$ rpki-client -vvf repo-rpki.idnic.net/repo/74714665-c670-451e-bdcb-9074219d55ce/0/C740DD931883C284135261B25A6958E80CDF63D2.mft File: C740DD931883C284135261B25A6958E80CDF63D2.mft (raw, json) Hash identifier: y4cgVHf3mPCAwj4rqfDYUfx54KANGP1jpqTA1TNEmuY= Subject key identifier: 87:D9:68:91:7D:E5:0A:47:CB:F5:45:5F:B5:D7:1A:1D:A7:49:82:7B Authority key identifier: C7:40:DD:93:18:83:C2:84:13:52:61:B2:5A:69:58:E8:0C:DF:63:D2 Certificate issuer: /CN=C740DD931883C284135261B25A6958E80CDF63D2 Certificate serial: 0C05BB6D0829889D7F98D5A38D02116563B6F14E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C740DD931883C284135261B25A6958E80CDF63D2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/74714665-c670-451e-bdcb-9074219d55ce/0/C740DD931883C284135261B25A6958E80CDF63D2.mft Manifest number: 020A Signing time: Sun 01 Mar 2026 10:31:56 +0000 Manifest this update: Sun 01 Mar 2026 10:26:56 +0000 Manifest next update: Wed 04 Mar 2026 20:15:56 +0000 Files and hashes: 1: 3130332e3133392e3132302e302f32342d3234203d3e20313335363336.roa (hash: GyuTjfSXg8CKV3wiOvbPNmUEDlW/pVUvbq70+NpobI8=) 2: C740DD931883C284135261B25A6958E80CDF63D2.crl (hash: iSjW+Mhif5SmiEBYrAipW0SFBrogWqzewaA/dSyHpxQ=) 3: 3130332e3133392e3132312e302f32342d3234203d3e20313335363336.roa (hash: 7wQov5jVTqCsIdfi+23MpcFqikr+bV7ePnfnTimytVQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/74714665-c670-451e-bdcb-9074219d55ce/0/C740DD931883C284135261B25A6958E80CDF63D2.crl rsync://repo-rpki.idnic.net/repo/74714665-c670-451e-bdcb-9074219d55ce/0/C740DD931883C284135261B25A6958E80CDF63D2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C740DD931883C284135261B25A6958E80CDF63D2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 20:15:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:05:bb:6d:08:29:88:9d:7f:98:d5:a3:8d:02:11:65:63:b6:f1:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C740DD931883C284135261B25A6958E80CDF63D2 Validity Not Before: Mar 1 10:26:56 2026 GMT Not After : Mar 4 20:15:56 2026 GMT Subject: CN=87D968917DE50A47CBF5455FB5D71A1DA749827B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:66:1a:e3:64:4f:ae:ea:87:e9:2c:76:1c:1e: 14:b5:ae:72:a8:bc:04:93:21:6d:d4:9e:f3:39:2f: 81:28:19:a7:c9:56:f9:97:33:cf:0b:26:2b:36:f1: d3:0e:a9:20:e5:ad:8c:14:a9:1f:51:ab:b4:28:bf: 21:09:f1:3a:72:37:82:13:0e:b2:8f:4a:42:8d:81: 0a:f7:9c:5d:bf:3f:c7:b9:b0:19:ab:fd:3b:48:8a: 81:9c:4a:54:34:cf:ed:d8:5a:2c:11:6f:13:87:18: 99:7c:5c:d2:67:7a:a0:02:68:21:c3:d7:64:32:5b: 1c:89:99:cf:d2:db:87:c7:e6:e1:9c:d8:7c:75:c2: 10:49:ad:23:96:f2:78:b6:5e:d7:f4:0e:db:0d:9d: d4:23:92:75:88:30:79:73:38:7a:c1:14:f7:de:44: ac:64:47:63:af:a4:64:4c:28:11:41:44:46:66:66: 03:b1:01:22:0b:4b:32:d4:fb:47:01:a4:87:aa:6e: 27:72:e7:7f:4e:f1:80:36:00:63:1e:13:f1:db:dd: 3f:3d:80:f6:d9:c8:23:62:41:f2:0f:e4:b7:a5:2b: 21:b3:13:1c:6a:5a:f5:05:bc:0c:ad:be:8a:f4:fb: f2:24:f4:af:9b:a3:18:fa:6b:73:36:18:8c:99:ab: 11:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:D9:68:91:7D:E5:0A:47:CB:F5:45:5F:B5:D7:1A:1D:A7:49:82:7B X509v3 