$ rpki-client -vvf repo-rpki.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/428173DF58B0C16D8FB92F81F342D6017FB0CECA.mft File: 428173DF58B0C16D8FB92F81F342D6017FB0CECA.mft (raw, json) Hash identifier: 6Zem4PhNsGHuWdGazxpVqETSpH2vZCk6W0f2QiNzP+s= Subject key identifier: AC:6F:F3:EB:7D:80:C9:B4:F1:91:90:F6:5A:C9:C1:44:F3:1A:CE:7E Authority key identifier: 42:81:73:DF:58:B0:C1:6D:8F:B9:2F:81:F3:42:D6:01:7F:B0:CE:CA Certificate issuer: /CN=428173DF58B0C16D8FB92F81F342D6017FB0CECA Certificate serial: 4C4AD1214240385AB68213226362505606253AB5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/428173DF58B0C16D8FB92F81F342D6017FB0CECA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/428173DF58B0C16D8FB92F81F342D6017FB0CECA.mft Manifest number: 0228 Signing time: Sat 28 Feb 2026 03:11:27 +0000 Manifest this update: Sat 28 Feb 2026 03:06:27 +0000 Manifest next update: Tue 03 Mar 2026 09:42:27 +0000 Files and hashes: 1: 3130332e3139312e33392e302f32342d3234203d3e20313439393233.roa (hash: Hm8P4hacYfkZNd8sZfNbLj4+ngt9DzF5s+/x8t3BFqA=) 2: 428173DF58B0C16D8FB92F81F342D6017FB0CECA.crl (hash: 6cQfyVrPCnfoQX4V58l6k8RiW5mto39G6+4gYh+4z/c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/428173DF58B0C16D8FB92F81F342D6017FB0CECA.crl rsync://repo-rpki.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/428173DF58B0C16D8FB92F81F342D6017FB0CECA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/428173DF58B0C16D8FB92F81F342D6017FB0CECA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 09:42:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:4a:d1:21:42:40:38:5a:b6:82:13:22:63:62:50:56:06:25:3a:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=428173DF58B0C16D8FB92F81F342D6017FB0CECA Validity Not Before: Feb 28 03:06:27 2026 GMT Not After : Mar 3 09:42:27 2026 GMT Subject: CN=AC6FF3EB7D80C9B4F19190F65AC9C144F31ACE7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d8:cd:71:dd:c9:a7:94:97:a7:ad:ce:fb:a8: bb:5e:c4:c8:72:0a:fc:1b:b0:f4:50:4e:82:ac:13: d0:a3:f4:5f:8a:ef:c1:84:db:f1:54:28:cd:29:dd: ca:a9:c5:4b:38:58:ef:b6:89:d1:ef:c7:ab:d7:d0: fb:74:9a:e6:e2:4b:c9:94:05:01:51:65:b1:31:61: d2:21:6d:19:ae:8e:22:68:6e:a3:d1:fe:45:15:7a: 7a:0a:7e:83:89:58:2c:f3:ea:26:a2:e9:88:34:47: ed:50:ec:a8:09:4b:a7:dd:0b:0f:b2:cb:f5:1e:65: f7:4b:6e:ff:cc:cf:2b:a7:6e:79:4a:40:d5:68:fe: 11:ae:6d:59:0e:8b:10:6b:15:0d:64:43:b3:87:07: f5:d0:a3:82:89:b6:e4:30:51:aa:18:10:0a:7c:d4: c3:24:41:51:b8:7f:ab:49:f8:14:13:73:e1:69:e7: 36:96:9e:f3:8a:fe:13:65:19:07:8a:70:b3:2a:0e: 3f:a7:f9:e3:86:32:e3:4e:00:d5:ca:b7:33:17:9b: 40:9e:60:0b:46:68:49:88:01:b4:74:ac:32:41:ef: 64:ca:82:fe:6f:3a:21:97:10:5b:23:ed:6c:16:7e: e7:36:1c:8e:68:51:d5:de:6b:46:ab:6c:f3:97:69: 85:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:6F:F3:EB:7D:80:C9:B4:F1:91:90:F6:5A:C9:C1:44:F3:1A:CE:7E X509v3 Authority Key Identifier: keyid:42:81:73:DF:58:B0:C1:6D:8F:B9:2F:81:F3:42:D6:01:7F:B0:CE:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/428173DF58B0C16D8FB92F81F342D6017FB0CECA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/428173DF58B0C16D8FB92F81F342D6017FB0CECA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/428173DF58B0C16D8FB92F81F342D6017FB0CECA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:61:44:5d:8f:8c:36:a5:31:b1:42:1c:fa:8c:79:7f:f4:69: 06:0d:78:c8:0c:c5:1b:7b:b6:1c:3e:06:31:f9:84:05:e3:61: 88:2e:30:c9:f8:3e:0d:ca:31:1a:18:b9:7f:6f:ac:26:f6:17: da:85:0c:49:49:f5:65:86:58:c2:61:20:94:39:0c:d9:74:1d: 77:40:a5:bb:56:12:75:4a:9a:09:61:ce:0e:61:65:11:94:c2: 96:09:62:d7:46:e1:40:ec:11:9e:8a:1b:47:7a:ed:af:b5:0a: 9d:b7:1d:fc:d7:7c:4f:4b:27:c3:08:2b:35:1b:21:38:4a:47: d9:64:09:18:75:a4:45:dd:ad:77:4b:a9:14:00:e7:ad:50:0e: 95:2b:80:ad:2a:dd:6f:6f:86:61:e3:48:14:25:86:74:90:fa: fd:67:ac:a4:30:77:68:4d:8f:48:74:f2:1f:28:d7:22:74:5d: aa:5d:be:ad:ad:1f:42:6e:49:89:fa:ac:ce:69:5b:85:d5:a9: cf:4a:d9:5d:58:db:c8:59:fa:12:b5:88:54:2f:d2:07:52:d5: 6c:c9:c2:0e:85:f4:ec:5a:3f:78:ce:33:24:c8:29:2e:f3:f2: 1b:db:c1:69:5a:c0:13:d5:3b:6d:a2:24:ce:06:eb:eb:7b:43: 9a:b1:5f:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTErRIUJAOFq2ghMiY2JQVgYlOrUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDI4MTczREY1OEIwQzE2RDhGQjkyRjgxRjM0MkQ2MDE3 RkIwQ0VDQTAeFw0yNjAyMjgwMzA2MjdaFw0yNjAzMDMwOTQyMjdaMDMxMTAvBgNV BAMTKEFDNkZGM0VCN0Q4MEM5QjRGMTkxOTBGNjVBQzlDMTQ0RjMxQUNFN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC52M1x3cmnlJenrc77qLtexMhy CvwbsPRQToKsE9Cj9F+K78GE2/FUKM0p3cqpxUs4WO+2idHvx6vX0Pt0mubiS8mU BQFRZbExYdIhbRmujiJobqPR/kUVenoKfoOJWCzz6iai6Yg0R+1Q7KgJS6fdCw+y y/UeZfdLbv/MzyunbnlKQNVo/hGubVkOixBrFQ1kQ7OHB/XQo4KJtuQwUaoYEAp8 1MMkQVG4f6tJ+BQTc+Fp5zaWnvOK/hNlGQeKcLMqDj+n+eOGMuNOANXKtzMXm0Ce YAtGaEmIAbR0rDJB72TKgv5vOiGXEFsj7WwWfuc2HI5oUdXea0arbPOXaYX5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrG/z632AybTxkZD2WsnBRPMazn4wHwYDVR0j BBgwFoAUQoFz31iwwW2PuS+B80LWAX+wzsowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NWY4NDI3OC1lMDZkLTQxMTktYmE0NC01YzMyOTY4YThiYmQvMC80MjgxNzNERjU4 QjBDMTZEOEZCOTJGODFGMzQyRDYwMTdGQjBDRUNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDI4MTczREY1OEIwQzE2RDhGQjkyRjgxRjM0MkQ2MDE3RkIw Q0VDQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjVmODQyNzgtZTA2ZC00MTE5LWJh NDQtNWMzMjk2OGE4YmJkLzAvNDI4MTczREY1OEIwQzE2RDhGQjkyRjgxRjM0MkQ2 MDE3RkIwQ0VDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALNhRF2PjDalMbFCHPqMeX/0aQYNeMgMxRt7 thw+BjH5hAXjYYguMMn4Pg3KMRoYuX9vrCb2F9qFDElJ9WWGWMJhIJQ5DNl0HXdA pbtWEnVKmglhzg5hZRGUwpYJYtdG4UDsEZ6KG0d67a+1Cp23HfzXfE9LJ8MIKzUb IThKR9lkCRh1pEXdrXdLqRQA561QDpUrgK0q3W9vhmHjSBQlhnSQ+v1nrKQwd2hN j0h08h8o1yJ0Xapdvq2tH0JuSYn6rM5pW4XVqc9K2V1Y28hZ+hK1iFQv0gdS1WzJ wg6F9OxaP3jOMyTIKS7z8hvbwWlawBPVO22iJM4G6+t7Q5qxX50= -----END CERTIFICATE-----Generated at Mon Mar 2 04:06:40 2026 by rpki-client