$ rpki-client -vvf repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5234A428BC63559E2511B3EFFB085B82B195A8ED.mft File: 5234A428BC63559E2511B3EFFB085B82B195A8ED.mft (raw, json) Hash identifier: eJjUaZSLgvg/zE+QrdCwlggsGyl4UveqyuMpP2zc3bY= Subject key identifier: 74:39:4F:A8:8D:8E:55:D1:80:60:44:7A:67:96:7D:6B:B2:A9:69:32 Authority key identifier: 52:34:A4:28:BC:63:55:9E:25:11:B3:EF:FB:08:5B:82:B1:95:A8:ED Certificate issuer: /CN=5234A428BC63559E2511B3EFFB085B82B195A8ED Certificate serial: 3840025E6938122CE14DB2BB290732C9C50C6B17 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5234A428BC63559E2511B3EFFB085B82B195A8ED.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5234A428BC63559E2511B3EFFB085B82B195A8ED.mft Manifest number: 9B Signing time: Sat 28 Feb 2026 21:02:19 +0000 Manifest this update: Sat 28 Feb 2026 20:57:19 +0000 Manifest next update: Wed 04 Mar 2026 06:57:19 +0000 Files and hashes: 1: 3130332e31372e37362e302f32342d3234203d3e20313331373831.roa (hash: 015aA8T+8ETys0VPJF7SaN/NGUY5b/DbWClhBrzMd1I=) 2: 5234A428BC63559E2511B3EFFB085B82B195A8ED.crl (hash: fwjF/vlm8Mw/AODjyhiqGaWz4xygVumMmRXrYkaEu7Q=) 3: 3130332e31372e37372e302f32342d3234203d3e20313331373831.roa (hash: sN9oQCwDYePBe8r+43GJgwamWTT8YKpnPVKv3cAiMnM=) 4: 3130332e31372e37362e302f32332d3233203d3e20313331373831.roa (hash: 3Xgb+N3NB2TeJyMhydH37LrnvXNKcCYu+8Jn+LTb9Mk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5234A428BC63559E2511B3EFFB085B82B195A8ED.crl rsync://repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5234A428BC63559E2511B3EFFB085B82B195A8ED.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5234A428BC63559E2511B3EFFB085B82B195A8ED.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 06:57:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:40:02:5e:69:38:12:2c:e1:4d:b2:bb:29:07:32:c9:c5:0c:6b:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5234A428BC63559E2511B3EFFB085B82B195A8ED Validity Not Before: Feb 28 20:57:19 2026 GMT Not After : Mar 4 06:57:19 2026 GMT Subject: CN=74394FA88D8E55D18060447A67967D6BB2A96932 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:07:23:56:0f:91:0b:a9:e0:76:98:bf:44:0c: a3:3e:bb:ff:10:86:13:b7:48:d7:d8:ed:32:ab:aa: b8:99:5c:ea:41:9f:11:e6:8e:93:e0:92:24:a8:4f: 5a:e1:9b:ea:ce:74:c4:a6:ab:b4:84:f2:25:f1:58: e2:32:4d:22:6c:bd:fa:2c:1a:d3:49:80:e8:a0:ef: 49:1a:14:1c:ae:2d:88:cb:02:f9:61:20:61:40:af: 05:9a:a5:13:84:3a:a0:b7:9d:17:18:2d:f9:02:7a: fa:fb:c4:a9:2c:52:d1:83:69:b2:3e:c5:26:64:50: e7:4c:da:11:18:1b:82:8c:3c:c0:a9:f0:be:54:ac: c9:a8:ae:98:25:0d:dd:4a:8b:ab:16:1f:70:76:77: 58:38:b4:07:07:a1:ac:b0:88:2f:92:6c:b3:bc:08: 98:19:b1:a3:0d:f7:67:38:4f:25:60:3d:44:83:98: de:e4:00:c7:70:a7:4f:42:81:c9:54:46:fa:09:d0: 59:42:7e:2e:c5:db:2b:9d:1e:7c:80:4d:c4:b8:dc: 91:15:e0:5c:c3:c5:c1:06:b6:8d:95:36:4d:f7:65: 29:e9:29:6d:86:16:1d:1c:0b:c5:67:c2:dd:4f:de: bf:73:b5:c1:a0:3e:68:c5:d9:98:5b:25:d1:5a:1c: 99:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:39:4F:A8:8D:8E:55:D1:80:60:44:7A:67:96:7D:6B:B2:A9:69:32 X509v3 Authority Key Identifier: keyid:52:34:A4:28:BC:63:55:9E:25:11:B3:EF:FB:08:5B:82:B1:95:A8:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5234A428BC63559E2511B3EFFB085B82B195A8ED.