$ rpki-client -vvf repo-rpki.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/923816C042C964B6465A7BA06B2D44BDAF28D827.mft File: 923816C042C964B6465A7BA06B2D44BDAF28D827.mft (raw, json) Hash identifier: R4FhdO08cud73kcHZDd09uTaEtxZnCWZQFZH+lQo1l4= Subject key identifier: 0E:93:9E:E0:85:F5:F8:DF:79:EE:B7:26:38:C5:BC:7C:AC:4D:B2:2D Authority key identifier: 92:38:16:C0:42:C9:64:B6:46:5A:7B:A0:6B:2D:44:BD:AF:28:D8:27 Certificate issuer: /CN=923816C042C964B6465A7BA06B2D44BDAF28D827 Certificate serial: 41937C823796537823663E3F891861EF7D4030CF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923816C042C964B6465A7BA06B2D44BDAF28D827.cer Subject info access: rsync://repo-rpki.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/923816C042C964B6465A7BA06B2D44BDAF28D827.mft Manifest number: 025D Signing time: Sun 01 Mar 2026 11:50:43 +0000 Manifest this update: Sun 01 Mar 2026 11:45:43 +0000 Manifest next update: Wed 04 Mar 2026 18:28:43 +0000 Files and hashes: 1: 3130332e3138392e35382e302f32342d3234203d3e20313439373538.roa (hash: DYdErYV9CziQI4JcelpgUN+i1lEMG53IFpsP0CaTa7Y=) 2: 3130332e3138392e35382e302f32332d3234203d3e20313439373538.roa (hash: o++ze4Phjg1umrR/hXTKNbdGbb6WGQVR25QY7sQRXiQ=) 3: 3130332e3138392e35392e302f32342d3234203d3e20313439373538.roa (hash: /IMjB2zzS/R4jg1G0u5f9Z9fEjTEZBoII5eQSPdhRUM=) 4: 923816C042C964B6465A7BA06B2D44BDAF28D827.crl (hash: rIi+gQF8DuiyYX/K7pTEblRMQhl13ThXN0XubN390p0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/923816C042C964B6465A7BA06B2D44BDAF28D827.crl rsync://repo-rpki.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/923816C042C964B6465A7BA06B2D44BDAF28D827.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923816C042C964B6465A7BA06B2D44BDAF28D827.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 18:28:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:93:7c:82:37:96:53:78:23:66:3e:3f:89:18:61:ef:7d:40:30:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=923816C042C964B6465A7BA06B2D44BDAF28D827 Validity Not Before: Mar 1 11:45:43 2026 GMT Not After : Mar 4 18:28:43 2026 GMT Subject: CN=0E939EE085F5F8DF79EEB72638C5BC7CAC4DB22D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:13:87:de:38:c8:be:d0:25:ab:b2:77:4e:c6: f5:75:f4:32:18:e7:a3:fc:be:7b:7b:85:f4:03:18: a5:96:e6:9f:2f:50:92:6d:b4:e2:6a:d7:cc:45:43: f4:c2:71:41:7c:c0:ad:09:e1:e5:ae:f7:24:8b:ea: 1c:cd:01:99:b0:d1:75:74:31:62:ec:31:91:9f:95: 15:64:bb:94:67:4c:52:9c:9b:50:fa:c0:f1:2a:4d: 4e:95:12:82:9c:7b:56:fa:9d:b0:38:5a:23:29:9a: 03:85:02:33:fe:87:58:34:ce:d6:16:23:a2:cb:0e: 5c:a2:58:59:bc:9f:0d:f4:4b:85:ec:f6:f1:a6:1a: dd:a3:b8:72:2a:49:8e:33:57:db:d4:83:a0:32:cb: 33:7f:05:68:37:f2:c3:8b:08:fe:b9:51:24:09:fa: 8e:b1:28:9d:74:f5:81:9a:c8:95:d3:e7:42:16:36: 35:3b:e6:6d:68:db:9a:c3:79:63:ca:27:01:39:d6: 4f:42:c8:b5:3e:8e:48:aa:0c:d7:6e:f6:ed:72:89: af:4d:e6:56:fa:07:ce:76:32:21:c2:9b:27:5b:6b: d8:8e:59:60:82:a1:19:c5:13:05:32:99:d0:db:4b: df:01:a2:ef:0a:a1:44:d6:22:ea:64:18:e0:de:33: a9:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:93:9E:E0:85:F5:F8:DF:79:EE:B7:26:38:C5:BC:7C:AC:4D:B2:2D X509v3 Authority Key Identifier: keyid:92:38:16:C0:42:C9:64:B6:46:5A:7B:A0:6B:2D:44:BD:AF:28:D8:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/923816C042C964B6465A7BA06B2D44BDAF28D827.