$ rpki-client -vvf repo-rpki.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/D7D98B5F7BCA3741F01911488372E855D91DBF9C.mft File: D7D98B5F7BCA3741F01911488372E855D91DBF9C.mft (raw, json) Hash identifier: +eztSfVqDLyefXKk/W3FHJ6zMLLhNRurkFjRr6+ZLHc= Subject key identifier: 86:F0:51:64:71:37:4B:C9:84:25:2D:E6:AC:9B:78:5C:04:7D:7C:C5 Authority key identifier: D7:D9:8B:5F:7B:CA:37:41:F0:19:11:48:83:72:E8:55:D9:1D:BF:9C Certificate issuer: /CN=D7D98B5F7BCA3741F01911488372E855D91DBF9C Certificate serial: 0F85D941FDEFAA314279BC23AD549672024516AE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7D98B5F7BCA3741F01911488372E855D91DBF9C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/D7D98B5F7BCA3741F01911488372E855D91DBF9C.mft Manifest number: 0223 Signing time: Sun 01 Mar 2026 12:51:50 +0000 Manifest this update: Sun 01 Mar 2026 12:46:50 +0000 Manifest next update: Wed 04 Mar 2026 17:58:50 +0000 Files and hashes: 1: D7D98B5F7BCA3741F01911488372E855D91DBF9C.crl (hash: UkNXhg2LeWsiuuwzOYM69IMteMj6z1Sw3YzVjL8JEro=) 2: 3130332e3138312e38302e302f32342d3234203d3e20313439373032.roa (hash: 4tLHfUAaxrKkU1/ID8Cs3rzd8UlebdYrCEqhL3fN6eQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/D7D98B5F7BCA3741F01911488372E855D91DBF9C.crl rsync://repo-rpki.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/D7D98B5F7BCA3741F01911488372E855D91DBF9C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7D98B5F7BCA3741F01911488372E855D91DBF9C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 17:58:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:85:d9:41:fd:ef:aa:31:42:79:bc:23:ad:54:96:72:02:45:16:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7D98B5F7BCA3741F01911488372E855D91DBF9C Validity Not Before: Mar 1 12:46:50 2026 GMT Not After : Mar 4 17:58:50 2026 GMT Subject: CN=86F0516471374BC984252DE6AC9B785C047D7CC5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:75:89:cf:ff:d9:c9:0b:5b:fb:6d:ca:df:ca: b8:43:ce:25:18:e7:cd:fc:77:77:85:8d:87:f1:2d: fb:42:28:d4:b2:81:66:77:a8:8d:70:7e:60:f9:a0: f1:3f:d5:e8:91:5b:26:77:3a:8d:5a:0d:e0:af:8f: 9d:5a:59:a0:7a:b7:bd:27:63:d0:bd:bd:5a:eb:07: 3d:b2:3e:22:bc:b1:76:cd:c2:57:c6:f1:9d:9b:4c: 3b:12:08:b8:ec:c1:24:e2:ef:44:16:a1:bd:76:6d: aa:82:c9:f2:a1:1f:34:cd:cd:ef:8f:21:28:b0:0b: a8:04:db:c6:22:a6:26:3d:bc:4a:ba:0c:3f:2a:14: 94:69:aa:56:e5:9d:66:b3:8d:c3:58:67:30:05:0c: 81:26:48:8e:29:d9:5b:ea:7b:83:0a:0f:de:a7:73: 74:16:4e:ba:34:f8:9e:a7:d7:f9:bf:69:75:aa:96: 09:f2:15:45:c9:fc:75:33:d4:83:84:a1:e3:70:24: 8e:3a:c4:d5:a7:c1:ea:65:f2:f9:fc:73:7c:61:7f: f9:18:91:da:b9:56:21:41:93:29:85:b5:6b:80:df: 8a:e5:44:4e:01:da:27:09:bc:b3:36:eb:ad:ca:96: aa:2b:90:ae:f7:0a:32:59:b0:ba:a7:72:cf:3d:c4: c8:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:F0:51:64:71:37:4B:C9:84:25:2D:E6:AC:9B:78:5C:04:7D:7C:C5 X509v3 Authority Key Identifier: