$ rpki-client -vvf repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/1154D920B6A4209131871530AEE1F8B8A3D303D6.mft File: 1154D920B6A4209131871530AEE1F8B8A3D303D6.mft (raw, json) Hash identifier: CNwBak6rhPZ/FkN5US2ztO9ewZBpoufI1T+SkUUmLK8= Subject key identifier: 9A:2E:16:E9:7C:22:67:EF:04:59:4A:9A:85:A2:A8:23:09:B4:62:9E Authority key identifier: 11:54:D9:20:B6:A4:20:91:31:87:15:30:AE:E1:F8:B8:A3:D3:03:D6 Certificate issuer: /CN=1154D920B6A4209131871530AEE1F8B8A3D303D6 Certificate serial: 4AD9F9739E639638DD44F567AEFC9AEC45726D27 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1154D920B6A4209131871530AEE1F8B8A3D303D6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/1154D920B6A4209131871530AEE1F8B8A3D303D6.mft Manifest number: 0252 Signing time: Mon 02 Mar 2026 07:41:16 +0000 Manifest this update: Mon 02 Mar 2026 07:36:16 +0000 Manifest next update: Thu 05 Mar 2026 14:10:16 +0000 Files and hashes: 1: 3130332e3138382e3234392e302f32342d3234203d3e20313439393038.roa (hash: Pil6JjAZAhk6oGR6yVNwjzUnJBqxVVzN/QVFAe7clnM=) 2: 1154D920B6A4209131871530AEE1F8B8A3D303D6.crl (hash: VqtMetrQaovgJmrTD13Ol215NwxEZhMNdk/pUWL9cws=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/1154D920B6A4209131871530AEE1F8B8A3D303D6.crl rsync://repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/1154D920B6A4209131871530AEE1F8B8A3D303D6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1154D920B6A4209131871530AEE1F8B8A3D303D6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:d9:f9:73:9e:63:96:38:dd:44:f5:67:ae:fc:9a:ec:45:72:6d:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1154D920B6A4209131871530AEE1F8B8A3D303D6 Validity Not Before: Mar 2 07:36:16 2026 GMT Not After : Mar 5 14:10:16 2026 GMT Subject: CN=9A2E16E97C2267EF04594A9A85A2A82309B4629E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3c:d9:90:1d:e3:63:84:e0:3b:60:30:d8:4f: 3a:09:ab:e5:52:30:cc:69:85:3b:dd:2e:ae:53:b5: 5c:16:6e:63:68:83:d2:9f:f9:c7:32:c4:a1:cf:5d: 07:de:21:0f:33:1f:03:cf:28:a7:90:39:04:48:cb: d2:30:62:e3:1e:b0:a6:68:61:4b:9f:f9:fb:23:f1: 9c:8e:99:f4:83:07:0b:7a:92:b7:11:c0:d2:7a:d4: e1:7b:cc:66:87:8a:36:a1:9e:e3:7d:c3:27:93:66: a4:3b:b2:ee:b5:4d:36:2c:8a:ad:92:5b:d2:61:ca: 16:1c:9b:cb:ae:90:ba:fc:ad:4f:a3:1b:a7:6d:6c: b9:21:29:e3:5f:d1:2c:c1:81:38:6d:dd:99:5d:66: f5:4b:d6:31:fb:8e:fd:9f:c2:2e:16:93:74:1e:8c: 7b:b3:a5:a5:b7:95:14:ae:68:37:49:f2:80:93:91: 8b:d1:df:4f:03:d1:5b:21:79:a4:90:91:05:d9:e2: e5:9c:ce:0d:93:ed:4e:cd:40:4c:2e:94:30:17:87: 70:3e:c7:6a:02:6a:e9:d1:43:cf:1e:fe:7e:f8:5f: 7a:cb:93:4c:b0:60:b2:ca:97:2a:8c:68:13:25:7b: 56:42:7f:e6:6c:06:63:35:43:87:ff:4c:5c:94:6c: 55:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:2E:16:E9:7C:22:67:EF:04:59:4A:9A:85:A2:A8:23:09:B4:62:9E X509v3 Authority Key Identifier: