$ rpki-client -vvf repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/061065EDF2843A4462114BCE0A173E21A84A019E.mft File: 061065EDF2843A4462114BCE0A173E21A84A019E.mft (raw, json) Hash identifier: u8zmKh0i40/8xjSbuUdB5g7TxJvapHbjf4fa1ESRFrI= Subject key identifier: DE:04:43:C9:74:83:2D:47:E0:82:34:53:97:3E:3D:5E:38:32:FC:F6 Authority key identifier: 06:10:65:ED:F2:84:3A:44:62:11:4B:CE:0A:17:3E:21:A8:4A:01:9E Certificate issuer: /CN=061065EDF2843A4462114BCE0A173E21A84A019E Certificate serial: 0FA4CE604A0DDCEA067ACFB3FCB7BDA66CCA6582 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/061065EDF2843A4462114BCE0A173E21A84A019E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/061065EDF2843A4462114BCE0A173E21A84A019E.mft Manifest number: 0314 Signing time: Sat 28 Feb 2026 18:02:41 +0000 Manifest this update: Sat 28 Feb 2026 17:57:41 +0000 Manifest next update: Tue 03 Mar 2026 19:14:41 +0000 Files and hashes: 1: 3130332e3137342e3131322e302f32342d3234203d3e20313339393532.roa (hash: lBYYjDI8kTfPX8dccHc0ZXaDpghO9Ch8f9L9h3YjbqY=) 2: 3130332e3137342e3131332e302f32342d3234203d3e20313339393532.roa (hash: 5C7cr7m1rH+Q3Oz5yPBlPFFAgwjpw6p/9sq9jkATwag=) 3: 061065EDF2843A4462114BCE0A173E21A84A019E.crl (hash: tdQiI9Okh1k8Oox/xzfX/Qe4+NfHqzcJvPvo1KGK9PA=) 4: 3130332e3137342e3131322e302f32332d3233203d3e20313339393532.roa (hash: YzeL+OCAalusbn1m5HXWAoI2WeWiRzCYeg8Gq0Aletw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/061065EDF2843A4462114BCE0A173E21A84A019E.crl rsync://repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/061065EDF2843A4462114BCE0A173E21A84A019E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/061065EDF2843A4462114BCE0A173E21A84A019E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 19:14:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:a4:ce:60:4a:0d:dc:ea:06:7a:cf:b3:fc:b7:bd:a6:6c:ca:65:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=061065EDF2843A4462114BCE0A173E21A84A019E Validity Not Before: Feb 28 17:57:41 2026 GMT Not After : Mar 3 19:14:41 2026 GMT Subject: CN=DE0443C974832D47E0823453973E3D5E3832FCF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:be:25:4b:78:f8:0b:83:60:77:16:40:5a:41: ed:09:19:86:51:14:8b:01:bf:11:3c:56:38:ab:e0: c8:b9:6d:da:cf:70:1c:65:05:fb:e3:f6:7c:65:9f: 4e:8b:b2:36:2f:21:62:15:c8:6b:6c:d0:b2:9a:76: b3:66:36:fe:ca:23:09:f9:bf:7c:6f:d6:57:07:40: 47:dc:83:f0:7a:1f:9e:fd:ad:8b:68:9b:ca:2d:b3: 42:60:14:03:46:de:e4:b8:1e:d2:51:13:35:bb:75: e9:cc:9a:08:2c:86:2c:be:d1:3c:01:4b:c7:d0:1d: 22:e7:de:ca:57:3c:c1:00:79:16:bd:dd:57:f9:cf: e8:50:20:80:ae:d3:c6:d1:26:62:34:05:94:1d:45: b5:e5:5e:6d:89:b2:b7:88:73:7b:4d:d9:81:5f:0f: 53:eb:5d:64:13:95:69:f8:e8:e1:51:08:c6:c2:56: d6:be:53:ea:fd:f4:5d:46:9e:d3:4e:1c:db:7b:c8: 4a:72:2c:85:8e:ac:ba:44:22:88:e5:34:bb:0a:ed: 7f:51:2d:14:a9:cb:15:10:cd:b6:41:ab:9c:36:5a: 7e:2e:06:1c:db:41:0b:6b:a1:80:d6:43:0d:b7:43: 53:74:21:16:b9:95:6d:1e:f8:f4:22:a2:f9:0b:4a: 7e:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:04:43:C9:74:83:2D:47:E0:82:34:53:97:3E:3D:5E:38:32:FC:F6 