$ rpki-client -vvf repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft File: C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft (raw, json) Hash identifier: Xw8aAvVB1WPnzbCWzFJ73EdPD8BEPAaRW1eMyS/9d9w= Subject key identifier: 5A:BD:53:33:85:F1:84:6F:F0:DC:AD:D6:7A:CB:99:27:66:C2:E1:DA Authority key identifier: C8:88:64:DD:3C:1E:6D:0D:5F:A9:14:67:F0:3B:26:6D:F5:F7:92:55 Certificate issuer: /CN=C88864DD3C1E6D0D5FA91467F03B266DF5F79255 Certificate serial: 60D150B21CCD84A308855EDF34969BBC3013D145 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.cer Subject info access: rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft Manifest number: 015F Signing time: Sun 01 Mar 2026 19:51:54 +0000 Manifest this update: Sun 01 Mar 2026 19:46:54 +0000 Manifest next update: Thu 05 Mar 2026 05:22:54 +0000 Files and hashes: 1: 3135372e31302e38392e302f32342d3234203d3e20313532303832.roa (hash: r0yQckJKHz7cgtDpBZ5DT3GZabnNshDA9NVYp4KqxPI=) 2: C88864DD3C1E6D0D5FA91467F03B266DF5F79255.crl (hash: hWaPQIvtsQiACp9bbGymrrLv84FFZSSQ1N2i6YysE7c=) 3: 3135372e31302e38382e302f32342d3234203d3e20313532303832.roa (hash: iu1Dc54YlpkWXrRrlgFt9MyI1bbMWnH2lViKwPc2SC4=) 4: 3135372e31302e38382e302f32332d3233203d3e20313532303832.roa (hash: 2xXRATtqKTFJTL45kpKCrmgQ+OKbp2ZlcGtRfjkIZUg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.crl rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:45:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:d1:50:b2:1c:cd:84:a3:08:85:5e:df:34:96:9b:bc:30:13:d1:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C88864DD3C1E6D0D5FA91467F03B266DF5F79255 Validity Not Before: Mar 1 19:46:54 2026 GMT Not After : Mar 5 05:22:54 2026 GMT Subject: CN=5ABD533385F1846FF0DCADD67ACB992766C2E1DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:fe:2e:ed:71:2f:0a:78:dc:71:a2:f8:96:e2: 20:b1:0e:73:a5:9e:e2:e1:a2:4b:fb:75:21:f2:f0: c6:c6:c6:0e:67:9a:92:6b:3b:07:90:f8:22:8e:c7: ac:46:e2:7c:3b:42:3b:b6:99:2e:f5:c2:57:8f:09: 37:e5:69:98:60:99:9a:72:ee:ac:8d:22:7b:45:8d: e2:0e:c9:f5:00:40:0c:35:66:93:6a:81:66:0b:37: 94:38:1d:9a:1e:ad:77:3a:03:ae:be:04:8d:63:92: a5:25:34:a7:79:92:ab:16:d1:05:09:7e:7d:75:18: 87:9f:ac:73:fc:bb:ab:ba:0f:24:40:ad:3e:8d:10: 2b:8c:53:d1:57:f5:c2:c8:52:d7:77:93:54:a9:71: 4c:0f:b4:69:50:b5:57:8a:c1:d9:b1:5d:33:46:78: 1e:e7:bf:cd:58:c3:12:b9:73:5e:a2:c4:bb:f6:ac: d3:7f:2a:49:3e:c1:4e:f3:0d:8f:11:40:84:e9:82: 20:7b:0c:d5:61:2c:02:f2:a6:d1:c6:10:02:6e:ca: 42:51:45:20:84:19:45:79:15:e3:b1:b3:33:00:2a: f3:03:e3:74:44:af:62:80:17:60:44:e0:4a:ce:e8: 23:c2:cd:f5:80:41:00:20:7f:85:0a:50:e7:41:dc: 39:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:BD:53:33:85:F1:84:6F:F0:DC:AD:D6:7A:CB:99:27:66:C2:E1:DA