$ rpki-client -vvf repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.mft File: 917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.mft (raw, json) Hash identifier: xMCLnwu31Bf5rAN9isxvaShkIwz/ARVxEqkYsmarJs4= Subject key identifier: 12:11:D7:7B:8D:5C:4C:8D:52:6B:65:43:75:BC:7A:CE:8F:0F:67:4A Authority key identifier: 91:7A:9D:24:BF:1E:AD:6F:A4:A1:F8:FD:81:D5:31:37:EF:52:E7:84 Certificate issuer: /CN=917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784 Certificate serial: 30244BCF9D3CD1CAB74103BF79425695BD99E76F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.mft Manifest number: 0296 Signing time: Mon 02 Mar 2026 06:50:44 +0000 Manifest this update: Mon 02 Mar 2026 06:45:44 +0000 Manifest next update: Thu 05 Mar 2026 15:03:44 +0000 Files and hashes: 1: 917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.crl (hash: t59JjW08H7LFdM+w7gCsZ64kzVyBqqB8XdQowSrZO2Y=) 2: 323430303a346265303a3a2f33322d3438203d3e20313431383938.roa (hash: cViD++tff+X7xq1z33jmPNpr3W6MqEIUFSVqOeIQ0V4=) 3: 3130332e3136342e31322e302f32332d3234203d3e20313431383938.roa (hash: +et6XAZaJYtUR6Dc2zidlhc9nlrgtLBlWzalZZGRqM4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.crl rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:24:4b:cf:9d:3c:d1:ca:b7:41:03:bf:79:42:56:95:bd:99:e7:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784 Validity Not Before: Mar 2 06:45:44 2026 GMT Not After : Mar 5 15:03:44 2026 GMT Subject: CN=1211D77B8D5C4C8D526B654375BC7ACE8F0F674A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:81:4d:b8:c4:27:f9:b7:f7:4b:29:9f:28:5e: b3:31:a3:69:ff:d9:d8:1d:02:fc:3c:ed:e3:82:a0: 6e:5e:73:50:9f:17:f1:ba:b7:80:0a:a9:33:5f:a2: 63:77:2a:0e:bf:e2:df:96:d1:8e:87:11:92:ba:7a: 66:8c:aa:c6:a6:d7:56:01:a7:d5:a8:70:24:99:2d: 21:18:d5:1e:0d:34:90:34:b7:2a:e4:8f:fa:ad:01: 6d:ea:92:07:ee:1a:23:c9:1f:66:6e:26:3d:60:20: 3e:fa:6c:8c:08:a5:20:9b:a2:da:2b:1a:4b:59:97: cf:42:97:86:bb:79:c1:fe:3c:80:92:49:9e:c0:47: 85:b6:92:73:25:36:77:01:1d:82:c5:3a:72:73:80: b6:e5:b3:e9:dc:03:70:4a:d8:c4:99:55:21:25:3d: b2:19:3c:d3:c9:2c:f7:0a:b2:57:42:33:88:56:8e: 16:f6:54:ea:41:ab:ed:5f:d3:db:96:f8:62:f5:5c: dd:3b:5d:ef:10:19:8d:ff:1a:4d:2f:1b:92:93:4d: 7f:e8:96:75:43:50:d4:02:c1:56:2d:af:ca:ba:58: c6:0b:9b:fd:fa:1e:68:d0:01:60:67:10:b5:01:4e: f5:27:4a:67:d5:80:56:09:a9:1c:b0:2e:9c:66:5a: ce:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:11:D7:7B:8D:5C:4C:8D:52:6B:65:43:75:BC:7A:CE:8F:0F:67:4A X509v3 Authority Key Identifier: