$ rpki-client -vvf repo-rpki.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.mft File: F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.mft (raw, json) Hash identifier: 10KXz5foVTpBmluP+jSBr8T+/SjOAguu9MadEl6GKro= Subject key identifier: FB:D2:5A:AA:98:D1:8B:A6:35:05:33:CA:1D:8A:25:40:F5:B7:31:CB Authority key identifier: F4:D9:C6:C3:E2:65:3E:53:E4:54:9E:CD:7B:0E:43:26:FE:95:6B:4C Certificate issuer: /CN=F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C Certificate serial: 0879CDFAC7774D6043D0C6DB7D3B7C2166202067 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.mft Manifest number: 0125 Signing time: Fri 06 Mar 2026 23:31:15 +0000 Manifest this update: Fri 06 Mar 2026 23:26:15 +0000 Manifest next update: Tue 10 Mar 2026 03:39:15 +0000 Files and hashes: 1: 3135372e36362e38342e302f32332d3234203d3e20313339393831.roa (hash: QVcLKReR3vobx/sEHPLJR2ePOo16P1H8K2UkUuXxUL8=) 2: F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.crl (hash: IAkQLosr1Y9/DLZ70uStT+1ucu96diBym7zEQfGbsB8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.crl rsync://repo-rpki.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 08:48:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:79:cd:fa:c7:77:4d:60:43:d0:c6:db:7d:3b:7c:21:66:20:20:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C Validity Not Before: Mar 6 23:26:15 2026 GMT Not After : Mar 10 03:39:15 2026 GMT Subject: CN=FBD25AAA98D18BA6350533CA1D8A2540F5B731CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c1:68:4e:27:8e:fe:ef:4b:c4:8f:de:80:ec: 12:93:e6:32:ed:8c:9f:4f:4a:ca:9b:95:4f:c3:fc: 96:29:5e:3e:28:c6:c3:61:0b:c5:09:a9:00:29:e5: d4:0c:b1:3e:bb:6d:3b:04:26:d9:1a:42:97:21:83: de:57:32:36:c7:56:94:e1:20:68:a2:af:87:1c:ea: b9:78:e3:5b:b1:d3:e6:e6:eb:42:17:aa:29:a1:5f: 50:15:2f:1a:1d:3e:9e:ce:97:10:df:b6:12:34:51: 8e:f5:f2:55:14:4e:bc:c6:de:57:bd:bd:a6:c4:0b: a2:68:5a:83:f2:56:02:9c:e8:c0:9c:a0:78:2c:0b: aa:ff:89:54:e4:36:c9:4a:04:da:4f:cb:93:a2:4f: 5b:17:05:57:d1:57:78:09:cf:ac:e2:64:87:29:2f: 79:e7:c9:3d:03:96:dd:d1:03:e0:01:7e:20:ad:dc: 9a:88:88:f8:07:c6:f8:5f:11:f8:c5:c6:b4:5e:b0: c4:0c:74:38:3e:14:33:92:5d:5a:16:36:f6:4d:de: 58:12:7a:8a:9b:73:5b:f7:40:ea:76:2c:c1:69:0c: a2:11:a9:20:c2:ac:36:5e:40:86:bb:10:de:91:1d: 4b:e7:ee:86:29:93:3f:ab:28:d1:79:f4:ea:0e:7f: 9c:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:D2:5A:AA:98:D1:8B:A6:35:05:33:CA:1D:8A:25:40:F5:B7:31:CB X509v3 Authority Key Identifier: keyid:F4:D9:C6:C3:E2:65:3E:53:E4:54:9E:CD:7B:0E:43:26:FE:95:6B:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:0d:39:70:29:42:5d:cd:3b:31:2d:23:d4:43:ef:c1:55:1f: 