$ rpki-client -vvf repo-rpki.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/215123CDB8D789B3519CFF4175FFDD832853F5BE.mft File: 215123CDB8D789B3519CFF4175FFDD832853F5BE.mft (raw, json) Hash identifier: VfD6eaCtqi26EO+7y1LApUoiT9S4gdwVQrg/dVpn+uQ= Subject key identifier: 28:1C:40:23:56:E7:6C:25:1F:C8:FD:8C:E9:79:29:45:9F:D7:78:62 Authority key identifier: 21:51:23:CD:B8:D7:89:B3:51:9C:FF:41:75:FF:DD:83:28:53:F5:BE Certificate issuer: /CN=215123CDB8D789B3519CFF4175FFDD832853F5BE Certificate serial: 127B45F6AC1DE98E437E9042117135B825A0C22A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/215123CDB8D789B3519CFF4175FFDD832853F5BE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/215123CDB8D789B3519CFF4175FFDD832853F5BE.mft Manifest number: 016A Signing time: Mon 02 Mar 2026 05:31:10 +0000 Manifest this update: Mon 02 Mar 2026 05:26:10 +0000 Manifest next update: Thu 05 Mar 2026 13:44:10 +0000 Files and hashes: 1: 3130332e3234352e3232362e302f32342d3234203d3e203233363739.roa (hash: qKtc40b4lQF3hAURWdkBNRY70djjte8YqcsMlRaaEzM=) 2: 215123CDB8D789B3519CFF4175FFDD832853F5BE.crl (hash: 4GLy1I5x+u9igkmBT13cMmMaisPJO+WVr7MoYXJn/70=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/215123CDB8D789B3519CFF4175FFDD832853F5BE.crl rsync://repo-rpki.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/215123CDB8D789B3519CFF4175FFDD832853F5BE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/215123CDB8D789B3519CFF4175FFDD832853F5BE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:7b:45:f6:ac:1d:e9:8e:43:7e:90:42:11:71:35:b8:25:a0:c2:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=215123CDB8D789B3519CFF4175FFDD832853F5BE Validity Not Before: Mar 2 05:26:10 2026 GMT Not After : Mar 5 13:44:10 2026 GMT Subject: CN=281C402356E76C251FC8FD8CE97929459FD77862 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b3:23:eb:6d:ad:c3:4f:e9:bd:7e:76:38:f9: 08:79:a0:5c:38:23:7c:68:23:0d:75:d1:d3:f8:57: ff:dc:9a:da:d5:e4:06:35:68:dd:69:a1:92:6f:0e: 81:75:eb:31:d4:50:75:00:6c:00:51:ae:95:04:15: ac:bc:70:fe:69:93:5c:26:e6:b7:e3:bc:b3:61:3d: 4b:6d:3e:b3:d8:88:34:93:a8:91:d6:9e:6b:16:8f: 8a:41:58:c6:db:aa:55:f6:ae:06:54:6f:c7:af:cd: 3b:24:23:0c:28:c0:b4:07:fd:63:f3:ce:98:22:44: 9b:d5:e0:9f:84:c7:70:8a:32:c6:97:91:32:23:3d: d7:fa:9e:11:a5:ca:b2:e8:98:f9:ae:7c:e6:5f:19: 47:37:93:f3:e1:aa:50:c0:af:bc:6a:6e:a3:6c:82: 76:87:bd:74:4a:19:77:08:b4:5a:77:f0:f5:4a:a5: 9a:f7:96:1e:57:ab:fe:60:ca:c0:54:64:d3:3d:7e: a2:a8:0f:38:20:53:a1:25:af:37:61:52:f6:b7:19: 30:bb:59:c6:a4:c5:d4:51:4a:e2:f9:a3:40:4d:d6: 86:1d:f6:9a:70:41:b8:5d:5a:9b:ae:2b:85:30:39: 4e:09:60:37:86:e6:e6:29:74:71:ff:c5:10:e0:1f: 3d:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:1C:40:23:56:E7:6C:25:1F:C8:FD:8C:E9:79:29:45:9F:D7:78:62 X509v3 Authority Key Identifier: keyid:21:51:23:CD:B8:D7:89:B3:51:9C:FF:41:75:FF:DD:83:28:53:F5:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/215123CDB8D789B3519CFF4175FFDD832853F5BE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/215123CDB8D789B3519CFF4175FFDD832853F5BE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/215123CDB8D789B3519CFF4175FFDD832853F5BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:5e:3c:5b:74:3e:4f:79:a0:aa:7a:03:89:f7:eb:1c:4e:d8: 70:db:a5:69:79:41:a5:37:c8:89:5b:3a:50:34:59:c4:1d:43: fb:8b:30:51:a5:8c:46:d9:65:e5:ab:14:0d:42:a2:6a:5b:5e: ed:7b:17:11:d2:ad:a3:a2:6f:9a:af:76:e7:4b:50:c3:5f:b5: 20:48:5b:43:66:c7:46:4d:6d:01:61:20:35:a4:60:fa:cd:98: 7b:97:99:f2:94:a8:08:51:3a:1e:ac:45:c4:ea:fb:d3:82:db: 06:2e:6e:b3:86:13:d0:e0:cd:e6:e8:09:de:c6:9e:60:26:16: 89:81:8f:18:e6:b2:78:e5:2b:cd:c9:1a:91:ba:0f:34:47:44: bd:d5:7c:3e:2e:61:b7:5d:15:98:a3:64:d0:b5:f5:2c:6b:23: 7b:7b:c3:b3:11:0a:8a:04:8d:6b:8d:1a:08:e2:9b:b0:5b:65: 33:c4:e3:70:25:d3:1b:ff:e3:58:c2:f0:39:12:95:af:b3:c3: f8:25:07:3f:01:9b:4e:b4:9c:ff:e8:0c:de:37:c4:dc:a2:12: 23:29:ae:20:de:90:b1:b9:d3:44:d8:94:ed:c9:b8:bd:9f:43: 18:53:36:44:db:54:db:a8:3e:79:ce:2e:d6:45:8d:51:5c:ce: 2c:5d:c2:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEntF9qwd6Y5DfpBCEXE1uCWgwiowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE1MTIzQ0RCOEQ3ODlCMzUxOUNGRjQxNzVGRkREODMy ODUzRjVCRTAeFw0yNjAzMDIwNTI2MTBaFw0yNjAzMDUxMzQ0MTBaMDMxMTAvBgNV BAMTKDI4MUM0MDIzNTZFNzZDMjUxRkM4RkQ4Q0U5NzkyOTQ1OUZENzc4NjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBsyPrba3DT+m9fnY4+Qh5oFw4 I3xoIw110dP4V//cmtrV5AY1aN1poZJvDoF16zHUUHUAbABRrpUEFay8cP5pk1wm 5rfjvLNhPUttPrPYiDSTqJHWnmsWj4pBWMbbqlX2rgZUb8evzTskIwwowLQH/WPz zpgiRJvV4J+Ex3CKMsaXkTIjPdf6nhGlyrLomPmufOZfGUc3k/PhqlDAr7xqbqNs gnaHvXRKGXcItFp38PVKpZr3lh5Xq/5gysBUZNM9fqKoDzggU6ElrzdhUva3GTC7 WcakxdRRSuL5o0BN1oYd9ppwQbhdWpuuK4UwOU4JYDeG5uYpdHH/xRDgHz0VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKBxAI1bnbCUfyP2M6XkpRZ/XeGIwHwYDVR0j BBgwFoAUIVEjzbjXibNRnP9Bdf/dgyhT9b4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZmNkMmE0Mi05MmI5LTQwYTQtYTBiZi0wOWI2NWEzMThiNWUvMC8yMTUxMjNDREI4 RDc4OUIzNTE5Q0ZGNDE3NUZGREQ4MzI4NTNGNUJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjE1MTIzQ0RCOEQ3ODlCMzUxOUNGRjQxNzVGRkREODMyODUz RjVCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2ZjZDJhNDItOTJiOS00MGE0LWEw YmYtMDliNjVhMzE4YjVlLzAvMjE1MTIzQ0RCOEQ3ODlCMzUxOUNGRjQxNzVGRkRE ODMyODUzRjVCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB9ePFt0Pk95oKp6A4n36xxO2HDbpWl5QaU3 yIlbOlA0WcQdQ/uLMFGljEbZZeWrFA1CompbXu17FxHSraOib5qvdudLUMNftSBI W0Nmx0ZNbQFhIDWkYPrNmHuXmfKUqAhROh6sRcTq+9OC2wYubrOGE9DgzeboCd7G nmAmFomBjxjmsnjlK83JGpG6DzRHRL3VfD4uYbddFZijZNC19SxrI3t7w7MRCooE jWuNGgjim7BbZTPE43Al0xv/41jC8DkSla+zw/glBz8Bm060nP/oDN43xNyiEiMp riDekLG500TYlO3JuL2fQxhTNkTbVNuoPnnOLtZFjVFczixdwmU= -----END CERTIFICATE-----Generated at Mon Mar 2 10:15:50 2026 by rpki-client