keyid:91:7A:9D:24:BF:1E:AD:6F:A4:A1:F8:FD:81:D5:31:37:EF:52:E7:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:69:76:10:fb:cd:fa:3e:6a:d1:59:ca:39:d1:d1:4d:9a:6e: bd:f6:5d:53:70:6a:95:aa:10:e9:29:e5:46:9e:bf:d6:69:a3: 29:18:59:51:f4:ac:86:74:c9:e2:ec:dd:80:8e:00:ec:e8:1f: 34:24:37:36:b3:53:57:72:45:81:c8:50:61:a8:32:22:a1:b4: 60:58:3b:f4:c0:50:34:54:33:ee:cc:73:5e:58:e4:46:23:d6: cd:ba:a5:cd:08:e4:75:93:76:99:27:14:12:0d:f3:e0:4a:67: 6d:b6:61:60:33:6c:86:49:7f:40:ba:5e:60:99:99:10:51:99: 91:70:13:64:ed:ae:02:51:9e:c5:a7:43:79:f7:2f:c8:35:87: 5c:85:59:40:c9:03:6d:fe:78:69:5d:db:79:04:35:1b:ef:fd: 54:b0:fe:41:03:00:ed:e4:6f:40:e7:6e:3e:04:5f:62:8b:b9: 8b:60:ad:12:87:2f:24:1d:7b:83:2a:eb:25:e8:4b:08:82:6c: 0c:16:c0:f8:0c:69:51:fc:96:f8:f6:3c:ec:61:47:0b:41:fa: 00:5c:b9:a0:64:70:bf:0e:c5:13:d9:ea:19:30:31:f2:40:04: 84:27:49:0c:7b:c9:29:bf:fa:24:f3:11:d4:60:b5:a6:b3:cd: 49:bc:55:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMCRLz5080cq3QQO/eUJWlb2Z528wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTE3QTlEMjRCRjFFQUQ2RkE0QTFGOEZEODFENTMxMzdF RjUyRTc4NDAeFw0yNjAzMDIwNjQ1NDRaFw0yNjAzMDUxNTAzNDRaMDMxMTAvBgNV BAMTKDEyMTFENzdCOEQ1QzRDOEQ1MjZCNjU0Mzc1QkM3QUNFOEYwRjY3NEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfgU24xCf5t/dLKZ8oXrMxo2n/ 2dgdAvw87eOCoG5ec1CfF/G6t4AKqTNfomN3Kg6/4t+W0Y6HEZK6emaMqsam11YB p9WocCSZLSEY1R4NNJA0tyrkj/qtAW3qkgfuGiPJH2ZuJj1gID76bIwIpSCbotor GktZl89Cl4a7ecH+PICSSZ7AR4W2knMlNncBHYLFOnJzgLbls+ncA3BK2MSZVSEl PbIZPNPJLPcKsldCM4hWjhb2VOpBq+1f09uW+GL1XN07Xe8QGY3/Gk0vG5KTTX/o lnVDUNQCwVYtr8q6WMYLm/36HmjQAWBnELUBTvUnSmfVgFYJqRywLpxmWs6HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEhHXe41cTI1Sa2VDdbx6zo8PZ0owHwYDVR0j BBgwFoAUkXqdJL8erW+kofj9gdUxN+9S54QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YmRmZjgxOS0yYmFkLTQ4M2QtOWZhOC1iNmViYzQ4NDAzMWEvMC85MTdBOUQyNEJG MUVBRDZGQTRBMUY4RkQ4MUQ1MzEzN0VGNTJFNzg0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTE3QTlEMjRCRjFFQUQ2RkE0QTFGOEZEODFENTMxMzdFRjUy RTc4NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWJkZmY4MTktMmJhZC00ODNkLTlm YTgtYjZlYmM0ODQwMzFhLzAvOTE3QTlEMjRCRjFFQUQ2RkE0QTFGOEZEODFENTMx MzdFRjUyRTc4NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACVpdhD7zfo+atFZyjnR0U2abr32XVNwapWq EOkp5Uaev9ZpoykYWVH0rIZ0yeLs3YCOAOzoHzQkNzazU1dyRYHIUGGoMiKhtGBY O/TAUDRUM+7Mc15Y5EYj1s26pc0I5HWTdpknFBIN8+BKZ222YWAzbIZJf0C6XmCZ mRBRmZFwE2TtrgJRnsWnQ3n3L8g1h1yFWUDJA23+eGld23kENRvv/VSw/kEDAO3k b0Dnbj4EX2KLuYtgrRKHLyQde4Mq6yXoSwiCbAwWwPgMaVH8lvj2POxhRwtB+gBc uaBkcL8OxRPZ6hkwMfJABIQnSQx7ySm/+iTzEdRgtaazzUm8VYA= -----END CERTIFICATE-----Generated at Mon Mar 2 17:40:51 2026 by rpki-client