$ rpki-client -vvf repo-rpki.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.mft File: 1697127AE288F4C03503ED0ED8F09BD7A10A1E20.mft (raw, json) Hash identifier: pTIBDn3Vz7xKm6nx8IHBiyh7S329U73sdHTC9Da05qk= Subject key identifier: 3E:35:E6:6B:1F:D6:46:76:36:11:CD:7F:65:2B:19:4B:73:7F:40:9F Authority key identifier: 16:97:12:7A:E2:88:F4:C0:35:03:ED:0E:D8:F0:9B:D7:A1:0A:1E:20 Certificate issuer: /CN=1697127AE288F4C03503ED0ED8F09BD7A10A1E20 Certificate serial: 75AB8E6DDA4D1693C50EAA74D9A89D74A2590D3A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.mft Manifest number: 028A Signing time: Sun 01 Mar 2026 00:52:02 +0000 Manifest this update: Sun 01 Mar 2026 00:47:02 +0000 Manifest next update: Wed 04 Mar 2026 01:15:02 +0000 Files and hashes: 1: 1697127AE288F4C03503ED0ED8F09BD7A10A1E20.crl (hash: XAFFp59XoY72Pm0hPAe7EwVOhpAx1/VFzLLnsvyCml8=) 2: 3130332e3138302e3235302e302f32342d3234203d3e20313439333733.roa (hash: FU4m4uM0eOvuHrbeEWpDEWdnGc1mYzPxVGKE41GscXY=) 3: 3130332e3138302e3235312e302f32342d3234203d3e20313439333733.roa (hash: hUygR1F36BFXE6jZfKUn6z9xWtDxXwKMMrnfrGbDbrA=) 4: 3130332e3138302e3235302e302f32332d3234203d3e20313439333733.roa (hash: 6+aOTOrAxzWsWipZ2VbdRwlhEyJYsC/PS67oMR2JaEk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.crl rsync://repo-rpki.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 01:15:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:ab:8e:6d:da:4d:16:93:c5:0e:aa:74:d9:a8:9d:74:a2:59:0d:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1697127AE288F4C03503ED0ED8F09BD7A10A1E20 Validity Not Before: Mar 1 00:47:02 2026 GMT Not After : Mar 4 01:15:02 2026 GMT Subject: CN=3E35E66B1FD646763611CD7F652B194B737F409F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:dc:18:4e:8a:e3:d1:91:3c:10:e7:73:f5:6e: 8e:08:68:34:bc:92:94:ce:65:21:dd:f8:ec:55:2b: 1c:96:ee:27:f8:c9:f5:19:08:1b:30:31:93:9f:dc: 0d:b9:63:db:0f:41:c7:51:6b:46:8f:d2:05:fb:a4: 3f:8e:f2:af:b0:8e:91:b8:a5:2e:66:7b:4d:7a:85: 42:71:78:84:6c:b1:8b:4c:9a:80:48:60:75:d5:61: 8b:01:a2:77:b4:be:52:46:1a:26:31:1e:48:db:dd: a2:90:a6:5c:b1:55:66:36:aa:2e:76:8c:6a:e7:57: 5f:b2:92:48:f3:40:6b:0d:9b:00:27:0f:42:33:d0: 82:03:a2:ad:d4:c0:1c:22:e8:ec:7f:b8:e9:cb:50: 8f:5f:f1:b1:9f:a6:15:a8:eb:72:af:59:09:4b:d7: de:8a:41:15:93:f8:93:99:42:ab:5a:ac:1a:2b:25: 57:6e:5a:22:b6:3a:50:7c:74:e0:c6:12:81:43:34: 9f:3c:76:6e:2a:31:1a:ac:ef:74:29:c9:34:72:7e: 11:ec:f8:cf:5c:bc:57:0a:b0:47:a4:df:9d:00:c2: 36:b3:13:58:26:01:7e:f4:8f:ff:13:b3:4f:5f:98: 41:4c:43:06:f9:77:20:4a:2e:d0:d7:6a:f4:bb:10: c7:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:35:E6:6B:1F:D6:46:76:36:11:CD:7F:65:2B:19:4B:73:7F:40:9F X509v3 