$ rpki-client -vvf repo-rpki.idnic.net/repo/2038f3a1-ac0f-4f7c-9c6c-6b27566fe70c/0/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.mft File: D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.mft (raw, json) Hash identifier: kAbDPF/XjigMHuk04nU7xpze2wFRpGIrWktJvAzgWI8= Subject key identifier: D3:92:76:C2:23:22:2C:C9:7E:7E:A4:F3:0A:93:46:97:C1:B3:09:7C Authority key identifier: D6:9B:38:7E:6B:9C:AF:1B:D2:6B:28:6A:94:8D:5A:77:FB:85:F8:0A Certificate issuer: /CN=D69B387E6B9CAF1BD26B286A948D5A77FB85F80A Certificate serial: 0386CA104F2795199E37AFA5E8611779766CA50B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2038f3a1-ac0f-4f7c-9c6c-6b27566fe70c/0/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.mft Manifest number: E1 Signing time: Mon 02 Mar 2026 04:52:28 +0000 Manifest this update: Mon 02 Mar 2026 04:47:28 +0000 Manifest next update: Thu 05 Mar 2026 09:55:28 +0000 Files and hashes: 1: 3130332e36352e3134322e302f32332d3234203d3e20313432333333.roa (hash: Sg9u/AwZirmCvlw+W9NyMDOy14LKr1t7vCJz3dMVUog=) 2: D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.crl (hash: epQs+AXvWCF7HVraTb/jfCXyyD8mvH+7RLC51WN+Afk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2038f3a1-ac0f-4f7c-9c6c-6b27566fe70c/0/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.crl rsync://repo-rpki.idnic.net/repo/2038f3a1-ac0f-4f7c-9c6c-6b27566fe70c/0/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:86:ca:10:4f:27:95:19:9e:37:af:a5:e8:61:17:79:76:6c:a5:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D69B387E6B9CAF1BD26B286A948D5A77FB85F80A Validity Not Before: Mar 2 04:47:28 2026 GMT Not After : Mar 5 09:55:28 2026 GMT Subject: CN=D39276C223222CC97E7EA4F30A934697C1B3097C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:4a:2d:3c:d1:66:72:9c:1d:5c:0a:46:48:99: 3d:1a:33:0a:f1:35:b9:79:de:9b:e9:25:47:c7:d2: 9c:32:eb:63:fa:29:d0:ac:37:73:bb:58:c2:cf:ec: 42:76:5f:93:a7:6a:8c:11:97:c3:34:b3:a2:2d:e7: ec:42:78:61:03:9c:36:8c:b3:2e:45:75:9e:1b:94: c2:fa:47:91:61:99:46:e9:3d:70:34:d2:f4:80:9a: 76:b7:88:25:ae:87:04:6e:97:c2:c3:fd:80:c7:89: 04:73:81:f3:48:54:3b:63:84:58:4b:e4:ff:fa:5c: 10:53:bc:6b:2e:38:e3:49:8f:4d:d4:69:d0:a7:9d: 7f:16:fe:a3:95:b1:8e:38:4b:9d:ca:8c:db:05:4c: 0a:ca:a1:8c:67:d0:8d:d5:5b:3a:64:40:da:1f:1a: ea:23:4d:01:c8:f7:1a:8e:74:84:9f:59:a2:e9:82: 2c:cf:12:90:d1:04:6d:33:5f:f2:44:d6:be:34:c2: b7:d1:b6:39:be:ea:c7:06:ce:ac:ac:43:5e:99:4b: c0:ba:af:45:79:a4:ce:5c:fa:c0:a3:5f:f6:20:f5: e5:1e:0f:bc:fe:65:c9:d6:31:2b:e9:60:fa:60:78: e6:86:10:a6:41:25:7c:1c:38:34:8b:01:5c:8c:51: 05:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:92:76:C2:23:22:2C:C9:7E:7E:A4:F3:0A:93:46:97:C1:B3:09:7C X509v3 Authority Key Identifier: keyid:D6:9B:38:7E:6B:9C:AF:1B:D2:6B:28:6A:94:8D:5A:77:FB:85:F8:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2038f3a1-ac0f-4f7c-9c6c-6b27566fe70c/0/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2038f3a1-ac0f-4f7c-9c6c-6b27566fe70c/0/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:90:23:ba:22:1d:3a:f8:74:7c:c4:82:6c:fe:20:3a:85:a6: 5b:e1:a6:ba:7c:e2:d1:0b:b3:29:4e:c6:75:ab:a3:46:4b:b2: a8:18:53:29:04:84:9a:8c:1f:99:02:66:19:47:5f:36:3b:53: 91:b4:31:85:db:c7:83:e2:63:44:b6:7b:c8:2b:54:2c:d7:21: 05:1c:7e:74:0b:3e:18:47:1a:a0:79:11:85:f4:1d:cb:9c:fb: 98:53:0a:cb:f2:03:9b:c8:e6:9c:34:55:09:ed:8a:b1:40:23: fb:f4:c0:26:92:bc:f4:86:dc:79:08:bc:79:dd:5d:9f:f1:35: 1a:42:fd:a6:85:2b:4a:7e:a4:7f:b3:96:62:de:01:7a:70:5c: 54:ae:8e:bf:5a:04:d0:05:10:eb:29:bc:c0:bf:43:8c:6b:ef: 26:14:11:e2:33:bc:b6:23:39:bb:da:64:bd:0e:16:52:34:6f: 11:f8:cb:c6:5e:41:d7:33:f3:76:8f:36:c6:76:b8:e8:05:00: b4:40:ca:d8:1c:44:da:c1:94:9c:8e:9e:4d:5f:5b:aa:c0:eb: fe:ed:0a:af:d0:e4:6f:3e:ea:a9:6d:c8:db:dc:68:e9:97:d1: 78:2c:66:aa:a9:36:9a:b8:fd:cf:92:66:3f:22:6a:05:21:c3: 5e:1d:b7:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA4bKEE8nlRmeN6+l6GEXeXZspQswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDY5QjM4N0U2QjlDQUYxQkQyNkIyODZBOTQ4RDVBNzdG Qjg1RjgwQTAeFw0yNjAzMDIwNDQ3MjhaFw0yNjAzMDUwOTU1MjhaMDMxMTAvBgNV BAMTKEQzOTI3NkMyMjMyMjJDQzk3RTdFQTRGMzBBOTM0Njk3QzFCMzA5N0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSSi080WZynB1cCkZImT0aMwrx Nbl53pvpJUfH0pwy62P6KdCsN3O7WMLP7EJ2X5OnaowRl8M0s6It5+xCeGEDnDaM sy5FdZ4blML6R5FhmUbpPXA00vSAmna3iCWuhwRul8LD/YDHiQRzgfNIVDtjhFhL 5P/6XBBTvGsuOONJj03UadCnnX8W/qOVsY44S53KjNsFTArKoYxn0I3VWzpkQNof GuojTQHI9xqOdISfWaLpgizPEpDRBG0zX/JE1r40wrfRtjm+6scGzqysQ16ZS8C6 r0V5pM5c+sCjX/Yg9eUeD7z+ZcnWMSvpYPpgeOaGEKZBJXwcODSLAVyMUQUxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU05J2wiMiLMl+fqTzCpNGl8GzCXwwHwYDVR0j BBgwFoAU1ps4fmucrxvSayhqlI1ad/uF+AowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDM4ZjNhMS1hYzBmLTRmN2MtOWM2Yy02YjI3NTY2ZmU3MGMvMC9ENjlCMzg3RTZC OUNBRjFCRDI2QjI4NkE5NDhENUE3N0ZCODVGODBBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDY5QjM4N0U2QjlDQUYxQkQyNkIyODZBOTQ4RDVBNzdGQjg1 RjgwQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjAzOGYzYTEtYWMwZi00ZjdjLTlj NmMtNmIyNzU2NmZlNzBjLzAvRDY5QjM4N0U2QjlDQUYxQkQyNkIyODZBOTQ4RDVB NzdGQjg1RjgwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABaQI7oiHTr4dHzEgmz+IDqFplvhprp84tEL sylOxnWro0ZLsqgYUykEhJqMH5kCZhlHXzY7U5G0MYXbx4PiY0S2e8grVCzXIQUc fnQLPhhHGqB5EYX0Hcuc+5hTCsvyA5vI5pw0VQntirFAI/v0wCaSvPSG3HkIvHnd XZ/xNRpC/aaFK0p+pH+zlmLeAXpwXFSujr9aBNAFEOspvMC/Q4xr7yYUEeIzvLYj ObvaZL0OFlI0bxH4y8ZeQdcz83aPNsZ2uOgFALRAytgcRNrBlJyOnk1fW6rA6/7t Cq/Q5G8+6qltyNvcaOmX0XgsZqqpNpq4/c+SZj8iagUhw14dt8I= -----END CERTIFICATE-----Generated at Mon Mar 2 15:19:32 2026 by rpki-client