$ rpki-client -vvf repo-rpki.idnic.net/repo/55cab9df-03b5-48b3-a872-a0fe12a67426/0/D9B568DACE796AFC606BD299D9DA57F714CD7970.mft File: D9B568DACE796AFC606BD299D9DA57F714CD7970.mft (raw, json) Hash identifier: qlyM2oXoSILYdknjc5WJmfhGUf3QiVPMa9wakGuIGGw= Subject key identifier: 7F:D2:03:1E:97:B9:F8:5D:6F:39:72:E0:CF:B6:A8:2F:F2:E9:64:F1 Authority key identifier: D9:B5:68:DA:CE:79:6A:FC:60:6B:D2:99:D9:DA:57:F7:14:CD:79:70 Certificate issuer: /CN=D9B568DACE796AFC606BD299D9DA57F714CD7970 Certificate serial: 2DC2FF6C6F41EA47003525B30EF54681530B7FE5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9B568DACE796AFC606BD299D9DA57F714CD7970.cer Subject info access: rsync://repo-rpki.idnic.net/repo/55cab9df-03b5-48b3-a872-a0fe12a67426/0/D9B568DACE796AFC606BD299D9DA57F714CD7970.mft Manifest number: 0160 Signing time: Sat 28 Feb 2026 12:41:13 +0000 Manifest this update: Sat 28 Feb 2026 12:36:13 +0000 Manifest next update: Tue 03 Mar 2026 16:34:13 +0000 Files and hashes: 1: 3130332e3130352e3139362e302f32332d3234203d3e20313337323837.roa (hash: FVR7OXRQ9lsqccYbbruNBCZHbMSoocj8hgbL/LfCNK0=) 2: D9B568DACE796AFC606BD299D9DA57F714CD7970.crl (hash: d7AXuErUMjEfUrZXf8JnqfRX0HMNIrt9BGjbgLA7924=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/55cab9df-03b5-48b3-a872-a0fe12a67426/0/D9B568DACE796AFC606BD299D9DA57F714CD7970.crl rsync://repo-rpki.idnic.net/repo/55cab9df-03b5-48b3-a872-a0fe12a67426/0/D9B568DACE796AFC606BD299D9DA57F714CD7970.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9B568DACE796AFC606BD299D9DA57F714CD7970.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 16:34:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:c2:ff:6c:6f:41:ea:47:00:35:25:b3:0e:f5:46:81:53:0b:7f:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D9B568DACE796AFC606BD299D9DA57F714CD7970 Validity Not Before: Feb 28 12:36:13 2026 GMT Not After : Mar 3 16:34:13 2026 GMT Subject: CN=7FD2031E97B9F85D6F3972E0CFB6A82FF2E964F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:35:74:95:a9:04:b1:b3:fe:25:98:3c:4e:49: 7b:f0:a1:57:b5:64:b8:dd:75:10:20:8c:33:f7:14: b6:ec:4d:85:30:b6:b9:f9:10:fe:a1:c2:97:c2:12: 09:43:71:ff:21:e8:53:9f:73:f0:20:6e:39:a5:a7: ee:48:2b:2e:3f:54:d3:ee:86:99:1c:d9:a4:e7:31: 72:fc:e6:70:c5:bb:36:79:52:c0:52:14:a6:8c:aa: 73:ec:b3:cc:e4:1f:38:5e:c5:28:17:d8:73:8a:01: 22:c7:23:7b:87:92:4d:0c:24:18:79:ac:b8:e9:db: 31:0e:b6:6a:ce:38:4c:b1:17:52:f2:98:6c:73:33: 87:29:de:e1:a2:d1:0e:cb:13:14:8b:91:9c:47:4f: 6a:46:a5:93:da:45:cc:9b:be:22:ad:b4:cd:5e:68: c4:53:ba:28:15:a9:76:17:ed:a5:eb:85:f2:2c:05: b1:b1:e6:a9:3a:96:76:90:48:43:47:fb:6d:8c:00: f5:bc:b5:33:7b:fa:63:4f:88:5f:cb:51:3b:6e:34: 87:2c:ea:13:3a:0a:f8:b7:84:51:97:4f:2c:25:26: 46:6c:05:77:35:a4:a9:32:f4:f5:24:17:40:e5:2c: c5:c8:db:35:43:f6:29:52:f2:c7:5b:92:88:e6:c1: ee:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:D2:03:1E:97:B9:F8:5D:6F:39:72:E0:CF:B6:A8:2F:F2:E9:64:F1 X509v3 Authority Key Identifier: keyid:D9:B5:68:DA:CE:79:6A:FC:60:6B:D2:99:D9:DA:57:F7:14:CD:79:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/55cab9df-03b5-48b3-a872-a0fe12a67426/0/D9B568DACE796AFC606BD299D9DA57F714CD7970.