$ rpki-client -vvf repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.mft File: D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.mft (raw, json) Hash identifier: QT/xV/daI0cqe377aMppoYcc7eMl74iI3t99JanXke4= Subject key identifier: 49:16:13:F0:56:A5:3E:EB:BE:54:CF:FB:F5:69:97:CC:19:89:20:CA Authority key identifier: D0:D1:DD:92:25:32:1E:1D:4D:1D:2F:63:A7:E0:88:0B:35:F6:83:7E Certificate issuer: /CN=D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E Certificate serial: 31182A06DA155E8CE69FB30615AD584952F13D58 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.mft Manifest number: 0214 Signing time: Sat 28 Feb 2026 07:11:45 +0000 Manifest this update: Sat 28 Feb 2026 07:06:45 +0000 Manifest next update: Tue 03 Mar 2026 18:00:45 +0000 Files and hashes: 1: 3130332e33352e3135352e302f32342d3234203d3e20313430343635.roa (hash: oG6Z5n7PBLWQXwObHyq0fNY8hlk/dgSiks250RxETxo=) 2: 3130332e33352e3135342e302f32342d3234203d3e20313430343635.roa (hash: XIO/+nSZhKej3jMnOjZbsCNK4K1ZrGVSBexuH2tpC2E=) 3: D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.crl (hash: 4HHtX5ZlVvuXAUgduQvVP+m9QhFJ6Zf75a7VAcbT9Xo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.crl rsync://repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 18:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:18:2a:06:da:15:5e:8c:e6:9f:b3:06:15:ad:58:49:52:f1:3d:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E Validity Not Before: Feb 28 07:06:45 2026 GMT Not After : Mar 3 18:00:45 2026 GMT Subject: CN=491613F056A53EEBBE54CFFBF56997CC198920CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:46:b9:23:c4:a4:31:28:46:1f:f7:ba:d1:f2: 86:73:75:dc:48:78:dc:0a:b8:09:1d:42:07:67:8e: ce:24:ad:7d:5a:c2:e0:c9:1d:ab:e5:dc:d4:b7:ec: 2d:87:d2:35:8e:8b:d9:8b:75:6c:a6:2c:a5:44:20: 75:cc:40:c6:3c:f7:03:f0:45:3f:a6:bb:a9:94:7e: 35:ef:ce:a9:2a:92:4a:1f:fc:16:7b:5d:3c:3b:f8: 92:f7:aa:22:78:bd:e6:ed:31:06:9b:f9:fb:eb:0b: fd:94:99:83:63:27:75:3c:9f:6a:df:3d:2b:fd:63: 31:bb:c7:39:c5:6e:20:c7:af:25:c8:09:00:d8:31: 35:48:3e:f4:e6:0c:91:45:7f:4b:89:0e:f7:bc:bc: 9c:69:9a:51:63:6a:67:67:05:c4:7c:3e:94:86:aa: 39:e4:6b:13:bc:0c:f4:d0:6f:f1:c8:44:e6:af:83: 07:20:f7:18:04:63:aa:fe:cb:9b:f3:61:28:87:68: ba:c5:ef:5d:c3:94:f9:43:9f:bf:b6:1f:89:1e:59: f6:53:7c:8e:fd:0d:f4:13:9a:f0:66:65:6f:0c:52: 6f:03:6a:b3:70:11:f1:5a:97:65:41:59:46:36:a4: 6d:ef:6e:ee:f1:b2:e2:d6:3f:bb:e6:7f:70:ea:24: cc:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:16:13:F0:56:A5:3E:EB:BE:54:CF:FB:F5:69:97:CC:19:89:20:CA X509v3 Authority Key Identifier: keyid:D0:D1:DD:92:25:32:1E:1D:4D:1D:2F:63:A7:E0:88:0B:35:F6:83:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:02:a9:70:01:83:b0:0b:f6:12:25:ad:df:d8:fb:b1:00:d1: 22:9a:a5:e9:9a:8d:ad:b0:35:06:a7:83:30:ed:fd:d5:c8:3f: 57:3e:c2:b6:90:77:7f:82:e5:28:0a:1d:a5:3f:8c:84:41:d1: d8:64:5b:95:35:a0:14:6b:32:99:35:64:3f:77:5b:41:f7:f5: 28:9d:bb:61:9f:b0:16:6c:1e:e8:97:f8:5f:61:5f:75:da:bb: 6b:67:1d:44:43:c5:f9:9b:25:f2:c3:7b:a5:14:2b:ab:d5:42: 1c:3d:50:7d:83:e2:f2:7c:1e:c4:12:0d:a8:91:d2:8e:42:59: 36:2a:c6:ec:45:a6:a6:d7:cc:c2:0e:15:01:db:b1:d6:bd:ac: 5d:37:b8:f8:9c:97:eb:a8:ea:be:07:b1:30:51:d9:b9:be:10: a0:4e:16:42:9c:74:19:d0:df:20:2f:fd:0e:2e:99:59:04:4b: 2a:6d:98:a8:5d:10:23:1d:e9:fd:9a:90:03:bd:e7:10:83:6f: 75:3b:56:48:b4:65:b8:6e:59:33:45:9e:1b:78:ff:24:ff:da: b2:77:d7:c9:60:98:ae:c9:d7:2b:cb:46:a3:af:72:d8:9a:9b: 4b:8c:7b:ac:69:b3:aa:fb:b4:85:d3:09:bc:77:dd:72:9b:dc: 21:3c:33:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMRgqBtoVXozmn7MGFa1YSVLxPVgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBEMUREOTIyNTMyMUUxRDREMUQyRjYzQTdFMDg4MEIz NUY2ODM3RTAeFw0yNjAyMjgwNzA2NDVaFw0yNjAzMDMxODAwNDVaMDMxMTAvBgNV BAMTKDQ5MTYxM0YwNTZBNTNFRUJCRTU0Q0ZGQkY1Njk5N0NDMTk4OTIwQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7RrkjxKQxKEYf97rR8oZzddxI eNwKuAkdQgdnjs4krX1awuDJHavl3NS37C2H0jWOi9mLdWymLKVEIHXMQMY89wPw RT+mu6mUfjXvzqkqkkof/BZ7XTw7+JL3qiJ4vebtMQab+fvrC/2UmYNjJ3U8n2rf PSv9YzG7xznFbiDHryXICQDYMTVIPvTmDJFFf0uJDve8vJxpmlFjamdnBcR8PpSG qjnkaxO8DPTQb/HIROavgwcg9xgEY6r+y5vzYSiHaLrF713DlPlDn7+2H4keWfZT fI79DfQTmvBmZW8MUm8DarNwEfFal2VBWUY2pG3vbu7xsuLWP7vmf3DqJMylAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSRYT8FalPuu+VM/79WmXzBmJIMowHwYDVR0j BBgwFoAU0NHdkiUyHh1NHS9jp+CICzX2g34wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MjkzMjljZi0zMTIzLTRjZTAtYTY4Ny0wYTAzY2Q3NTg3MzgvMC9EMEQxREQ5MjI1 MzIxRTFENEQxRDJGNjNBN0UwODgwQjM1RjY4MzdFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDBEMUREOTIyNTMyMUUxRDREMUQyRjYzQTdFMDg4MEIzNUY2 ODM3RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjI5MzI5Y2YtMzEyMy00Y2UwLWE2 ODctMGEwM2NkNzU4NzM4LzAvRDBEMUREOTIyNTMyMUUxRDREMUQyRjYzQTdFMDg4 MEIzNUY2ODM3RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJoCqXABg7AL9hIlrd/Y+7EA0SKapemaja2w NQangzDt/dXIP1c+wraQd3+C5SgKHaU/jIRB0dhkW5U1oBRrMpk1ZD93W0H39Sid u2GfsBZsHuiX+F9hX3Xau2tnHURDxfmbJfLDe6UUK6vVQhw9UH2D4vJ8HsQSDaiR 0o5CWTYqxuxFpqbXzMIOFQHbsda9rF03uPicl+uo6r4HsTBR2bm+EKBOFkKcdBnQ 3yAv/Q4umVkESyptmKhdECMd6f2akAO95xCDb3U7Vki0ZbhuWTNFnht4/yT/2rJ3 18lgmK7J1yvLRqOvctiam0uMe6xps6r7tIXTCbx33XKb3CE8M/0= -----END CERTIFICATE-----Generated at Mon Mar 2 09:24:17 2026 by rpki-client