$ rpki-client -vvf repo-rpki.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/D78FE5AE870EF221FD95775CFEAFEAD5ACF32368.mft File: D78FE5AE870EF221FD95775CFEAFEAD5ACF32368.mft (raw, json) Hash identifier: +JQMOSn5J4qsyqDgU3NCwIyfW5Rre6HLmiuSVE1e8/8= Subject key identifier: 92:9D:4F:2E:7E:09:BE:FD:38:1A:4E:55:86:7E:1A:F0:D9:3E:C2:74 Authority key identifier: D7:8F:E5:AE:87:0E:F2:21:FD:95:77:5C:FE:AF:EA:D5:AC:F3:23:68 Certificate issuer: /CN=D78FE5AE870EF221FD95775CFEAFEAD5ACF32368 Certificate serial: 273A1E9395C5E482B7FBC19027B6F9842E1625C3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D78FE5AE870EF221FD95775CFEAFEAD5ACF32368.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/D78FE5AE870EF221FD95775CFEAFEAD5ACF32368.mft Manifest number: BE Signing time: Sun 01 Mar 2026 02:42:15 +0000 Manifest this update: Sun 01 Mar 2026 02:37:15 +0000 Manifest next update: Wed 04 Mar 2026 03:06:15 +0000 Files and hashes: 1: 3135372e32302e3132302e302f32342d3234203d3e20313532343133.roa (hash: kToxDWGLAx7wPnTumpRERHYAC4YJ3ZjsOgXXR/j0FWs=) 2: 3135372e32302e3132312e302f32342d3234203d3e20313439343039.roa (hash: OSAo9QWqyVe1VudNV/7NSJlH0xk8Gb3rIp16xTTxTOk=) 3: D78FE5AE870EF221FD95775CFEAFEAD5ACF32368.crl (hash: roNEkL5RiGqTPGwYux/WpX4RVlTKoN8LB5HZs6FFmmw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/D78FE5AE870EF221FD95775CFEAFEAD5ACF32368.crl rsync://repo-rpki.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/D78FE5AE870EF221FD95775CFEAFEAD5ACF32368.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D78FE5AE870EF221FD95775CFEAFEAD5ACF32368.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 03:06:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:3a:1e:93:95:c5:e4:82:b7:fb:c1:90:27:b6:f9:84:2e:16:25:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D78FE5AE870EF221FD95775CFEAFEAD5ACF32368 Validity Not Before: Mar 1 02:37:15 2026 GMT Not After : Mar 4 03:06:15 2026 GMT Subject: CN=929D4F2E7E09BEFD381A4E55867E1AF0D93EC274 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:6b:c5:73:1b:0d:21:02:ff:19:74:85:c5:a9: eb:7e:c5:a3:8c:15:e4:92:37:a1:f3:2c:45:22:b1: 25:8a:9f:d3:3b:37:e2:87:75:ff:8a:cc:d4:6c:b1: 5e:17:9c:0c:1a:e1:6c:58:0e:16:3b:db:08:29:3b: 0d:a0:9b:0f:a3:91:59:8b:52:a5:af:87:77:e4:21: 08:35:9c:f1:a2:fa:12:98:9a:8c:2a:92:03:ec:b1: 46:c6:1c:fa:f1:cd:45:cf:8f:14:c8:bc:b1:37:bd: e3:77:ab:15:d1:61:af:9e:b0:0e:d7:e0:db:03:fd: 9f:5f:76:25:8c:96:a2:9c:31:c1:ce:59:05:16:6a: 25:92:0e:89:2d:87:e0:69:41:f1:e8:60:26:6b:3b: 84:3c:8d:54:2f:d7:15:dc:2a:ea:46:69:eb:08:ae: 7c:4e:27:4e:fa:9b:68:60:c6:6d:2e:26:a5:d0:2f: 3c:e7:b4:0d:32:33:68:3d:9e:b4:34:cf:ad:4d:06: 81:2f:22:49:ad:5e:6e:42:f7:22:a9:49:e9:fd:34: e9:39:f9:24:c8:f2:ce:40:a7:f0:85:ed:d1:f6:b8: e3:51:9a:8f:23:d6:42:a9:19:de:d0:3c:91:6f:07: 90:4c:40:c8:b1:03:7d:2c:20:d9:e0:8a:17:a9:27: 47:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:9D:4F:2E:7E:09:BE:FD:38:1A:4E:55:86:7E:1A:F0:D9:3E:C2:74 X509v3 Authority Key Identifier: keyid:D7:8F:E5:AE:87:0E:F2:21:FD:95:77:5C:FE:AF:EA:D5:AC:F3:23:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/D78FE5AE870EF221FD95775CFEAFEAD5ACF32368.