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5234A428BC63559E2511B3EFFB085B82B195A8ED.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5234A428BC63559E2511B3EFFB085B82B195A8ED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:99:f3:27:d4:40:e1:85:bf:9c:41:f9:9b:fd:d3:b5:c6:77: 6f:ac:0c:75:85:ac:54:66:3e:9e:0f:5f:49:fc:8f:f1:31:aa: a1:42:93:6d:9c:82:74:48:ac:63:aa:b9:fb:e8:4a:e5:7b:82: 51:1e:4f:b7:f8:79:5b:ab:55:12:f8:e3:1b:8f:79:ff:0b:ba: fd:ac:d3:55:5b:ab:ac:44:90:b9:fb:5d:01:b1:d5:5d:37:9d: d1:64:4a:16:b9:d7:91:d8:93:d0:5e:3e:f8:23:4c:8b:21:89: 1d:95:14:87:e6:41:af:af:69:df:3e:c4:75:6b:ea:aa:b8:1d: fc:1f:82:1f:31:34:67:8c:fc:d4:ee:30:2c:70:82:6e:cb:43: 97:3d:85:c5:3b:54:b8:1d:fb:e2:c8:8b:28:b1:7e:4e:1b:15: 1b:c5:d3:f2:01:58:bd:a1:a3:17:97:b4:dc:26:40:80:5a:7c: 56:15:62:16:aa:dd:dd:47:5c:27:6a:09:29:d1:bd:f9:5b:82: bb:d3:26:3b:34:fa:7d:c3:87:52:2e:e2:d0:85:b1:c9:00:ec: a0:12:1c:29:64:48:85:68:09:4d:f9:07:73:a7:fc:d6:ed:25: bf:43:21:6b:aa:98:c9:1c:c3:5a:d8:92:61:d3:ea:82:12:63: 6e:60:b5:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOEACXmk4EizhTbK7KQcyycUMaxcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTIzNEE0MjhCQzYzNTU5RTI1MTFCM0VGRkIwODVCODJC MTk1QThFRDAeFw0yNjAyMjgyMDU3MTlaFw0yNjAzMDQwNjU3MTlaMDMxMTAvBgNV BAMTKDc0Mzk0RkE4OEQ4RTU1RDE4MDYwNDQ3QTY3OTY3RDZCQjJBOTY5MzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIByNWD5ELqeB2mL9EDKM+u/8Q hhO3SNfY7TKrqriZXOpBnxHmjpPgkiSoT1rhm+rOdMSmq7SE8iXxWOIyTSJsvfos GtNJgOig70kaFByuLYjLAvlhIGFArwWapROEOqC3nRcYLfkCevr7xKksUtGDabI+ xSZkUOdM2hEYG4KMPMCp8L5UrMmorpglDd1Ki6sWH3B2d1g4tAcHoaywiC+SbLO8 CJgZsaMN92c4TyVgPUSDmN7kAMdwp09CgclURvoJ0FlCfi7F2yudHnyATcS43JEV 4FzDxcEGto2VNk33ZSnpKW2GFh0cC8Vnwt1P3r9ztcGgPmjF2ZhbJdFaHJlBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdDlPqI2OVdGAYER6Z5Z9a7KpaTIwHwYDVR0j BBgwFoAUUjSkKLxjVZ4lEbPv+whbgrGVqO0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YTA3MTUxNC1lNGRlLTRhY2UtYTBkZi1mN2M0YWI4MDc0YTUvMC81MjM0QTQyOEJD NjM1NTlFMjUxMUIzRUZGQjA4NUI4MkIxOTVBOEVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTIzNEE0MjhCQzYzNTU5RTI1MTFCM0VGRkIwODVCODJCMTk1 QThFRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmEwNzE1MTQtZTRkZS00YWNlLWEw ZGYtZjdjNGFiODA3NGE1LzAvNTIzNEE0MjhCQzYzNTU5RTI1MTFCM0VGRkIwODVC ODJCMTk1QThFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF+Z8yfUQOGFv5xB+Zv907XGd2+sDHWFrFRm Pp4PX0n8j/ExqqFCk22cgnRIrGOqufvoSuV7glEeT7f4eVurVRL44xuPef8Luv2s 01Vbq6xEkLn7XQGx1V03ndFkSha515HYk9BePvgjTIshiR2VFIfmQa+vad8+xHVr 6qq4Hfwfgh8xNGeM/NTuMCxwgm7LQ5c9hcU7VLgd++LIiyixfk4bFRvF0/IBWL2h oxeXtNwmQIBafFYVYhaq3d1HXCdqCSnRvflbgrvTJjs0+n3Dh1Iu4tCFsckA7KAS HClkSIVoCU35B3On/NbtJb9DIWuqmMkcw1rYkmHT6oISY25gte0= -----END CERTIFICATE-----Generated at Mon Mar 2 17:15:49 2026 by rpki-client