Authority Key Identifier: keyid:C7:40:DD:93:18:83:C2:84:13:52:61:B2:5A:69:58:E8:0C:DF:63:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/74714665-c670-451e-bdcb-9074219d55ce/0/C740DD931883C284135261B25A6958E80CDF63D2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C740DD931883C284135261B25A6958E80CDF63D2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/74714665-c670-451e-bdcb-9074219d55ce/0/C740DD931883C284135261B25A6958E80CDF63D2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:b7:17:3d:c5:78:ab:6d:6a:69:2a:76:df:87:0e:bc:e8:9d: e7:e5:62:f6:1b:66:64:98:a6:cd:8a:e6:74:60:7d:f3:0f:2d: b6:4b:3a:fe:4e:c3:33:6d:4a:fb:27:44:61:8f:45:d8:a6:c4: c9:71:d1:0a:57:d9:a2:95:d5:92:22:5d:b8:cb:a1:82:1d:48: 4b:2a:04:58:62:ae:d2:55:2a:ab:32:ed:27:bf:10:34:25:3c: 7c:b5:dc:3f:79:3d:0d:6a:45:89:76:03:45:d3:64:4d:3b:ec: 4a:ae:3e:49:f5:48:cd:8a:e7:32:64:2d:41:72:c1:59:19:72: d4:22:1f:56:c3:8c:4f:48:48:84:66:55:da:04:b4:1d:91:87: 5d:95:89:2c:84:3e:9c:78:0d:a9:53:e7:50:b8:ff:61:ec:0a: f6:8e:e2:04:99:b4:85:26:77:24:ce:1e:83:ea:80:78:78:b0: 40:89:89:de:85:fa:a1:5b:a1:55:5a:ac:56:4c:06:de:e4:29: 53:db:e9:9b:54:36:e5:d7:3e:22:9e:fc:20:a2:58:b6:b6:b0: ce:d2:9d:e9:53:a3:1d:d9:36:88:de:35:1f:20:dc:d5:8f:1c: 9e:93:ad:fc:5f:e4:b2:7d:c8:6d:07:ca:46:e9:ae:ee:61:e3: bc:e3:04:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDAW7bQgpiJ1/mNWjjQIRZWO28U4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzc0MEREOTMxODgzQzI4NDEzNTI2MUIyNUE2OTU4RTgw Q0RGNjNEMjAeFw0yNjAzMDExMDI2NTZaFw0yNjAzMDQyMDE1NTZaMDMxMTAvBgNV BAMTKDg3RDk2ODkxN0RFNTBBNDdDQkY1NDU1RkI1RDcxQTFEQTc0OTgyN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD6ZhrjZE+u6ofpLHYcHhS1rnKo vASTIW3UnvM5L4EoGafJVvmXM88LJis28dMOqSDlrYwUqR9Rq7QovyEJ8TpyN4IT DrKPSkKNgQr3nF2/P8e5sBmr/TtIioGcSlQ0z+3YWiwRbxOHGJl8XNJneqACaCHD 12QyWxyJmc/S24fH5uGc2Hx1whBJrSOW8ni2Xtf0DtsNndQjknWIMHlzOHrBFPfe RKxkR2OvpGRMKBFBREZmZgOxASILSzLU+0cBpIeqbidy539O8YA2AGMeE/Hb3T89 gPbZyCNiQfIP5LelKyGzExxqWvUFvAytvor0+/Ik9K+boxj6a3M2GIyZqxFpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUh9lokX3lCkfL9UVftdcaHadJgnswHwYDVR0j BBgwFoAUx0DdkxiDwoQTUmGyWmlY6AzfY9IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NDcxNDY2NS1jNjcwLTQ1MWUtYmRjYi05MDc0MjE5ZDU1Y2UvMC9DNzQwREQ5MzE4 ODNDMjg0MTM1MjYxQjI1QTY5NThFODBDREY2M0QyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzc0MEREOTMxODgzQzI4NDEzNTI2MUIyNUE2OTU4RTgwQ0RG NjNEMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzQ3MTQ2NjUtYzY3MC00NTFlLWJk Y2ItOTA3NDIxOWQ1NWNlLzAvQzc0MEREOTMxODgzQzI4NDEzNTI2MUIyNUE2OTU4 RTgwQ0RGNjNEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJm3Fz3FeKttamkqdt+HDrzoneflYvYbZmSY ps2K5nRgffMPLbZLOv5OwzNtSvsnRGGPRdimxMlx0QpX2aKV1ZIiXbjLoYIdSEsq BFhirtJVKqsy7Se/EDQlPHy13D95PQ1qRYl2A0XTZE077EquPkn1SM2K5zJkLUFy wVkZctQiH1bDjE9ISIRmVdoEtB2Rh12ViSyEPpx4DalT51C4/2HsCvaO4gSZtIUm dyTOHoPqgHh4sECJid6F+qFboVVarFZMBt7kKVPb6ZtUNuXXPiKe/CCiWLa2sM7S nelTox3ZNojeNR8g3NWPHJ6Trfxf5LJ9yG0Hykbpru5h47zjBNY= -----END CERTIFICATE-----Generated at Mon Mar 2 15:18:20 2026 by rpki-client