$ rpki-client -vvf repo-rpki.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/8107B8970680BF15377E222E6093ED124116C40F.mft File: 8107B8970680BF15377E222E6093ED124116C40F.mft (raw, json) Hash identifier: h460I/yHiy1r5/AZ4EYwu2J1GCyQARKlL+Q/gJ1tmCY= Subject key identifier: F7:73:C8:4D:5F:E4:36:FF:87:02:2F:10:13:70:42:96:88:20:BA:97 Authority key identifier: 81:07:B8:97:06:80:BF:15:37:7E:22:2E:60:93:ED:12:41:16:C4:0F Certificate issuer: /CN=8107B8970680BF15377E222E6093ED124116C40F Certificate serial: 1CFDEB5E1673A0AF6874D67CD1C3A6B5CEA1F019 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8107B8970680BF15377E222E6093ED124116C40F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/8107B8970680BF15377E222E6093ED124116C40F.mft Manifest number: F2 Signing time: Fri 06 Mar 2026 09:40:03 +0000 Manifest this update: Fri 06 Mar 2026 09:35:03 +0000 Manifest next update: Mon 09 Mar 2026 19:07:03 +0000 Files and hashes: 1: 3136302e32322e3133372e302f32342d3234203d3e20313532383131.roa (hash: HT3mtD9EzYNDUslH4D8zHP3cyYz5I1nQiUhW1KPbzG8=) 2: 8107B8970680BF15377E222E6093ED124116C40F.crl (hash: KwSfI2R6VZJbCyWt4SEaWGcOHU9ZOhbjLfG+yGtYxG4=) 3: 3136302e32322e3133362e302f32332d3233203d3e20313532383131.roa (hash: 2LacJURrRGdpqkr8B8+Js6eubdkn8GpcOPwFPaGcYgA=) 4: 3136302e32322e3133362e302f32342d3234203d3e20313532383131.roa (hash: WXTlhMYeWb2XPsk3kKz2q/Y6eUxTYpdY6/4zyAzkOVg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/8107B8970680BF15377E222E6093ED124116C40F.crl rsync://repo-rpki.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/8107B8970680BF15377E222E6093ED124116C40F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8107B8970680BF15377E222E6093ED124116C40F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 08:48:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:fd:eb:5e:16:73:a0:af:68:74:d6:7c:d1:c3:a6:b5:ce:a1:f0:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8107B8970680BF15377E222E6093ED124116C40F Validity Not Before: Mar 6 09:35:03 2026 GMT Not After : Mar 9 19:07:03 2026 GMT Subject: CN=F773C84D5FE436FF87022F10137042968820BA97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:eb:d1:58:02:b5:3d:88:89:e8:81:25:5a:b7: 64:1f:f1:c4:d5:0e:99:f8:cd:26:64:95:8a:08:d0: 90:58:72:84:13:ee:c3:0f:5c:4e:03:99:e0:77:87: a4:c0:37:99:a8:12:6e:2b:00:31:9d:f7:8c:90:98: 78:65:ec:bd:13:71:32:7e:23:0e:f4:17:b9:9c:84: 79:3c:c7:c6:e9:0b:1d:b4:9e:86:98:9e:05:8f:a2: f0:6e:15:f8:26:45:19:7c:58:60:c3:ba:93:53:5e: 47:99:32:e7:65:f2:3f:d6:c4:41:ae:a2:b2:ce:f6: 64:0b:37:45:d4:33:4a:31:c8:35:ed:95:7a:1c:2f: 53:62:04:78:79:01:22:14:28:37:6a:88:31:d4:01: 69:d9:99:85:01:f1:17:d3:04:d7:2d:64:c1:71:0f: 1e:98:40:3e:da:f0:81:45:18:fe:23:f8:b5:0b:af: 14:c1:a7:65:07:59:cd:32:26:17:53:63:b1:c7:9f: 63:13:8e:98:99:26:28:2f:bd:3b:ce:83:c3:9d:70: 77:f6:bf:a5:e0:ec:7c:af:53:ee:67:b9:1e:ca:52: 04:4d:08:26:4b:b5:4a:0e:46:87:a5:d4:31:99:ef: 9f:ac:18:8c:27:36:dc:3a:fc:32:f0:14:6c:5e:e3: af:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:73:C8:4D:5F:E4:36:FF:87:02:2F:10:13:70:42:96:88:20:BA:97 