$ rpki-client -vvf repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/245A17CADB2BB2FDC5786C27E5BE959636E7F409.mft File: 245A17CADB2BB2FDC5786C27E5BE959636E7F409.mft (raw, json) Hash identifier: 7DDgCoWd4RMrrzvdsHQcEnVaMNBxRSygAfeV+4aHFxw= Subject key identifier: C1:7E:A9:2A:A1:77:46:A4:AF:74:A3:D9:20:97:71:8F:7D:F3:B9:3E Authority key identifier: 24:5A:17:CA:DB:2B:B2:FD:C5:78:6C:27:E5:BE:95:96:36:E7:F4:09 Certificate issuer: /CN=245A17CADB2BB2FDC5786C27E5BE959636E7F409 Certificate serial: 2AD22E88510D7C6D6485DB3D52FB6739FAE42A86 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/245A17CADB2BB2FDC5786C27E5BE959636E7F409.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/245A17CADB2BB2FDC5786C27E5BE959636E7F409.mft Manifest number: 0160 Signing time: Mon 02 Mar 2026 15:11:32 +0000 Manifest this update: Mon 02 Mar 2026 15:06:32 +0000 Manifest next update: Thu 05 Mar 2026 16:34:32 +0000 Files and hashes: 1: 245A17CADB2BB2FDC5786C27E5BE959636E7F409.crl (hash: 9HxxiNG4AYoXKcM8I+kkTvEG31MqOTyj/j4g3eCQfGs=) 2: 3130332e35312e39392e302f32342d3234203d3e20313530343639.roa (hash: K8NaZjX156AzJZCxAFCtUR2kv1eIuI1LvcL4WWNgNxE=) 3: 3130332e35312e39382e302f32342d3234203d3e20313530343639.roa (hash: 4B7irySfovCa+fs5OrOidwnp7dP+n6xSYZr+/3ur6bs=) 4: 3130332e35312e39382e302f32332d3233203d3e20313530343639.roa (hash: k08Sq9y+e0JBLFkahJuKjCY8UDmOXzCXbCJPnDfG/eg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/245A17CADB2BB2FDC5786C27E5BE959636E7F409.crl rsync://repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/245A17CADB2BB2FDC5786C27E5BE959636E7F409.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/245A17CADB2BB2FDC5786C27E5BE959636E7F409.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:d2:2e:88:51:0d:7c:6d:64:85:db:3d:52:fb:67:39:fa:e4:2a:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=245A17CADB2BB2FDC5786C27E5BE959636E7F409 Validity Not Before: Mar 2 15:06:32 2026 GMT Not After : Mar 5 16:34:32 2026 GMT Subject: CN=C17EA92AA17746A4AF74A3D92097718F7DF3B93E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:c8:89:03:3f:b3:38:11:da:30:1f:ea:aa:08: f1:56:cb:cc:60:46:26:91:d4:7c:a1:82:05:11:ea: 4d:c3:43:9b:a7:88:71:58:59:ca:50:b7:31:7f:b6: d7:6e:75:5f:1f:b1:43:42:a9:85:b3:3d:b8:7f:6e: e2:f9:1a:71:d9:26:2b:75:7b:30:6c:80:6b:24:c1: 6e:98:28:61:52:ab:cb:19:d5:37:51:fe:19:1e:ab: 00:64:a4:10:5f:2e:d9:49:6d:26:2c:9b:72:a6:af: e8:57:e6:c2:8f:1a:15:6e:15:f1:f5:50:b2:c2:b9: 0a:df:57:67:66:e2:5d:10:c4:0a:73:39:d0:31:8c: e9:a5:0a:49:c4:69:be:35:df:70:43:7d:c9:24:8a: 5d:f5:5a:5c:8f:da:3d:a1:3c:a6:1a:f4:9a:e8:0b: 82:cc:17:43:4c:47:66:b0:d9:bf:03:d1:b5:e0:bc: c2:21:e3:1f:fc:53:7e:b6:0d:54:78:7c:61:00:0d: e1:79:5e:b1:c5:1c:c2:e9:0d:4a:f9:01:e7:a2:93: c6:5e:01:0e:bb:e9:f3:04:7e:fa:62:d0:7d:af:ac: 3a:d2:73:a9:18:3e:28:3e:a0:e5:13:10:1a:1b:26: 7b:8f:a8:da:7b:2f:f6:56:09:e2:ba:26:c1:b8:08: 48:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:7E:A9:2A:A1:77:46:A4:AF:74:A3:D9:20:97:71:8F:7D:F3:B9:3E X509v3 Authority Key Identifier: keyid:24:5A:17:CA:DB:2B:B2:FD:C5:78:6C:27:E5:BE:95:96:36:E7:F4:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/245A17CADB2BB2FDC5786C27E5BE959636E7F409.