$ rpki-client -vvf repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.mft File: 2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.mft (raw, json) Hash identifier: hyyVRTVpk8cQFbUpgGp5ECR88oARk0/R83ZwnzkT4og= Subject key identifier: 99:5F:CD:19:E2:B6:F3:CD:BE:24:FA:EF:C9:FD:08:83:5E:34:5E:38 Authority key identifier: 21:46:CD:CD:7A:3C:7A:19:15:B7:8C:5B:2C:9F:CF:BA:8A:3B:6E:79 Certificate issuer: /CN=2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79 Certificate serial: 5A5AA1F7B425D9CB5B0649C953DB676F2B07E4A9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.mft Manifest number: 03A7 Signing time: Fri 27 Feb 2026 17:11:09 +0000 Manifest this update: Fri 27 Feb 2026 17:06:09 +0000 Manifest next update: Tue 03 Mar 2026 02:20:09 +0000 Files and hashes: 1: 3130332e3230392e3138342e302f32322d3234203d3e20313334363535.roa (hash: AOicjomaXVowUxKVLUAzngaobesRemFsc6Mjiuwj2Bg=) 2: 2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.crl (hash: RjbxDiLVAwOXGBswEpJwFTZMYDRu5/r+gUsEUozALac=) 3: 3230332e39362e3232382e302f32332d3234203d3e20313334363535.roa (hash: WnEoSKGZIFsfEoy7vBg6GUxPJ2sdlBMhPa8SmUKwOwQ=) 4: 323430343a353938303a3a2f33322d3332203d3e20313334363535.roa (hash: QZavpRmJwgWpUP/+i0D2076ri9bNfiH2V5J64XJ0fT4=) 5: 3130332e3234372e3231312e302f32342d3234203d3e20313334363535.roa (hash: +RIUAVxGB33d0KDSRHLJ9X8+j7gj5NlzbX8RpGUfLIQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.crl rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 02:20:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:5a:a1:f7:b4:25:d9:cb:5b:06:49:c9:53:db:67:6f:2b:07:e4:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79 Validity Not Before: Feb 27 17:06:09 2026 GMT Not After : Mar 3 02:20:09 2026 GMT Subject: CN=995FCD19E2B6F3CDBE24FAEFC9FD08835E345E38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c3:be:20:e7:d2:6b:cb:1e:8e:67:6d:c5:f5: d7:b4:87:af:16:d5:71:16:ff:86:d1:e8:8b:97:1a: 8c:5f:cf:8d:2a:73:bb:b4:f2:9c:31:85:3a:f8:25: d7:25:41:b7:6f:f3:95:b4:85:17:8b:fa:7c:bb:45: 15:d4:0a:2d:64:d3:11:14:c1:e4:06:ca:65:ab:2d: 11:9b:f0:14:b6:60:f7:a6:1d:73:b9:f0:dc:55:6e: af:4b:f9:72:2a:95:85:5f:ea:d4:0c:3c:2e:c3:a5: ca:45:b0:4f:d1:43:39:76:f8:30:dc:f0:87:de:85: 06:a5:21:de:18:40:ea:c8:65:83:22:1d:8c:03:8f: 46:08:d1:0c:94:76:60:38:2c:73:42:7b:58:41:c0: 66:ac:c5:64:1d:3f:2f:62:0b:70:31:9b:25:77:71: 79:ef:4c:7e:bc:7b:94:bc:41:f6:e9:6e:2a:dc:9b: cd:13:1f:e2:54:c9:20:30:de:21:62:4e:2e:6c:2d: 0b:ec:96:7a:9d:23:fc:ee:24:58:d9:bd:7c:44:46: f5:69:e2:13:34:d5:fb:33:1c:1f:1f:7e:51:07:b7: 79:b3:b7:a5:06:7b:f5:a0:a5:55:de:d0:77:57:f9: e2:1e:27:93:7d:81:06:f8:a7:51:e8:9c:13:db:6a: 3d:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:5F:CD:19:E2:B6:F3:CD:BE:24:FA:EF:C9:FD:08:83:5E:34:5E:38 