$ rpki-client -vvf repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.mft File: CD3281FC875A8DD967E7E83CD40F106AD5B23A74.mft (raw, json) Hash identifier: loHMIpFxwJHx+tdcxfAyB1yxFECraDAS+kQIdQFHiyM= Subject key identifier: 6A:15:B7:63:EC:2F:27:6F:CD:EA:FA:12:C9:0E:3D:61:7F:61:0A:7B Authority key identifier: CD:32:81:FC:87:5A:8D:D9:67:E7:E8:3C:D4:0F:10:6A:D5:B2:3A:74 Certificate issuer: /CN=CD3281FC875A8DD967E7E83CD40F106AD5B23A74 Certificate serial: 41DB13292C886C7E3E85AF9C8C89EC87D0413BFE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.cer Subject info access: rsync://repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.mft Manifest number: 0247 Signing time: Sun 01 Mar 2026 12:32:29 +0000 Manifest this update: Sun 01 Mar 2026 12:27:29 +0000 Manifest next update: Wed 04 Mar 2026 20:11:29 +0000 Files and hashes: 1: 3130332e3134372e3131342e302f32342d3234203d3e20313439393732.roa (hash: 84o3UV8IHhQFDzzDC1t2/AoF+j9eW/9zsv1UkTq0r2k=) 2: 3130332e3134372e3131342e302f32332d3234203d3e20313439393732.roa (hash: /z6uwsbM6qW8nVOnWF5tbv45b3fyByXJR19t2rKAAvM=) 3: 3130332e3134372e3131352e302f32342d3234203d3e20313439393732.roa (hash: AoisIKjFDgxSpQWcGSc9vDGFrlv1QcVF2IqB6ymlo5I=) 4: CD3281FC875A8DD967E7E83CD40F106AD5B23A74.crl (hash: 2lSlO06Iv1jh/3wRMpITqSikyajI9rVSvkqHw8vQPAQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.crl rsync://repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 20:11:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:db:13:29:2c:88:6c:7e:3e:85:af:9c:8c:89:ec:87:d0:41:3b:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD3281FC875A8DD967E7E83CD40F106AD5B23A74 Validity Not Before: Mar 1 12:27:29 2026 GMT Not After : Mar 4 20:11:29 2026 GMT Subject: CN=6A15B763EC2F276FCDEAFA12C90E3D617F610A7B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:8f:81:f1:53:de:e8:3c:84:af:a7:f8:06:a2: d9:9d:e7:7c:bf:88:2c:64:66:3d:87:b5:4b:25:30: c3:fc:4b:34:fe:63:c7:a0:72:21:8e:c0:fa:f5:30: 13:d9:4f:9c:26:31:3b:2b:16:da:90:7c:d9:60:7f: a5:9f:b1:82:82:b8:3d:45:c6:44:d6:65:c5:39:f4: 26:7f:47:a2:0d:0a:22:00:ec:75:3a:bf:ad:a3:26: 61:94:bd:aa:e4:04:09:74:9b:29:77:a6:e1:95:3e: bb:c1:fc:34:86:8c:3b:db:5b:ff:0d:71:05:3f:80: 89:8d:b4:3a:88:a7:32:bc:ef:f5:f7:1e:b9:eb:17: 7a:53:06:e8:d1:64:e2:8a:7a:65:34:79:14:c8:77: 85:d8:0c:63:7d:b7:6b:7b:20:61:14:6e:27:49:4e: 50:16:72:fe:c8:31:85:5f:44:78:85:6a:13:ad:e8: f2:14:29:a4:ef:53:e7:10:b8:68:3c:cf:47:27:20: a0:4d:3a:b4:48:3e:79:16:94:20:a4:e9:1a:74:48: ce:9f:90:27:da:2b:fc:5b:89:2c:95:a5:40:b6:4b: dc:39:a6:c8:30:24:2c:d4:fb:4e:2f:20:8a:b1:8d: 80:5f:d3:4b:11:85:71:5f:96:72:dd:d8:42:65:5b: fe:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:15:B7:63:EC:2F:27:6F:CD:EA:FA:12:C9:0E:3D:61:7F:61:0A:7B