$ rpki-client -vvf repo-rpki.idnic.net/repo/3162d15b-102b-431f-a539-0a932b31366c/0/986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.mft File: 986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.mft (raw, json) Hash identifier: LnzcZFIriqRT35vXN5whmYfqzMDTbbgvMVDvSFOSTps= Subject key identifier: 47:CA:97:2E:0E:F5:1C:A0:BD:E5:6B:DC:4B:9E:97:40:86:15:B5:AA Authority key identifier: 98:6E:FE:1C:2B:B8:B0:E4:E1:47:2E:9D:AA:5B:77:5A:A4:F6:68:9F Certificate issuer: /CN=986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F Certificate serial: 7883022181B37843F5EF5004CCD23A2C06C77B69 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3162d15b-102b-431f-a539-0a932b31366c/0/986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.mft Manifest number: 0551 Signing time: Sun 01 Mar 2026 03:11:47 +0000 Manifest this update: Sun 01 Mar 2026 03:06:47 +0000 Manifest next update: Wed 04 Mar 2026 15:05:47 +0000 Files and hashes: 1: 986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.crl (hash: QHGK8VfcDQ7bVU9GH+bL3KiIQKdV3Zo4bj7VcZMC8ac=) 2: 3130332e3132362e35362e302f32322d3234203d3e20313338313037.roa (hash: PNy2Ky9qBufKbv/f4p4dFdjvMCRYXe8YTpQCXZbAHQM=) 3: 323030313a6466373a336230303a3a2f34382d3438203d3e20313338313037.roa (hash: 5ZMFCFB2Z2k1wsOQD3WlLnfBqmNmCDqFjaN+cKeJCYg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3162d15b-102b-431f-a539-0a932b31366c/0/986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.crl rsync://repo-rpki.idnic.net/repo/3162d15b-102b-431f-a539-0a932b31366c/0/986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 15:05:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:83:02:21:81:b3:78:43:f5:ef:50:04:cc:d2:3a:2c:06:c7:7b:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F Validity Not Before: Mar 1 03:06:47 2026 GMT Not After : Mar 4 15:05:47 2026 GMT Subject: CN=47CA972E0EF51CA0BDE56BDC4B9E97408615B5AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c5:65:84:6f:03:cd:3f:63:fb:19:17:17:c9: 89:52:75:e3:d1:f5:df:a7:3c:69:16:f0:96:18:04: 43:e9:42:b0:de:59:7e:30:e6:cb:73:9e:9b:e2:e3: f5:a7:55:7f:26:41:96:9e:ec:25:7f:40:42:0f:c2: 61:c8:d3:09:1d:0d:50:03:23:f0:7c:51:21:69:69: 62:6a:ed:77:6d:1f:a5:9d:01:87:a8:3f:36:cd:e2: 63:92:56:30:3a:13:32:07:71:53:da:74:80:b6:6c: 11:cf:a7:4a:1b:03:8a:6d:e4:2e:45:da:dc:8f:14: 13:38:3e:35:fd:d6:38:bf:87:9e:56:8b:0e:e0:63: f2:d4:6f:68:6d:fd:e8:4b:3f:16:7e:93:fd:db:ca: af:3a:d2:2d:5c:7e:02:bb:42:09:0c:a7:a4:4c:3f: cb:9a:6c:0c:c6:71:56:39:2c:d9:b8:3f:c9:65:92: 60:19:b3:b2:c8:81:ce:68:db:81:ba:1c:69:97:ed: 93:1c:50:c2:e9:98:cc:5f:4f:5f:77:07:81:94:68: fa:85:c9:ed:30:ce:ef:21:41:81:6d:7c:11:69:16: 77:54:b1:72:c2:e3:e3:80:95:6b:01:a9:a9:a0:6b: 83:ac:ab:93:eb:f6:b9:a5:9f:ae:8e:cb:ee:a7:9f: 9c:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:CA:97:2E:0E:F5:1C:A0:BD:E5:6B:DC:4B:9E:97:40:86:15:B5:AA X509v3 