Authority Key Identifier: keyid:16:97:12:7A:E2:88:F4:C0:35:03:ED:0E:D8:F0:9B:D7:A1:0A:1E:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:00:49:e3:8c:a0:15:0c:84:e5:d5:92:7e:59:89:9a:7d:2a: 36:06:05:15:38:50:62:2c:6a:88:fe:0b:b2:39:a4:78:bf:df: c0:d9:47:78:c5:ed:ef:86:ee:9d:84:27:07:68:a9:62:da:40: 0c:9d:ed:58:4c:9a:33:0c:78:f1:1a:79:26:39:0d:5a:fe:a2: b4:8d:ef:8e:bd:00:48:72:74:f1:cc:a6:9f:f5:0f:6a:8c:03: 0d:9e:4f:2e:eb:2f:1d:ff:10:05:14:b6:bd:55:e4:07:e8:c7: 8a:11:0a:9f:88:f7:78:c9:13:68:99:9e:ad:15:a9:8c:07:bb: fb:ec:c7:f3:2b:22:28:79:bb:6f:12:1d:bf:c6:f1:c2:12:9a: d8:86:24:1d:b9:d1:05:e3:f2:67:71:bc:a9:6b:dc:16:62:ab: 78:9a:4e:a3:e9:12:d3:c9:e3:ba:bb:c8:0b:8b:61:3a:39:a9: 61:75:80:38:68:84:ac:4e:56:c3:63:fc:79:30:c3:a8:1f:03: 3f:61:b0:1d:ee:15:9b:4d:cb:eb:22:8b:02:c8:72:ab:e4:1e: 6a:fb:10:68:4b:a7:42:09:ad:a6:09:2c:c6:65:8c:4b:5b:f8: d9:95:23:dc:3b:2e:d9:aa:af:16:6e:e0:9f:1a:43:04:a4:0d: bd:7b:0c:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdauObdpNFpPFDqp02aiddKJZDTowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY5NzEyN0FFMjg4RjRDMDM1MDNFRDBFRDhGMDlCRDdB MTBBMUUyMDAeFw0yNjAzMDEwMDQ3MDJaFw0yNjAzMDQwMTE1MDJaMDMxMTAvBgNV BAMTKDNFMzVFNjZCMUZENjQ2NzYzNjExQ0Q3RjY1MkIxOTRCNzM3RjQwOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd3BhOiuPRkTwQ53P1bo4IaDS8 kpTOZSHd+OxVKxyW7if4yfUZCBswMZOf3A25Y9sPQcdRa0aP0gX7pD+O8q+wjpG4 pS5me016hUJxeIRssYtMmoBIYHXVYYsBone0vlJGGiYxHkjb3aKQplyxVWY2qi52 jGrnV1+ykkjzQGsNmwAnD0Iz0IIDoq3UwBwi6Ox/uOnLUI9f8bGfphWo63KvWQlL 196KQRWT+JOZQqtarBorJVduWiK2OlB8dODGEoFDNJ88dm4qMRqs73QpyTRyfhHs +M9cvFcKsEek350AwjazE1gmAX70j/8Ts09fmEFMQwb5dyBKLtDXavS7EMddAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPjXmax/WRnY2Ec1/ZSsZS3N/QJ8wHwYDVR0j BBgwFoAUFpcSeuKI9MA1A+0O2PCb16EKHiAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MjQ5ZDM4Ny03MGNmLTQwZTktODc1OS05Yjg2ZTBjNjUxMjgvMC8xNjk3MTI3QUUy ODhGNEMwMzUwM0VEMEVEOEYwOUJEN0ExMEExRTIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTY5NzEyN0FFMjg4RjRDMDM1MDNFRDBFRDhGMDlCRDdBMTBB MUUyMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTI0OWQzODctNzBjZi00MGU5LTg3 NTktOWI4NmUwYzY1MTI4LzAvMTY5NzEyN0FFMjg4RjRDMDM1MDNFRDBFRDhGMDlC RDdBMTBBMUUyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIEASeOMoBUMhOXVkn5ZiZp9KjYGBRU4UGIs aoj+C7I5pHi/38DZR3jF7e+G7p2EJwdoqWLaQAyd7VhMmjMMePEaeSY5DVr+orSN 7469AEhydPHMpp/1D2qMAw2eTy7rLx3/EAUUtr1V5Afox4oRCp+I93jJE2iZnq0V qYwHu/vsx/MrIih5u28SHb/G8cISmtiGJB250QXj8mdxvKlr3BZiq3iaTqPpEtPJ 47q7yAuLYTo5qWF1gDhohKxOVsNj/Hkww6gfAz9hsB3uFZtNy+siiwLIcqvkHmr7 EGhLp0IJraYJLMZljEtb+NmVI9w7LtmqrxZu4J8aQwSkDb17DCc= -----END CERTIFICATE-----Generated at Mon Mar 2 15:03:42 2026 by rpki-client