$ rpki-client -vvf repo-rpki.idnic.net/repo/65a96b81-d128-4965-a177-facf341e7f89/0/C42304B7D0E216E2F73305D25EBA185E1A321586.mft File: C42304B7D0E216E2F73305D25EBA185E1A321586.mft (raw, json) Hash identifier: dOByKKxrd3zb6HgA1n/+0VcEDwLDT3GlH+Uoay1fLxY= Subject key identifier: C0:6E:F9:D5:76:77:3D:30:13:17:0F:21:F1:BD:96:FF:38:95:DA:DF Authority key identifier: C4:23:04:B7:D0:E2:16:E2:F7:33:05:D2:5E:BA:18:5E:1A:32:15:86 Certificate issuer: /CN=C42304B7D0E216E2F73305D25EBA185E1A321586 Certificate serial: DC43EE7EB43263CF45668BAD0CA42CA187259B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C42304B7D0E216E2F73305D25EBA185E1A321586.cer Subject info access: rsync://repo-rpki.idnic.net/repo/65a96b81-d128-4965-a177-facf341e7f89/0/C42304B7D0E216E2F73305D25EBA185E1A321586.mft Manifest number: 15 Signing time: Sat 28 Feb 2026 22:22:28 +0000 Manifest this update: Sat 28 Feb 2026 22:17:28 +0000 Manifest next update: Wed 04 Mar 2026 00:12:28 +0000 Files and hashes: 1: 3131342e3134312e35372e302f32342d3234203d3e20313339393937.roa (hash: XWuaYLYmlK9hExFjkzInUKqGyFC8YbxMTIf12TewHWo=) 2: C42304B7D0E216E2F73305D25EBA185E1A321586.crl (hash: vaSGolVFg27WFaZjREXlJCHmhOS/ZMRMeR8vx/UsV1s=) 3: 3131342e3134312e35362e302f32342d3234203d3e20313339393937.roa (hash: /XfV+lJcb9X56N7rlaHL4tfgC5CfK4dQVit65blaNYo=) 4: 3131342e3134312e35392e302f32342d3234203d3e20313432333632.roa (hash: huqt9zp4ZaM/ehHcf/q79Imf4OzuK2ijijHg2TgEeMU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/65a96b81-d128-4965-a177-facf341e7f89/0/C42304B7D0E216E2F73305D25EBA185E1A321586.crl rsync://repo-rpki.idnic.net/repo/65a96b81-d128-4965-a177-facf341e7f89/0/C42304B7D0E216E2F73305D25EBA185E1A321586.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C42304B7D0E216E2F73305D25EBA185E1A321586.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 00:12:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: dc:43:ee:7e:b4:32:63:cf:45:66:8b:ad:0c:a4:2c:a1:87:25:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C42304B7D0E216E2F73305D25EBA185E1A321586 Validity Not Before: Feb 28 22:17:28 2026 GMT Not After : Mar 4 00:12:28 2026 GMT Subject: CN=C06EF9D576773D3013170F21F1BD96FF3895DADF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:7d:1b:e3:e8:6c:8c:f4:9c:a0:39:64:a3:d9: cc:48:1e:1d:7d:13:f1:a6:1e:6e:8f:3b:93:5f:f4: 5b:7c:60:e4:e8:eb:4d:ec:b6:cc:82:26:63:f3:75: 7f:03:02:3a:ed:eb:35:ea:3a:27:d4:8f:89:14:62: 14:1f:f9:fa:30:bc:72:62:ee:92:dd:de:cd:3f:34: a2:b0:5a:69:55:e8:b9:fc:42:d8:75:fa:03:19:93: 2a:66:6d:52:27:ad:7d:27:14:b9:eb:24:ce:5d:41: df:75:72:56:f4:a3:9c:77:5d:b4:72:48:55:d7:ed: 83:5d:b0:f7:94:e8:ce:e9:c1:8c:0d:b1:90:3d:00: 1e:a2:52:10:05:bb:ef:9e:ec:6d:64:4e:10:2a:48: 5c:73:66:3c:3b:70:fb:2c:a1:83:78:24:29:5c:a4: 61:00:15:8d:ab:d2:16:cb:df:79:b7:9c:3f:7f:63: a1:7d:28:47:60:42:c7:d9:b9:1c:5a:b3:95:86:1b: 77:f3:ef:93:a7:e9:d6:6b:72:d7:82:fd:c3:bf:41: 6e:c5:9e:ee:b2:ab:e5:c7:21:5f:d1:53:ec:e4:41: 46:13:1a:64:af:c2:29:d6:80:f9:f4:b5:03:c7:da: 48:42:05:54:b5:a1:8c:80:a0:a1:ba:ce:77:49:d4: ca:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:6E:F9:D5:76:77:3D:30:13:17:0F:21:F1:BD:96:FF:38:95:DA:DF X509v3 Authority Key Identifier: keyid:C4:23:04:B7:D0:E2:16:E2:F7:33:05:D2:5E:BA:18:5E:1A:32:15:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/65a96b81-d128-4965-a177-facf341e7f89/0/C42304B7D0E216E2F73305D25EBA185E1A321586.