$ rpki-client -vvf repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/308A510040FDF9BC28B7B63D3203E40E2106F1B4.mft File: 308A510040FDF9BC28B7B63D3203E40E2106F1B4.mft (raw, json) Hash identifier: TASR7ttHaL6MXF/iU69Sb9e4AgF6eCVJ+3Xgwf6UTAs= Subject key identifier: DF:52:C9:71:76:4F:C3:C9:1D:41:FC:71:C8:ED:55:7C:C2:36:97:59 Authority key identifier: 30:8A:51:00:40:FD:F9:BC:28:B7:B6:3D:32:03:E4:0E:21:06:F1:B4 Certificate issuer: /CN=308A510040FDF9BC28B7B63D3203E40E2106F1B4 Certificate serial: 7AC3323B41910AF3169DD66A30C4E4E8A56718C8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/308A510040FDF9BC28B7B63D3203E40E2106F1B4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/308A510040FDF9BC28B7B63D3203E40E2106F1B4.mft Manifest number: 0122 Signing time: Sun 01 Mar 2026 07:42:01 +0000 Manifest this update: Sun 01 Mar 2026 07:37:01 +0000 Manifest next update: Wed 04 Mar 2026 08:31:01 +0000 Files and hashes: 1: 3135372e36362e31362e302f32332d3234203d3e20313336303839.roa (hash: fMCHbxG1b40Dh8toSsRbGtu8leYZ/YXgsXlH0lO7T1o=) 2: 308A510040FDF9BC28B7B63D3203E40E2106F1B4.crl (hash: JqMP4eqUoiAbEraR18KyR6byF2KqhPux8wpvNG+d8QM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/308A510040FDF9BC28B7B63D3203E40E2106F1B4.crl rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/308A510040FDF9BC28B7B63D3203E40E2106F1B4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/308A510040FDF9BC28B7B63D3203E40E2106F1B4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 08:31:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:c3:32:3b:41:91:0a:f3:16:9d:d6:6a:30:c4:e4:e8:a5:67:18:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=308A510040FDF9BC28B7B63D3203E40E2106F1B4 Validity Not Before: Mar 1 07:37:01 2026 GMT Not After : Mar 4 08:31:01 2026 GMT Subject: CN=DF52C971764FC3C91D41FC71C8ED557CC2369759 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:58:ef:76:07:9e:3b:66:0e:be:b4:70:1d:c3: f5:9c:8a:da:c4:28:5d:a5:17:c8:6e:21:43:40:05: cf:1b:96:61:ad:84:91:83:db:60:7a:2f:b7:7d:78: 38:5f:76:11:22:ab:77:7e:f7:84:f6:ab:ac:6a:a8: 70:d9:e3:6b:49:4d:86:b0:34:ba:79:82:a6:7f:60: d6:70:ed:6e:88:77:4a:17:7d:19:86:b9:58:dc:31: 68:7c:6c:22:5b:c4:bf:ea:1a:78:8c:c7:31:27:14: c0:8b:b8:92:51:bf:21:56:ec:eb:c7:27:1e:df:e8: e1:95:b5:61:9a:e6:da:33:88:06:c9:75:f1:8c:c8: 9e:81:ae:fa:6f:85:0d:b9:cb:19:00:0b:c3:bc:63: f3:0d:d5:7b:e7:9c:c9:c3:d8:bc:be:e2:8f:1d:b1: ab:e6:14:f3:f9:a8:4e:83:d7:4c:1b:de:3a:fd:ac: 22:ee:21:0a:5b:00:4b:a8:f8:fd:ad:c1:31:b0:b3: 65:96:d0:fb:a4:e2:d2:3a:69:3b:28:55:6d:6a:e8: e2:79:14:79:d5:ac:30:29:c1:25:a5:f6:40:cd:96: 5f:d5:fc:e3:90:5d:70:29:77:7a:3f:07:8c:78:f7: d7:b9:99:63:a9:63:7b:d2:6e:2a:d2:23:4e:c9:87: bf:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:52:C9:71:76:4F:C3:C9:1D:41:FC:71:C8:ED:55:7C:C2:36:97:59 X509v3 Authority Key Identifier: keyid:30:8A:51:00:40:FD:F9:BC:28:B7:B6:3D:32:03:E4:0E:21:06:F1:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/308A510040FDF9BC28B7B63D3203E40E2106F1B4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/308A510040FDF9BC28B7B63D3203E40E2106F1B4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/308A510040FDF9BC28B7B63D3203E40E2106F1B4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:20:ae:a5:05:b0:af:08:b0:ac:15:bd:85:10:c9:36:be:00: dd:ee:b0:f3:c0:0e:e4:18:ec:34:e2:0c:1b:fb:5b:42:c3:c7: 8a:0d:51:cf:1b:e8:77:ba:70:5d:23:43:45:b1:c9:64:ca:36: 99:f2:71:96:03:78:86:d7:3b:1d:9b:41:69:5c:cb:5f:8b:30: 51:ff:1b:3a:4e:b1:37:af:ae:4d:6f:c1:6d:42:ab:6d:19:6b: 4c:7f:14:33:0f:93:43:75:c9:d0:f0:66:d3:95:b6:25:eb:36: fe:1d:fa:fe:ad:c8:ba:c0:a1:c6:7d:04:64:46:87:8b:05:ee: f4:2f:d7:df:df:2f:81:15:a5:f1:17:63:2e:5f:9f:e2:90:4d: 86:95:1f:b8:42:de:d2:de:41:15:19:a7:bf:02:c6:dd:bb:f9: ab:7b:ce:e9:c3:a1:42:f5:35:18:44:d0:dc:4c:cb:28:4d:2f: 6a:c5:7c:42:21:c1:63:cc:51:f2:1d:2c:2e:2a:ac:c8:ca:5b: 14:0c:87:d3:29:46:b1:b8:86:61:06:bb:7a:b3:1c:55:1f:6d: d5:9f:64:4a:05:17:d7:e5:1f:5d:97:05:a9:d2:50:33:67:fc: 58:eb:ee:8e:25:22:1e:92:89:a5:0a:42:ee:ce:a3:c4:c0:b6: 3a:df:fc:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUesMyO0GRCvMWndZqMMTk6KVnGMgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA4QTUxMDA0MEZERjlCQzI4QjdCNjNEMzIwM0U0MEUy MTA2RjFCNDAeFw0yNjAzMDEwNzM3MDFaFw0yNjAzMDQwODMxMDFaMDMxMTAvBgNV BAMTKERGNTJDOTcxNzY0RkMzQzkxRDQxRkM3MUM4RUQ1NTdDQzIzNjk3NTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqWO92B547Zg6+tHAdw/WcitrE KF2lF8huIUNABc8blmGthJGD22B6L7d9eDhfdhEiq3d+94T2q6xqqHDZ42tJTYaw NLp5gqZ/YNZw7W6Id0oXfRmGuVjcMWh8bCJbxL/qGniMxzEnFMCLuJJRvyFW7OvH Jx7f6OGVtWGa5toziAbJdfGMyJ6BrvpvhQ25yxkAC8O8Y/MN1XvnnMnD2Ly+4o8d savmFPP5qE6D10wb3jr9rCLuIQpbAEuo+P2twTGws2WW0Puk4tI6aTsoVW1q6OJ5 FHnVrDApwSWl9kDNll/V/OOQXXApd3o/B4x499e5mWOpY3vSbirSI07Jh7/ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU31LJcXZPw8kdQfxxyO1VfMI2l1kwHwYDVR0j BBgwFoAUMIpRAED9+bwot7Y9MgPkDiEG8bQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NGVkOGQ2Yy1mMGZhLTQ3Y2MtYWVhYS1iNGUzZWUxMTY4ODIvMC8zMDhBNTEwMDQw RkRGOUJDMjhCN0I2M0QzMjAzRTQwRTIxMDZGMUI0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzA4QTUxMDA0MEZERjlCQzI4QjdCNjNEMzIwM0U0MEUyMTA2 RjFCNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTRlZDhkNmMtZjBmYS00N2NjLWFl YWEtYjRlM2VlMTE2ODgyLzAvMzA4QTUxMDA0MEZERjlCQzI4QjdCNjNEMzIwM0U0 MEUyMTA2RjFCNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACEgrqUFsK8IsKwVvYUQyTa+AN3usPPADuQY 7DTiDBv7W0LDx4oNUc8b6He6cF0jQ0WxyWTKNpnycZYDeIbXOx2bQWlcy1+LMFH/ GzpOsTevrk1vwW1Cq20Za0x/FDMPk0N1ydDwZtOVtiXrNv4d+v6tyLrAocZ9BGRG h4sF7vQv19/fL4EVpfEXYy5fn+KQTYaVH7hC3tLeQRUZp78Cxt27+at7zunDoUL1 NRhE0NxMyyhNL2rFfEIhwWPMUfIdLC4qrMjKWxQMh9MpRrG4hmEGu3qzHFUfbdWf ZEoFF9flH12XBanSUDNn/Fjr7o4lIh6SiaUKQu7Oo8TAtjrf/LE= -----END CERTIFICATE-----Generated at Mon Mar 2 14:58:18 2026 by rpki-client