$ rpki-client -vvf repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.mft File: 295131167768CC78482F796BB58CF5A01A014393.mft (raw, json) Hash identifier: dbVUHbv7K9/YXOVXwOfiwpOzk1+f+sIbhlYIytb5BEo= Subject key identifier: 23:C2:18:75:E3:08:EE:5A:B1:F0:F5:B1:F1:67:B3:2C:C7:15:95:DF Authority key identifier: 29:51:31:16:77:68:CC:78:48:2F:79:6B:B5:8C:F5:A0:1A:01:43:93 Certificate issuer: /CN=295131167768CC78482F796BB58CF5A01A014393 Certificate serial: 5DA70A5F9E886F1811263E69D22F363D7314F991 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/295131167768CC78482F796BB58CF5A01A014393.cer Subject info access: rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.mft Manifest number: 0108 Signing time: Sat 28 Feb 2026 15:11:37 +0000 Manifest this update: Sat 28 Feb 2026 15:06:37 +0000 Manifest next update: Tue 03 Mar 2026 19:16:37 +0000 Files and hashes: 1: 3136302e32352e35302e302f32342d3234203d3e20313439373436.roa (hash: 0V0z+LtHyEetsdKzNz3fDG9TWng43zw65Ia1bT84+ig=) 2: 3136302e32352e35302e302f32342d3234203d3e20313533303831.roa (hash: AX0lDEH6VgInN8VNyEQZ1Bf7VJ5RuPZOiclQbBxraVk=) 3: 3136302e32352e35302e302f32332d3234203d3e20313533303831.roa (hash: Jp+xzrLLFcNcdbgFIyqYkAF5UwOiimjyD2ApcObjIzI=) 4: 3136302e32352e35312e302f32342d3234203d3e20313439373436.roa (hash: aIfX6W1wJsuWGyj92Zq4X0k5Z/7Dz5tO4tJOY1Wnlo8=) 5: 295131167768CC78482F796BB58CF5A01A014393.crl (hash: nxhtGlXsopcMGJbg+YH/6dgOXIGAmE893OUB28iykRc=) 6: 3136302e32352e35312e302f32342d3234203d3e20313533303831.roa (hash: uRuK1ozamqcEn31L5IIaIYVkb8/xiqqqwMGA40t+cIA=) 7: 3136302e32352e35302e302f32332d3233203d3e20313439373436.roa (hash: ItdPic80wypsThSkca8xGdGFm8YCN4V6loLuyuZH6qY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.crl rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/295131167768CC78482F796BB58CF5A01A014393.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 19:16:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:a7:0a:5f:9e:88:6f:18:11:26:3e:69:d2:2f:36:3d:73:14:f9:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=295131167768CC78482F796BB58CF5A01A014393 Validity Not Before: Feb 28 15:06:37 2026 GMT Not After : Mar 3 19:16:37 2026 GMT Subject: CN=23C21875E308EE5AB1F0F5B1F167B32CC71595DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:e9:77:65:cc:4d:5a:79:43:67:97:a2:f1:c0: 9f:3d:0a:36:94:20:60:86:2d:e7:a0:a1:51:9c:1c: 82:7b:38:19:1d:d7:84:31:3a:41:30:97:91:aa:b5: 07:dd:09:4b:a8:38:64:17:b1:99:5e:32:24:a5:21: 34:f6:33:2b:cf:d4:dc:3c:73:b8:bf:e3:2f:06:b1: 51:91:81:af:f1:9c:79:ba:49:d9:f4:94:b8:58:1b: e8:dc:8c:49:9d:39:0e:a0:66:42:f1:30:8e:38:49: e8:74:54:ad:b2:5e:71:46:90:85:92:37:79:05:e0: 30:f0:99:ce:22:2c:bc:31:47:fb:a7:07:56:f2:a5: ea:b8:e5:86:d5:f3:35:1f:34:ad:ac:fc:f3:7d:d4: 83:22:a2:92:e1:77:96:98:c3:3c:a0:08:50:d7:e0: 70:8b:a6:70:d2:f0:27:f0:8f:14:23:55:44:bd:19: 6d:22:74:a6:66:db:22:e6:17:60:52:c2:67:9c:27: a4:5b:d3:93:d1:f8:22:a0:ce:63:70:d2:dd:35:1e: 63:d2:1b:ca:40:57:7a:bf:f1:4b:c3:c2:9a:bc:7b: f8:06:c4:e4:99:58:d8:a1:f3:38:33:6b:aa:39:66: 33:3a:8b:39:ae:2e:61:db:12:6a:b2:71:07:67:7b: d8:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:C2:18:75:E3:08:EE:5A:B1:F0:F5:B1:F1:67:B3:2C:C7:15:95:DF X509v3 Authority Key Identifier: keyid:29:51:31:16:77:68:CC:78:48:2F:79:6B:B5:8C:F5:A0:1A:01:43:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/295131167768CC78482F796BB58CF5A01A014393.