$ rpki-client -vvf repo-rpki.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.mft File: D7286D5F5B9ADD4CC166AD32519692F0C8902B29.mft (raw, json) Hash identifier: QXVIZH0uFcQjyp3HJwA9xEcrvFiYEWAKYwzTDydzM+Y= Subject key identifier: B9:04:BB:0A:3D:5B:57:CA:31:11:42:FA:E8:20:65:17:54:44:25:C9 Authority key identifier: D7:28:6D:5F:5B:9A:DD:4C:C1:66:AD:32:51:96:92:F0:C8:90:2B:29 Certificate issuer: /CN=D7286D5F5B9ADD4CC166AD32519692F0C8902B29 Certificate serial: 12762AD65E67C40D796BA6D0F86BFF9A2AD7CD79 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.cer Subject info access: rsync://repo-rpki.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.mft Manifest number: 03C6 Signing time: Mon 02 Mar 2026 08:22:29 +0000 Manifest this update: Mon 02 Mar 2026 08:17:29 +0000 Manifest next update: Thu 05 Mar 2026 15:07:29 +0000 Files and hashes: 1: D7286D5F5B9ADD4CC166AD32519692F0C8902B29.crl (hash: ynv9/1GjxkPwzh7OTubOoxSqCW0QwkOofDygvlW2wdI=) 2: 3130332e3136392e3139382e302f32342d3234203d3e20313432333531.roa (hash: Cw4pOJ79jeEX4VYPEj0ggp3n3fPwHSaTIPKQamrNGso=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.crl rsync://repo-rpki.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:76:2a:d6:5e:67:c4:0d:79:6b:a6:d0:f8:6b:ff:9a:2a:d7:cd:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7286D5F5B9ADD4CC166AD32519692F0C8902B29 Validity Not Before: Mar 2 08:17:29 2026 GMT Not After : Mar 5 15:07:29 2026 GMT Subject: CN=B904BB0A3D5B57CA311142FAE8206517544425C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c8:00:1f:74:99:73:16:f1:e7:d7:66:c1:9f: f3:f8:62:72:38:c6:d2:61:68:51:9f:bb:da:ce:70: 19:d7:ef:a6:a2:f2:ac:d2:e6:67:ba:d9:f9:8b:af: 94:9b:d9:08:87:37:69:a2:3c:ca:ed:ab:80:85:03: c9:75:d5:b7:bd:f3:f2:71:50:3f:05:b4:44:37:9f: 4f:52:7c:07:d3:87:3b:98:b4:c2:a4:94:a4:d3:f0: 47:c7:0f:92:39:b1:1e:4b:21:1d:9e:07:75:1b:63: d0:be:dc:83:24:74:1b:35:7c:d6:21:2b:b4:bf:09: f0:78:71:d6:51:ca:c8:fa:62:52:ff:32:9f:e6:c9: a7:d4:e1:f8:ae:97:f6:a5:a8:0f:1c:f4:68:a1:a3: b2:97:38:bd:fe:12:0a:3d:ad:5b:da:f8:71:fe:72: ca:d7:81:8d:32:04:1c:65:04:50:22:e2:65:fb:d2: ea:8c:c9:6c:bf:2c:a4:2d:47:60:52:4f:b9:27:41: 1d:d1:13:44:3d:2d:ba:6d:ad:a4:a9:7e:c6:4c:1a: b8:db:51:b8:7f:1e:29:1a:c1:0b:87:fd:54:4d:a2: 93:25:05:ec:ee:a9:52:ff:07:14:fe:6a:29:66:81: 12:93:a3:38:2c:33:ab:60:f2:ee:34:12:73:e3:e5: 3e:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:04:BB:0A:3D:5B:57:CA:31:11:42:FA:E8:20:65:17:54:44:25:C9 X509v3 Authority Key Identifier: keyid:D7:28:6D:5F:5B:9A:DD:4C:C1:66:AD:32:51:96:92:F0:C8:90:2B:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:93:a0:8b:b7:fc:33:55:05:e7:a0:98:71:6f:9e:68:55:7e: fd:e9:a1:c9:c6:b9:80:4e:ab:35:65:6d:09:71:72:73:91:95: 9c:66:c5:48:d3:15:dd:2b:b0:49:67:cd:f0:2a:bc:53:90:ee: 89:7f:75:1f:5d:e2:30:86:9d:62:b0:e7:9c:70:84:94:9c:57: 5e:18:81:26:25:42:8c:42:3d:78:fd:cf:bf:a9:29:fe:e3:dc: 58:9f:21:9a:b8:fd:08:2b:12:7e:6b:a6:ae:41:26:97:38:ab: 59:38:2c:1f:28:b3:0f:16:7c:3c:e6:e4:4d:1e:e3:3d:c0:65: 63:f2:74:04:b2:d7:b8:ff:22:a4:1a:40:1c:bd:86:11:37:26: 21:a2:45:33:64:63:6a:cf:70:04:95:4c:be:1b:9f:03:63:4e: 23:d2:79:8a:2c:7d:08:4c:40:67:c5:67:fb:df:7d:1d:a3:d3: 9f:90:76:a7:59:cb:7f:27:8b:e6:6e:8f:f3:28:54:09:9d:82: 82:39:41:e3:c0:52:d1:6f:e5:b4:f0:8a:b7:5a:b0:6e:45:7e: d7:40:97:7a:4d:3a:a8:e1:b6:19:c6:e3:68:7a:b7:07:ef:1c: 0e:a6:d7:fa:21:8d:31:8b:84:5c:91:0e:e0:7a:1d:66:82:65: ce:14:56:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEnYq1l5nxA15a6bQ+Gv/mirXzXkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDcyODZENUY1QjlBREQ0Q0MxNjZBRDMyNTE5NjkyRjBD ODkwMkIyOTAeFw0yNjAzMDIwODE3MjlaFw0yNjAzMDUxNTA3MjlaMDMxMTAvBgNV BAMTKEI5MDRCQjBBM0Q1QjU3Q0EzMTExNDJGQUU4MjA2NTE3NTQ0NDI1QzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClyAAfdJlzFvHn12bBn/P4YnI4 xtJhaFGfu9rOcBnX76ai8qzS5me62fmLr5Sb2QiHN2miPMrtq4CFA8l11be98/Jx UD8FtEQ3n09SfAfThzuYtMKklKTT8EfHD5I5sR5LIR2eB3UbY9C+3IMkdBs1fNYh K7S/CfB4cdZRysj6YlL/Mp/myafU4fiul/alqA8c9Giho7KXOL3+Ego9rVva+HH+ csrXgY0yBBxlBFAi4mX70uqMyWy/LKQtR2BST7knQR3RE0Q9LbptraSpfsZMGrjb Ubh/HikawQuH/VRNopMlBezuqVL/BxT+ailmgRKTozgsM6tg8u40EnPj5T7ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuQS7Cj1bV8oxEUL66CBlF1REJckwHwYDVR0j BBgwFoAU1yhtX1ua3UzBZq0yUZaS8MiQKykwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NTI2MDY0MS1iY2UyLTQ0NWMtOWRlNS0zNzBhNzg3Zjk1MzAvMC9ENzI4NkQ1RjVC OUFERDRDQzE2NkFEMzI1MTk2OTJGMEM4OTAyQjI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDcyODZENUY1QjlBREQ0Q0MxNjZBRDMyNTE5NjkyRjBDODkw MkIyOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDUyNjA2NDEtYmNlMi00NDVjLTlk ZTUtMzcwYTc4N2Y5NTMwLzAvRDcyODZENUY1QjlBREQ0Q0MxNjZBRDMyNTE5Njky RjBDODkwMkIyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ6ToIu3/DNVBeegmHFvnmhVfv3pocnGuYBO qzVlbQlxcnORlZxmxUjTFd0rsElnzfAqvFOQ7ol/dR9d4jCGnWKw55xwhJScV14Y gSYlQoxCPXj9z7+pKf7j3FifIZq4/QgrEn5rpq5BJpc4q1k4LB8osw8WfDzm5E0e 4z3AZWPydASy17j/IqQaQBy9hhE3JiGiRTNkY2rPcASVTL4bnwNjTiPSeYosfQhM QGfFZ/vffR2j05+QdqdZy38ni+Zuj/MoVAmdgoI5QePAUtFv5bTwirdasG5FftdA l3pNOqjhthnG42h6twfvHA6m1/ohjTGLhFyRDuB6HWaCZc4UVo4= -----END CERTIFICATE-----Generated at Mon Mar 2 13:03:33 2026 by rpki-client