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C42304B7D0E216E2F73305D25EBA185E1A321586.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65a96b81-d128-4965-a177-facf341e7f89/0/C42304B7D0E216E2F73305D25EBA185E1A321586.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:e1:66:6a:59:59:7f:8d:10:26:2f:a8:cc:5b:39:05:ba:78: 61:c6:44:c5:de:ec:eb:db:f8:e8:b5:a6:e5:e9:ab:85:d3:c4: e0:63:5c:99:67:9a:a6:e6:14:32:e1:6b:b5:98:fb:5c:66:b0: 4d:59:c6:71:90:81:0f:d4:d1:0a:49:2a:48:03:8d:8d:e9:42: aa:1b:49:6e:9e:2e:a4:af:e1:3a:f5:c2:c1:eb:d7:34:3f:2e: 8e:c6:03:e3:5f:36:06:5a:49:1f:9d:f9:ef:48:af:ab:fd:34: c9:1e:6f:c8:25:35:76:9e:b8:65:2a:25:73:a7:6f:5f:83:6e: 59:39:0c:d4:7b:d9:90:e8:8c:62:29:af:32:ef:89:6f:a0:c5: 5e:0a:7e:14:5f:7b:8a:5e:a5:2a:00:59:29:5b:e7:52:67:47: 40:73:9b:45:fb:87:a3:3f:33:a5:c0:fe:14:e9:bf:5f:83:e9: 8f:66:ad:43:f3:36:62:c0:e3:f7:2b:65:63:81:26:90:e3:0e: 02:de:cc:91:f0:9b:25:a4:d0:f7:dc:2f:1d:ea:70:fe:ee:ae: cb:02:ae:5d:8a:49:0d:ac:cd:05:be:50:96:6e:95:be:24:c4: 5e:e9:7a:7f:66:e5:22:9e:c1:a6:77:0d:a9:5a:b0:64:87:14: f9:71:a7:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUANxD7n60MmPPRWaLrQykLKGHJZswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQyMzA0QjdEMEUyMTZFMkY3MzMwNUQyNUVCQTE4NUUx QTMyMTU4NjAeFw0yNjAyMjgyMjE3MjhaFw0yNjAzMDQwMDEyMjhaMDMxMTAvBgNV BAMTKEMwNkVGOUQ1NzY3NzNEMzAxMzE3MEYyMUYxQkQ5NkZGMzg5NURBREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+fRvj6GyM9JygOWSj2cxIHh19 E/GmHm6PO5Nf9Ft8YOTo603stsyCJmPzdX8DAjrt6zXqOifUj4kUYhQf+fowvHJi 7pLd3s0/NKKwWmlV6Ln8Qth1+gMZkypmbVInrX0nFLnrJM5dQd91clb0o5x3XbRy SFXX7YNdsPeU6M7pwYwNsZA9AB6iUhAFu++e7G1kThAqSFxzZjw7cPssoYN4JClc pGEAFY2r0hbL33m3nD9/Y6F9KEdgQsfZuRxas5WGG3fz75On6dZrcteC/cO/QW7F nu6yq+XHIV/RU+zkQUYTGmSvwinWgPn0tQPH2khCBVS1oYyAoKG6zndJ1MpfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwG751XZ3PTATFw8h8b2W/ziV2t8wHwYDVR0j BBgwFoAUxCMEt9DiFuL3MwXSXroYXhoyFYYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NWE5NmI4MS1kMTI4LTQ5NjUtYTE3Ny1mYWNmMzQxZTdmODkvMC9DNDIzMDRCN0Qw RTIxNkUyRjczMzA1RDI1RUJBMTg1RTFBMzIxNTg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzQyMzA0QjdEMEUyMTZFMkY3MzMwNUQyNUVCQTE4NUUxQTMy MTU4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjVhOTZiODEtZDEyOC00OTY1LWEx NzctZmFjZjM0MWU3Zjg5LzAvQzQyMzA0QjdEMEUyMTZFMkY3MzMwNUQyNUVCQTE4 NUUxQTMyMTU4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAInhZmpZWX+NECYvqMxbOQW6eGHGRMXe7Ovb +Oi1puXpq4XTxOBjXJlnmqbmFDLha7WY+1xmsE1ZxnGQgQ/U0QpJKkgDjY3pQqob SW6eLqSv4Tr1wsHr1zQ/Lo7GA+NfNgZaSR+d+e9Ir6v9NMkeb8glNXaeuGUqJXOn b1+Dblk5DNR72ZDojGIprzLviW+gxV4KfhRfe4pepSoAWSlb51JnR0Bzm0X7h6M/ M6XA/hTpv1+D6Y9mrUPzNmLA4/crZWOBJpDjDgLezJHwmyWk0PfcLx3qcP7urssC rl2KSQ2szQW+UJZulb4kxF7pen9m5SKewaZ3DalasGSHFPlxp40= -----END CERTIFICATE-----Generated at Mon Mar 2 13:14:20 2026 by rpki-client