$ rpki-client -vvf repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.mft File: 314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.mft (raw, json) Hash identifier: ZLFv010EbG2Wm7SeUNVmUAfukAul5fUyE0noDQw3eGY= Subject key identifier: A8:54:74:06:48:EA:D2:1F:5B:82:FE:7F:48:2D:30:2B:9B:0A:7C:36 Authority key identifier: 31:49:88:A7:9F:2A:52:2D:2E:D1:D4:AC:99:C4:AB:DF:DC:DB:B4:00 Certificate issuer: /CN=314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400 Certificate serial: 7A1FC18BDF20DB088BD88561062252DBFA252CBB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.cer Subject info access: rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.mft Manifest number: 01D9 Signing time: Sat 28 Feb 2026 20:50:40 +0000 Manifest this update: Sat 28 Feb 2026 20:45:40 +0000 Manifest next update: Wed 04 Mar 2026 00:07:40 +0000 Files and hashes: 1: 3130332e3135322e3234322e302f32332d3234203d3e20313339343536.roa (hash: 89pUQxfl5rXIPDrZqajzc7VGVg5FDLEc5hZANvDFm/0=) 2: 314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.crl (hash: 2w4HVW3wiw3igULXr5u5z5hVnFHavceNK9w3e3Pkd4E=) 3: 323430373a373234303a3a2f33322d3332203d3e203538383230.roa (hash: HLX3aFGkhTTF59aMcv9G2ZkMKwAOSmi1mZ83DZAbPPc=) 4: 323430373a373234303a3a2f33322d3438203d3e203538383230.roa (hash: 1wh8FEeGWVS9WrnN9jZRNRfkzt0zUBWTKFS3jSYx5Ps=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.crl rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 00:07:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:1f:c1:8b:df:20:db:08:8b:d8:85:61:06:22:52:db:fa:25:2c:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400 Validity Not Before: Feb 28 20:45:40 2026 GMT Not After : Mar 4 00:07:40 2026 GMT Subject: CN=A854740648EAD21F5B82FE7F482D302B9B0A7C36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:98:25:6f:4e:09:ea:14:7c:64:2d:7a:1f:91: 92:15:f8:ef:f7:92:14:6e:51:a0:25:4b:59:6e:54: d0:59:3d:89:54:98:c4:f0:79:a2:c3:04:ee:0e:25: b6:19:42:3c:a9:01:ac:5b:cb:6a:7f:69:58:11:db: bc:63:41:13:ba:11:1b:8c:f6:f4:ed:bd:f7:8f:d8: 57:b7:f5:f8:55:2d:18:8d:5e:84:f9:be:f4:98:3d: 23:a5:17:23:2e:9a:b1:31:31:71:97:ec:84:76:2c: 6e:05:57:a4:e0:12:d5:19:a3:2c:f1:b8:3d:58:ec: 7c:d9:30:92:95:48:90:63:9b:84:77:66:63:49:f6: b0:47:38:9d:fb:db:b0:ed:f5:8c:d4:30:c8:fd:55: 2e:12:29:00:25:b9:d6:50:c1:ed:e5:bd:67:d9:9e: eb:42:bf:ca:9e:fa:96:78:a4:3d:9d:e1:b1:56:d1: d2:c2:4d:e3:b2:0b:d8:6b:4e:03:e8:61:0f:89:11: c5:2b:13:08:f4:56:7a:b8:0e:a9:13:0f:d1:4a:7e: 5f:67:7f:1c:a6:19:63:95:da:ce:0e:35:28:a6:11: 7d:28:01:be:59:9d:59:be:ed:be:41:83:57:78:b0: ee:5d:f9:5c:e8:2c:fe:90:c5:02:29:88:f9:49:d3: 2e:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:54:74:06:48:EA:D2:1F:5B:82:FE:7F:48:2D:30:2B:9B:0A:7C:36 