$ rpki-client -vvf repo-rpki.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.mft File: D9DFDED2F525C1E82251BA90ED838157F0B6FB19.mft (raw, json) Hash identifier: VD4H+soDcOnarkMB4e1WmQuu1WsB9aICqocjR4NM1vo= Subject key identifier: B1:5E:20:96:EF:94:36:9A:F5:96:47:BC:59:F7:92:A6:42:36:10:35 Authority key identifier: D9:DF:DE:D2:F5:25:C1:E8:22:51:BA:90:ED:83:81:57:F0:B6:FB:19 Certificate issuer: /CN=D9DFDED2F525C1E82251BA90ED838157F0B6FB19 Certificate serial: 183815D40EE8F50C96719DE07233128EA64BF421 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.cer Subject info access: rsync://repo-rpki.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.mft Manifest number: 011C Signing time: Sun 01 Mar 2026 16:31:40 +0000 Manifest this update: Sun 01 Mar 2026 16:26:40 +0000 Manifest next update: Thu 05 Mar 2026 00:49:40 +0000 Files and hashes: 1: D9DFDED2F525C1E82251BA90ED838157F0B6FB19.crl (hash: vsWWN9XC5K1GlIdjPNZTx9bhUEwOj4poJzF9Gb1ZPMw=) 2: 3130332e39382e3132302e302f32342d3234203d3e20313336383238.roa (hash: otrTvPdXJ2c7XawCgl4uHz6MNarL+/Mepjzl/48ej8I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.crl rsync://repo-rpki.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:49:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:38:15:d4:0e:e8:f5:0c:96:71:9d:e0:72:33:12:8e:a6:4b:f4:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D9DFDED2F525C1E82251BA90ED838157F0B6FB19 Validity Not Before: Mar 1 16:26:40 2026 GMT Not After : Mar 5 00:49:40 2026 GMT Subject: CN=B15E2096EF94369AF59647BC59F792A642361035 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:18:2d:64:14:a7:91:2e:c6:c8:39:23:0c:c7: 2b:50:59:e7:80:f9:56:8d:40:c5:cb:44:4f:a0:91: 95:c5:cb:48:19:d7:76:01:5f:86:28:50:d3:96:b9: 99:d1:9a:05:00:d3:1c:67:b0:10:f7:9a:96:01:d7: 37:c4:37:bb:13:86:52:76:52:b4:53:d1:7d:64:34: 1f:aa:f5:e3:ab:bd:8d:7c:cb:02:79:ad:d1:4d:1c: 6e:3d:b1:7e:f8:d4:43:ed:5f:7e:a1:2d:71:e6:a7: da:10:17:e6:d7:d8:44:d7:26:a6:48:5b:a7:27:46: eb:fe:ac:8c:0f:e9:e6:34:3c:42:63:72:eb:24:bc: 07:5b:06:e8:2f:38:29:28:a1:4e:ba:cf:32:fe:af: 66:da:a9:2e:bb:3d:fd:68:da:55:d5:37:ca:a0:ff: 30:89:36:40:b5:60:1a:de:d8:ad:d4:e2:ab:a3:eb: 6e:9a:51:ee:39:ad:96:3d:c6:9d:89:02:5f:07:7e: d9:46:e0:44:a9:b9:2c:cd:c5:80:8c:96:27:1e:0a: e4:19:d7:8b:17:71:3c:bf:d7:c2:8c:45:80:ae:27: 23:ff:a7:a3:b0:14:3a:bd:92:3e:03:2c:fa:ae:ef: 65:52:c8:9f:7c:cf:e0:88:c4:16:9c:73:55:a0:cc: e8:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:5E:20:96:EF:94:36:9A:F5:96:47:BC:59:F7:92:A6:42:36:10:35 X509v3 Authority Key Identifier: keyid:D9:DF:DE:D2:F5:25:C1:E8:22:51:BA:90:ED:83:81:57:F0:B6:FB:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:c5:46:0a:c9:09:89:3e:92:cb:a5:0b:e9:51:7d:f0:9b:e6: 41:c1:5c:c7:d3:4f:23:95:d9:52:8e:81:f2:30:d4:e4:7f:17: 65:c3:26:2b:cd:e2:02:3f:50:5b:47:6e:04:ff:59:0a:a3:36: 7c:3e:74:4d:17:ea:76:e8:ea:26:d0:ac:9b:c9:2b:a4:50:06: 11:28:b5:d4:07:15:9a:2b:1e:70:3d:5a:6a:3f:c7:cc:ae:0a: 26:a7:88:8b:60:71:3a:df:7e:3a:65:b8:9f:ed:b7:94:b7:90: f5:5d:21:ce:43:05:88:fd:8e:25:8d:0d:60:bb:07:fb:6d:82: 1c:69:74:88:ec:30:2f:d7:31:15:11:d4:2b:4e:63:96:ac:73: ab:84:30:a6:4e:68:e2:7c:f7:80:e6:c1:53:87:10:50:fc:bf: 88:30:81:7c:53:81:ae:df:45:ec:06:21:98:53:92:a8:36:c7: 2e:91:94:77:58:39:36:2a:b2:1e:f0:5e:0d:09:4c:3e:3f:4a: 40:71:31:45:11:37:b9:80:84:7f:eb:6b:4e:6f:6f:c8:f3:64: a5:37:35:35:08:e3:cc:54:36:9b:be:f1:f7:ab:d0:a7:cb:d3: 99:aa:4e:84:03:b9:0f:f3:87:5b:48:74:51:18:65:f7:17:dc: 18:ba:16:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGDgV1A7o9QyWcZ3gcjMSjqZL9CEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDlERkRFRDJGNTI1QzFFODIyNTFCQTkwRUQ4MzgxNTdG MEI2RkIxOTAeFw0yNjAzMDExNjI2NDBaFw0yNjAzMDUwMDQ5NDBaMDMxMTAvBgNV BAMTKEIxNUUyMDk2RUY5NDM2OUFGNTk2NDdCQzU5Rjc5MkE2NDIzNjEwMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBGC1kFKeRLsbIOSMMxytQWeeA +VaNQMXLRE+gkZXFy0gZ13YBX4YoUNOWuZnRmgUA0xxnsBD3mpYB1zfEN7sThlJ2 UrRT0X1kNB+q9eOrvY18ywJ5rdFNHG49sX741EPtX36hLXHmp9oQF+bX2ETXJqZI W6cnRuv+rIwP6eY0PEJjcuskvAdbBugvOCkooU66zzL+r2baqS67Pf1o2lXVN8qg /zCJNkC1YBre2K3U4quj626aUe45rZY9xp2JAl8HftlG4ESpuSzNxYCMliceCuQZ 14sXcTy/18KMRYCuJyP/p6OwFDq9kj4DLPqu72VSyJ98z+CIxBacc1WgzOjFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsV4glu+UNpr1lke8WfeSpkI2EDUwHwYDVR0j BBgwFoAU2d/e0vUlwegiUbqQ7YOBV/C2+xkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTBiZTM1My00YWI4LTRiNzctOTg4ZC03MzlmODJiOWY2NDEvMC9EOURGREVEMkY1 MjVDMUU4MjI1MUJBOTBFRDgzODE1N0YwQjZGQjE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDlERkRFRDJGNTI1QzFFODIyNTFCQTkwRUQ4MzgxNTdGMEI2 RkIxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTEwYmUzNTMtNGFiOC00Yjc3LTk4 OGQtNzM5ZjgyYjlmNjQxLzAvRDlERkRFRDJGNTI1QzFFODIyNTFCQTkwRUQ4Mzgx NTdGMEI2RkIxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACLFRgrJCYk+ksulC+lRffCb5kHBXMfTTyOV 2VKOgfIw1OR/F2XDJivN4gI/UFtHbgT/WQqjNnw+dE0X6nbo6ibQrJvJK6RQBhEo tdQHFZorHnA9Wmo/x8yuCianiItgcTrffjpluJ/tt5S3kPVdIc5DBYj9jiWNDWC7 B/ttghxpdIjsMC/XMRUR1CtOY5asc6uEMKZOaOJ894DmwVOHEFD8v4gwgXxTga7f RewGIZhTkqg2xy6RlHdYOTYqsh7wXg0JTD4/SkBxMUURN7mAhH/ra05vb8jzZKU3 NTUI48xUNpu+8fer0KfL05mqToQDuQ/zh1tIdFEYZfcX3Bi6FnE= -----END CERTIFICATE-----Generated at Mon Mar 2 13:38:38 2026 by rpki-client