$ rpki-client -vvf repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/D296B71263A794DB76A99329A0A6CD91F03F997C.mft File: D296B71263A794DB76A99329A0A6CD91F03F997C.mft (raw, json) Hash identifier: p4OugRTYhipGdFo23TBCBqksAaKS8ah/xQH8Y7VeHp4= Subject key identifier: 34:95:B1:DE:0F:3E:FE:D0:A2:F7:DE:58:A0:EE:ED:94:D2:F5:C0:87 Authority key identifier: D2:96:B7:12:63:A7:94:DB:76:A9:93:29:A0:A6:CD:91:F0:3F:99:7C Certificate issuer: /CN=D296B71263A794DB76A99329A0A6CD91F03F997C Certificate serial: 204E157BEB0C15BDD1038F6B60D86B7B36BD1D68 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D296B71263A794DB76A99329A0A6CD91F03F997C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/D296B71263A794DB76A99329A0A6CD91F03F997C.mft Manifest number: 0552 Signing time: Sat 28 Feb 2026 14:50:03 +0000 Manifest this update: Sat 28 Feb 2026 14:45:03 +0000 Manifest next update: Tue 03 Mar 2026 21:47:03 +0000 Files and hashes: 1: 3130332e3233312e3130382e302f32322d3234203d3e203138333531.roa (hash: H/9gUkMoKOxaM6bJMIhdfazqxPd02FQG7yEvZqg/6f4=) 2: 3230332e3230372e35322e302f32322d3234203d3e203138333531.roa (hash: GkkNG9FcAuiztsaFs7LArOPHFVmugjMRyr9b42+liyc=) 3: D296B71263A794DB76A99329A0A6CD91F03F997C.crl (hash: 1c2f57UHZL0IMq+tesbSW/gvYVZESi+xdQXfQXe28dU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/D296B71263A794DB76A99329A0A6CD91F03F997C.crl rsync://repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/D296B71263A794DB76A99329A0A6CD91F03F997C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D296B71263A794DB76A99329A0A6CD91F03F997C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 21:47:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:4e:15:7b:eb:0c:15:bd:d1:03:8f:6b:60:d8:6b:7b:36:bd:1d:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D296B71263A794DB76A99329A0A6CD91F03F997C Validity Not Before: Feb 28 14:45:03 2026 GMT Not After : Mar 3 21:47:03 2026 GMT Subject: CN=3495B1DE0F3EFED0A2F7DE58A0EEED94D2F5C087 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:22:9a:c3:b4:8f:42:be:b4:f3:8c:84:32:52: b1:9c:d6:75:93:bd:4c:1f:c3:1d:91:e4:a3:c3:f8: 6f:43:27:15:be:14:87:85:11:32:3f:71:ed:d5:63: 90:51:d5:d8:fd:1e:25:7a:8e:12:23:7e:8a:6f:21: b9:5f:ec:f0:c0:bd:5e:fc:5f:bf:ef:f6:01:36:48: 56:83:39:04:0a:a0:c5:c2:a9:39:0a:0e:70:ae:76: 62:ce:ad:e1:f2:3f:75:c7:16:35:f5:73:37:66:bd: 40:db:99:30:bb:a2:31:23:6c:85:bc:2f:88:4d:c8: bb:f5:73:97:d7:32:45:40:94:c8:be:28:32:14:c6: 41:94:53:89:ea:59:c3:c2:4f:4a:f8:96:be:1d:a0: 11:d7:f0:ff:be:68:c9:aa:e3:9f:13:59:6a:dd:ac: 81:8c:3d:20:32:0b:3a:cf:63:4e:34:f3:fb:13:83: 8a:0f:72:a8:95:da:bf:9b:d5:ca:ef:c2:1b:47:0d: fc:0c:71:2a:3b:72:a1:11:33:75:f4:2c:f2:43:18: c0:1c:21:8e:7d:c4:f6:b1:af:16:ce:e1:8a:b3:0a: be:97:42:b6:9d:b3:2b:13:83:c4:31:cb:3c:f8:1a: 81:96:2a:ea:59:3c:3b:a3:fc:2c:8f:0a:01:58:b8: 55:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:95:B1:DE:0F:3E:FE:D0:A2:F7:DE:58:A0:EE:ED:94:D2:F5:C0:87 X509v3 Authority