$ rpki-client -vvf repo-rpki.idnic.net/repo/5ae2b8b3-dec8-41cf-a16d-e1171561d725/0/D9D0730DB51295FEC5BD480CDD42B5E8517C8FDB.mft File: D9D0730DB51295FEC5BD480CDD42B5E8517C8FDB.mft (raw, json) Hash identifier: NrockFnLU0dgnK4QIbvDC9AaqUl3etLi5Dvw373RZrk= Subject key identifier: B6:8C:AE:5B:70:CB:BA:C6:CC:9A:3F:FF:C2:8B:10:75:70:B8:C8:E0 Authority key identifier: D9:D0:73:0D:B5:12:95:FE:C5:BD:48:0C:DD:42:B5:E8:51:7C:8F:DB Certificate issuer: /CN=D9D0730DB51295FEC5BD480CDD42B5E8517C8FDB Certificate serial: 3CF76D690AA8E6DB9AD653EF7753E2A9AAB822B2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9D0730DB51295FEC5BD480CDD42B5E8517C8FDB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5ae2b8b3-dec8-41cf-a16d-e1171561d725/0/D9D0730DB51295FEC5BD480CDD42B5E8517C8FDB.mft Manifest number: 0282 Signing time: Sat 28 Feb 2026 13:22:12 +0000 Manifest this update: Sat 28 Feb 2026 13:17:12 +0000 Manifest next update: Tue 03 Mar 2026 22:46:12 +0000 Files and hashes: 1: D9D0730DB51295FEC5BD480CDD42B5E8517C8FDB.crl (hash: bBLm3vA+3fg5LyRRtyHraMhXD/I9w7Xz8SlaMGnOpdg=) 2: 3130332e3138332e3235302e302f32332d3234203d3e2034383030.roa (hash: pN4ghT04j5zTe3lEB7yWGrreTGcCSMxjpmVgBxWJn+Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5ae2b8b3-dec8-41cf-a16d-e1171561d725/0/D9D0730DB51295FEC5BD480CDD42B5E8517C8FDB.crl rsync://repo-rpki.idnic.net/repo/5ae2b8b3-dec8-41cf-a16d-e1171561d725/0/D9D0730DB51295FEC5BD480CDD42B5E8517C8FDB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9D0730DB51295FEC5BD480CDD42B5E8517C8FDB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 22:46:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:f7:6d:69:0a:a8:e6:db:9a:d6:53:ef:77:53:e2:a9:aa:b8:22:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D9D0730DB51295FEC5BD480CDD42B5E8517C8FDB Validity Not Before: Feb 28 13:17:12 2026 GMT Not After : Mar 3 22:46:12 2026 GMT Subject: CN=B68CAE5B70CBBAC6CC9A3FFFC28B107570B8C8E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:9e:b1:54:d3:c7:14:98:a3:94:d6:1e:63:12: 00:47:2d:3b:5b:a5:d2:9c:39:96:b2:d3:2a:2c:bf: fd:a1:ea:73:b1:a1:cf:fa:d6:38:b4:f7:ff:49:2e: c2:61:77:07:03:19:7f:8f:94:1a:61:e3:bb:49:b3: d8:52:a2:66:69:a1:d2:66:37:1e:f6:83:92:cf:3b: 30:c0:a4:82:14:c8:a3:66:dc:02:3a:f8:38:f6:d7: 1e:ce:92:43:67:00:eb:8e:f8:82:5d:72:6a:2b:2c: 59:4c:15:dc:40:0f:a0:48:33:6d:9c:f3:22:1f:d8: b5:66:40:48:9f:60:ba:76:11:93:ba:90:5d:99:73: 27:b8:63:70:55:d5:78:f3:16:aa:ab:5b:73:71:af: a6:81:d3:9b:b0:59:12:7e:4e:6c:21:c8:f3:29:fa: 48:9a:3c:2b:fa:c4:d8:80:6b:c4:01:43:80:4b:16: 0f:3f:3f:d2:c9:cf:11:40:f9:30:06:3e:c8:c6:2b: df:79:d6:51:06:0a:4b:6b:25:13:96:b5:76:35:22: 13:dd:59:15:b0:d6:02:13:e5:d2:0b:39:91:a0:6a: f9:8d:11:e0:0f:90:55:d1:8b:7b:f9:ab:2e:5b:9b: 99:3a:4f:13:69:e1:78:3f:2a:1e:c4:52:d3:89:4a: 3a:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:8C:AE:5B:70:CB:BA:C6:CC:9A:3F:FF:C2:8B:10:75:70:B8:C8:E0 X509v3 Authority Key Identifier: keyid:D9:D0:73:0D:B5:12:95:FE:C5:BD:48:0C:DD:42:B5:E8:51:7C:8F:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5ae2b8b3-dec8-41cf-a16d-e1171561d725/0/D9D0730DB51295FEC5BD480CDD42B5E8517C8FDB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9D0730DB51295FEC5BD480CDD42B5E8517C8FDB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ae2b8b3-dec8-41cf-a16d-e1171561d725/0/D9D0730DB51295FEC5BD480CDD42B5E8517C8FDB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:6b:28:e6:65:45:f7:fe:2a:22:de:2c:e5:b7:97:c6:c3:17: fc:f4:ac:70:69:4c:1c:aa:be:4e:5d:9e:34:39:bc:af:8a:04: 70:ed:f0:30:96:ef:88:2e:f2:8b:c6:1a:b9:55:ad:a4:d7:63: e9:50:26:22:2b:e0:c1:d1:68:80:3b:3c:ad:67:73:0d:ba:9c: 9c:9e:78:fa:04:28:c5:a3:23:52:08:1a:7f:63:83:a5:4b:b9: 32:15:9c:51:bf:86:31:61:6c:14:51:73:90:a4:f5:a0:f2:e7: 2f:12:ef:40:66:30:46:3b:ec:2b:14:7c:9c:11:06:c8:66:a9: 9b:de:75:94:2c:ac:f3:7f:47:70:ba:86:a4:3e:9c:70:d3:c1: b9:df:f6:17:c9:a7:41:86:80:59:21:45:5e:a1:b4:64:56:a5: 1d:a6:31:4e:34:c0:78:d1:79:f1:1f:5a:5c:7e:4c:1c:ce:00: 14:52:58:1c:5c:02:e8:06:23:5b:0b:f2:d4:85:3f:d1:04:b9: 6a:70:4f:2c:a0:52:47:4a:e8:ef:74:8d:e7:ec:07:95:5c:1f: 9a:db:f0:c0:48:7f:82:c0:1c:61:2d:bd:00:c5:6c:21:45:bf: d6:9e:53:11:87:b0:88:9a:38:3d:fe:23:81:80:ce:73:39:74: 52:83:41:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPPdtaQqo5tua1lPvd1Piqaq4IrIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDlEMDczMERCNTEyOTVGRUM1QkQ0ODBDREQ0MkI1RTg1 MTdDOEZEQjAeFw0yNjAyMjgxMzE3MTJaFw0yNjAzMDMyMjQ2MTJaMDMxMTAvBgNV BAMTKEI2OENBRTVCNzBDQkJBQzZDQzlBM0ZGRkMyOEIxMDc1NzBCOEM4RTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDanrFU08cUmKOU1h5jEgBHLTtb pdKcOZay0yosv/2h6nOxoc/61ji09/9JLsJhdwcDGX+PlBph47tJs9hSomZpodJm Nx72g5LPOzDApIIUyKNm3AI6+Dj21x7OkkNnAOuO+IJdcmorLFlMFdxAD6BIM22c 8yIf2LVmQEifYLp2EZO6kF2Zcye4Y3BV1XjzFqqrW3Nxr6aB05uwWRJ+TmwhyPMp +kiaPCv6xNiAa8QBQ4BLFg8/P9LJzxFA+TAGPsjGK9951lEGCktrJROWtXY1IhPd WRWw1gIT5dILOZGgavmNEeAPkFXRi3v5qy5bm5k6TxNp4Xg/Kh7EUtOJSjrDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtoyuW3DLusbMmj//wosQdXC4yOAwHwYDVR0j BBgwFoAU2dBzDbUSlf7FvUgM3UK16FF8j9swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YWUyYjhiMy1kZWM4LTQxY2YtYTE2ZC1lMTE3MTU2MWQ3MjUvMC9EOUQwNzMwREI1 MTI5NUZFQzVCRDQ4MENERDQyQjVFODUxN0M4RkRCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDlEMDczMERCNTEyOTVGRUM1QkQ0ODBDREQ0MkI1RTg1MTdD OEZEQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWFlMmI4YjMtZGVjOC00MWNmLWEx NmQtZTExNzE1NjFkNzI1LzAvRDlEMDczMERCNTEyOTVGRUM1QkQ0ODBDREQ0MkI1 RTg1MTdDOEZEQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI1rKOZlRff+KiLeLOW3l8bDF/z0rHBpTByq vk5dnjQ5vK+KBHDt8DCW74gu8ovGGrlVraTXY+lQJiIr4MHRaIA7PK1ncw26nJye ePoEKMWjI1IIGn9jg6VLuTIVnFG/hjFhbBRRc5Ck9aDy5y8S70BmMEY77CsUfJwR BshmqZvedZQsrPN/R3C6hqQ+nHDTwbnf9hfJp0GGgFkhRV6htGRWpR2mMU40wHjR efEfWlx+TBzOABRSWBxcAugGI1sL8tSFP9EEuWpwTyygUkdK6O90jefsB5VcH5rb 8MBIf4LAHGEtvQDFbCFFv9aeUxGHsIiaOD3+I4GAznM5dFKDQac= -----END CERTIFICATE-----Generated at Sun Mar 1 23:55:15 2026 by rpki-client