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9B568DACE796AFC606BD299D9DA57F714CD7970.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55cab9df-03b5-48b3-a872-a0fe12a67426/0/D9B568DACE796AFC606BD299D9DA57F714CD7970.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:74:54:99:26:e3:e4:1c:b7:09:38:f5:2f:31:fe:1c:2b:ff: bf:dc:53:eb:81:7d:08:44:1f:12:62:60:5d:4f:f1:2b:7e:3a: 8e:be:ca:c1:12:3f:77:bd:f1:60:c0:5a:2a:74:83:b2:0c:0c: d9:50:3e:fa:55:9a:dd:6e:8e:3e:bd:5b:ec:7d:de:d4:e3:a2: 72:55:9b:65:3e:23:0b:40:f2:ed:b3:5c:9c:e6:9d:e7:fb:e5: 56:31:bc:ab:eb:3b:b2:8b:3c:1c:83:1f:5e:4e:16:71:37:ab: 73:ef:c6:fc:a6:45:b0:40:55:e1:6a:d0:22:6c:62:ef:99:c3: c3:6f:f6:61:87:40:80:24:bf:16:fb:fb:58:fd:44:4b:cc:ef: bb:0f:d0:c3:ff:c2:92:61:f5:0e:20:68:80:22:52:dd:1d:33: f8:fa:f9:0a:ed:6f:29:33:6b:cc:ed:a6:c2:63:e9:71:1c:0d: 15:12:83:73:df:87:04:7f:e1:f0:d6:f6:c6:7a:88:ab:5e:3d: a2:69:06:a6:57:f7:f4:9c:3a:6d:92:5a:71:97:32:fa:1a:e8: c8:be:7f:ba:3b:b9:5b:7a:9c:64:f2:f5:45:48:d0:ee:ed:1d: d2:e9:50:f2:78:f3:95:df:ca:e4:ce:62:3d:8e:66:c5:0b:aa: d8:fe:63:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULcL/bG9B6kcANSWzDvVGgVMLf+UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDlCNTY4REFDRTc5NkFGQzYwNkJEMjk5RDlEQTU3Rjcx NENENzk3MDAeFw0yNjAyMjgxMjM2MTNaFw0yNjAzMDMxNjM0MTNaMDMxMTAvBgNV BAMTKDdGRDIwMzFFOTdCOUY4NUQ2RjM5NzJFMENGQjZBODJGRjJFOTY0RjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTNXSVqQSxs/4lmDxOSXvwoVe1 ZLjddRAgjDP3FLbsTYUwtrn5EP6hwpfCEglDcf8h6FOfc/Agbjmlp+5IKy4/VNPu hpkc2aTnMXL85nDFuzZ5UsBSFKaMqnPss8zkHzhexSgX2HOKASLHI3uHkk0MJBh5 rLjp2zEOtmrOOEyxF1LymGxzM4cp3uGi0Q7LExSLkZxHT2pGpZPaRcybviKttM1e aMRTuigVqXYX7aXrhfIsBbGx5qk6lnaQSENH+22MAPW8tTN7+mNPiF/LUTtuNIcs 6hM6Cvi3hFGXTywlJkZsBXc1pKky9PUkF0DlLMXI2zVD9ilS8sdbkojmwe5dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUf9IDHpe5+F1vOXLgz7aoL/LpZPEwHwYDVR0j BBgwFoAU2bVo2s55avxga9KZ2dpX9xTNeXAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NWNhYjlkZi0wM2I1LTQ4YjMtYTg3Mi1hMGZlMTJhNjc0MjYvMC9EOUI1NjhEQUNF Nzk2QUZDNjA2QkQyOTlEOURBNTdGNzE0Q0Q3OTcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDlCNTY4REFDRTc5NkFGQzYwNkJEMjk5RDlEQTU3RjcxNENE Nzk3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTVjYWI5ZGYtMDNiNS00OGIzLWE4 NzItYTBmZTEyYTY3NDI2LzAvRDlCNTY4REFDRTc5NkFGQzYwNkJEMjk5RDlEQTU3 RjcxNENENzk3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFV0VJkm4+Qctwk49S8x/hwr/7/cU+uBfQhE HxJiYF1P8St+Oo6+ysESP3e98WDAWip0g7IMDNlQPvpVmt1ujj69W+x93tTjonJV m2U+IwtA8u2zXJzmnef75VYxvKvrO7KLPByDH15OFnE3q3PvxvymRbBAVeFq0CJs Yu+Zw8Nv9mGHQIAkvxb7+1j9REvM77sP0MP/wpJh9Q4gaIAiUt0dM/j6+Qrtbykz a8ztpsJj6XEcDRUSg3PfhwR/4fDW9sZ6iKtePaJpBqZX9/ScOm2SWnGXMvoa6Mi+ f7o7uVt6nGTy9UVI0O7tHdLpUPJ485XfyuTOYj2OZsULqtj+Y0c= -----END CERTIFICATE-----Generated at Mon Mar 2 00:29:03 2026 by rpki-client