keyid:11:54:D9:20:B6:A4:20:91:31:87:15:30:AE:E1:F8:B8:A3:D3:03:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/1154D920B6A4209131871530AEE1F8B8A3D303D6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1154D920B6A4209131871530AEE1F8B8A3D303D6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/1154D920B6A4209131871530AEE1F8B8A3D303D6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:b7:62:0b:a2:e8:87:47:d4:8b:0b:97:9b:e5:93:82:22:d6: c4:bb:3c:1a:d0:11:7e:a9:de:b6:d3:8b:52:06:05:86:2a:a8: aa:b3:93:c8:6c:9e:62:66:96:e0:44:d7:8f:05:e0:f9:04:3a: ba:00:86:a9:78:4a:2a:70:d0:a1:0d:00:2e:f7:6b:e9:af:b4: 5d:a1:80:f8:e9:53:9d:51:a3:57:9c:5c:65:ad:3c:a2:a7:69: 37:08:ea:87:45:9f:a5:4c:71:e1:3e:80:7c:a9:76:85:01:e8: e7:98:76:15:54:f3:26:7f:93:d5:ac:d2:23:b3:27:32:e4:7f: 33:9b:b5:85:83:c1:3f:16:87:35:60:0e:eb:a2:c9:3d:bc:ec: e6:7c:2b:1d:f2:ab:70:0c:de:3c:4c:b8:64:75:6d:e0:73:27: 04:b5:70:86:9f:c0:86:86:ec:e3:1b:b2:1a:f1:8e:45:54:f6: ab:93:6c:38:44:ce:83:a6:74:e9:9e:b9:8e:7b:93:0c:42:e5: 84:73:ee:ec:27:dc:aa:f9:0e:fe:d0:84:f8:cb:83:51:ea:b6: 94:70:57:b9:1c:80:3b:e7:d3:9f:7d:98:c1:dd:33:49:df:7b: ce:98:97:b6:4b:e9:90:5f:3f:7a:e5:ff:67:7b:e8:f8:8b:09: 3f:7a:9f:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUStn5c55jljjdRPVnrvya7EVybScwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTE1NEQ5MjBCNkE0MjA5MTMxODcxNTMwQUVFMUY4QjhB M0QzMDNENjAeFw0yNjAzMDIwNzM2MTZaFw0yNjAzMDUxNDEwMTZaMDMxMTAvBgNV BAMTKDlBMkUxNkU5N0MyMjY3RUYwNDU5NEE5QTg1QTJBODIzMDlCNDYyOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8PNmQHeNjhOA7YDDYTzoJq+VS MMxphTvdLq5TtVwWbmNog9Kf+ccyxKHPXQfeIQ8zHwPPKKeQOQRIy9IwYuMesKZo YUuf+fsj8ZyOmfSDBwt6krcRwNJ61OF7zGaHijahnuN9wyeTZqQ7su61TTYsiq2S W9JhyhYcm8uukLr8rU+jG6dtbLkhKeNf0SzBgTht3ZldZvVL1jH7jv2fwi4Wk3Qe jHuzpaW3lRSuaDdJ8oCTkYvR308D0VsheaSQkQXZ4uWczg2T7U7NQEwulDAXh3A+ x2oCaunRQ88e/n74X3rLk0ywYLLKlyqMaBMle1ZCf+ZsBmM1Q4f/TFyUbFX1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmi4W6XwiZ+8EWUqahaKoIwm0Yp4wHwYDVR0j BBgwFoAUEVTZILakIJExhxUwruH4uKPTA9YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NDY3ZWMzMy01YTcyLTRjNjUtOWZkMy02NmVmODQ3OTM5NGQvMC8xMTU0RDkyMEI2 QTQyMDkxMzE4NzE1MzBBRUUxRjhCOEEzRDMwM0Q2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTE1NEQ5MjBCNkE0MjA5MTMxODcxNTMwQUVFMUY4QjhBM0Qz MDNENi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzQ2N2VjMzMtNWE3Mi00YzY1LTlm ZDMtNjZlZjg0NzkzOTRkLzAvMTE1NEQ5MjBCNkE0MjA5MTMxODcxNTMwQUVFMUY4 QjhBM0QzMDNENi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL63Ygui6IdH1IsLl5vlk4Ii1sS7PBrQEX6p 3rbTi1IGBYYqqKqzk8hsnmJmluBE148F4PkEOroAhql4Sipw0KENAC73a+mvtF2h gPjpU51Ro1ecXGWtPKKnaTcI6odFn6VMceE+gHypdoUB6OeYdhVU8yZ/k9Ws0iOz JzLkfzObtYWDwT8WhzVgDuuiyT287OZ8Kx3yq3AM3jxMuGR1beBzJwS1cIafwIaG 7OMbshrxjkVU9quTbDhEzoOmdOmeuY57kwxC5YRz7uwn3Kr5Dv7QhPjLg1HqtpRw V7kcgDvn0599mMHdM0nfe86Yl7ZL6ZBfP3rl/2d76PiLCT96n/I= -----END CERTIFICATE-----Generated at Mon Mar 2 17:15:27 2026 by rpki-client