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923816C042C964B6465A7BA06B2D44BDAF28D827.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/923816C042C964B6465A7BA06B2D44BDAF28D827.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:be:a9:c8:75:53:7c:8e:f0:97:9d:c1:95:22:7a:76:63:3a: a5:c4:80:8e:a7:ff:55:e7:db:ce:d7:aa:62:7d:86:58:e0:e8: e8:cb:52:c5:43:7d:64:4d:c2:0b:33:da:6b:64:b4:9c:01:45: ee:ce:57:9a:71:d3:d0:29:56:22:2a:93:d1:af:57:55:00:a9: 8a:de:3a:c2:0d:58:04:40:9f:2b:4b:4e:44:72:50:ea:ea:9d: 26:98:b8:f7:bd:f9:d3:65:8a:77:dd:01:4c:c9:9b:a7:d6:c9: 19:4b:12:39:a8:07:bc:3f:a9:59:cf:d5:bf:9f:f0:ec:19:49: 53:7a:94:96:36:39:38:d0:78:b8:6b:bd:5d:29:c8:c6:99:50: 48:37:d6:cf:91:90:1d:cc:0c:ed:c5:d7:15:3c:28:4e:e7:2f: 76:95:58:e5:d2:3e:5d:fa:32:cd:42:8a:07:49:34:68:dc:7b: a6:64:85:06:7d:fe:b4:fb:66:32:8f:5a:42:29:60:e8:60:99: c4:7d:59:38:51:36:b5:b7:33:ed:ba:9c:74:2c:b4:78:d0:c3: cb:50:2d:84:ae:96:79:d0:f5:f4:2e:9a:34:c2:83:2e:22:d8: ed:1b:48:63:86:dc:0d:f2:4f:ab:10:20:54:29:a6:e9:27:f8: 7b:91:ae:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQZN8gjeWU3gjZj4/iRhh731AMM8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTIzODE2QzA0MkM5NjRCNjQ2NUE3QkEwNkIyRDQ0QkRB RjI4RDgyNzAeFw0yNjAzMDExMTQ1NDNaFw0yNjAzMDQxODI4NDNaMDMxMTAvBgNV BAMTKDBFOTM5RUUwODVGNUY4REY3OUVFQjcyNjM4QzVCQzdDQUM0REIyMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiE4feOMi+0CWrsndOxvV19DIY 56P8vnt7hfQDGKWW5p8vUJJttOJq18xFQ/TCcUF8wK0J4eWu9ySL6hzNAZmw0XV0 MWLsMZGflRVku5RnTFKcm1D6wPEqTU6VEoKce1b6nbA4WiMpmgOFAjP+h1g0ztYW I6LLDlyiWFm8nw30S4Xs9vGmGt2juHIqSY4zV9vUg6AyyzN/BWg38sOLCP65USQJ +o6xKJ109YGayJXT50IWNjU75m1o25rDeWPKJwE51k9CyLU+jkiqDNdu9u1yia9N 5lb6B852MiHCmydba9iOWWCCoRnFEwUymdDbS98Bou8KoUTWIupkGODeM6kjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDpOe4IX1+N957rcmOMW8fKxNsi0wHwYDVR0j BBgwFoAUkjgWwELJZLZGWnugay1Eva8o2CcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MzdkZmI4OC1mYjUwLTQ4ZDEtYjkwZC1lNTI1MTAyZjRmNWUvMC85MjM4MTZDMDQy Qzk2NEI2NDY1QTdCQTA2QjJENDRCREFGMjhEODI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTIzODE2QzA0MkM5NjRCNjQ2NUE3QkEwNkIyRDQ0QkRBRjI4 RDgyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTM3ZGZiODgtZmI1MC00OGQxLWI5 MGQtZTUyNTEwMmY0ZjVlLzAvOTIzODE2QzA0MkM5NjRCNjQ2NUE3QkEwNkIyRDQ0 QkRBRjI4RDgyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJq+qch1U3yO8JedwZUienZjOqXEgI6n/1Xn 287XqmJ9hljg6OjLUsVDfWRNwgsz2mtktJwBRe7OV5px09ApViIqk9GvV1UAqYre OsINWARAnytLTkRyUOrqnSaYuPe9+dNlinfdAUzJm6fWyRlLEjmoB7w/qVnP1b+f 8OwZSVN6lJY2OTjQeLhrvV0pyMaZUEg31s+RkB3MDO3F1xU8KE7nL3aVWOXSPl36 Ms1CigdJNGjce6ZkhQZ9/rT7ZjKPWkIpYOhgmcR9WThRNrW3M+26nHQstHjQw8tQ LYSulnnQ9fQumjTCgy4i2O0bSGOG3A3yT6sQIFQppukn+HuRroE= -----END CERTIFICATE-----Generated at Mon Mar 2 09:15:42 2026 by rpki-client