X509v3 Authority Key Identifier: keyid:21:46:CD:CD:7A:3C:7A:19:15:B7:8C:5B:2C:9F:CF:BA:8A:3B:6E:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:09:cb:4d:6b:d1:5c:a8:0a:ce:16:8e:b8:dc:92:c8:f1:5a: ee:69:cd:8c:2b:34:26:f5:55:c4:19:59:ba:a7:92:67:23:3e: df:ad:65:4d:86:99:ed:e4:0c:73:a2:87:fc:8d:05:7d:ba:2f: 49:d2:ca:ca:36:38:74:04:4b:11:fe:e4:7b:06:ae:4c:65:a8: be:a3:47:86:94:2d:b1:14:9f:97:f3:ee:15:2a:67:ef:e9:4e: 38:86:05:ad:a7:f5:c5:00:19:b8:29:6c:96:bd:a5:e1:80:70: f6:ad:ee:ca:60:f6:e0:a6:64:80:f4:d9:db:86:49:d2:ac:01: 48:e9:ba:b9:1e:3c:d7:03:6e:3e:0f:cb:52:82:dc:99:18:be: d6:fa:f6:93:d0:42:22:55:85:3e:23:c2:b3:4a:a0:d6:ef:4c: c9:1d:0b:e4:c3:25:61:57:6f:cb:dc:4c:0e:4e:1c:b1:0e:72: 5d:8f:c3:c4:c9:89:94:57:8d:89:1b:11:01:37:52:ab:98:8c: 8b:0e:b1:9b:17:02:7c:fd:b0:9c:d6:58:47:54:a4:9d:4a:25: fb:d6:21:af:75:86:9f:15:ed:84:1a:be:3b:af:54:68:77:0d: cc:cd:c4:7f:3b:30:81:1a:ab:30:52:c8:e4:d5:af:42:59:39: a0:83:f9:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWlqh97Ql2ctbBknJU9tnbysH5KkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE0NkNEQ0Q3QTNDN0ExOTE1Qjc4QzVCMkM5RkNGQkE4 QTNCNkU3OTAeFw0yNjAyMjcxNzA2MDlaFw0yNjAzMDMwMjIwMDlaMDMxMTAvBgNV BAMTKDk5NUZDRDE5RTJCNkYzQ0RCRTI0RkFFRkM5RkQwODgzNUUzNDVFMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdw74g59Jryx6OZ23F9de0h68W 1XEW/4bR6IuXGoxfz40qc7u08pwxhTr4JdclQbdv85W0hReL+ny7RRXUCi1k0xEU weQGymWrLRGb8BS2YPemHXO58NxVbq9L+XIqlYVf6tQMPC7DpcpFsE/RQzl2+DDc 8IfehQalId4YQOrIZYMiHYwDj0YI0QyUdmA4LHNCe1hBwGasxWQdPy9iC3AxmyV3 cXnvTH68e5S8Qfbpbircm80TH+JUySAw3iFiTi5sLQvslnqdI/zuJFjZvXxERvVp 4hM01fszHB8fflEHt3mzt6UGe/WgpVXe0HdX+eIeJ5N9gQb4p1HonBPbaj3HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmV/NGeK2882+JPrvyf0Ig140XjgwHwYDVR0j BBgwFoAUIUbNzXo8ehkVt4xbLJ/Puoo7bnkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 OTM5ZGJmMS0zMDc1LTQ1MTktYmE5MC1jZWU4ZDM5NzlmY2QvMC8yMTQ2Q0RDRDdB M0M3QTE5MTVCNzhDNUIyQzlGQ0ZCQThBM0I2RTc5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjE0NkNEQ0Q3QTNDN0ExOTE1Qjc4QzVCMkM5RkNGQkE4QTNC NkU3OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjkzOWRiZjEtMzA3NS00NTE5LWJh OTAtY2VlOGQzOTc5ZmNkLzAvMjE0NkNEQ0Q3QTNDN0ExOTE1Qjc4QzVCMkM5RkNG QkE4QTNCNkU3OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGgJy01r0VyoCs4WjrjcksjxWu5pzYwrNCb1 VcQZWbqnkmcjPt+tZU2Gme3kDHOih/yNBX26L0nSyso2OHQESxH+5HsGrkxlqL6j R4aULbEUn5fz7hUqZ+/pTjiGBa2n9cUAGbgpbJa9peGAcPat7spg9uCmZID02duG SdKsAUjpurkePNcDbj4Py1KC3JkYvtb69pPQQiJVhT4jwrNKoNbvTMkdC+TDJWFX b8vcTA5OHLEOcl2Pw8TJiZRXjYkbEQE3UquYjIsOsZsXAnz9sJzWWEdUpJ1KJfvW Ia91hp8V7YQavjuvVGh3DczNxH87MIEaqzBSyOTVr0JZOaCD+WY= -----END CERTIFICATE-----Generated at Mon Mar 2 03:59:16 2026 by rpki-client