$ rpki-client -vvf repo-rpki.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/754BC04892430632A8C965AF4C5B71C59B2A3CCB.mft File: 754BC04892430632A8C965AF4C5B71C59B2A3CCB.mft (raw, json) Hash identifier: +WlEk2TRZnML6/n8tGtkAqnsjxMCOe7EbgnedWkVWQk= Subject key identifier: 89:43:67:36:68:FD:78:9F:58:F1:44:C9:47:D8:1E:41:D9:38:F7:0E Authority key identifier: 75:4B:C0:48:92:43:06:32:A8:C9:65:AF:4C:5B:71:C5:9B:2A:3C:CB Certificate issuer: /CN=754BC04892430632A8C965AF4C5B71C59B2A3CCB Certificate serial: 77694B95E37FF2C1CA5CA40F9EFB2CFE1DDD0361 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/754BC04892430632A8C965AF4C5B71C59B2A3CCB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/754BC04892430632A8C965AF4C5B71C59B2A3CCB.mft Manifest number: 0286 Signing time: Sun 01 Mar 2026 18:51:50 +0000 Manifest this update: Sun 01 Mar 2026 18:46:50 +0000 Manifest next update: Thu 05 Mar 2026 03:24:50 +0000 Files and hashes: 1: 3230322e34332e3131362e302f32332d3234203d3e203435373037.roa (hash: HCZA2Dkaf0AYhdHhm+/ujp4EakaURfA1i4HAbOdk6Co=) 2: 3130332e382e35362e302f32322d3234203d3e203435373037.roa (hash: C5Tq331HOxIpoDyCifcP3xL7Rqpg2//FSSaLWr+UtUo=) 3: 754BC04892430632A8C965AF4C5B71C59B2A3CCB.crl (hash: P1/R+79Tkf/O3ZPZXgBnNmva6JQTi4D5me/u9SfyL4c=) 4: 3131302e39332e31322e302f32322d3234203d3e203435373037.roa (hash: 87R1PuyhfrxdjwQzRqLTxL2d+b662e1JTgNI5Ta3odE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/754BC04892430632A8C965AF4C5B71C59B2A3CCB.crl rsync://repo-rpki.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/754BC04892430632A8C965AF4C5B71C59B2A3CCB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/754BC04892430632A8C965AF4C5B71C59B2A3CCB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 03:24:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:69:4b:95:e3:7f:f2:c1:ca:5c:a4:0f:9e:fb:2c:fe:1d:dd:03:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=754BC04892430632A8C965AF4C5B71C59B2A3CCB Validity Not Before: Mar 1 18:46:50 2026 GMT Not After : Mar 5 03:24:50 2026 GMT Subject: CN=8943673668FD789F58F144C947D81E41D938F70E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:90:49:68:37:8e:43:64:bd:ca:e4:f2:07:2b: 9b:33:27:5c:14:06:de:c2:dd:c6:45:4c:f8:14:19: ad:bf:7b:81:e9:e0:82:ec:6c:a2:72:76:b4:09:f9: ed:8c:0a:88:06:b2:a2:1a:a2:81:2f:01:b1:c0:5b: 16:66:fd:24:5b:7e:e1:6b:be:96:66:fe:ff:50:93: db:8c:12:78:4c:db:a1:97:be:83:c5:a7:9b:37:bd: 0c:73:46:86:01:1d:3b:b7:aa:44:2c:59:ba:86:8b: 22:df:99:93:0b:36:3f:c4:d5:8d:2d:c9:8c:05:28: bc:6f:2d:ba:f0:f0:af:a7:c5:ec:1a:8d:7d:ae:1b: 52:4d:c0:fb:ff:b1:5f:57:75:de:b9:6c:2d:22:a6: 28:3b:97:f0:82:84:ac:e9:e8:60:04:2e:69:fd:52: bd:2c:ae:0d:e8:f3:b6:56:f2:1b:75:df:32:ee:fb: f6:13:5b:1c:38:73:57:ba:fc:b5:ef:81:9d:97:cb: 47:05:83:f7:50:38:b0:07:5b:de:29:ca:d6:25:bc: 6c:c5:01:83:35:86:1b:ef:aa:f8:eb:9e:7b:a1:99: 41:28:52:bd:03:30:4f:c8:2b:6e:aa:f4:2f:40:ff: 85:3c:20:8c:e5:db:7e:f4:33:91:c2:9c:57:e1:a7: b2:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:43:67:36:68:FD:78:9F:58:F1:44:C9:47:D8:1E:41:D9:38:F7:0E