$ rpki-client -vvf repo-rpki.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/3194DFD66457359AF7BF3BF09EA766ADEF1329B5.mft File: 3194DFD66457359AF7BF3BF09EA766ADEF1329B5.mft (raw, json) Hash identifier: BxgvNKy9fxBJUpIQzC9vPC6J22GwKKYCoEJB2DYM0H0= Subject key identifier: 6F:31:5C:AA:BC:82:3B:42:A8:C7:8B:E8:9F:A9:11:E9:4C:C5:F9:F3 Authority key identifier: 31:94:DF:D6:64:57:35:9A:F7:BF:3B:F0:9E:A7:66:AD:EF:13:29:B5 Certificate issuer: /CN=3194DFD66457359AF7BF3BF09EA766ADEF1329B5 Certificate serial: 22E03903AB4301705B4C6E4DC4B37C6953884B59 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3194DFD66457359AF7BF3BF09EA766ADEF1329B5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/3194DFD66457359AF7BF3BF09EA766ADEF1329B5.mft Manifest number: BE Signing time: Sun 01 Mar 2026 14:50:52 +0000 Manifest this update: Sun 01 Mar 2026 14:45:52 +0000 Manifest next update: Wed 04 Mar 2026 22:25:52 +0000 Files and hashes: 1: 3194DFD66457359AF7BF3BF09EA766ADEF1329B5.crl (hash: tXXXeCo23bmXCN15PhsBVQ4XZl+gJJGh84sXIZ5jACI=) 2: 3130332e3136322e33352e302f32342d3234203d3e20313431363535.roa (hash: I28r4i4lWDSRmz98gxENOln+97MGeec1Z1eAP51TwjI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/3194DFD66457359AF7BF3BF09EA766ADEF1329B5.crl rsync://repo-rpki.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/3194DFD66457359AF7BF3BF09EA766ADEF1329B5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3194DFD66457359AF7BF3BF09EA766ADEF1329B5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 22:25:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:e0:39:03:ab:43:01:70:5b:4c:6e:4d:c4:b3:7c:69:53:88:4b:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3194DFD66457359AF7BF3BF09EA766ADEF1329B5 Validity Not Before: Mar 1 14:45:52 2026 GMT Not After : Mar 4 22:25:52 2026 GMT Subject: CN=6F315CAABC823B42A8C78BE89FA911E94CC5F9F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ce:ce:9a:da:9e:e6:3a:8b:86:db:12:d7:fb: 0a:5e:37:a7:5c:73:38:c9:a4:f8:38:8d:cd:3a:d2: 7c:7b:75:0b:ae:e3:90:d2:5a:ac:ef:a8:cb:bf:6b: f4:f8:f7:15:28:0b:53:27:be:df:00:b6:44:0b:41: 4a:d4:57:b3:3f:d7:e2:3a:e3:20:fd:05:c5:8a:f1: ff:a9:42:3c:a6:c7:72:b0:5b:17:cc:5c:c2:24:88: 69:15:ea:33:94:74:fe:78:d7:53:d6:e2:6d:0f:c4: 57:d1:af:29:a2:4b:6e:5f:77:98:0e:e8:22:de:9f: 97:0a:37:83:07:df:17:d0:e6:09:13:53:4d:43:ce: 51:29:85:e0:93:04:27:7e:5c:c9:ec:3b:11:47:78: 84:23:0f:21:f2:a5:2a:24:9b:d9:7b:8d:2e:d3:55: d5:b6:5e:c7:ae:36:65:fc:8f:59:26:61:69:80:bb: af:e3:d7:50:7b:78:34:fa:32:f2:5d:13:b8:cc:25: 47:55:b5:5f:f1:b5:d1:77:da:ec:f4:41:90:be:99: 44:a0:83:00:11:11:02:b7:53:c5:11:46:9d:8d:5c: 93:60:d4:d5:a6:ab:04:f7:1d:51:f6:73:be:a3:b3: 8f:b9:76:08:9d:94:df:04:e4:7b:6e:f7:79:86:f5: 5f:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:31:5C:AA:BC:82:3B:42:A8:C7:8B:E8:9F:A9:11:E9:4C:C5:F9:F3 X509v3 Authority Key Identifier: