$ rpki-client -vvf repo-rpki.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/C629ACA160F978E31BC564E62FF22DBA802D0E87.mft File: C629ACA160F978E31BC564E62FF22DBA802D0E87.mft (raw, json) Hash identifier: zCVXg2ovtJRJYuqO8GlwECqmXGT88oWC8IjwNCmnFbQ= Subject key identifier: D4:6D:3E:A4:E3:71:AC:06:DD:7B:3D:50:3A:CB:DE:4D:9C:49:E7:8F Authority key identifier: C6:29:AC:A1:60:F9:78:E3:1B:C5:64:E6:2F:F2:2D:BA:80:2D:0E:87 Certificate issuer: /CN=C629ACA160F978E31BC564E62FF22DBA802D0E87 Certificate serial: 6C8C1C8771ED42476467EEE01EC9AA2DB31379C6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C629ACA160F978E31BC564E62FF22DBA802D0E87.cer Subject info access: rsync://repo-rpki.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/C629ACA160F978E31BC564E62FF22DBA802D0E87.mft Manifest number: 01E8 Signing time: Sat 28 Feb 2026 13:52:30 +0000 Manifest this update: Sat 28 Feb 2026 13:47:30 +0000 Manifest next update: Tue 03 Mar 2026 20:26:30 +0000 Files and hashes: 1: 3130332e39342e3234382e302f32332d3234203d3e203633383738.roa (hash: zydaV7vXOljio1PbDe3DJntWYJjt5+nwPN1xl5NBaKY=) 2: C629ACA160F978E31BC564E62FF22DBA802D0E87.crl (hash: BvFzZtktJSJuQHtyCqfRwWplQ3X8U/gEkgXJZ+D3Jkg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/C629ACA160F978E31BC564E62FF22DBA802D0E87.crl rsync://repo-rpki.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/C629ACA160F978E31BC564E62FF22DBA802D0E87.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C629ACA160F978E31BC564E62FF22DBA802D0E87.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 20:26:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:8c:1c:87:71:ed:42:47:64:67:ee:e0:1e:c9:aa:2d:b3:13:79:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C629ACA160F978E31BC564E62FF22DBA802D0E87 Validity Not Before: Feb 28 13:47:30 2026 GMT Not After : Mar 3 20:26:30 2026 GMT Subject: CN=D46D3EA4E371AC06DD7B3D503ACBDE4D9C49E78F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:47:20:c2:51:94:94:5a:5d:e3:62:8d:f1:7f: 53:b5:9c:00:28:51:3c:36:55:28:35:bc:3f:c8:9a: b0:5b:7c:71:39:d4:44:e3:df:de:88:4f:dc:48:28: cf:4e:b4:e9:eb:73:5d:58:f2:58:d4:a2:a2:e9:25: 69:d5:3b:e2:51:19:97:15:3c:f4:2c:c8:12:93:aa: f4:81:42:c1:15:af:79:e4:d0:20:f8:4e:6a:e3:59: 72:9b:84:b2:82:14:1c:8b:80:63:00:f6:29:9f:41: 0a:48:ee:2b:f2:e9:c7:ac:35:49:fe:82:2e:12:a0: 93:cc:23:47:e9:24:80:8c:4a:cf:7b:98:83:09:61: 3d:f0:45:34:78:89:66:29:23:fd:ae:f2:b2:3b:29: 62:71:85:71:3a:c6:9f:78:b1:d1:0c:c5:92:02:e1: 97:92:ce:fd:8b:ed:f1:da:05:21:01:03:b9:aa:e6: 1c:d9:12:a1:5e:c5:7f:b0:df:67:eb:e2:c6:ea:e2: 1a:c0:30:74:fe:dc:4a:d1:36:69:e1:e3:82:71:c6: 07:bb:e8:30:09:78:ab:8f:72:83:3e:28:16:f6:b6: b0:25:68:47:94:01:19:74:b0:4c:cd:dc:8d:c8:81: f4:73:71:fc:42:e3:82:74:0b:fe:88:91:6d:76:47: c9:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:6D:3E:A4:E3:71:AC:06:DD:7B:3D:50:3A:CB:DE:4D:9C:49:E7:8F X509v3 Authority Key Identifier: keyid:C6:29:AC:A1:60:F9:78:E3:1B:C5:64:E6:2F:F2:2D:BA:80:2D:0E:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/C629ACA160F978E31BC564E62FF22DBA802D0E87.