Key Identifier: keyid:D2:96:B7:12:63:A7:94:DB:76:A9:93:29:A0:A6:CD:91:F0:3F:99:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/D296B71263A794DB76A99329A0A6CD91F03F997C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D296B71263A794DB76A99329A0A6CD91F03F997C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/D296B71263A794DB76A99329A0A6CD91F03F997C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:b5:3b:05:ac:87:02:08:6a:74:a1:e1:c1:91:db:20:20:cc: 8e:00:48:4c:b3:dc:61:be:c8:09:74:37:c9:64:01:d1:a4:2c: 4b:0e:a6:47:1a:b4:30:4b:53:aa:7e:8f:98:a3:77:a0:86:a5: 77:1d:23:fc:6a:b3:04:26:f8:d3:79:ad:ad:b4:0f:5a:21:66: f7:12:94:81:ca:8d:6a:1c:f9:a1:71:73:33:04:19:21:63:33: fc:6e:38:17:aa:55:37:95:38:f5:e1:3e:5a:c7:c4:56:54:1f: f3:a8:04:0c:10:19:34:4c:ef:e9:9c:17:fa:35:67:82:47:42: 7b:d5:d5:ae:f0:42:cf:68:cf:88:68:d5:76:89:c4:7e:3c:af: 91:10:4a:26:d7:f1:e5:50:b7:83:e6:33:7d:2d:a4:18:9a:ed: 3e:b8:88:a5:84:06:0b:83:33:db:e7:3c:11:88:3b:45:5c:d6: 8b:cc:3c:8e:fb:ec:c2:a7:96:87:7f:16:6f:ec:dc:f8:41:b3: bf:46:80:c6:fb:4d:70:ec:b6:d0:20:ce:ee:f3:a6:4c:3b:3e: fa:03:ff:f5:b6:de:8d:1c:bf:98:6a:6c:1b:22:17:67:70:7d: 0f:37:b7:14:12:3e:c3:28:77:c1:d1:f2:f1:1d:86:c8:83:5b: c4:23:d6:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIE4Ve+sMFb3RA49rYNhreza9HWgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI5NkI3MTI2M0E3OTREQjc2QTk5MzI5QTBBNkNEOTFG MDNGOTk3QzAeFw0yNjAyMjgxNDQ1MDNaFw0yNjAzMDMyMTQ3MDNaMDMxMTAvBgNV BAMTKDM0OTVCMURFMEYzRUZFRDBBMkY3REU1OEEwRUVFRDk0RDJGNUMwODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUIprDtI9CvrTzjIQyUrGc1nWT vUwfwx2R5KPD+G9DJxW+FIeFETI/ce3VY5BR1dj9HiV6jhIjfopvIblf7PDAvV78 X7/v9gE2SFaDOQQKoMXCqTkKDnCudmLOreHyP3XHFjX1czdmvUDbmTC7ojEjbIW8 L4hNyLv1c5fXMkVAlMi+KDIUxkGUU4nqWcPCT0r4lr4doBHX8P++aMmq458TWWrd rIGMPSAyCzrPY0408/sTg4oPcqiV2r+b1crvwhtHDfwMcSo7cqERM3X0LPJDGMAc IY59xPaxrxbO4YqzCr6XQradsysTg8Qxyzz4GoGWKupZPDuj/CyPCgFYuFVbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNJWx3g8+/tCi995YoO7tlNL1wIcwHwYDVR0j BBgwFoAU0pa3EmOnlNt2qZMpoKbNkfA/mXwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 M2Y3NWU5OC0xNGVmLTQ0NTctOTRmMy1lNWI3M2E5MjJmYzUvMC9EMjk2QjcxMjYz QTc5NERCNzZBOTkzMjlBMEE2Q0Q5MUYwM0Y5OTdDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDI5NkI3MTI2M0E3OTREQjc2QTk5MzI5QTBBNkNEOTFGMDNG OTk3Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTNmNzVlOTgtMTRlZi00NDU3LTk0 ZjMtZTViNzNhOTIyZmM1LzAvRDI5NkI3MTI2M0E3OTREQjc2QTk5MzI5QTBBNkNE OTFGMDNGOTk3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALK1OwWshwIIanSh4cGR2yAgzI4ASEyz3GG+ yAl0N8lkAdGkLEsOpkcatDBLU6p+j5ijd6CGpXcdI/xqswQm+NN5ra20D1ohZvcS lIHKjWoc+aFxczMEGSFjM/xuOBeqVTeVOPXhPlrHxFZUH/OoBAwQGTRM7+mcF/o1 Z4JHQnvV1a7wQs9oz4ho1XaJxH48r5EQSibX8eVQt4PmM30tpBia7T64iKWEBguD M9vnPBGIO0Vc1ovMPI777MKnlod/Fm/s3PhBs79GgMb7TXDsttAgzu7zpkw7PvoD //W23o0cv5hqbBsiF2dwfQ83txQSPsMod8HR8vEdhsiDW8Qj1tk= -----END CERTIFICATE-----Generated at Mon Mar 2 09:16:46 2026 by rpki-client