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:64:63:60:06:08:3d:34:79:ab:3e:3c:4b:83:08:80:45:5b: 34:98:9c:05:30:20:2c:ac:8a:b5:83:88:7a:9d:43:90:3d:fa: a1:ee:b8:22:4e:63:94:39:83:59:2e:d0:96:1d:93:0a:0d:08: 55:fb:25:9f:43:33:2d:5d:7d:1d:d3:b5:c2:f9:af:e9:93:7e: f9:f4:ba:65:66:5b:73:fd:92:e7:d2:ea:ca:fa:97:ef:1c:1e: 50:08:36:23:2d:c2:15:f1:7b:3d:1a:73:33:0a:8f:41:03:c3: a7:0d:6d:cf:11:fc:44:f4:1a:50:79:84:63:39:a8:32:0f:23: 6f:04:c1:68:83:d9:14:73:bd:03:27:94:b3:a7:be:86:c9:6b: 9e:88:46:78:5a:07:70:15:6a:f7:ee:33:fd:7d:de:d5:a2:58: d1:f8:68:86:5f:ca:31:80:74:19:df:3f:d1:b7:c7:ad:e0:41: 29:7a:7d:9d:87:e7:40:1f:d6:ef:85:b1:6b:21:63:76:a5:b8: 08:f1:83:64:c5:46:1a:ca:3f:f4:cb:78:a3:5f:12:99:96:e3: 65:14:e5:72:9b:9f:51:3f:19:59:5a:e2:bb:04:c0:17:02:49: 2b:a1:bb:ac:0d:07:7b:cb:a9:3c:c5:83:7e:7f:bc:4a:cb:24: 3f:f1:fd:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXacKX56IbxgRJj5p0i82PXMU+ZEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk1MTMxMTY3NzY4Q0M3ODQ4MkY3OTZCQjU4Q0Y1QTAx QTAxNDM5MzAeFw0yNjAyMjgxNTA2MzdaFw0yNjAzMDMxOTE2MzdaMDMxMTAvBgNV BAMTKDIzQzIxODc1RTMwOEVFNUFCMUYwRjVCMUYxNjdCMzJDQzcxNTk1REYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ6XdlzE1aeUNnl6LxwJ89CjaU IGCGLeegoVGcHIJ7OBkd14QxOkEwl5GqtQfdCUuoOGQXsZleMiSlITT2MyvP1Nw8 c7i/4y8GsVGRga/xnHm6Sdn0lLhYG+jcjEmdOQ6gZkLxMI44Seh0VK2yXnFGkIWS N3kF4DDwmc4iLLwxR/unB1bypeq45YbV8zUfNK2s/PN91IMiopLhd5aYwzygCFDX 4HCLpnDS8CfwjxQjVUS9GW0idKZm2yLmF2BSwmecJ6Rb05PR+CKgzmNw0t01HmPS G8pAV3q/8UvDwpq8e/gGxOSZWNih8zgza6o5ZjM6izmuLmHbEmqycQdne9hbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUI8IYdeMI7lqx8PWx8WezLMcVld8wHwYDVR0j BBgwFoAUKVExFndozHhIL3lrtYz1oBoBQ5MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 OWVjYTUwYi01NzIyLTQ5MTgtODMxNC04NTlkM2MxZjU1YTIvMC8yOTUxMzExNjc3 NjhDQzc4NDgyRjc5NkJCNThDRjVBMDFBMDE0MzkzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjk1MTMxMTY3NzY4Q0M3ODQ4MkY3OTZCQjU4Q0Y1QTAxQTAx NDM5My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDllY2E1MGItNTcyMi00OTE4LTgz MTQtODU5ZDNjMWY1NWEyLzAvMjk1MTMxMTY3NzY4Q0M3ODQ4MkY3OTZCQjU4Q0Y1 QTAxQTAxNDM5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJpkY2AGCD00eas+PEuDCIBFWzSYnAUwICys irWDiHqdQ5A9+qHuuCJOY5Q5g1ku0JYdkwoNCFX7JZ9DMy1dfR3TtcL5r+mTfvn0 umVmW3P9kufS6sr6l+8cHlAINiMtwhXxez0aczMKj0EDw6cNbc8R/ET0GlB5hGM5 qDIPI28EwWiD2RRzvQMnlLOnvobJa56IRnhaB3AVavfuM/193tWiWNH4aIZfyjGA dBnfP9G3x63gQSl6fZ2H50Af1u+FsWshY3aluAjxg2TFRhrKP/TLeKNfEpmW42UU 5XKbn1E/GVla4rsEwBcCSSuhu6wNB3vLqTzFg35/vErLJD/x/Y8= -----END CERTIFICATE-----Generated at Mon Mar 2 17:32:34 2026 by rpki-client