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D78FE5AE870EF221FD95775CFEAFEAD5ACF32368.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/D78FE5AE870EF221FD95775CFEAFEAD5ACF32368.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:a9:c5:66:ba:f2:06:b3:7a:a6:09:ef:e7:1f:96:b1:f8:fd: 6e:f6:5a:19:b9:a8:df:a3:27:93:4d:e6:f8:d2:06:23:08:82: 58:81:28:c3:57:2a:2a:9e:d7:22:3a:d0:32:bc:af:b7:4f:61: 2f:6b:6f:0a:43:bb:e0:b5:88:c4:8d:e9:46:48:26:c8:07:a6: b3:24:51:59:05:de:97:1e:2d:ed:d8:95:02:cc:25:e8:60:bd: d2:3c:d3:ad:8d:74:d8:32:0b:ea:80:f9:cf:a0:88:b0:37:10: fc:87:3b:f2:a8:2f:f7:21:0e:a0:51:ae:2d:05:ef:ea:d4:a4: 5e:74:e8:93:83:6f:67:66:43:02:8c:ce:59:a7:63:4e:6f:ac: e2:4d:cb:28:d6:4c:8a:f0:1b:f0:29:8b:e2:f1:02:c9:9e:a6: 2c:96:b6:5c:f6:94:38:ea:9a:7a:88:9f:ad:0c:a9:29:df:dc: 52:8f:d8:a8:be:a0:bc:5d:bd:64:89:5f:28:93:b6:d0:54:c6: 59:50:58:4e:5f:bd:24:30:61:4f:05:84:e1:b8:cb:25:01:ef: 26:48:67:0b:2c:6c:b7:44:5c:2d:17:4f:c1:a1:d9:11:2d:c7: 07:f0:1c:83:44:7b:71:e9:03:a9:af:de:cb:67:c0:10:24:d5: 8f:1d:00:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJzoek5XF5IK3+8GQJ7b5hC4WJcMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDc4RkU1QUU4NzBFRjIyMUZEOTU3NzVDRkVBRkVBRDVB Q0YzMjM2ODAeFw0yNjAzMDEwMjM3MTVaFw0yNjAzMDQwMzA2MTVaMDMxMTAvBgNV BAMTKDkyOUQ0RjJFN0UwOUJFRkQzODFBNEU1NTg2N0UxQUYwRDkzRUMyNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3a8VzGw0hAv8ZdIXFqet+xaOM FeSSN6HzLEUisSWKn9M7N+KHdf+KzNRssV4XnAwa4WxYDhY72wgpOw2gmw+jkVmL UqWvh3fkIQg1nPGi+hKYmowqkgPssUbGHPrxzUXPjxTIvLE3veN3qxXRYa+esA7X 4NsD/Z9fdiWMlqKcMcHOWQUWaiWSDokth+BpQfHoYCZrO4Q8jVQv1xXcKupGaesI rnxOJ076m2hgxm0uJqXQLzzntA0yM2g9nrQ0z61NBoEvIkmtXm5C9yKpSen9NOk5 +STI8s5Ap/CF7dH2uONRmo8j1kKpGd7QPJFvB5BMQMixA30sINngihepJ0fvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkp1PLn4Jvv04Gk5Vhn4a8Nk+wnQwHwYDVR0j BBgwFoAU14/lrocO8iH9lXdc/q/q1azzI2gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NjQ0MjYzYS04ZWUyLTRlZWMtYTgxMC01NzMzY2NhZjUxZTMvMC9ENzhGRTVBRTg3 MEVGMjIxRkQ5NTc3NUNGRUFGRUFENUFDRjMyMzY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDc4RkU1QUU4NzBFRjIyMUZEOTU3NzVDRkVBRkVBRDVBQ0Yz MjM2OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDY0NDI2M2EtOGVlMi00ZWVjLWE4 MTAtNTczM2NjYWY1MWUzLzAvRDc4RkU1QUU4NzBFRjIyMUZEOTU3NzVDRkVBRkVB RDVBQ0YzMjM2OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGqpxWa68gazeqYJ7+cflrH4/W72Whm5qN+j J5NN5vjSBiMIgliBKMNXKiqe1yI60DK8r7dPYS9rbwpDu+C1iMSN6UZIJsgHprMk UVkF3pceLe3YlQLMJehgvdI8062NdNgyC+qA+c+giLA3EPyHO/KoL/chDqBRri0F 7+rUpF506JODb2dmQwKMzlmnY05vrOJNyyjWTIrwG/Api+LxAsmepiyWtlz2lDjq mnqIn60MqSnf3FKP2Ki+oLxdvWSJXyiTttBUxllQWE5fvSQwYU8FhOG4yyUB7yZI ZwssbLdEXC0XT8Gh2REtxwfwHINEe3HpA6mv3stnwBAk1Y8dANc= -----END CERTIFICATE-----Generated at Tue Mar 3 00:58:20 2026 by rpki-client