$ rpki-client -vvf repo-rpki.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/84D5328962D0ADCA772ECA2A427E097F281CCEB4.mft File: 84D5328962D0ADCA772ECA2A427E097F281CCEB4.mft (raw, json) Hash identifier: x8NJ0kNEkcKbEY5+LTB9xS41zef/V3d0ZqMlYwgLdHw= Subject key identifier: 90:4B:9F:ED:63:39:67:AB:B4:4C:6F:2A:5B:62:8B:45:48:D8:5B:5B Authority key identifier: 84:D5:32:89:62:D0:AD:CA:77:2E:CA:2A:42:7E:09:7F:28:1C:CE:B4 Certificate issuer: /CN=84D5328962D0ADCA772ECA2A427E097F281CCEB4 Certificate serial: 27AD2491CE30FE2ED0D072BD8F8D13407517A496 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/84D5328962D0ADCA772ECA2A427E097F281CCEB4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/84D5328962D0ADCA772ECA2A427E097F281CCEB4.mft Manifest number: 0119 Signing time: Sun 01 Mar 2026 20:32:12 +0000 Manifest this update: Sun 01 Mar 2026 20:27:12 +0000 Manifest next update: Thu 05 Mar 2026 03:06:12 +0000 Files and hashes: 1: 3135372e36362e3133312e302f32342d3234203d3e20313339393337.roa (hash: i4JiZSoYZHLIwwO6OZUV0v9wdjo3Gmg5PRc7UcGllf8=) 2: 84D5328962D0ADCA772ECA2A427E097F281CCEB4.crl (hash: yjz9LgRdsXpTt4THCTnj9KQTg3YeGNfYdyUWKLgTUko=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/84D5328962D0ADCA772ECA2A427E097F281CCEB4.crl rsync://repo-rpki.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/84D5328962D0ADCA772ECA2A427E097F281CCEB4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/84D5328962D0ADCA772ECA2A427E097F281CCEB4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:45:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:ad:24:91:ce:30:fe:2e:d0:d0:72:bd:8f:8d:13:40:75:17:a4:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84D5328962D0ADCA772ECA2A427E097F281CCEB4 Validity Not Before: Mar 1 20:27:12 2026 GMT Not After : Mar 5 03:06:12 2026 GMT Subject: CN=904B9FED633967ABB44C6F2A5B628B4548D85B5B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:45:bc:3d:0e:07:ee:24:3d:85:e1:d9:86:f3: 0b:c1:92:42:8b:be:ca:de:5c:e4:6b:07:bd:17:68: 95:e9:1e:18:0f:65:27:ed:c0:ec:99:03:6b:bb:3d: 94:f5:70:1e:94:ea:93:2c:ae:0f:f2:34:66:1e:a8: f3:28:aa:1c:90:f7:52:66:be:89:ac:2f:c1:92:ea: 78:33:c9:8d:3b:e8:94:76:f6:5e:1d:0e:74:aa:84: 98:05:f1:d1:08:97:22:35:7e:7d:ad:a0:47:a6:46: ae:30:c8:ef:0c:ea:6c:64:37:66:96:a9:d8:99:1b: 4c:53:14:0e:3b:c3:0c:b4:54:6c:aa:2a:cf:0d:16: bb:27:6b:38:90:34:09:e8:99:f8:75:92:b3:a6:4f: 74:84:99:9d:1b:4f:b2:a2:d2:85:1d:25:c2:53:29: 5b:c7:ef:8f:ef:c4:ae:bc:3a:d3:2f:34:13:fe:db: ec:25:00:cc:85:45:4e:8f:df:ce:66:14:c1:b1:ba: 47:b7:90:c1:db:35:83:03:7a:1d:a0:c8:32:4a:64: d8:8a:d1:94:a5:1d:cb:eb:46:72:d7:f9:27:73:93: 39:82:2f:f6:da:e5:b6:5c:5e:97:21:6e:16:4b:40: e0:b9:ce:ab:e0:a8:91:1e:33:a8:7c:f9:06:98:15: 43:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:4B:9F:ED:63:39:67:AB:B4:4C:6F:2A:5B:62:8B:45:48:D8:5B:5B X509v3 Authority Key Identifier: keyid:84:D5:32:89:62:D0:AD:CA:77:2E:CA:2A:42:7E:09:7F:28:1C:CE:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/84D5328962D0ADCA772ECA2A427E097F281CCEB4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/84D5328962D0ADCA772ECA2A427E097F281CCEB4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/84D5328962D0ADCA772ECA2A427E097F281CCEB4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:79:1e:ec:6f:cf:c7:30:b5:e3:06:4e:5b:12:0f:a8:bf:6f: a8:3e:2e:7b:82:d2:ab:99:04:af:3f:e9:6b:ef:1e:0d:41:ef: 4d:35:4c:b1:45:c5:8b:59:8a:20:5b:a4:d7:a8:01:56:75:81: c1:21:0b:dc:fe:32:63:01:f1:a8:9a:8f:ff:3d:b4:53:5a:3e: b0:b4:78:e2:7c:05:27:6b:0d:d2:32:f4:f5:2a:d5:ff:4a:3c: 1e:51:7a:26:ba:3e:e5:29:b5:5a:93:7e:3e:67:1d:d8:76:a9: db:b8:f4:56:77:2c:2a:02:11:5e:7b:29:d1:06:e7:50:59:56: b3:f5:08:d4:cd:05:a6:2c:db:20:4c:ac:af:3c:85:2c:0b:9a: 1c:6d:c5:3a:a5:99:50:76:a3:8f:69:33:4a:ef:00:f3:80:6e: 13:c6:29:f0:1f:d5:65:67:12:dc:a7:dd:ca:e6:08:1c:7f:b8: 0b:7a:98:f1:94:53:e0:45:71:c1:29:8a:66:78:9e:1a:ea:bd: de:02:29:6a:2c:f0:ca:d5:7b:91:0d:0a:4a:5a:fb:7c:30:e7: fe:7c:0b:56:b4:65:5b:44:a9:a9:ad:6f:e1:e8:c8:f2:a0:6b: 99:73:cb:0b:c4:f6:40:2d:32:14:e6:94:0f:f7:61:d5:0b:4e: 24:35:16:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ60kkc4w/i7Q0HK9j40TQHUXpJYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODRENTMyODk2MkQwQURDQTc3MkVDQTJBNDI3RTA5N0Yy ODFDQ0VCNDAeFw0yNjAzMDEyMDI3MTJaFw0yNjAzMDUwMzA2MTJaMDMxMTAvBgNV BAMTKDkwNEI5RkVENjMzOTY3QUJCNDRDNkYyQTVCNjI4QjQ1NDhEODVCNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuRbw9DgfuJD2F4dmG8wvBkkKL vsreXORrB70XaJXpHhgPZSftwOyZA2u7PZT1cB6U6pMsrg/yNGYeqPMoqhyQ91Jm vomsL8GS6ngzyY076JR29l4dDnSqhJgF8dEIlyI1fn2toEemRq4wyO8M6mxkN2aW qdiZG0xTFA47wwy0VGyqKs8NFrsnaziQNAnomfh1krOmT3SEmZ0bT7Ki0oUdJcJT KVvH74/vxK68OtMvNBP+2+wlAMyFRU6P385mFMGxuke3kMHbNYMDeh2gyDJKZNiK 0ZSlHcvrRnLX+SdzkzmCL/ba5bZcXpchbhZLQOC5zqvgqJEeM6h8+QaYFUPlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkEuf7WM5Z6u0TG8qW2KLRUjYW1swHwYDVR0j BBgwFoAUhNUyiWLQrcp3LsoqQn4JfygczrQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZjhkODI0ZC1kNmExLTQ1NDMtOWNmMC1kOTkyNjgzMmYyOWYvMC84NEQ1MzI4OTYy RDBBRENBNzcyRUNBMkE0MjdFMDk3RjI4MUNDRUI0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvODRENTMyODk2MkQwQURDQTc3MkVDQTJBNDI3RTA5N0YyODFD Q0VCNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGY4ZDgyNGQtZDZhMS00NTQzLTlj ZjAtZDk5MjY4MzJmMjlmLzAvODRENTMyODk2MkQwQURDQTc3MkVDQTJBNDI3RTA5 N0YyODFDQ0VCNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADt5Huxvz8cwteMGTlsSD6i/b6g+LnuC0quZ BK8/6WvvHg1B7001TLFFxYtZiiBbpNeoAVZ1gcEhC9z+MmMB8aiaj/89tFNaPrC0 eOJ8BSdrDdIy9PUq1f9KPB5Reia6PuUptVqTfj5nHdh2qdu49FZ3LCoCEV57KdEG 51BZVrP1CNTNBaYs2yBMrK88hSwLmhxtxTqlmVB2o49pM0rvAPOAbhPGKfAf1WVn Etyn3crmCBx/uAt6mPGUU+BFccEpimZ4nhrqvd4CKWos8MrVe5ENCkpa+3ww5/58 C1a0ZVtEqamtb+HoyPKga5lzywvE9kAtMhTmlA/3YdULTiQ1Fq0= -----END CERTIFICATE-----Generated at Mon Mar 2 20:02:37 2026 by rpki-client