keyid:D7:D9:8B:5F:7B:CA:37:41:F0:19:11:48:83:72:E8:55:D9:1D:BF:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/D7D98B5F7BCA3741F01911488372E855D91DBF9C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7D98B5F7BCA3741F01911488372E855D91DBF9C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/D7D98B5F7BCA3741F01911488372E855D91DBF9C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:3e:a1:48:5b:e6:f2:41:32:90:fa:af:ec:ce:10:29:4c:bf: d9:c9:5e:ac:6e:e5:cd:4f:85:0a:00:33:00:26:31:94:aa:74: 30:f6:4c:0e:39:84:de:d0:e8:9a:85:ba:05:78:4a:ab:c2:77: f2:66:a1:69:3d:aa:be:a8:a7:8a:4a:5a:f5:af:42:84:91:91: 24:c4:71:0f:2e:a6:87:9e:7e:56:44:d5:1c:68:6f:53:ef:de: ef:32:d5:b6:f1:ed:b4:6c:90:77:56:7b:30:29:61:fa:ae:38: a4:f1:5e:6f:6c:eb:aa:8e:e2:14:dd:18:5c:06:5b:f3:e0:50: 27:0e:2c:0f:71:c9:d2:bd:89:79:44:ac:a6:78:39:f3:2c:64: 55:24:e4:9f:c2:22:13:a9:cf:34:87:6a:fd:0e:d2:9f:39:ae: 3a:3d:46:4a:03:a5:99:bd:d1:b6:c8:76:a2:94:67:b0:73:2c: a6:1f:45:a0:68:98:77:85:b3:60:2a:02:09:57:93:f8:37:be: 51:be:fd:05:f2:76:79:e2:79:6d:56:3b:7a:d7:a3:4c:59:e9: a1:83:6f:34:34:b6:25:52:d9:05:a4:0f:9c:e7:c2:75:1a:f3: dd:ca:3a:6f:7e:5c:09:e1:f4:11:58:96:8d:8c:a0:1a:23:e5: e2:1e:e4:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD4XZQf3vqjFCebwjrVSWcgJFFq4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDdEOThCNUY3QkNBMzc0MUYwMTkxMTQ4ODM3MkU4NTVE OTFEQkY5QzAeFw0yNjAzMDExMjQ2NTBaFw0yNjAzMDQxNzU4NTBaMDMxMTAvBgNV BAMTKDg2RjA1MTY0NzEzNzRCQzk4NDI1MkRFNkFDOUI3ODVDMDQ3RDdDQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJdYnP/9nJC1v7bcrfyrhDziUY 5838d3eFjYfxLftCKNSygWZ3qI1wfmD5oPE/1eiRWyZ3Oo1aDeCvj51aWaB6t70n Y9C9vVrrBz2yPiK8sXbNwlfG8Z2bTDsSCLjswSTi70QWob12baqCyfKhHzTNze+P ISiwC6gE28YipiY9vEq6DD8qFJRpqlblnWazjcNYZzAFDIEmSI4p2Vvqe4MKD96n c3QWTro0+J6n1/m/aXWqlgnyFUXJ/HUz1IOEoeNwJI46xNWnwepl8vn8c3xhf/kY kdq5ViFBkymFtWuA34rlRE4B2icJvLM2663KlqorkK73CjJZsLqncs89xMjlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhvBRZHE3S8mEJS3mrJt4XAR9fMUwHwYDVR0j BBgwFoAU19mLX3vKN0HwGRFIg3LoVdkdv5wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MzRkODI3Ny0yOTEwLTQwNzUtYjkzNy02NmY5NDM1MThlMjkvMC9EN0Q5OEI1RjdC Q0EzNzQxRjAxOTExNDg4MzcyRTg1NUQ5MURCRjlDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDdEOThCNUY3QkNBMzc0MUYwMTkxMTQ4ODM3MkU4NTVEOTFE QkY5Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTM0ZDgyNzctMjkxMC00MDc1LWI5 MzctNjZmOTQzNTE4ZTI5LzAvRDdEOThCNUY3QkNBMzc0MUYwMTkxMTQ4ODM3MkU4 NTVEOTFEQkY5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFI+oUhb5vJBMpD6r+zOEClMv9nJXqxu5c1P hQoAMwAmMZSqdDD2TA45hN7Q6JqFugV4SqvCd/JmoWk9qr6op4pKWvWvQoSRkSTE cQ8upoeeflZE1Rxob1Pv3u8y1bbx7bRskHdWezApYfquOKTxXm9s66qO4hTdGFwG W/PgUCcOLA9xydK9iXlErKZ4OfMsZFUk5J/CIhOpzzSHav0O0p85rjo9RkoDpZm9 0bbIdqKUZ7BzLKYfRaBomHeFs2AqAglXk/g3vlG+/QXydnnieW1WO3rXo0xZ6aGD bzQ0tiVS2QWkD5znwnUa893KOm9+XAnh9BFYlo2MoBoj5eIe5Aw= -----END CERTIFICATE-----Generated at Mon Mar 2 15:35:06 2026 by rpki-client