X509v3 Authority Key Identifier: keyid:81:07:B8:97:06:80:BF:15:37:7E:22:2E:60:93:ED:12:41:16:C4:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/8107B8970680BF15377E222E6093ED124116C40F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8107B8970680BF15377E222E6093ED124116C40F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/8107B8970680BF15377E222E6093ED124116C40F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:e7:a0:4c:53:be:44:da:ef:99:bf:4b:45:d7:da:16:f6:82: 8b:35:f3:13:de:6e:fe:85:f8:6b:eb:3a:f1:24:67:8e:03:27: 93:95:3a:3e:33:16:a0:96:68:64:1e:bc:f7:a4:60:1a:8f:15: df:da:c1:41:e7:47:46:e4:53:e1:18:d8:6d:c1:5a:ab:c4:99: 76:26:65:84:fe:8c:53:e0:4a:14:48:85:20:2d:58:fb:43:4c: b2:77:a2:11:c7:cd:3d:3e:28:b6:c9:5e:60:1b:ac:61:a7:7d: 8d:ea:a0:c3:e3:27:cb:f7:50:57:03:13:8d:52:7a:cb:ae:7f: bb:8a:65:65:b9:91:3e:0c:2c:41:99:12:9a:cf:29:e8:99:6f: 5b:58:5f:bb:a7:af:ad:99:16:5a:7f:4b:eb:81:ca:61:2a:26: 87:b1:de:dd:91:31:20:ad:e3:c1:ec:18:4a:5c:4d:c2:16:82: 80:e6:87:72:21:02:13:42:37:1e:5d:ca:9c:8a:6e:23:65:75: 9b:77:5d:b3:19:8d:9e:23:58:10:f8:b4:02:6c:f1:b4:94:dd: a9:54:a1:2c:02:35:9a:69:cf:bb:c6:07:94:e1:b3:06:e2:a8: 09:13:09:83:4d:50:4c:4e:0d:a1:0d:fe:75:11:d8:62:0c:e9: 85:b7:17:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHP3rXhZzoK9odNZ80cOmtc6h8BkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODEwN0I4OTcwNjgwQkYxNTM3N0UyMjJFNjA5M0VEMTI0 MTE2QzQwRjAeFw0yNjAzMDYwOTM1MDNaFw0yNjAzMDkxOTA3MDNaMDMxMTAvBgNV BAMTKEY3NzNDODRENUZFNDM2RkY4NzAyMkYxMDEzNzA0Mjk2ODgyMEJBOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx69FYArU9iInogSVat2Qf8cTV Dpn4zSZklYoI0JBYcoQT7sMPXE4DmeB3h6TAN5moEm4rADGd94yQmHhl7L0TcTJ+ Iw70F7mchHk8x8bpCx20noaYngWPovBuFfgmRRl8WGDDupNTXkeZMudl8j/WxEGu orLO9mQLN0XUM0oxyDXtlXocL1NiBHh5ASIUKDdqiDHUAWnZmYUB8RfTBNctZMFx Dx6YQD7a8IFFGP4j+LULrxTBp2UHWc0yJhdTY7HHn2MTjpiZJigvvTvOg8OdcHf2 v6Xg7HyvU+5nuR7KUgRNCCZLtUoORoel1DGZ75+sGIwnNtw6/DLwFGxe468FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU93PITV/kNv+HAi8QE3BCloggupcwHwYDVR0j BBgwFoAUgQe4lwaAvxU3fiIuYJPtEkEWxA8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MTk1YjRiNC1iYzhhLTRjZTUtYjU1MC05YWE3YjM2ZWUxZmEvMC84MTA3Qjg5NzA2 ODBCRjE1Mzc3RTIyMkU2MDkzRUQxMjQxMTZDNDBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvODEwN0I4OTcwNjgwQkYxNTM3N0UyMjJFNjA5M0VEMTI0MTE2 QzQwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjE5NWI0YjQtYmM4YS00Y2U1LWI1 NTAtOWFhN2IzNmVlMWZhLzAvODEwN0I4OTcwNjgwQkYxNTM3N0UyMjJFNjA5M0VE MTI0MTE2QzQwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGHnoExTvkTa75m/S0XX2hb2gos18xPebv6F +GvrOvEkZ44DJ5OVOj4zFqCWaGQevPekYBqPFd/awUHnR0bkU+EY2G3BWqvEmXYm ZYT+jFPgShRIhSAtWPtDTLJ3ohHHzT0+KLbJXmAbrGGnfY3qoMPjJ8v3UFcDE41S esuuf7uKZWW5kT4MLEGZEprPKeiZb1tYX7unr62ZFlp/S+uBymEqJoex3t2RMSCt 48HsGEpcTcIWgoDmh3IhAhNCNx5dypyKbiNldZt3XbMZjZ4jWBD4tAJs8bSU3alU oSwCNZppz7vGB5ThswbiqAkTCYNNUExODaEN/nUR2GIM6YW3FxI= -----END CERTIFICATE-----Generated at Sat Mar 7 17:50:28 2026 by rpki-client