Authority Key Identifier: keyid:98:6E:FE:1C:2B:B8:B0:E4:E1:47:2E:9D:AA:5B:77:5A:A4:F6:68:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3162d15b-102b-431f-a539-0a932b31366c/0/986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3162d15b-102b-431f-a539-0a932b31366c/0/986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:17:ae:86:29:21:30:b5:7e:fe:5a:10:3d:f7:26:1a:90:0a: b7:c8:61:0e:95:ff:86:bc:66:40:77:fc:61:e9:88:20:d0:57: 38:58:d7:4b:1c:a0:a1:62:51:c8:33:ad:d3:71:d9:26:fd:1c: 55:93:c6:31:82:bb:5b:11:19:86:95:f7:5d:7b:ac:21:3d:a8: 78:9d:8e:fa:f8:51:0d:5e:3f:6f:45:34:b8:75:ac:8c:dd:a5: 5d:67:5a:dc:4b:c8:fb:bd:36:1b:61:2b:3d:3b:34:0d:df:1d: 91:58:9f:4c:3b:f1:a4:3e:56:0e:e3:2c:2c:fa:32:61:1f:36: 6c:da:e0:39:9e:6c:66:4a:90:4f:2c:d4:f2:ac:b2:84:30:a8: 06:b0:17:0d:0c:f8:e5:cb:8f:1d:b4:62:6e:fa:50:19:ce:f9: 4b:bd:5f:05:9c:95:8f:82:13:89:a1:65:43:02:70:be:be:e5: 49:e6:44:3f:bd:bd:1d:ea:f8:e0:fd:49:f3:74:c3:b6:b5:37: 95:f4:fb:70:c8:90:32:ba:2a:79:27:35:6c:6b:a6:80:5e:b8: e5:05:f6:1c:59:36:fb:0f:eb:41:57:8e:ea:b9:88:44:f7:30: bc:b3:29:fe:50:5f:02:33:19:c4:30:bb:fc:6f:92:40:d7:3a: cb:9c:72:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeIMCIYGzeEP171AEzNI6LAbHe2kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg2RUZFMUMyQkI4QjBFNEUxNDcyRTlEQUE1Qjc3NUFB NEY2Njg5RjAeFw0yNjAzMDEwMzA2NDdaFw0yNjAzMDQxNTA1NDdaMDMxMTAvBgNV BAMTKDQ3Q0E5NzJFMEVGNTFDQTBCREU1NkJEQzRCOUU5NzQwODYxNUI1QUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7xWWEbwPNP2P7GRcXyYlSdePR 9d+nPGkW8JYYBEPpQrDeWX4w5stznpvi4/WnVX8mQZae7CV/QEIPwmHI0wkdDVAD I/B8USFpaWJq7XdtH6WdAYeoPzbN4mOSVjA6EzIHcVPadIC2bBHPp0obA4pt5C5F 2tyPFBM4PjX91ji/h55Wiw7gY/LUb2ht/ehLPxZ+k/3byq860i1cfgK7QgkMp6RM P8uabAzGcVY5LNm4P8llkmAZs7LIgc5o24G6HGmX7ZMcUMLpmMxfT193B4GUaPqF ye0wzu8hQYFtfBFpFndUsXLC4+OAlWsBqamga4Osq5Pr9rmln66Oy+6nn5z5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUR8qXLg71HKC95WvcS56XQIYVtaowHwYDVR0j BBgwFoAUmG7+HCu4sOThRy6dqlt3WqT2aJ8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MTYyZDE1Yi0xMDJiLTQzMWYtYTUzOS0wYTkzMmIzMTM2NmMvMC85ODZFRkUxQzJC QjhCMEU0RTE0NzJFOURBQTVCNzc1QUE0RjY2ODlGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTg2RUZFMUMyQkI4QjBFNEUxNDcyRTlEQUE1Qjc3NUFBNEY2 Njg5Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzE2MmQxNWItMTAyYi00MzFmLWE1 MzktMGE5MzJiMzEzNjZjLzAvOTg2RUZFMUMyQkI4QjBFNEUxNDcyRTlEQUE1Qjc3 NUFBNEY2Njg5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAUXroYpITC1fv5aED33JhqQCrfIYQ6V/4a8 ZkB3/GHpiCDQVzhY10scoKFiUcgzrdNx2Sb9HFWTxjGCu1sRGYaV9117rCE9qHid jvr4UQ1eP29FNLh1rIzdpV1nWtxLyPu9NhthKz07NA3fHZFYn0w78aQ+Vg7jLCz6 MmEfNmza4DmebGZKkE8s1PKssoQwqAawFw0M+OXLjx20Ym76UBnO+Uu9XwWclY+C E4mhZUMCcL6+5UnmRD+9vR3q+OD9SfN0w7a1N5X0+3DIkDK6KnknNWxrpoBeuOUF 9hxZNvsP60FXjuq5iET3MLyzKf5QXwIzGcQwu/xvkkDXOsuccgo= -----END CERTIFICATE-----Generated at Mon Mar 2 17:14:48 2026 by rpki-client