$ rpki-client -vvf repo-rpki.idnic.net/repo/57be8b7c-232f-47e8-9cdd-8817d39b70ea/0/843FDF32A52D11795BBFB0918ABF926E0A210870.mft File: 843FDF32A52D11795BBFB0918ABF926E0A210870.mft (raw, json) Hash identifier: sAFW2t8CzUSa9WwLWfaCWYCLaHwnOShmqZkoIeqrZAc= Subject key identifier: B0:40:FE:A9:6B:97:A6:A4:82:37:23:6F:0A:D7:E2:06:91:B9:02:C0 Authority key identifier: 84:3F:DF:32:A5:2D:11:79:5B:BF:B0:91:8A:BF:92:6E:0A:21:08:70 Certificate issuer: /CN=843FDF32A52D11795BBFB0918ABF926E0A210870 Certificate serial: 5AD9B23591687815C7C954A3262CEA2A2BDE41FA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/843FDF32A52D11795BBFB0918ABF926E0A210870.cer Subject info access: rsync://repo-rpki.idnic.net/repo/57be8b7c-232f-47e8-9cdd-8817d39b70ea/0/843FDF32A52D11795BBFB0918ABF926E0A210870.mft Manifest number: 014C Signing time: Sat 28 Feb 2026 13:22:26 +0000 Manifest this update: Sat 28 Feb 2026 13:17:26 +0000 Manifest next update: Tue 03 Mar 2026 17:54:26 +0000 Files and hashes: 1: 843FDF32A52D11795BBFB0918ABF926E0A210870.crl (hash: OGSZKLqtqIr0VDQTEWXJxf6MSBJkbCt1fXlLfC5w6Ic=) 2: 3231302e38372e3132342e302f32332d3234203d3e20313532303539.roa (hash: EWhTaEy0kSyTN6Oh9f79SCw3rvXkaSbLCftfTIrzMKE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/57be8b7c-232f-47e8-9cdd-8817d39b70ea/0/843FDF32A52D11795BBFB0918ABF926E0A210870.crl rsync://repo-rpki.idnic.net/repo/57be8b7c-232f-47e8-9cdd-8817d39b70ea/0/843FDF32A52D11795BBFB0918ABF926E0A210870.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/843FDF32A52D11795BBFB0918ABF926E0A210870.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 17:54:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:d9:b2:35:91:68:78:15:c7:c9:54:a3:26:2c:ea:2a:2b:de:41:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=843FDF32A52D11795BBFB0918ABF926E0A210870 Validity Not Before: Feb 28 13:17:26 2026 GMT Not After : Mar 3 17:54:26 2026 GMT Subject: CN=B040FEA96B97A6A48237236F0AD7E20691B902C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ee:52:c1:4c:87:3f:98:06:fc:f2:c5:94:c9: cc:62:7d:19:f4:88:31:72:cc:31:f1:4d:e7:58:a8: c9:a1:ee:fc:a7:a1:d2:a2:ce:09:4e:42:7b:4d:c5: f6:b3:21:0d:b3:e0:6b:b5:46:0a:8a:e0:79:9f:5f: 2c:30:06:9a:28:63:90:eb:db:f2:18:0a:ed:a2:8f: 26:c8:96:b6:00:bb:b7:97:6e:c9:c2:23:e6:41:ac: d7:54:6d:b5:64:3b:0d:77:6a:e4:f0:9b:85:7d:a0: cd:7d:ff:dd:db:2f:0a:fe:0c:c0:53:66:63:81:b5: da:58:fc:f8:92:9d:03:c9:55:31:f2:53:38:1e:ef: f6:fc:23:e1:6d:05:3e:5a:d1:6f:9f:18:40:a2:79: e2:f0:f1:61:c7:5d:00:98:48:80:ad:96:36:20:a6: e0:79:5c:ff:91:5b:89:a7:9d:7f:03:81:12:f5:55: 95:a1:3b:c3:1c:7c:e3:10:2b:0d:07:50:04:fc:ef: f9:0d:5c:fb:c9:b2:33:80:50:00:ad:e2:de:df:f9: 91:29:e9:35:e3:52:59:16:68:df:dc:65:01:26:17: 30:7f:8a:0f:0d:2b:49:c1:7a:48:99:be:bd:62:77: 34:8e:a5:89:36:ca:e7:14:73:f8:a7:d6:3e:cb:a5: 15:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:40:FE:A9:6B:97:A6:A4:82:37:23:6F:0A:D7:E2:06:91:B9:02:C0 X509v3 Authority Key Identifier: keyid:84:3F:DF:32:A5:2D:11:79:5B:BF:B0:91:8A:BF:92:6E:0A:21:08:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/57be8b7c-232f-47e8-9cdd-8817d39b70ea/0/843FDF32A52D11795BBFB0918ABF926E0A210870.