$ rpki-client -vvf repo-rpki.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.mft File: 798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.mft (raw, json) Hash identifier: zYDyTfLO9g6J9EZJvqCGl3fPuDLPFLVQJwYtxa5XbMY= Subject key identifier: D3:6F:9B:AC:15:6F:FC:98:83:84:EC:87:98:C9:C0:B5:49:68:AC:7C Authority key identifier: 79:89:44:F7:FB:C5:7D:5C:FB:F5:F1:BB:68:0F:2D:73:CA:D2:6D:D5 Certificate issuer: /CN=798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5 Certificate serial: 321735184451A9C5DAF2E4A6EBE08A90436C42F2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.mft Manifest number: 024B Signing time: Sun 01 Mar 2026 10:31:34 +0000 Manifest this update: Sun 01 Mar 2026 10:26:34 +0000 Manifest next update: Wed 04 Mar 2026 16:12:34 +0000 Files and hashes: 1: 3130332e3135372e36322e302f32332d3233203d3e20313439393736.roa (hash: Z+uPltjZGSJJVlVHwNz2NCUXUIEBHK05ylu6rUY+FMs=) 2: 798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.crl (hash: scSmjBOxHvodhRGAYWTi57OULuk7AYPCDBGVCWg0x8A=) 3: 3130332e3135372e36332e302f32342d3234203d3e20313439393736.roa (hash: MSA3Izjg6KzN5Q+MKwDBM7mghQbhoAUxxHKShKe7LT0=) 4: 3130332e3135372e36322e302f32342d3234203d3e20313439393736.roa (hash: umdrRzgp8Ciqeng1bs/crkT4xOCEEqpUSt3z8J2SnuY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.crl rsync://repo-rpki.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 16:12:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:17:35:18:44:51:a9:c5:da:f2:e4:a6:eb:e0:8a:90:43:6c:42:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5 Validity Not Before: Mar 1 10:26:34 2026 GMT Not After : Mar 4 16:12:34 2026 GMT Subject: CN=D36F9BAC156FFC988384EC8798C9C0B54968AC7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e2:e5:8a:17:84:7a:63:de:5b:61:b4:84:05: 72:8c:0f:c0:12:9d:03:ab:ef:ad:c4:d1:df:d3:46: ca:03:a4:e0:bb:5d:90:47:cc:f8:fc:f1:31:c8:1f: 1d:2a:29:c7:fc:37:f6:df:75:5d:1e:94:59:35:68: e0:a6:b2:c1:95:9b:f2:37:f6:2e:9c:8d:98:6f:3b: 61:55:43:a9:57:19:c2:0e:4e:54:d9:ba:e7:6b:48: 8f:d7:dd:8b:ad:f5:37:20:2f:7e:47:1a:d5:24:1d: a4:fc:2e:41:67:74:12:33:3d:eb:a8:47:ad:e7:e1: f5:5b:8d:de:e5:d8:31:94:03:cf:ed:ea:3f:61:9e: 2b:ba:35:b0:ce:23:bc:60:83:7b:0a:a9:ec:2f:c9: 49:4d:a0:67:cd:02:2a:e7:91:eb:4d:12:3c:78:3b: 04:8e:fc:39:cc:85:14:fc:56:53:bd:79:e6:1b:5b: 63:c0:2f:27:32:16:fe:ba:b1:9e:83:f5:67:e1:1a: 4b:19:ff:e1:90:40:6c:e4:57:09:fc:c6:81:e3:04: fe:58:b0:62:da:3e:27:53:26:e9:1e:66:e6:39:89: bd:8b:09:cd:01:b3:37:e7:fa:7d:c5:e3:a0:e7:92: 17:e3:6d:c0:e3:bc:ef:1b:b2:27:8d:b2:12:bf:15: b8:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:6F:9B:AC:15:6F:FC:98:83:84:EC:87:98:C9:C0:B5:49:68:AC:7C X509v3 