$ rpki-client -vvf repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C37B0700A782E6CCEE7D187B10AAF240353AB253.mft File: C37B0700A782E6CCEE7D187B10AAF240353AB253.mft (raw, json) Hash identifier: F0xaXMIw7G6rAoyOgqy49+QLGqG1A2mTOO7RqEPLzOw= Subject key identifier: DC:9C:65:06:8A:93:8B:7E:70:20:EF:BF:DC:FD:5A:44:25:0B:29:D5 Authority key identifier: C3:7B:07:00:A7:82:E6:CC:EE:7D:18:7B:10:AA:F2:40:35:3A:B2:53 Certificate issuer: /CN=C37B0700A782E6CCEE7D187B10AAF240353AB253 Certificate serial: 4367D0ECBDD9B5B5F42BB8C80A9CA71CED8C33AF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C37B0700A782E6CCEE7D187B10AAF240353AB253.cer Subject info access: rsync://repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C37B0700A782E6CCEE7D187B10AAF240353AB253.mft Manifest number: 028F Signing time: Sat 28 Feb 2026 19:22:26 +0000 Manifest this update: Sat 28 Feb 2026 19:17:26 +0000 Manifest next update: Wed 04 Mar 2026 03:11:26 +0000 Files and hashes: 1: 3130332e3138342e31362e302f32342d3234203d3e20313439333135.roa (hash: +a0J/aEe/HBxQSyjFU8Jpy6sg/8IuKYftoVKqedXGVw=) 2: C37B0700A782E6CCEE7D187B10AAF240353AB253.crl (hash: 9XK6kDIgI4HOLI17b4g4vjCGFc2XE4RH7hDCjQwF5Mw=) 3: 3130332e3138342e31372e302f32342d3234203d3e20313439333135.roa (hash: zb0DM+/iZNl/DFkGsnnNLfcL5wMKgWl+9ippNLqTYd4=) 4: 3130332e3138342e31372e302f32342d3234203d3e20313530343739.roa (hash: 5OD+ySaoYqwtpeDmzQIRWYH7Dq1Wh3/KhlzdkZcccKU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C37B0700A782E6CCEE7D187B10AAF240353AB253.crl rsync://repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C37B0700A782E6CCEE7D187B10AAF240353AB253.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C37B0700A782E6CCEE7D187B10AAF240353AB253.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 03:11:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:67:d0:ec:bd:d9:b5:b5:f4:2b:b8:c8:0a:9c:a7:1c:ed:8c:33:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C37B0700A782E6CCEE7D187B10AAF240353AB253 Validity Not Before: Feb 28 19:17:26 2026 GMT Not After : Mar 4 03:11:26 2026 GMT Subject: CN=DC9C65068A938B7E7020EFBFDCFD5A44250B29D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:0e:4d:72:a5:cf:03:7c:1c:3f:9c:45:8e:fa: f0:ce:15:d1:66:86:f4:64:13:46:af:49:ac:e0:46: 39:1c:0c:19:66:7d:ca:cb:23:f4:40:d7:c3:5d:a1: af:52:83:0e:c5:89:c2:f1:0e:a4:df:37:b1:a4:a6: 1f:f3:13:24:52:6e:02:7d:f8:6a:84:29:1a:a5:d4: ad:77:0e:2e:79:9c:b9:04:ba:03:14:46:a3:4f:fe: d0:15:d8:42:08:b2:07:d1:47:f1:54:21:51:0e:a5: ce:f8:88:2e:31:b0:d2:09:cb:5e:35:1f:c6:c7:21: 92:63:bd:78:6c:92:c9:2b:d1:5f:19:78:8b:6e:11: 1b:ef:f6:f3:98:cc:ca:52:5a:75:05:6a:be:0a:ad: ca:95:d0:ec:3d:0a:ce:3d:a7:65:d2:6c:2b:f8:08: 41:eb:da:d5:e2:33:5a:6e:19:82:6d:3b:51:81:c0: fc:fa:25:a8:38:ca:8a:0a:dd:51:74:ab:42:79:9b: 1b:be:c0:32:a8:7d:e3:6e:1d:16:d6:13:cc:33:12: 8b:83:4d:91:6a:6b:23:95:c1:e8:f0:a2:49:35:57: f4:46:ad:a5:a3:51:5b:9f:82:ab:74:5e:cf:e6:0a: 53:68:be:08:a7:e2:e1:29:3d:0a:78:12:28:28:84: 10:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:9C:65:06:8A:93:8B:7E:70:20:EF:BF:DC:FD:5A:44:25:0B:29:D5 X509v3 Authority Key Identifier: keyid:C3:7B:07:00:A7:82:E6:CC:EE:7D:18:7B:10:AA:F2:40:35:3A:B2:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C37B0700A782E6CCEE7D187B10AAF240353AB253.