58:bc:a6:cd:84:32:15:06:14:3a:58:52:1b:ec:3d:4c:b7:24: 2d:14:2a:ef:40:20:e3:a2:08:bf:84:59:61:89:0e:5a:0b:f5: 78:01:9b:f3:f7:4b:5b:d7:ee:88:12:7b:01:23:cf:df:af:b1: c2:bd:22:6f:1a:71:da:75:ff:d8:29:51:fa:a8:80:4c:6b:25: 21:c3:7f:c8:35:fa:7c:c6:39:f4:29:62:27:d1:07:a5:93:e7: a5:cb:ca:20:eb:72:78:6c:0d:b3:0b:65:e7:e9:07:56:01:34: 45:22:fe:2c:44:79:16:33:eb:69:7c:c9:99:c4:75:51:6e:39: b0:5c:6c:ac:7b:a9:4e:be:f7:f4:b7:ce:38:77:4a:4f:5a:27: 85:48:74:6f:38:d6:13:64:be:bb:c7:c9:47:81:1a:cd:12:12: 85:dd:12:2c:7f:bd:23:71:77:59:f2:7e:da:82:f1:f7:3d:18: c9:31:98:79:81:ea:07:b0:62:1e:57:2a:ee:df:5b:9f:e5:47: 86:54:ec:99:d7:a4:bb:f8:a6:cc:49:6f:50:bf:dd:08:3e:c3: 84:77:7b:54:87:69:89:0d:b0:56:f7:e2:40:0b:07:d0:59:08: b5:9d:7e:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCHnN+sd3TWBD0MbbfTt8IWYgIGcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjREOUM2QzNFMjY1M0U1M0U0NTQ5RUNEN0IwRTQzMjZG RTk1NkI0QzAeFw0yNjAzMDYyMzI2MTVaFw0yNjAzMTAwMzM5MTVaMDMxMTAvBgNV BAMTKEZCRDI1QUFBOThEMThCQTYzNTA1MzNDQTFEOEEyNTQwRjVCNzMxQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBwWhOJ47+70vEj96A7BKT5jLt jJ9PSsqblU/D/JYpXj4oxsNhC8UJqQAp5dQMsT67bTsEJtkaQpchg95XMjbHVpTh IGiir4cc6rl441ux0+bm60IXqimhX1AVLxodPp7OlxDfthI0UY718lUUTrzG3le9 vabEC6JoWoPyVgKc6MCcoHgsC6r/iVTkNslKBNpPy5OiT1sXBVfRV3gJz6ziZIcp L3nnyT0Dlt3RA+ABfiCt3JqIiPgHxvhfEfjFxrResMQMdDg+FDOSXVoWNvZN3lgS eoqbc1v3QOp2LMFpDKIRqSDCrDZeQIa7EN6RHUvn7oYpkz+rKNF59OoOf5xfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+9JaqpjRi6Y1BTPKHYolQPW3McswHwYDVR0j BBgwFoAU9NnGw+JlPlPkVJ7New5DJv6Va0wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OTdjNjgyYS00NDhiLTQwZTItYTg4Zi0xNmRmODNkZDMzMzcvMC9GNEQ5QzZDM0Uy NjUzRTUzRTQ1NDlFQ0Q3QjBFNDMyNkZFOTU2QjRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjREOUM2QzNFMjY1M0U1M0U0NTQ5RUNEN0IwRTQzMjZGRTk1 NkI0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTk3YzY4MmEtNDQ4Yi00MGUyLWE4 OGYtMTZkZjgzZGQzMzM3LzAvRjREOUM2QzNFMjY1M0U1M0U0NTQ5RUNEN0IwRTQz MjZGRTk1NkI0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEANOXApQl3NOzEtI9RD78FVH1i8ps2EMhUG FDpYUhvsPUy3JC0UKu9AIOOiCL+EWWGJDloL9XgBm/P3S1vX7ogSewEjz9+vscK9 Im8acdp1/9gpUfqogExrJSHDf8g1+nzGOfQpYifRB6WT56XLyiDrcnhsDbMLZefp B1YBNEUi/ixEeRYz62l8yZnEdVFuObBcbKx7qU6+9/S3zjh3Sk9aJ4VIdG841hNk vrvHyUeBGs0SEoXdEix/vSNxd1nyftqC8fc9GMkxmHmB6gewYh5XKu7fW5/lR4ZU 7JnXpLv4psxJb1C/3Qg+w4R3e1SHaYkNsFb34kALB9BZCLWdfgw= -----END CERTIFICATE-----Generated at Sat Mar 7 17:50:28 2026 by rpki-client