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/843FDF32A52D11795BBFB0918ABF926E0A210870.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57be8b7c-232f-47e8-9cdd-8817d39b70ea/0/843FDF32A52D11795BBFB0918ABF926E0A210870.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:6b:b8:15:42:1a:e9:91:1a:7c:ec:b0:74:b6:df:cf:f1:e1: bd:ad:75:3a:cc:4b:b6:0c:03:fa:a4:6b:39:54:31:8c:28:48: fc:f0:27:54:1c:b9:4b:60:e2:23:8d:7c:df:63:55:cc:98:1c: 8b:cc:e8:68:58:2b:a4:3e:fa:43:6f:ef:3f:b3:e5:9e:dc:5a: 55:da:2b:22:65:70:8f:8f:d7:b9:c0:65:f3:77:12:68:18:58: 23:cb:90:8c:dd:01:c0:3e:5b:35:b7:6e:68:9a:63:41:77:ad: 07:52:da:b6:9e:1c:b1:1d:ee:06:31:8b:8b:a7:67:46:b3:4f: 15:0f:7e:92:0a:9d:f5:a3:38:90:48:a7:e9:a7:f4:75:f1:fb: 68:ec:46:14:df:db:3d:b9:8c:cc:6c:24:bd:b5:82:d5:df:03: 22:b3:95:b6:a5:34:3f:d2:bc:37:68:cb:8e:96:a3:83:1c:47: a0:cd:68:ac:53:ad:31:dd:f0:20:db:50:19:6e:6d:87:2a:bc: 25:2e:c1:c0:a0:20:5f:89:45:8c:87:9c:dd:b4:52:87:3e:80: 35:17:10:21:55:4d:61:95:9e:61:e2:8e:37:98:2f:3d:40:5d: 21:a1:42:92:f6:2d:8d:b9:a1:65:89:d5:38:fe:e5:f9:57:8e: 42:3b:0a:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWtmyNZFoeBXHyVSjJizqKiveQfowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQzRkRGMzJBNTJEMTE3OTVCQkZCMDkxOEFCRjkyNkUw QTIxMDg3MDAeFw0yNjAyMjgxMzE3MjZaFw0yNjAzMDMxNzU0MjZaMDMxMTAvBgNV BAMTKEIwNDBGRUE5NkI5N0E2QTQ4MjM3MjM2RjBBRDdFMjA2OTFCOTAyQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ7lLBTIc/mAb88sWUycxifRn0 iDFyzDHxTedYqMmh7vynodKizglOQntNxfazIQ2z4Gu1RgqK4HmfXywwBpooY5Dr 2/IYCu2ijybIlrYAu7eXbsnCI+ZBrNdUbbVkOw13auTwm4V9oM19/93bLwr+DMBT ZmOBtdpY/PiSnQPJVTHyUzge7/b8I+FtBT5a0W+fGECieeLw8WHHXQCYSICtljYg puB5XP+RW4mnnX8DgRL1VZWhO8McfOMQKw0HUAT87/kNXPvJsjOAUACt4t7f+ZEp 6TXjUlkWaN/cZQEmFzB/ig8NK0nBekiZvr1idzSOpYk2yucUc/in1j7LpRXlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsED+qWuXpqSCNyNvCtfiBpG5AsAwHwYDVR0j BBgwFoAUhD/fMqUtEXlbv7CRir+SbgohCHAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 N2JlOGI3Yy0yMzJmLTQ3ZTgtOWNkZC04ODE3ZDM5YjcwZWEvMC84NDNGREYzMkE1 MkQxMTc5NUJCRkIwOTE4QUJGOTI2RTBBMjEwODcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODQzRkRGMzJBNTJEMTE3OTVCQkZCMDkxOEFCRjkyNkUwQTIx MDg3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTdiZThiN2MtMjMyZi00N2U4LTlj ZGQtODgxN2QzOWI3MGVhLzAvODQzRkRGMzJBNTJEMTE3OTVCQkZCMDkxOEFCRjky NkUwQTIxMDg3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF1ruBVCGumRGnzssHS238/x4b2tdTrMS7YM A/qkazlUMYwoSPzwJ1QcuUtg4iONfN9jVcyYHIvM6GhYK6Q++kNv7z+z5Z7cWlXa KyJlcI+P17nAZfN3EmgYWCPLkIzdAcA+WzW3bmiaY0F3rQdS2raeHLEd7gYxi4un Z0azTxUPfpIKnfWjOJBIp+mn9HXx+2jsRhTf2z25jMxsJL21gtXfAyKzlbalND/S vDdoy46Wo4McR6DNaKxTrTHd8CDbUBlubYcqvCUuwcCgIF+JRYyHnN20Uoc+gDUX ECFVTWGVnmHijjeYLz1AXSGhQpL2LY25oWWJ1Tj+5flXjkI7Cgc= -----END CERTIFICATE-----Generated at Mon Mar 2 07:50:30 2026 by rpki-client