keyid:31:94:DF:D6:64:57:35:9A:F7:BF:3B:F0:9E:A7:66:AD:EF:13:29:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/3194DFD66457359AF7BF3BF09EA766ADEF1329B5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3194DFD66457359AF7BF3BF09EA766ADEF1329B5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/3194DFD66457359AF7BF3BF09EA766ADEF1329B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:05:52:c4:dc:7d:ad:e2:46:2d:ae:2e:95:4e:32:27:fd:9a: b5:8e:ff:44:e9:8e:27:cb:50:41:22:f2:6d:72:11:cd:54:55: 91:7d:d8:1b:0a:f0:63:d4:af:fc:06:4c:7c:8a:dd:36:5b:77: 13:8e:9e:2d:c6:c8:3f:5a:e6:26:e4:a9:78:c0:56:87:d5:43: ca:ae:5d:37:ea:85:1a:e8:41:54:98:31:40:5a:b8:9d:f7:7c: ce:1e:40:71:65:60:3b:fc:52:70:7a:29:23:a7:18:e0:8d:b9: 54:d8:2d:f5:6e:4d:1a:3a:b8:d5:8d:a3:21:6f:e0:c3:7e:90: b9:62:ab:46:a6:b1:35:bd:db:fc:42:30:41:f4:26:b6:d7:e2: e1:a2:7d:bd:73:07:f0:2a:88:39:e6:dc:79:15:37:ea:a4:57: 8b:a4:d0:f2:ef:56:77:16:ba:d7:8e:fc:5c:fd:08:db:df:98: 59:42:ed:ae:f1:37:2a:49:6d:65:b9:f1:d3:cb:09:a7:4c:6c: 0b:a1:6e:5f:65:7e:60:f2:d6:c5:b8:f1:97:a1:fd:91:03:e9: b2:01:fc:8f:67:57:d9:31:2f:3f:40:a5:d7:14:74:d0:03:68: 24:a1:55:8a:25:7e:5d:3f:e1:13:83:da:26:c9:25:0d:2e:26: 06:d5:9d:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIuA5A6tDAXBbTG5NxLN8aVOIS1kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzE5NERGRDY2NDU3MzU5QUY3QkYzQkYwOUVBNzY2QURF RjEzMjlCNTAeFw0yNjAzMDExNDQ1NTJaFw0yNjAzMDQyMjI1NTJaMDMxMTAvBgNV BAMTKDZGMzE1Q0FBQkM4MjNCNDJBOEM3OEJFODlGQTkxMUU5NENDNUY5RjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVzs6a2p7mOouG2xLX+wpeN6dc czjJpPg4jc060nx7dQuu45DSWqzvqMu/a/T49xUoC1Mnvt8AtkQLQUrUV7M/1+I6 4yD9BcWK8f+pQjymx3KwWxfMXMIkiGkV6jOUdP5411PW4m0PxFfRrymiS25fd5gO 6CLen5cKN4MH3xfQ5gkTU01DzlEpheCTBCd+XMnsOxFHeIQjDyHypSokm9l7jS7T VdW2XseuNmX8j1kmYWmAu6/j11B7eDT6MvJdE7jMJUdVtV/xtdF32uz0QZC+mUSg gwAREQK3U8URRp2NXJNg1NWmqwT3HVH2c76js4+5dgidlN8E5Htu93mG9V/NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbzFcqryCO0Kox4von6kR6UzF+fMwHwYDVR0j BBgwFoAUMZTf1mRXNZr3vzvwnqdmre8TKbUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y M2JhMDI0Yi04N2YyLTRlZGQtODlmZi1hNGZjYTcwMDhjMzYvMC8zMTk0REZENjY0 NTczNTlBRjdCRjNCRjA5RUE3NjZBREVGMTMyOUI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzE5NERGRDY2NDU3MzU5QUY3QkYzQkYwOUVBNzY2QURFRjEz MjlCNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjNiYTAyNGItODdmMi00ZWRkLTg5 ZmYtYTRmY2E3MDA4YzM2LzAvMzE5NERGRDY2NDU3MzU5QUY3QkYzQkYwOUVBNzY2 QURFRjEzMjlCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAEFUsTcfa3iRi2uLpVOMif9mrWO/0TpjifL UEEi8m1yEc1UVZF92BsK8GPUr/wGTHyK3TZbdxOOni3GyD9a5ibkqXjAVofVQ8qu XTfqhRroQVSYMUBauJ33fM4eQHFlYDv8UnB6KSOnGOCNuVTYLfVuTRo6uNWNoyFv 4MN+kLliq0amsTW92/xCMEH0JrbX4uGifb1zB/AqiDnm3HkVN+qkV4uk0PLvVncW uteO/Fz9CNvfmFlC7a7xNypJbWW58dPLCadMbAuhbl9lfmDy1sW48Zeh/ZED6bIB /I9nV9kxLz9ApdcUdNADaCShVYolfl0/4ROD2ibJJQ0uJgbVnXw= -----END CERTIFICATE-----Generated at Mon Mar 2 03:56:38 2026 by rpki-client