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C37B0700A782E6CCEE7D187B10AAF240353AB253.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C37B0700A782E6CCEE7D187B10AAF240353AB253.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:15:cf:bc:5a:16:e4:bd:89:3e:75:9a:b2:50:93:54:c4:65: ee:79:e2:a7:b0:22:4c:1d:b8:ef:9a:c5:fc:78:19:e3:a9:c5: 65:62:bf:e0:c9:e0:b6:55:65:bf:8d:78:99:98:10:92:84:1e: 1e:8c:8c:f2:d5:59:0a:34:44:ca:58:e1:69:66:8f:c2:38:13: 32:f9:cc:49:52:90:99:1b:66:b0:59:01:c8:02:fe:e0:ab:f4: d6:c4:8f:e2:d4:15:28:50:ea:55:ec:4f:25:27:d9:ac:6a:20: 10:11:b5:0c:a4:0d:5b:19:e6:51:7d:fc:8e:e7:58:9a:e8:c3: 5c:5e:04:c4:9e:2e:6e:13:6b:07:21:d1:5d:09:ed:61:3c:8f: 1e:e7:78:99:9e:1b:4b:0c:c1:39:5d:e1:2b:02:87:18:28:13: a6:4f:82:b0:8e:a5:91:97:5c:52:4a:1c:33:a0:e9:66:84:be: 18:e9:9a:b9:86:55:f0:2f:6c:cf:49:3d:5c:69:6e:59:95:64: ca:c7:e6:bc:f6:13:d9:5f:27:6c:53:87:d3:ec:8a:f8:93:19: 1d:18:dc:d2:61:4d:12:05:a3:a0:8b:76:eb:f4:8f:c3:ab:02: 9f:a8:13:e3:63:4a:f5:ff:84:22:cb:d9:f4:ed:05:c6:10:6f: 5d:4b:a9:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ2fQ7L3ZtbX0K7jICpynHO2MM68wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzM3QjA3MDBBNzgyRTZDQ0VFN0QxODdCMTBBQUYyNDAz NTNBQjI1MzAeFw0yNjAyMjgxOTE3MjZaFw0yNjAzMDQwMzExMjZaMDMxMTAvBgNV BAMTKERDOUM2NTA2OEE5MzhCN0U3MDIwRUZCRkRDRkQ1QTQ0MjUwQjI5RDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4Dk1ypc8DfBw/nEWO+vDOFdFm hvRkE0avSazgRjkcDBlmfcrLI/RA18Ndoa9Sgw7FicLxDqTfN7Gkph/zEyRSbgJ9 +GqEKRql1K13Di55nLkEugMURqNP/tAV2EIIsgfRR/FUIVEOpc74iC4xsNIJy141 H8bHIZJjvXhskskr0V8ZeItuERvv9vOYzMpSWnUFar4KrcqV0Ow9Cs49p2XSbCv4 CEHr2tXiM1puGYJtO1GBwPz6Jag4yooK3VF0q0J5mxu+wDKofeNuHRbWE8wzEouD TZFqayOVwejwokk1V/RGraWjUVufgqt0Xs/mClNovgin4uEpPQp4EigohBDjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3JxlBoqTi35wIO+/3P1aRCULKdUwHwYDVR0j BBgwFoAUw3sHAKeC5szufRh7EKryQDU6slMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NWQzOGI0Mi1iN2MyLTQyYjYtYTJmYy02NzVkYTI1NGM3NzYvMC9DMzdCMDcwMEE3 ODJFNkNDRUU3RDE4N0IxMEFBRjI0MDM1M0FCMjUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzM3QjA3MDBBNzgyRTZDQ0VFN0QxODdCMTBBQUYyNDAzNTNB QjI1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjVkMzhiNDItYjdjMi00MmI2LWEy ZmMtNjc1ZGEyNTRjNzc2LzAvQzM3QjA3MDBBNzgyRTZDQ0VFN0QxODdCMTBBQUYy NDAzNTNBQjI1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF4Vz7xaFuS9iT51mrJQk1TEZe554qewIkwd uO+axfx4GeOpxWViv+DJ4LZVZb+NeJmYEJKEHh6MjPLVWQo0RMpY4Wlmj8I4EzL5 zElSkJkbZrBZAcgC/uCr9NbEj+LUFShQ6lXsTyUn2axqIBARtQykDVsZ5lF9/I7n WJrow1xeBMSeLm4Tawch0V0J7WE8jx7neJmeG0sMwTld4SsChxgoE6ZPgrCOpZGX XFJKHDOg6WaEvhjpmrmGVfAvbM9JPVxpblmVZMrH5rz2E9lfJ2xTh9PsiviTGR0Y 3NJhTRIFo6CLduv0j8OrAp+oE+NjSvX/hCLL2fTtBcYQb11Lqec= -----END CERTIFICATE-----Generated at Mon Mar 2 11:23:12 2026 by rpki-client