Authority Key Identifier: keyid:79:89:44:F7:FB:C5:7D:5C:FB:F5:F1:BB:68:0F:2D:73:CA:D2:6D:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:bd:f2:e2:88:fc:53:79:bc:4b:0a:c6:14:62:74:84:f2:7a: e0:a9:aa:c1:6d:fb:a8:cd:c8:e6:8f:0a:82:bb:4d:45:43:f0: d6:78:bf:61:c6:7f:61:90:2d:2a:05:95:ed:5d:a1:f3:e9:6f: f0:a4:e7:4d:cc:24:1e:6d:56:5a:0b:62:0a:e8:b9:43:ec:07: 60:3c:1f:b1:d4:1b:86:cb:08:c5:27:9f:7b:a9:de:09:21:89: 5a:e6:fc:19:c1:26:29:9f:76:d6:cb:cd:be:d7:c9:16:79:b7: 59:14:87:67:46:2f:ee:a4:cf:9e:6c:9b:5b:d5:0a:6f:02:8f: 36:7f:4e:ba:61:63:78:be:5f:1c:50:f7:7a:08:c1:00:c7:76: 79:a0:38:af:4f:33:42:76:6b:fe:77:29:2d:bd:75:a9:06:a1: 91:07:5e:80:d0:66:b0:36:95:cb:52:65:9d:72:a6:f0:49:c8: fd:83:18:1b:c8:43:79:ab:d0:5f:ad:85:e1:65:6d:ff:7e:d7: 3f:be:81:4c:31:5c:7a:ba:43:da:d3:88:87:07:b0:ed:08:41: 9e:f8:be:b8:28:73:1f:88:82:74:f7:8c:5b:04:32:7c:ec:a3: 3c:8d:23:e4:4c:56:89:d0:db:3f:73:db:ef:68:48:e8:1b:9b: 2f:e3:33:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMhc1GERRqcXa8uSm6+CKkENsQvIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzk4OTQ0RjdGQkM1N0Q1Q0ZCRjVGMUJCNjgwRjJENzND QUQyNkRENTAeFw0yNjAzMDExMDI2MzRaFw0yNjAzMDQxNjEyMzRaMDMxMTAvBgNV BAMTKEQzNkY5QkFDMTU2RkZDOTg4Mzg0RUM4Nzk4QzlDMEI1NDk2OEFDN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA4uWKF4R6Y95bYbSEBXKMD8AS nQOr763E0d/TRsoDpOC7XZBHzPj88THIHx0qKcf8N/bfdV0elFk1aOCmssGVm/I3 9i6cjZhvO2FVQ6lXGcIOTlTZuudrSI/X3Yut9TcgL35HGtUkHaT8LkFndBIzPeuo R63n4fVbjd7l2DGUA8/t6j9hniu6NbDOI7xgg3sKqewvyUlNoGfNAirnketNEjx4 OwSO/DnMhRT8VlO9eeYbW2PALycyFv66sZ6D9WfhGksZ/+GQQGzkVwn8xoHjBP5Y sGLaPidTJukeZuY5ib2LCc0Bszfn+n3F46DnkhfjbcDjvO8bsieNshK/FbiLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU02+brBVv/JiDhOyHmMnAtUlorHwwHwYDVR0j BBgwFoAUeYlE9/vFfVz79fG7aA8tc8rSbdUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YmQzMDU4Ny1hN2NhLTQxOTUtYTM1OS0wYzBmNjI3YWY4ZGEvMC83OTg5NDRGN0ZC QzU3RDVDRkJGNUYxQkI2ODBGMkQ3M0NBRDI2REQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzk4OTQ0RjdGQkM1N0Q1Q0ZCRjVGMUJCNjgwRjJENzNDQUQy NkRENS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmJkMzA1ODctYTdjYS00MTk1LWEz NTktMGMwZjYyN2FmOGRhLzAvNzk4OTQ0RjdGQkM1N0Q1Q0ZCRjVGMUJCNjgwRjJE NzNDQUQyNkRENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAK98uKI/FN5vEsKxhRidITyeuCpqsFt+6jN yOaPCoK7TUVD8NZ4v2HGf2GQLSoFle1dofPpb/Ck503MJB5tVloLYgrouUPsB2A8 H7HUG4bLCMUnn3up3gkhiVrm/BnBJimfdtbLzb7XyRZ5t1kUh2dGL+6kz55sm1vV Cm8CjzZ/TrphY3i+XxxQ93oIwQDHdnmgOK9PM0J2a/53KS29dakGoZEHXoDQZrA2 lctSZZ1ypvBJyP2DGBvIQ3mr0F+theFlbf9+1z++gUwxXHq6Q9rTiIcHsO0IQZ74 vrgocx+IgnT3jFsEMnzsozyNI+RMVonQ2z9z2+9oSOgbmy/jM/4= -----END CERTIFICATE-----Generated at Mon Mar 2 04:37:09 2026 by rpki-client