X509v3 Authority Key Identifier: keyid:75:4B:C0:48:92:43:06:32:A8:C9:65:AF:4C:5B:71:C5:9B:2A:3C:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/754BC04892430632A8C965AF4C5B71C59B2A3CCB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/754BC04892430632A8C965AF4C5B71C59B2A3CCB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/754BC04892430632A8C965AF4C5B71C59B2A3CCB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:a8:26:83:e0:bd:fb:30:79:6b:d0:60:fa:f3:cc:e0:a9:0c: cd:ff:b6:9d:8c:dd:e8:bc:c4:02:b6:b1:3d:b1:98:7d:c3:31: ab:5b:94:d1:75:2d:bd:b6:ae:79:f7:69:85:9c:4c:d5:96:92: a0:9c:5d:11:b6:f9:0e:ec:a0:c9:a0:46:76:7d:83:84:fc:ab: bd:45:42:81:6a:0e:d7:78:65:ae:9f:dc:42:47:0b:d9:bc:31: 55:54:84:c6:16:a9:c8:75:bb:a8:ef:8c:8e:81:99:e6:06:25: 52:3f:77:ce:cf:63:68:6f:14:49:2c:10:d7:49:e6:55:99:94: f1:2a:a0:3b:4a:34:40:4f:1e:4f:c1:20:07:ce:37:83:6e:e7: a4:d3:1b:a5:d5:b5:23:76:d2:fd:e6:06:4e:26:79:68:40:4b: 8c:68:89:e6:f9:ce:5e:01:80:ce:90:d6:c1:d0:ef:c7:23:5e: a9:f6:26:bf:f3:2b:49:d5:49:08:ec:9b:ea:e9:56:87:d1:fa: d0:ab:f0:74:f9:63:13:36:59:bf:cf:36:dc:8f:db:6f:fb:b7: 80:c0:6e:45:35:08:b8:ca:29:ea:62:6c:e9:02:ca:be:20:dc: 1d:f2:af:ae:a7:36:e3:b9:33:97:a8:5f:27:f7:13:a7:47:4b: 7b:86:f7:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd2lLleN/8sHKXKQPnvss/h3dA2EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzU0QkMwNDg5MjQzMDYzMkE4Qzk2NUFGNEM1QjcxQzU5 QjJBM0NDQjAeFw0yNjAzMDExODQ2NTBaFw0yNjAzMDUwMzI0NTBaMDMxMTAvBgNV BAMTKDg5NDM2NzM2NjhGRDc4OUY1OEYxNDRDOTQ3RDgxRTQxRDkzOEY3MEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXkEloN45DZL3K5PIHK5szJ1wU Bt7C3cZFTPgUGa2/e4Hp4ILsbKJydrQJ+e2MCogGsqIaooEvAbHAWxZm/SRbfuFr vpZm/v9Qk9uMEnhM26GXvoPFp5s3vQxzRoYBHTu3qkQsWbqGiyLfmZMLNj/E1Y0t yYwFKLxvLbrw8K+nxewajX2uG1JNwPv/sV9Xdd65bC0ipig7l/CChKzp6GAELmn9 Ur0srg3o87ZW8ht13zLu+/YTWxw4c1e6/LXvgZ2Xy0cFg/dQOLAHW94pytYlvGzF AYM1hhvvqvjrnnuhmUEoUr0DME/IK26q9C9A/4U8IIzl2370M5HCnFfhp7INAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiUNnNmj9eJ9Y8UTJR9geQdk49w4wHwYDVR0j BBgwFoAUdUvASJJDBjKoyWWvTFtxxZsqPMswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MGQyYmRlNC0wNTZiLTQ1YzYtODBiZi1mNWQ0ZDI3NzMzNmIvMC83NTRCQzA0ODky NDMwNjMyQThDOTY1QUY0QzVCNzFDNTlCMkEzQ0NCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzU0QkMwNDg5MjQzMDYzMkE4Qzk2NUFGNEM1QjcxQzU5QjJB M0NDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjBkMmJkZTQtMDU2Yi00NWM2LTgw YmYtZjVkNGQyNzczMzZiLzAvNzU0QkMwNDg5MjQzMDYzMkE4Qzk2NUFGNEM1Qjcx QzU5QjJBM0NDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGCoJoPgvfsweWvQYPrzzOCpDM3/tp2M3ei8 xAK2sT2xmH3DMatblNF1Lb22rnn3aYWcTNWWkqCcXRG2+Q7soMmgRnZ9g4T8q71F QoFqDtd4Za6f3EJHC9m8MVVUhMYWqch1u6jvjI6BmeYGJVI/d87PY2hvFEksENdJ 5lWZlPEqoDtKNEBPHk/BIAfON4Nu56TTG6XVtSN20v3mBk4meWhAS4xoieb5zl4B gM6Q1sHQ78cjXqn2Jr/zK0nVSQjsm+rpVofR+tCr8HT5YxM2Wb/PNtyP22/7t4DA bkU1CLjKKepibOkCyr4g3B3yr66nNuO5M5eoXyf3E6dHS3uG95o= -----END CERTIFICATE-----Generated at Mon Mar 2 15:41:34 2026 by rpki-client