X509v3 Authority Key Identifier: keyid:C8:88:64:DD:3C:1E:6D:0D:5F:A9:14:67:F0:3B:26:6D:F5:F7:92:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:46:4f:47:67:3c:24:3d:1e:be:9f:b2:b1:1c:0c:62:05:e4: 25:1b:5a:c4:a1:2a:2c:de:4b:f1:5a:0f:2e:2b:d4:9e:d1:97: 70:76:31:70:8b:33:9a:18:3c:60:9c:93:c6:97:f4:2c:fd:8f: b0:0b:af:1b:89:dd:4e:95:e9:e4:c7:98:d3:b1:9a:fb:1f:98: 21:fa:d1:18:f2:08:d4:2a:0a:7e:b2:d1:a9:6d:c0:11:eb:e3: 34:69:74:69:6c:38:93:f6:2e:b0:48:43:11:97:d2:d0:4c:5b: 06:87:f4:f3:94:c6:76:f3:07:e1:0d:00:03:c5:c0:cd:24:1f: b7:c2:12:18:b5:b2:c0:3e:bb:26:d4:51:d3:37:84:8b:c9:d2: c2:95:c8:ae:ba:70:c0:32:fe:21:74:0b:f4:8f:75:e1:0f:f2: be:22:8a:92:73:d7:f8:fb:7e:83:60:41:d5:81:79:30:7d:a2: 7b:88:43:ec:3e:03:fc:be:47:91:2e:e9:82:ae:c0:2b:e5:94: 40:18:96:da:34:2c:d3:08:36:9a:ab:a1:9f:7d:64:4c:3c:f3: 2c:52:f7:9b:c4:24:31:da:a4:0f:4e:34:59:e6:70:8d:03:01: 7e:69:a2:8b:d7:04:f2:34:15:bf:2b:0d:ea:32:fc:14:e0:e3: ec:e3:92:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYNFQshzNhKMIhV7fNJabvDAT0UUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzg4ODY0REQzQzFFNkQwRDVGQTkxNDY3RjAzQjI2NkRG NUY3OTI1NTAeFw0yNjAzMDExOTQ2NTRaFw0yNjAzMDUwNTIyNTRaMDMxMTAvBgNV BAMTKDVBQkQ1MzMzODVGMTg0NkZGMERDQURENjdBQ0I5OTI3NjZDMkUxREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4/i7tcS8KeNxxoviW4iCxDnOl nuLhokv7dSHy8MbGxg5nmpJrOweQ+CKOx6xG4nw7Qju2mS71wlePCTflaZhgmZpy 7qyNIntFjeIOyfUAQAw1ZpNqgWYLN5Q4HZoerXc6A66+BI1jkqUlNKd5kqsW0QUJ fn11GIefrHP8u6u6DyRArT6NECuMU9FX9cLIUtd3k1SpcUwPtGlQtVeKwdmxXTNG eB7nv81YwxK5c16ixLv2rNN/Kkk+wU7zDY8RQITpgiB7DNVhLALyptHGEAJuykJR RSCEGUV5FeOxszMAKvMD43REr2KAF2BE4ErO6CPCzfWAQQAgf4UKUOdB3DmrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWr1TM4XxhG/w3K3WesuZJ2bC4dowHwYDVR0j BBgwFoAUyIhk3TwebQ1fqRRn8DsmbfX3klUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MzJlNGY4Ni00OGU3LTQ4YzctYmE5MS1lMjU5NjgzNzhlOTUvMC9DODg4NjRERDND MUU2RDBENUZBOTE0NjdGMDNCMjY2REY1Rjc5MjU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzg4ODY0REQzQzFFNkQwRDVGQTkxNDY3RjAzQjI2NkRGNUY3 OTI1NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzMyZTRmODYtNDhlNy00OGM3LWJh OTEtZTI1OTY4Mzc4ZTk1LzAvQzg4ODY0REQzQzFFNkQwRDVGQTkxNDY3RjAzQjI2 NkRGNUY3OTI1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFxGT0dnPCQ9Hr6fsrEcDGIF5CUbWsShKize S/FaDy4r1J7Rl3B2MXCLM5oYPGCck8aX9Cz9j7ALrxuJ3U6V6eTHmNOxmvsfmCH6 0RjyCNQqCn6y0altwBHr4zRpdGlsOJP2LrBIQxGX0tBMWwaH9POUxnbzB+ENAAPF wM0kH7fCEhi1ssA+uybUUdM3hIvJ0sKVyK66cMAy/iF0C/SPdeEP8r4iipJz1/j7 foNgQdWBeTB9onuIQ+w+A/y+R5Eu6YKuwCvllEAYlto0LNMINpqroZ99ZEw88yxS 95vEJDHapA9ONFnmcI0DAX5poovXBPI0Fb8rDeoy/BTg4+zjkq4= -----END CERTIFICATE-----Generated at Mon Mar 2 09:46:06 2026 by rpki-client