$ rpki-client -vvf repo-rpki.idnic.net/repo/5b64a78c-dd4c-4c9d-bcf0-6de6cdb925b0/0/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.mft File: 385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.mft (raw, json) Hash identifier: tL1XEqH8rtfurU88q8C5RBuBVNrdHRBcEH9nAv+Gs0U= Subject key identifier: BE:D9:5E:DA:01:41:6A:B7:C7:75:96:6B:69:53:76:DE:F3:24:18:FA Authority key identifier: 38:5C:AD:A9:D5:9B:15:B5:F4:8D:CB:A1:C8:0B:7E:DA:C2:82:D8:04 Certificate issuer: /CN=385CADA9D59B15B5F48DCBA1C80B7EDAC282D804 Certificate serial: 2302E0171E9B6412F41CDEB5B90D1BAADDDABCFA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5b64a78c-dd4c-4c9d-bcf0-6de6cdb925b0/0/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.mft Manifest number: 0241 Signing time: Sat 28 Feb 2026 11:51:24 +0000 Manifest this update: Sat 28 Feb 2026 11:46:24 +0000 Manifest next update: Tue 03 Mar 2026 21:35:24 +0000 Files and hashes: 1: 385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.crl (hash: IyWshVd7i+j/DZFuIznR+cnTE2LvCp3zcCpT1DdxZHg=) 2: 3130332e3231322e3137382e302f32332d3233203d3e2039333431.roa (hash: QJX8gN5qCZ248XxYcOkj9y8Yy9OG8gAXiFIbOeNfS/4=) 3: 3130332e3231322e3137392e302f32342d3234203d3e2039333431.roa (hash: Y6FVrv8+kgK0K+g5zRAWYyaW8dIXM4ilb/pbLuxnf+I=) 4: 3130332e3231322e3137382e302f32342d3234203d3e2039333431.roa (hash: Up0WVIVn1DSp86oc5duyiu8N6jL5NwEXZcZF3tRKCnk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5b64a78c-dd4c-4c9d-bcf0-6de6cdb925b0/0/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.crl rsync://repo-rpki.idnic.net/repo/5b64a78c-dd4c-4c9d-bcf0-6de6cdb925b0/0/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 21:35:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:02:e0:17:1e:9b:64:12:f4:1c:de:b5:b9:0d:1b:aa:dd:da:bc:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=385CADA9D59B15B5F48DCBA1C80B7EDAC282D804 Validity Not Before: Feb 28 11:46:24 2026 GMT Not After : Mar 3 21:35:24 2026 GMT Subject: CN=BED95EDA01416AB7C775966B695376DEF32418FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:69:4f:8a:13:62:2e:26:0e:63:89:b4:3b:dc: f4:65:95:37:11:c4:61:8b:af:69:b6:63:ce:aa:c7: 4e:eb:a9:92:a7:b2:f5:a0:7a:b7:d7:30:16:54:c9: 57:05:4e:c6:30:de:1d:20:e7:d6:9f:a3:dd:86:be: 61:55:eb:78:64:f0:08:b6:2e:91:84:77:57:36:53: f9:7e:35:55:3f:bb:c2:66:4f:52:48:ab:e6:3f:d1: 7e:e1:42:a8:1b:7f:5f:aa:2c:69:56:ec:21:da:ec: ff:fb:a7:39:5b:f8:96:e2:c7:6f:cb:d6:53:76:66: a7:71:0e:93:90:18:3a:ce:da:ba:da:3d:19:79:b5: 13:9d:d1:10:e7:2d:a6:9c:44:b5:d5:4a:57:bd:8d: 10:a9:49:5e:fa:95:3e:2d:ee:ff:09:8a:36:df:68: a0:8b:d6:6c:e5:12:a7:3e:25:a7:1e:d3:56:68:07: 28:6a:43:a8:30:0f:ec:be:1f:f4:c9:39:11:70:78: 7b:dc:6c:74:31:08:a3:cb:1d:5b:d7:81:08:27:13: 96:03:0a:e0:3a:af:f5:bc:e9:a4:40:de:88:8d:1b: 1f:f8:02:c0:e1:db:ca:7b:55:05:9b:68:1f:bb:12: 9a:5d:92:65:1c:6a:e2:0c:80:b9:ec:af:9c:95:48: af:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:D9:5E:DA:01:41:6A:B7:C7:75:96:6B:69:53:76:DE:F3:24:18:FA