X509v3 Authority Key Identifier: keyid:31:49:88:A7:9F:2A:52:2D:2E:D1:D4:AC:99:C4:AB:DF:DC:DB:B4:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:11:c4:38:97:90:d1:6d:44:9c:c4:7b:37:23:65:eb:9e:17: 9d:53:2e:6d:91:8d:79:4a:c4:15:54:b1:89:80:28:5a:57:03: f4:12:5b:ab:c3:4d:94:6b:1b:c2:0a:3d:09:97:e2:44:a5:3f: f9:2e:aa:e6:4b:a5:01:fb:6c:8b:d7:2f:7d:9e:e5:f8:4d:15: de:d0:be:ce:3b:34:5e:ed:03:c6:df:4f:a8:74:3c:ad:34:bf: da:ea:56:7c:1e:ca:25:8c:0d:89:72:89:1f:c4:01:7a:c6:8f: cc:45:27:a8:f1:86:ce:f8:55:27:93:8a:64:8d:e8:8b:3a:14: f4:69:fb:de:83:aa:ba:20:6f:0d:94:ea:72:50:2d:04:c5:64: d2:03:5b:32:9f:36:de:52:6a:f1:98:74:1e:f1:5c:40:f2:fd: 22:50:c0:27:a1:f5:c8:04:ac:08:9d:f3:35:7d:34:13:5f:be: 95:c2:99:19:7f:16:41:54:85:da:3b:6e:00:0e:81:7c:e8:32: 90:52:0d:f7:43:f2:13:4d:62:0d:2a:44:73:e4:cd:92:b5:e0: 35:85:f8:15:69:fd:87:76:a4:8c:9d:b0:a7:64:d1:5a:18:16: 61:56:7e:2c:1e:32:f0:dc:a6:09:f5:85:65:08:7f:6b:0d:4b: 25:d0:36:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeh/Bi98g2wiL2IVhBiJS2/olLLswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzE0OTg4QTc5RjJBNTIyRDJFRDFENEFDOTlDNEFCREZE Q0RCQjQwMDAeFw0yNjAyMjgyMDQ1NDBaFw0yNjAzMDQwMDA3NDBaMDMxMTAvBgNV BAMTKEE4NTQ3NDA2NDhFQUQyMUY1QjgyRkU3RjQ4MkQzMDJCOUIwQTdDMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3mCVvTgnqFHxkLXofkZIV+O/3 khRuUaAlS1luVNBZPYlUmMTweaLDBO4OJbYZQjypAaxby2p/aVgR27xjQRO6ERuM 9vTtvfeP2Fe39fhVLRiNXoT5vvSYPSOlFyMumrExMXGX7IR2LG4FV6TgEtUZoyzx uD1Y7HzZMJKVSJBjm4R3ZmNJ9rBHOJ3727Dt9YzUMMj9VS4SKQAludZQwe3lvWfZ nutCv8qe+pZ4pD2d4bFW0dLCTeOyC9hrTgPoYQ+JEcUrEwj0Vnq4DqkTD9FKfl9n fxymGWOV2s4ONSimEX0oAb5ZnVm+7b5Bg1d4sO5d+VzoLP6QxQIpiPlJ0y7RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqFR0Bkjq0h9bgv5/SC0wK5sKfDYwHwYDVR0j BBgwFoAUMUmIp58qUi0u0dSsmcSr39zbtAAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NGJhNjc3OC1iMTZkLTRiYTgtOTg0Zi0zNGU0MTlmYzljNDkvMC8zMTQ5ODhBNzlG MkE1MjJEMkVEMUQ0QUM5OUM0QUJERkRDREJCNDAwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzE0OTg4QTc5RjJBNTIyRDJFRDFENEFDOTlDNEFCREZEQ0RC QjQwMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjRiYTY3NzgtYjE2ZC00YmE4LTk4 NGYtMzRlNDE5ZmM5YzQ5LzAvMzE0OTg4QTc5RjJBNTIyRDJFRDFENEFDOTlDNEFC REZEQ0RCQjQwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABsRxDiXkNFtRJzEezcjZeueF51TLm2RjXlK xBVUsYmAKFpXA/QSW6vDTZRrG8IKPQmX4kSlP/kuquZLpQH7bIvXL32e5fhNFd7Q vs47NF7tA8bfT6h0PK00v9rqVnweyiWMDYlyiR/EAXrGj8xFJ6jxhs74VSeTimSN 6Is6FPRp+96Dqrogbw2U6nJQLQTFZNIDWzKfNt5SavGYdB7xXEDy/SJQwCeh9cgE rAid8zV9NBNfvpXCmRl/FkFUhdo7bgAOgXzoMpBSDfdD8hNNYg0qRHPkzZK14DWF +BVp/Yd2pIydsKdk0VoYFmFWfiweMvDcpgn1hWUIf2sNSyXQNg0= -----END CERTIFICATE-----Generated at Mon Mar 2 01:55:22 2026 by rpki-client