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/245A17CADB2BB2FDC5786C27E5BE959636E7F409.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/245A17CADB2BB2FDC5786C27E5BE959636E7F409.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:80:5e:fe:0f:05:e9:49:9f:8a:65:5b:0b:aa:c6:a1:cf:42: b8:52:7e:8a:40:21:e1:9c:22:91:77:89:55:fb:47:bd:9b:6f: ea:51:5c:78:30:6a:1c:d6:00:5f:ce:f0:a2:82:d8:b1:9b:a0: b7:ba:96:d6:9e:49:0b:06:e9:91:92:f7:10:9e:55:01:ec:e6: cb:b1:e9:bb:d4:39:50:1e:b5:cb:08:45:c4:73:32:6f:0b:e2: 33:25:b4:6c:7b:a2:a9:fc:c8:c7:1a:40:dc:c1:11:f1:c6:28: 78:03:29:0f:1b:6a:0b:f2:90:2f:9a:5c:79:ae:2a:44:07:1a: d5:99:83:a2:df:1b:8c:80:fb:ca:9f:c9:f9:b5:df:dd:86:f0: 8e:21:df:b0:17:8e:c7:46:cb:2c:f1:ac:37:6f:f5:5c:29:19: 64:90:97:37:51:de:34:2c:a4:4a:f8:83:c3:0d:84:01:d0:35: 3b:f8:c3:20:6f:16:90:15:45:16:44:99:fb:62:79:fa:7e:39: 51:8f:18:be:c8:87:49:c3:52:1f:83:e4:96:7e:5d:3b:50:7a: 83:aa:f3:0b:b9:34:72:20:4a:0d:62:0c:e2:21:65:3e:f5:a9: 14:a6:b4:1f:f8:cf:95:b2:41:bb:7c:16:3f:ad:d8:8f:c4:53: 85:b5:4f:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKtIuiFENfG1khds9UvtnOfrkKoYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQ1QTE3Q0FEQjJCQjJGREM1Nzg2QzI3RTVCRTk1OTYz NkU3RjQwOTAeFw0yNjAzMDIxNTA2MzJaFw0yNjAzMDUxNjM0MzJaMDMxMTAvBgNV BAMTKEMxN0VBOTJBQTE3NzQ2QTRBRjc0QTNEOTIwOTc3MThGN0RGM0I5M0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbyIkDP7M4EdowH+qqCPFWy8xg RiaR1HyhggUR6k3DQ5uniHFYWcpQtzF/ttdudV8fsUNCqYWzPbh/buL5GnHZJit1 ezBsgGskwW6YKGFSq8sZ1TdR/hkeqwBkpBBfLtlJbSYsm3Kmr+hX5sKPGhVuFfH1 ULLCuQrfV2dm4l0QxApzOdAxjOmlCknEab4133BDfckkil31WlyP2j2hPKYa9Jro C4LMF0NMR2aw2b8D0bXgvMIh4x/8U362DVR4fGEADeF5XrHFHMLpDUr5Aeeik8Ze AQ676fMEfvpi0H2vrDrSc6kYPig+oOUTEBobJnuPqNp7L/ZWCeK6JsG4CEg9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwX6pKqF3RqSvdKPZIJdxj33zuT4wHwYDVR0j BBgwFoAUJFoXytsrsv3FeGwn5b6Vljbn9AkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZjEzYTZlZi0zNDM0LTQ0MDEtYjNlMS02NTE1MzA2NmZiM2UvMC8yNDVBMTdDQURC MkJCMkZEQzU3ODZDMjdFNUJFOTU5NjM2RTdGNDA5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjQ1QTE3Q0FEQjJCQjJGREM1Nzg2QzI3RTVCRTk1OTYzNkU3 RjQwOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmYxM2E2ZWYtMzQzNC00NDAxLWIz ZTEtNjUxNTMwNjZmYjNlLzAvMjQ1QTE3Q0FEQjJCQjJGREM1Nzg2QzI3RTVCRTk1 OTYzNkU3RjQwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK2AXv4PBelJn4plWwuqxqHPQrhSfopAIeGc IpF3iVX7R72bb+pRXHgwahzWAF/O8KKC2LGboLe6ltaeSQsG6ZGS9xCeVQHs5sux 6bvUOVAetcsIRcRzMm8L4jMltGx7oqn8yMcaQNzBEfHGKHgDKQ8bagvykC+aXHmu KkQHGtWZg6LfG4yA+8qfyfm1392G8I4h37AXjsdGyyzxrDdv9VwpGWSQlzdR3jQs pEr4g8MNhAHQNTv4wyBvFpAVRRZEmftiefp+OVGPGL7Ih0nDUh+D5JZ+XTtQeoOq 8wu5NHIgSg1iDOIhZT71qRSmtB/4z5WyQbt8Fj+t2I/EU4W1Txg= -----END CERTIFICATE-----Generated at Mon Mar 2 20:16:07 2026 by rpki-client