X509v3 Authority Key Identifier: keyid:38:5C:AD:A9:D5:9B:15:B5:F4:8D:CB:A1:C8:0B:7E:DA:C2:82:D8:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5b64a78c-dd4c-4c9d-bcf0-6de6cdb925b0/0/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5b64a78c-dd4c-4c9d-bcf0-6de6cdb925b0/0/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:75:77:9b:eb:cc:0c:9a:79:fc:7b:27:4a:d4:48:18:6c:00: e9:03:a4:08:1f:76:45:cc:20:cd:00:fd:60:65:60:6f:36:eb: 93:0e:6b:17:26:6c:54:86:55:6c:d9:a0:c0:5a:84:6b:40:40: 55:33:cc:c7:0d:16:e7:6a:5f:32:15:e6:cc:5f:3d:19:77:18: fc:68:23:2c:ec:d3:c8:86:d5:59:2e:fb:53:d3:f8:ac:c2:37: ac:04:d6:22:a8:f2:15:d5:c0:c1:f3:e6:e4:01:fd:85:dc:cd: 59:99:7a:ff:59:f1:de:ac:81:77:c2:78:c5:64:0f:d4:5e:95: 52:6d:1f:7e:1e:6a:6b:90:58:ac:0e:9c:5f:5d:cc:d0:83:f7: 95:9f:d9:d3:54:12:cc:cd:8e:6a:6b:06:98:38:7e:7b:8f:6b: 87:c7:ec:5a:9a:5f:ca:39:b5:35:28:09:1f:39:ee:8d:00:05: 96:1e:b7:f6:74:59:61:30:ed:5e:b7:55:95:2d:b9:a6:2b:e1: 9a:43:e7:44:c9:eb:10:08:f6:63:7a:00:c2:91:8a:02:d3:70: 43:e9:52:45:aa:ab:d5:4e:15:66:1f:96:0a:db:2d:66:73:00: 49:fb:50:bd:5d:a4:02:a7:71:9c:89:e3:d4:d0:fd:aa:d0:a3: d7:28:a6:ea -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIwLgFx6bZBL0HN61uQ0bqt3avPowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzg1Q0FEQTlENTlCMTVCNUY0OERDQkExQzgwQjdFREFD MjgyRDgwNDAeFw0yNjAyMjgxMTQ2MjRaFw0yNjAzMDMyMTM1MjRaMDMxMTAvBgNV BAMTKEJFRDk1RURBMDE0MTZBQjdDNzc1OTY2QjY5NTM3NkRFRjMyNDE4RkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKaU+KE2IuJg5jibQ73PRllTcR xGGLr2m2Y86qx07rqZKnsvWgerfXMBZUyVcFTsYw3h0g59afo92GvmFV63hk8Ai2 LpGEd1c2U/l+NVU/u8JmT1JIq+Y/0X7hQqgbf1+qLGlW7CHa7P/7pzlb+Jbix2/L 1lN2ZqdxDpOQGDrO2rraPRl5tROd0RDnLaacRLXVSle9jRCpSV76lT4t7v8Jijbf aKCL1mzlEqc+Jace01ZoByhqQ6gwD+y+H/TJORFweHvcbHQxCKPLHVvXgQgnE5YD CuA6r/W86aRA3oiNGx/4AsDh28p7VQWbaB+7EppdkmUcauIMgLnsr5yVSK/TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvtle2gFBarfHdZZraVN23vMkGPowHwYDVR0j BBgwFoAUOFytqdWbFbX0jcuhyAt+2sKC2AQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YjY0YTc4Yy1kZDRjLTRjOWQtYmNmMC02ZGU2Y2RiOTI1YjAvMC8zODVDQURBOUQ1 OUIxNUI1RjQ4RENCQTFDODBCN0VEQUMyODJEODA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzg1Q0FEQTlENTlCMTVCNUY0OERDQkExQzgwQjdFREFDMjgy RDgwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWI2NGE3OGMtZGQ0Yy00YzlkLWJj ZjAtNmRlNmNkYjkyNWIwLzAvMzg1Q0FEQTlENTlCMTVCNUY0OERDQkExQzgwQjdF REFDMjgyRDgwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACR1d5vrzAyaefx7J0rUSBhsAOkDpAgfdkXM IM0A/WBlYG8265MOaxcmbFSGVWzZoMBahGtAQFUzzMcNFudqXzIV5sxfPRl3GPxo Iyzs08iG1Vku+1PT+KzCN6wE1iKo8hXVwMHz5uQB/YXczVmZev9Z8d6sgXfCeMVk D9RelVJtH34eamuQWKwOnF9dzNCD95Wf2dNUEszNjmprBpg4fnuPa4fH7FqaX8o5 tTUoCR857o0ABZYet/Z0WWEw7V63VZUtuaYr4ZpD50TJ6xAI9mN6AMKRigLTcEPp UkWqq9VOFWYflgrbLWZzAEn7UL1dpAKncZyJ49TQ/arQo9copuo= -----END CERTIFICATE-----Generated at Mon Mar 2 09:06:12 2026 by rpki-client