$ rpki-client -vvf repo-rpki.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/F2E8B493535CE192E2A343E44990C2B86B854E0F.mft File: F2E8B493535CE192E2A343E44990C2B86B854E0F.mft (raw, json) Hash identifier: scTwuseDzPingIEo0I74qVgFheGru/er7l+xZUvNyYo= Subject key identifier: EE:8D:7F:6E:01:24:05:8D:41:3C:C4:02:70:CD:AC:9D:ED:93:59:A6 Authority key identifier: F2:E8:B4:93:53:5C:E1:92:E2:A3:43:E4:49:90:C2:B8:6B:85:4E:0F Certificate issuer: /CN=F2E8B493535CE192E2A343E44990C2B86B854E0F Certificate serial: 70999744C091E8BC1AAA4D71794BFD6C36488E68 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F2E8B493535CE192E2A343E44990C2B86B854E0F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/F2E8B493535CE192E2A343E44990C2B86B854E0F.mft Manifest number: 010F Signing time: Thu 05 Mar 2026 10:41:12 +0000 Manifest this update: Thu 05 Mar 2026 10:36:12 +0000 Manifest next update: Sun 08 Mar 2026 16:23:12 +0000 Files and hashes: 1: F2E8B493535CE192E2A343E44990C2B86B854E0F.crl (hash: JcWHsgyimXtyaUBGMzYGiux4/xwkEOmh7avUFLx38xo=) 2: 3136302e31392e38392e302f32342d3234203d3e20313532373839.roa (hash: a18oOGl6pVPvZKJuyn1ADVOAC3RXX1wTEnjdHNjeTew=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/F2E8B493535CE192E2A343E44990C2B86B854E0F.crl rsync://repo-rpki.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/F2E8B493535CE192E2A343E44990C2B86B854E0F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F2E8B493535CE192E2A343E44990C2B86B854E0F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 16:23:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:99:97:44:c0:91:e8:bc:1a:aa:4d:71:79:4b:fd:6c:36:48:8e:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2E8B493535CE192E2A343E44990C2B86B854E0F Validity Not Before: Mar 5 10:36:12 2026 GMT Not After : Mar 8 16:23:12 2026 GMT Subject: CN=EE8D7F6E0124058D413CC40270CDAC9DED9359A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:7e:11:a2:4d:8f:de:f3:7a:64:e7:9b:5f:21: d2:bb:2a:c9:14:ff:d6:1a:d7:fe:df:01:0f:f5:f6: 17:23:a7:7e:7e:7e:2f:c6:0f:66:28:68:0c:60:f5: 05:0f:ae:7a:a2:97:4e:b6:55:0a:ea:c1:2a:bd:6f: fc:7b:4e:c8:7e:9c:dd:c4:13:03:b8:ab:f6:d3:51: 9a:f4:1f:41:8b:f2:37:a7:07:92:aa:d9:52:d9:11: 76:59:81:d3:6b:1b:5e:85:93:4d:29:7e:75:a8:78: d1:b2:5b:d3:20:40:ef:a1:ca:04:51:00:7a:c6:8d: 25:de:88:3d:8b:2c:c5:bc:4e:b5:78:de:72:08:f3: b1:81:31:ad:f8:6b:bd:8a:87:d4:45:df:1e:e0:6f: 10:47:ab:6d:32:8d:a2:bd:32:c6:55:1d:f2:92:9b: b0:0d:99:e0:04:fb:35:ad:fe:07:21:f6:0b:31:04: ad:00:27:41:14:19:7b:1b:21:3a:be:a8:2e:74:f4: a0:f8:c5:4e:c0:4a:78:37:75:79:90:16:d1:8b:64: b4:40:44:fa:54:72:14:80:c2:f2:8f:fd:06:05:a3: d2:bd:09:ad:9e:d1:6a:e5:fc:5a:be:f9:0f:8c:75: a3:bb:7c:b0:a4:ef:d8:41:b1:6d:97:13:db:06:29: 62:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:8D:7F:6E:01:24:05:8D:41:3C:C4:02:70:CD:AC:9D:ED:93:59:A6 X509v3 Authority Key Identifier: keyid:F2:E8:B4:93:53:5C:E1:92:E2:A3:43:E4:49:90:C2:B8:6B:85:4E:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/F2E8B493535CE192E2A343E44990C2B86B854E0F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F2E8B493535CE192E2A343E44990C2B86B854E0F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/F2E8B493535CE192E2A343E44990C2B86B854E0F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:f4:e1:c6:03:a7:b2:49:c0:49:f2:e2:bf:96:7b:b0:aa:63: 79:3d:0e:82:a7:0f:5e:7c:32:c0:c2:c8:9c:5b:f6:c7:55:dd: ea:9e:32:79:d2:d6:f4:ed:88:47:32:a4:45:28:5e:8c:07:61: 27:d1:73:f4:4f:2d:1a:dc:33:33:08:42:2c:3d:5a:b1:fc:f2: 18:67:ac:c0:13:c3:1e:38:9f:ee:1a:42:22:a4:f2:08:e6:94: f4:50:24:c1:7a:df:8b:27:6c:6f:4e:11:0c:10:44:9c:b5:28: a0:cc:4e:47:bf:3d:01:d9:95:75:cc:ee:92:5f:ab:e1:9a:12: 71:a1:71:32:cb:7e:3a:ec:b4:b2:a5:e8:f3:ac:48:04:04:86: 2c:b6:9e:66:06:ef:61:ae:af:9c:9b:36:79:b6:c0:92:e5:bf: ef:bc:f0:9e:9d:01:bb:dd:63:59:e1:f3:2b:c1:3d:42:68:f7: bd:62:7b:f8:6f:d7:8d:ed:25:5b:10:d1:7e:40:ce:0f:15:bc: ec:75:ed:f8:44:ba:b4:b0:df:c1:74:a6:f4:96:bc:5f:9f:2d: 23:5b:a7:11:62:28:20:98:70:d7:b0:e1:eb:3e:65:b2:22:c0: 35:b3:d6:cd:f5:20:d5:0f:f4:97:d1:f1:a1:ca:86:73:7c:ba: 25:a6:b4:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcJmXRMCR6Lwaqk1xeUv9bDZIjmgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjJFOEI0OTM1MzVDRTE5MkUyQTM0M0U0NDk5MEMyQjg2 Qjg1NEUwRjAeFw0yNjAzMDUxMDM2MTJaFw0yNjAzMDgxNjIzMTJaMDMxMTAvBgNV BAMTKEVFOEQ3RjZFMDEyNDA1OEQ0MTNDQzQwMjcwQ0RBQzlERUQ5MzU5QTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVfhGiTY/e83pk55tfIdK7KskU /9Ya1/7fAQ/19hcjp35+fi/GD2YoaAxg9QUPrnqil062VQrqwSq9b/x7Tsh+nN3E EwO4q/bTUZr0H0GL8jenB5Kq2VLZEXZZgdNrG16Fk00pfnWoeNGyW9MgQO+hygRR AHrGjSXeiD2LLMW8TrV43nII87GBMa34a72Kh9RF3x7gbxBHq20yjaK9MsZVHfKS m7ANmeAE+zWt/gch9gsxBK0AJ0EUGXsbITq+qC509KD4xU7ASng3dXmQFtGLZLRA RPpUchSAwvKP/QYFo9K9Ca2e0Wrl/Fq++Q+MdaO7fLCk79hBsW2XE9sGKWLXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7o1/bgEkBY1BPMQCcM2sne2TWaYwHwYDVR0j BBgwFoAU8ui0k1Nc4ZLio0PkSZDCuGuFTg8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZGMxMDA3ZC1mZDYxLTQ1NDMtOGY1Zi0zZmRmZmE0YjAxZTYvMC9GMkU4QjQ5MzUz NUNFMTkyRTJBMzQzRTQ0OTkwQzJCODZCODU0RTBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjJFOEI0OTM1MzVDRTE5MkUyQTM0M0U0NDk5MEMyQjg2Qjg1 NEUwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGRjMTAwN2QtZmQ2MS00NTQzLThm NWYtM2ZkZmZhNGIwMWU2LzAvRjJFOEI0OTM1MzVDRTE5MkUyQTM0M0U0NDk5MEMy Qjg2Qjg1NEUwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEH04cYDp7JJwEny4r+We7CqY3k9DoKnD158 MsDCyJxb9sdV3eqeMnnS1vTtiEcypEUoXowHYSfRc/RPLRrcMzMIQiw9WrH88hhn rMATwx44n+4aQiKk8gjmlPRQJMF634snbG9OEQwQRJy1KKDMTke/PQHZlXXM7pJf q+GaEnGhcTLLfjrstLKl6POsSAQEhiy2nmYG72Gur5ybNnm2wJLlv++88J6dAbvd Y1nh8yvBPUJo971ie/hv143tJVsQ0X5Azg8VvOx17fhEurSw38F0pvSWvF+fLSNb pxFiKCCYcNew4es+ZbIiwDWz1s31INUP9JfR8aHKhnN8uiWmtOQ= -----END CERTIFICATE-----Generated at Sat Mar 7 17:49:02 2026 by rpki-client