$ rpki-client -vvf repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.mft File: 988E0377882A4782CADFC665BEA75BF64BFBAF8E.mft (raw, json) Hash identifier: +Tprl+JW0/dZcZ7n9uAWz3uUl2M47JGIyl0O+/C/GQQ= Subject key identifier: 0B:B6:F0:BB:4D:9D:27:DF:1D:18:AB:56:BE:EC:59:41:42:D0:EC:4C Authority key identifier: 98:8E:03:77:88:2A:47:82:CA:DF:C6:65:BE:A7:5B:F6:4B:FB:AF:8E Certificate issuer: /CN=988E0377882A4782CADFC665BEA75BF64BFBAF8E Certificate serial: 75A6FBD5240D8D3B2E693341D7AA2C19957DB064 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/988E0377882A4782CADFC665BEA75BF64BFBAF8E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.mft Manifest number: 030E Signing time: Sun 01 Mar 2026 05:11:18 +0000 Manifest this update: Sun 01 Mar 2026 05:06:18 +0000 Manifest next update: Wed 04 Mar 2026 16:38:18 +0000 Files and hashes: 1: 988E0377882A4782CADFC665BEA75BF64BFBAF8E.crl (hash: brOWYKj2O/bltHcHTENJvjgpNrHPBTMvZEd34vbNaJ8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.crl rsync://repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/988E0377882A4782CADFC665BEA75BF64BFBAF8E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 16:38:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:a6:fb:d5:24:0d:8d:3b:2e:69:33:41:d7:aa:2c:19:95:7d:b0:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=988E0377882A4782CADFC665BEA75BF64BFBAF8E Validity Not Before: Mar 1 05:06:18 2026 GMT Not After : Mar 4 16:38:18 2026 GMT Subject: CN=0BB6F0BB4D9D27DF1D18AB56BEEC594142D0EC4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:9f:fd:96:a2:a8:67:c4:d1:2a:e7:63:2f:e2: a9:24:97:ac:0a:ef:22:06:df:2c:1b:7e:cd:f8:05: 58:0a:9d:35:bc:a3:a2:3d:45:ea:ff:aa:64:29:dc: 9a:d7:21:e6:17:3d:13:1e:8d:2f:8a:2b:64:85:f9: c2:1b:19:fa:27:79:6c:b2:60:0f:cc:22:9e:89:a1: 5d:dd:f8:c4:1e:e7:24:aa:a4:b0:ce:35:49:0e:e5: f7:a2:3b:58:60:db:16:10:a2:90:04:83:39:87:23: 7d:11:32:3e:fb:2f:4b:7d:f2:32:f5:b6:b9:9f:31: de:b9:6b:ac:39:07:b7:c5:c7:69:02:27:27:53:1a: 64:d7:1a:30:5f:18:c1:40:26:3e:20:a1:a3:ec:9e: a4:93:58:ba:3b:40:ec:48:30:08:d4:b8:7e:4d:b2: 49:b0:28:df:da:77:46:d6:4f:e4:44:6c:7a:de:d4: 59:69:b9:2e:39:de:f3:3e:0c:24:ab:d7:01:d4:57: 5a:d9:63:43:67:7b:5b:09:d6:ea:1d:e2:d9:35:59: ef:e1:35:17:8c:02:2b:cb:c2:d0:74:7c:1b:51:cc: 00:d9:83:1d:4b:76:3f:b2:7d:44:c2:8a:62:36:67: ae:5d:12:3a:03:e6:8e:75:97:f2:c6:12:73:1f:fb: f3:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:B6:F0:BB:4D:9D:27:DF:1D:18:AB:56:BE:EC:59:41:42:D0:EC:4C X509v3 Authority Key Identifier: keyid:98:8E:03:77:88:2A:47:82:CA:DF:C6:65:BE:A7:5B:F6:4B:FB:AF:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/988E0377882A4782CADFC665BEA75BF64BFBAF8E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:3a:93:f2:aa:ec:fd:85:3c:1b:6e:86:3a:a0:37:26:7d:ef: 59:41:4e:a1:c9:4f:5b:ce:0a:f3:d5:3e:61:14:e3:79:73:27: 46:fb:4c:6e:10:09:5c:08:16:7b:fe:ae:b1:a2:21:b0:af:6a: 3f:d1:94:8c:7f:8c:7f:6c:f9:2b:0c:ac:ed:f9:fe:f9:3c:58: 91:88:cc:5d:6a:94:80:b8:d6:81:93:b5:bb:39:cd:10:a6:6f: dd:40:ef:f9:f8:73:87:f8:20:6a:db:ea:c5:b3:7d:22:8a:2f: 9e:e9:6a:f1:62:26:51:a8:3e:1f:b6:b6:56:cf:58:e2:13:40: 13:f7:f9:40:5c:3d:ea:a2:81:a8:81:e4:89:d7:a6:79:1e:05: e7:23:74:f8:fe:7e:98:93:09:d8:e9:d5:f1:f7:f7:29:62:cf: d9:fe:6a:84:b8:4a:60:3b:d9:0e:10:75:55:e4:5e:2f:aa:62: 5b:b6:ce:98:89:b7:c4:69:ea:bc:c4:bd:a0:5d:32:19:46:20: 7c:54:c8:05:45:44:35:ab:ff:a5:cb:ce:48:72:d8:7c:07:14: 7c:bc:1e:c9:8c:9a:f2:38:6e:9f:74:0c:8e:7b:5f:60:57:c5: 36:aa:ab:21:32:e8:22:33:b3:99:94:e5:51:d9:a1:2b:75:95: 9e:57:69:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdab71SQNjTsuaTNB16osGZV9sGQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg4RTAzNzc4ODJBNDc4MkNBREZDNjY1QkVBNzVCRjY0 QkZCQUY4RTAeFw0yNjAzMDEwNTA2MThaFw0yNjAzMDQxNjM4MThaMDMxMTAvBgNV BAMTKDBCQjZGMEJCNEQ5RDI3REYxRDE4QUI1NkJFRUM1OTQxNDJEMEVDNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEn/2WoqhnxNEq52Mv4qkkl6wK 7yIG3ywbfs34BVgKnTW8o6I9Rer/qmQp3JrXIeYXPRMejS+KK2SF+cIbGfoneWyy YA/MIp6JoV3d+MQe5ySqpLDONUkO5feiO1hg2xYQopAEgzmHI30RMj77L0t98jL1 trmfMd65a6w5B7fFx2kCJydTGmTXGjBfGMFAJj4goaPsnqSTWLo7QOxIMAjUuH5N skmwKN/ad0bWT+REbHre1FlpuS453vM+DCSr1wHUV1rZY0Nne1sJ1uod4tk1We/h NReMAivLwtB0fBtRzADZgx1Ldj+yfUTCimI2Z65dEjoD5o51l/LGEnMf+/O5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUC7bwu02dJ98dGKtWvuxZQULQ7EwwHwYDVR0j BBgwFoAUmI4Dd4gqR4LK38Zlvqdb9kv7r44wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MmYzOWMxNy02NzI1LTQyYmUtYmVkNC1mMGViYmJhMmQ0ZmQvMC85ODhFMDM3Nzg4 MkE0NzgyQ0FERkM2NjVCRUE3NUJGNjRCRkJBRjhFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTg4RTAzNzc4ODJBNDc4MkNBREZDNjY1QkVBNzVCRjY0QkZC QUY4RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDJmMzljMTctNjcyNS00MmJlLWJl ZDQtZjBlYmJiYTJkNGZkLzAvOTg4RTAzNzc4ODJBNDc4MkNBREZDNjY1QkVBNzVC RjY0QkZCQUY4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABQ6k/Kq7P2FPBtuhjqgNyZ971lBTqHJT1vO CvPVPmEU43lzJ0b7TG4QCVwIFnv+rrGiIbCvaj/RlIx/jH9s+SsMrO35/vk8WJGI zF1qlIC41oGTtbs5zRCmb91A7/n4c4f4IGrb6sWzfSKKL57pavFiJlGoPh+2tlbP WOITQBP3+UBcPeqigaiB5InXpnkeBecjdPj+fpiTCdjp1fH39yliz9n+aoS4SmA7 2Q4QdVXkXi+qYlu2zpiJt8Rp6rzEvaBdMhlGIHxUyAVFRDWr/6XLzkhy2HwHFHy8 HsmMmvI4bp90DI57X2BXxTaqqyEy6CIzs5mU5VHZoSt1lZ5XaRM= -----END CERTIFICATE-----Generated at Mon Mar 2 17:12:13 2026 by rpki-client