$ rpki-client -vvf repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.mft File: 322B7BBC7BE2A84D8D644A6B68333963517CAFFA.mft (raw, json) Hash identifier: ryHKcB+xEHhGE1H7YtX62q31Ed2KjVXVWt/3IS30noM= Subject key identifier: 51:2B:1C:71:A9:EF:CD:72:10:24:71:18:DA:69:EE:78:18:44:D2:62 Authority key identifier: 32:2B:7B:BC:7B:E2:A8:4D:8D:64:4A:6B:68:33:39:63:51:7C:AF:FA Certificate issuer: /CN=322B7BBC7BE2A84D8D644A6B68333963517CAFFA Certificate serial: 4AD614D841F6FDFC2D8F0D7E4B029E71E8DF6F7F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.mft Manifest number: 0244 Signing time: Sat 28 Feb 2026 20:02:42 +0000 Manifest this update: Sat 28 Feb 2026 19:57:42 +0000 Manifest next update: Tue 03 Mar 2026 20:23:42 +0000 Files and hashes: 1: 322B7BBC7BE2A84D8D644A6B68333963517CAFFA.crl (hash: O+olC0ZWj1WN/MVHROJdGyvmFi2XqaL+A861ZdVEnpc=) 2: 3130332e3138372e38382e302f32332d3233203d3e20313439393439.roa (hash: z3n/tIXZwtPYvBaaNLrRacxN7HfPUi9J+DnSjLm+L1k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.crl rsync://repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 20:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:d6:14:d8:41:f6:fd:fc:2d:8f:0d:7e:4b:02:9e:71:e8:df:6f:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=322B7BBC7BE2A84D8D644A6B68333963517CAFFA Validity Not Before: Feb 28 19:57:42 2026 GMT Not After : Mar 3 20:23:42 2026 GMT Subject: CN=512B1C71A9EFCD7210247118DA69EE781844D262 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:3e:93:4b:72:ec:6a:64:1f:e6:2e:c0:3f:2e: d2:0f:f7:b8:42:80:a3:f9:93:6c:e9:fd:f9:b0:b8: fc:69:0e:0c:4c:0f:3d:d7:e5:6c:2a:8b:3a:3b:1c: b8:59:c3:1e:10:76:a0:87:1c:9d:62:0c:c4:87:ff: a2:d2:0d:57:02:4e:22:30:83:45:c5:74:c6:4c:b9: 9b:9d:2f:83:36:e1:89:a8:75:dc:0b:cf:b2:45:8d: 18:0e:08:68:f1:5b:04:36:6e:8e:c3:f3:f4:c8:39: 33:87:43:ae:db:01:a6:15:db:65:10:bc:67:44:22: 5a:5c:43:72:b1:30:d3:98:25:38:a2:80:0c:4c:46: 02:1b:18:e9:0a:64:1c:5a:4f:21:56:75:71:9f:bd: e2:d2:61:d1:71:e7:d5:c7:91:f8:4c:10:5d:99:f5: fa:3a:b3:b8:ed:ef:3c:bb:40:de:80:c3:33:15:3f: 59:da:f4:98:ce:45:21:04:50:d0:96:71:b8:5a:3d: 03:52:56:8b:d3:2a:38:70:23:cc:37:9c:a9:c5:5f: 82:7e:f1:70:6b:8d:d6:e0:3d:a0:7d:7d:9b:bb:59: 75:45:cb:c4:59:4d:61:52:51:4f:31:ed:b7:d2:8b: ca:5a:4d:71:82:00:e1:f5:72:50:a7:30:84:a7:23: 59:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:2B:1C:71:A9:EF:CD:72:10:24:71:18:DA:69:EE:78:18:44:D2:62 X509v3 Authority Key Identifier: keyid:32:2B:7B:BC:7B:E2:A8:4D:8D:64:4A:6B:68:33:39:63:51:7C:AF:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:83:24:78:a4:f7:e8:62:54:dc:e8:36:26:1f:8e:7b:e0:3b: f7:e7:87:cf:12:a7:8d:c7:45:d8:bb:b5:a5:96:76:ff:3a:1e: f4:3d:23:f4:3f:4d:d1:59:8e:1e:65:9a:da:98:43:b5:fe:35: 6f:f7:37:f7:71:86:1e:18:4f:be:12:e2:49:2d:16:4c:2d:df: 47:17:69:96:7d:04:f0:ad:ca:68:70:6e:e0:49:bc:99:b6:37: b8:c9:d0:d0:f5:6b:2d:60:78:90:ee:67:0d:b3:b1:01:6e:b7: ee:10:76:53:50:cf:7a:d8:ee:9f:78:a3:96:7f:e6:43:91:fd: 03:84:0a:32:ba:b0:89:70:5e:42:d1:f5:25:26:9b:62:5b:f1: 30:03:27:f6:12:0b:59:f5:3b:62:8c:b1:d4:76:2f:13:bb:6c: 1b:fb:94:72:e8:89:11:3e:ff:e8:c0:30:db:d9:61:f2:75:75: ed:c6:e1:97:e8:57:60:53:a9:90:21:8d:09:92:41:5f:90:e4: 20:12:36:8f:f4:1b:45:bb:1d:f6:ae:ba:22:06:30:c5:6d:b9: ee:06:47:59:1a:23:b8:b9:73:b8:ff:d0:49:3d:89:8a:af:4d: 56:65:d5:4c:52:c6:e2:02:cf:7e:71:85:e5:8e:19:fd:9a:a2: 10:11:41:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUStYU2EH2/fwtjw1+SwKecejfb38wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzIyQjdCQkM3QkUyQTg0RDhENjQ0QTZCNjgzMzM5NjM1 MTdDQUZGQTAeFw0yNjAyMjgxOTU3NDJaFw0yNjAzMDMyMDIzNDJaMDMxMTAvBgNV BAMTKDUxMkIxQzcxQTlFRkNENzIxMDI0NzExOERBNjlFRTc4MTg0NEQyNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsPpNLcuxqZB/mLsA/LtIP97hC gKP5k2zp/fmwuPxpDgxMDz3X5Wwqizo7HLhZwx4QdqCHHJ1iDMSH/6LSDVcCTiIw g0XFdMZMuZudL4M24YmoddwLz7JFjRgOCGjxWwQ2bo7D8/TIOTOHQ67bAaYV22UQ vGdEIlpcQ3KxMNOYJTiigAxMRgIbGOkKZBxaTyFWdXGfveLSYdFx59XHkfhMEF2Z 9fo6s7jt7zy7QN6AwzMVP1na9JjORSEEUNCWcbhaPQNSVovTKjhwI8w3nKnFX4J+ 8XBrjdbgPaB9fZu7WXVFy8RZTWFSUU8x7bfSi8paTXGCAOH1clCnMISnI1kHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUSsccanvzXIQJHEY2mnueBhE0mIwHwYDVR0j BBgwFoAUMit7vHviqE2NZEpraDM5Y1F8r/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDUwZjBmNS1iODgzLTRiMjQtOTc5Mi03ZTk1N2FmODhiZjgvMC8zMjJCN0JCQzdC RTJBODREOEQ2NDRBNkI2ODMzMzk2MzUxN0NBRkZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzIyQjdCQkM3QkUyQTg0RDhENjQ0QTZCNjgzMzM5NjM1MTdD QUZGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQ1MGYwZjUtYjg4My00YjI0LTk3 OTItN2U5NTdhZjg4YmY4LzAvMzIyQjdCQkM3QkUyQTg0RDhENjQ0QTZCNjgzMzM5 NjM1MTdDQUZGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHWDJHik9+hiVNzoNiYfjnvgO/fnh88Sp43H Rdi7taWWdv86HvQ9I/Q/TdFZjh5lmtqYQ7X+NW/3N/dxhh4YT74S4kktFkwt30cX aZZ9BPCtymhwbuBJvJm2N7jJ0ND1ay1geJDuZw2zsQFut+4QdlNQz3rY7p94o5Z/ 5kOR/QOECjK6sIlwXkLR9SUmm2Jb8TADJ/YSC1n1O2KMsdR2LxO7bBv7lHLoiRE+ /+jAMNvZYfJ1de3G4ZfoV2BTqZAhjQmSQV+Q5CASNo/0G0W7HfauuiIGMMVtue4G R1kaI7i5c7j/0Ek9iYqvTVZl1UxSxuICz35xheWOGf2aohARQdw= -----END CERTIFICATE-----Generated at Mon Mar 2 12:24:16 2026 by rpki-client