF RDNEQkE3RDI3MjQzNzA3QzdDMEQxNjA1ODk2QkFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjhGQUFFRjk3RUQzREJBN0QyNzI0MzcwN0M3QzBEMTYwNTg5 NkJBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzg2ZmYyNjQtZmYyNS00ZmU2LTg2 ZWYtZDg0YjdkMjg4MzU0LzAvRjhGQUFFRjk3RUQzREJBN0QyNzI0MzcwN0M3QzBE MTYwNTg5NkJBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABY9/j0n8feeUhbIt4Rz02F4ufyrzDZ00dS/ maWn1Bcpe+r6x5zN1Kp0VkuLFC1dtIY2XY4QJv1HnK/v8Qdi0AsYxH8BhNNyBkjI 8Im6ymWTVwIm9u++U9VfsxZFsdkf977TnCpwa03fVNLyGo5xQnwkpkCK1+K/O2N7 ivNazw6fPNgZbpv5KBl4eWiGPLu6pGJm412KPO3vZHvPDij7krlumTUBffjrAuHi 0K3ZNclVtuL4kl5uKOLKJP7F5H26AcUvgqeODKD0/VEQUbvRpb5EBL9QHW1BocVT cwdvCOlAZrJccyLAkerWWJCJfTojHuYo1nRklNS7KryXGkhQc5c= -----END CERTIFICATE-----Generated at Sat Mar 7 17:49:17 2026 by rpki-client