X509v3 Authority Key Identifier: keyid:06:10:65:ED:F2:84:3A:44:62:11:4B:CE:0A:17:3E:21:A8:4A:01:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/061065EDF2843A4462114BCE0A173E21A84A019E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/061065EDF2843A4462114BCE0A173E21A84A019E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/061065EDF2843A4462114BCE0A173E21A84A019E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:f1:bf:d4:0b:53:1c:e2:c5:8b:79:1e:67:1e:59:23:db:44: 64:7b:2b:71:5d:de:7b:ca:89:aa:ae:64:0d:56:f6:d9:d0:d4: 87:13:98:72:99:80:b9:76:93:d9:7c:c2:23:1e:f2:a9:58:26: 2a:2c:5d:c1:1c:ea:bf:fe:3b:8b:a2:d6:29:57:22:a9:5c:b3: d6:46:ad:40:c4:85:cd:96:62:46:96:15:0d:8b:d3:56:a5:f2: 22:aa:0d:ef:11:ca:da:2c:ab:1f:46:58:27:20:33:4a:dc:79: 80:ce:76:d1:ab:94:98:22:77:a0:8c:22:06:2f:2f:b5:64:60: 1b:c1:92:e7:2d:cc:61:35:38:1d:9e:20:1b:a9:30:a4:7d:d2: 2a:dd:15:75:e2:5a:f2:27:2c:a6:36:b2:28:cb:60:70:4b:1d: 24:49:09:ff:75:5a:48:07:2e:96:bc:28:59:c8:a7:68:3b:d4: c0:04:49:a5:17:63:ed:fe:ef:21:e7:31:8e:77:df:57:75:25: bd:a0:05:23:89:86:44:35:58:c9:c4:4c:90:61:a0:06:1b:bc: 16:be:9b:f8:f7:a5:22:98:c6:43:62:2e:fd:50:47:3d:97:a3: be:4e:f0:c0:2f:5e:ab:91:08:be:01:41:30:dc:50:ab:4f:17: 3b:aa:c4:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD6TOYEoN3OoGes+z/Le9pmzKZYIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDYxMDY1RURGMjg0M0E0NDYyMTE0QkNFMEExNzNFMjFB ODRBMDE5RTAeFw0yNjAyMjgxNzU3NDFaFw0yNjAzMDMxOTE0NDFaMDMxMTAvBgNV BAMTKERFMDQ0M0M5NzQ4MzJENDdFMDgyMzQ1Mzk3M0UzRDVFMzgzMkZDRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlviVLePgLg2B3FkBaQe0JGYZR FIsBvxE8Vjir4Mi5bdrPcBxlBfvj9nxln06LsjYvIWIVyGts0LKadrNmNv7KIwn5 v3xv1lcHQEfcg/B6H579rYtom8ots0JgFANG3uS4HtJREzW7denMmggshiy+0TwB S8fQHSLn3spXPMEAeRa93Vf5z+hQIICu08bRJmI0BZQdRbXlXm2JsreIc3tN2YFf D1PrXWQTlWn46OFRCMbCVta+U+r99F1GntNOHNt7yEpyLIWOrLpEIojlNLsK7X9R LRSpyxUQzbZBq5w2Wn4uBhzbQQtroYDWQw23Q1N0IRa5lW0e+PQiovkLSn7ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3gRDyXSDLUfggjRTlz49Xjgy/PYwHwYDVR0j BBgwFoAUBhBl7fKEOkRiEUvOChc+IahKAZ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YzM2MjRjNC1iZmRjLTRlNDgtOGVhMC1lYjA1NjA1YzYyMTMvMC8wNjEwNjVFREYy ODQzQTQ0NjIxMTRCQ0UwQTE3M0UyMUE4NEEwMTlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDYxMDY1RURGMjg0M0E0NDYyMTE0QkNFMEExNzNFMjFBODRB MDE5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmMzNjI0YzQtYmZkYy00ZTQ4LThl YTAtZWIwNTYwNWM2MjEzLzAvMDYxMDY1RURGMjg0M0E0NDYyMTE0QkNFMEExNzNF MjFBODRBMDE5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFTxv9QLUxzixYt5HmceWSPbRGR7K3Fd3nvK iaquZA1W9tnQ1IcTmHKZgLl2k9l8wiMe8qlYJiosXcEc6r/+O4ui1ilXIqlcs9ZG rUDEhc2WYkaWFQ2L01al8iKqDe8Rytosqx9GWCcgM0rceYDOdtGrlJgid6CMIgYv L7VkYBvBkuctzGE1OB2eIBupMKR90irdFXXiWvInLKY2sijLYHBLHSRJCf91WkgH Lpa8KFnIp2g71MAESaUXY+3+7yHnMY5331d1Jb2gBSOJhkQ1WMnETJBhoAYbvBa+ m/j3pSKYxkNiLv1QRz2Xo75O8MAvXquRCL4BQTDcUKtPFzuqxM0= -----END CERTIFICATE-----Generated at Mon Mar 2 12:00:16 2026 by rpki-client