X509v3 Authority Key Identifier: keyid:CD:32:81:FC:87:5A:8D:D9:67:E7:E8:3C:D4:0F:10:6A:D5:B2:3A:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:3d:6c:88:b1:d6:05:c3:4f:88:04:be:c7:f8:88:b5:62:ad: f6:81:95:80:7d:6a:6d:9f:09:90:f0:ac:60:d8:2b:68:d2:0d: b8:22:40:ed:31:f4:92:b1:f2:ed:c5:59:0a:e3:d7:d9:5c:0b: 64:cd:f8:2c:23:ae:55:ce:33:3f:c7:3c:aa:61:9b:b6:ed:2c: 4d:20:51:b5:02:89:9f:fd:c2:8a:bd:ab:99:6d:93:48:c9:28: 2f:0e:c0:0d:24:6d:d4:8b:3c:0f:a2:ef:e4:54:bf:e7:3f:85: 52:c4:93:4e:1f:63:4c:83:e7:54:d8:7a:3a:3f:be:df:2b:36: 30:b8:33:d8:74:1c:e6:25:b6:6c:2a:5b:5f:03:c4:18:35:8e: 6d:89:76:a1:47:75:46:17:9b:76:de:8d:dc:0c:d0:3a:a8:1b: df:f0:09:f0:04:88:fd:49:8f:48:6d:e4:62:c6:41:fb:3b:11: fd:2c:33:b0:3d:d6:96:d0:73:33:37:f3:fa:d0:ad:53:fe:b6: 52:f2:6b:03:33:13:0a:fc:94:36:e1:e6:56:9e:14:fb:77:41: 2a:f7:d6:ca:be:f5:7c:0d:fc:4a:35:44:cc:51:bf:66:93:1c: 2d:12:ae:5c:26:f2:22:fa:1b:6b:a1:f1:4a:c7:7d:ad:c2:42: b7:97:c9:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQdsTKSyIbH4+ha+cjInsh9BBO/4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0QzMjgxRkM4NzVBOEREOTY3RTdFODNDRDQwRjEwNkFE NUIyM0E3NDAeFw0yNjAzMDExMjI3MjlaFw0yNjAzMDQyMDExMjlaMDMxMTAvBgNV BAMTKDZBMTVCNzYzRUMyRjI3NkZDREVBRkExMkM5MEUzRDYxN0Y2MTBBN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3j4HxU97oPISvp/gGotmd53y/ iCxkZj2HtUslMMP8SzT+Y8egciGOwPr1MBPZT5wmMTsrFtqQfNlgf6WfsYKCuD1F xkTWZcU59CZ/R6INCiIA7HU6v62jJmGUvarkBAl0myl3puGVPrvB/DSGjDvbW/8N cQU/gImNtDqIpzK87/X3HrnrF3pTBujRZOKKemU0eRTId4XYDGN9t2t7IGEUbidJ TlAWcv7IMYVfRHiFahOt6PIUKaTvU+cQuGg8z0cnIKBNOrRIPnkWlCCk6Rp0SM6f kCfaK/xbiSyVpUC2S9w5psgwJCzU+04vIIqxjYBf00sRhXFflnLd2EJlW/41AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUahW3Y+wvJ2/N6voSyQ49YX9hCnswHwYDVR0j BBgwFoAUzTKB/Idajdln5+g81A8QatWyOnQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NjhjYzA1OS01ZTZjLTQ1MDEtYjg5NC0xNGE4MmQxOGQyMWUvMC9DRDMyODFGQzg3 NUE4REQ5NjdFN0U4M0NENDBGMTA2QUQ1QjIzQTc0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0QzMjgxRkM4NzVBOEREOTY3RTdFODNDRDQwRjEwNkFENUIy M0E3NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTY4Y2MwNTktNWU2Yy00NTAxLWI4 OTQtMTRhODJkMThkMjFlLzAvQ0QzMjgxRkM4NzVBOEREOTY3RTdFODNDRDQwRjEw NkFENUIyM0E3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALQ9bIix1gXDT4gEvsf4iLVirfaBlYB9am2f CZDwrGDYK2jSDbgiQO0x9JKx8u3FWQrj19lcC2TN+CwjrlXOMz/HPKphm7btLE0g UbUCiZ/9woq9q5ltk0jJKC8OwA0kbdSLPA+i7+RUv+c/hVLEk04fY0yD51TYejo/ vt8rNjC4M9h0HOYltmwqW18DxBg1jm2JdqFHdUYXm3bejdwM0DqoG9/wCfAEiP1J j0ht5GLGQfs7Ef0sM7A91pbQczM38/rQrVP+tlLyawMzEwr8lDbh5laeFPt3QSr3 1sq+9XwN/Eo1RMxRv2aTHC0Srlwm8iL6G2uh8UrHfa3CQreXybU= -----END CERTIFICATE-----Generated at Mon Mar 2 02:07:36 2026 by rpki-client