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C629ACA160F978E31BC564E62FF22DBA802D0E87.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/C629ACA160F978E31BC564E62FF22DBA802D0E87.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:61:da:81:ea:32:3e:76:61:59:ca:e5:da:82:54:4c:c0:e0: 48:24:d9:65:e0:bb:1f:d9:92:43:a5:5f:f9:09:8c:1a:03:1d: 80:dd:a4:b6:98:85:96:95:30:73:1b:68:bf:dc:ff:e7:de:df: 70:a7:58:3a:03:f5:22:4f:a1:e6:37:76:26:ed:b9:d5:0f:eb: db:97:f3:48:69:89:40:e5:79:55:33:33:b3:43:70:39:f0:5a: e5:89:9e:3a:35:b7:82:91:ed:70:bd:b6:fc:91:cd:a9:d1:cc: e4:90:63:33:bb:77:7e:f7:75:53:e3:9e:9a:a5:08:59:88:6c: 8a:d7:4a:ae:57:0b:82:7f:27:78:27:17:e3:02:e7:cc:d7:97: 76:8b:40:cc:b6:8d:31:8f:4b:00:60:30:33:b5:8b:1e:37:ae: 97:6b:45:47:5a:d1:80:50:23:01:7d:19:37:12:31:82:45:7e: 31:f1:0a:67:eb:1e:34:13:73:59:25:13:e6:57:02:f7:5c:e7: 77:e7:38:6e:c6:b2:ce:05:69:14:cc:1f:83:43:be:ab:63:5d: 9f:b8:5c:77:c1:a3:01:b5:ae:7a:44:df:2d:fc:81:7e:49:ec: ef:05:20:2d:90:a8:3f:f2:c0:c6:5e:15:73:fe:b5:c6:72:ce: 76:b8:1f:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbIwch3HtQkdkZ+7gHsmqLbMTecYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzYyOUFDQTE2MEY5NzhFMzFCQzU2NEU2MkZGMjJEQkE4 MDJEMEU4NzAeFw0yNjAyMjgxMzQ3MzBaFw0yNjAzMDMyMDI2MzBaMDMxMTAvBgNV BAMTKEQ0NkQzRUE0RTM3MUFDMDZERDdCM0Q1MDNBQ0JERTREOUM0OUU3OEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDARyDCUZSUWl3jYo3xf1O1nAAo UTw2VSg1vD/ImrBbfHE51ETj396IT9xIKM9OtOnrc11Y8ljUoqLpJWnVO+JRGZcV PPQsyBKTqvSBQsEVr3nk0CD4TmrjWXKbhLKCFByLgGMA9imfQQpI7ivy6cesNUn+ gi4SoJPMI0fpJICMSs97mIMJYT3wRTR4iWYpI/2u8rI7KWJxhXE6xp94sdEMxZIC 4ZeSzv2L7fHaBSEBA7mq5hzZEqFexX+w32fr4sbq4hrAMHT+3ErRNmnh44Jxxge7 6DAJeKuPcoM+KBb2trAlaEeUARl0sEzN3I3IgfRzcfxC44J0C/6IkW12R8nlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1G0+pONxrAbdez1QOsveTZxJ548wHwYDVR0j BBgwFoAUximsoWD5eOMbxWTmL/ItuoAtDocwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OGQ2Y2E5Yi01ODRmLTQwZjEtYmQ2MS0xODU4ZTdlYmEzZWEvMC9DNjI5QUNBMTYw Rjk3OEUzMUJDNTY0RTYyRkYyMkRCQTgwMkQwRTg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzYyOUFDQTE2MEY5NzhFMzFCQzU2NEU2MkZGMjJEQkE4MDJE MEU4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjhkNmNhOWItNTg0Zi00MGYxLWJk NjEtMTg1OGU3ZWJhM2VhLzAvQzYyOUFDQTE2MEY5NzhFMzFCQzU2NEU2MkZGMjJE QkE4MDJEMEU4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMth2oHqMj52YVnK5dqCVEzA4Egk2WXgux/Z kkOlX/kJjBoDHYDdpLaYhZaVMHMbaL/c/+fe33CnWDoD9SJPoeY3dibtudUP69uX 80hpiUDleVUzM7NDcDnwWuWJnjo1t4KR7XC9tvyRzanRzOSQYzO7d373dVPjnpql CFmIbIrXSq5XC4J/J3gnF+MC58zXl3aLQMy2jTGPSwBgMDO1ix43rpdrRUda0YBQ IwF9GTcSMYJFfjHxCmfrHjQTc1klE+ZXAvdc53fnOG7Gss4FaRTMH4NDvqtjXZ+4 XHfBowG1rnpE3y38gX5J7O8FIC2QqD/ywMZeFXP+tcZyzna4H0w= -----END CERTIFICATE-----Generated at Mon Mar 2 15:30:39 2026 by rpki-client