$ rpki-client -vvf repo-rpki.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.mft File: 5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.mft (raw, json) Hash identifier: cJuioccwg3WDyzEf/L3CrxEgXyzz3eufgP7Ga1aDu+o= Subject key identifier: F3:04:06:8F:F1:91:0F:61:F1:4E:38:68:36:9E:89:E3:A5:4A:9A:0A Authority key identifier: 51:97:E2:A7:8B:BA:1E:8C:9E:B8:08:E4:5A:99:DD:2B:E7:B4:12:97 Certificate issuer: /CN=5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297 Certificate serial: 02D60512F7D4A4C5F72400ED627603D630895C2A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.cer Subject info access: rsync://repo-rpki.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.mft Manifest number: 01F9 Signing time: Sun 01 Mar 2026 04:51:37 +0000 Manifest this update: Sun 01 Mar 2026 04:46:37 +0000 Manifest next update: Wed 04 Mar 2026 09:25:37 +0000 Files and hashes: 1: 3130332e3132392e32302e302f32332d3234203d3e20313335343738.roa (hash: ezzFeBhaAvNsKhxbFuThV49gvTqwygGDYXBHtWaw660=) 2: 3130332e3132392e32322e302f32332d3234203d3e20313335343738.roa (hash: NI+iV212mIRfD7qYmt5q7rBxlWutxZm2u6jypzvhX2A=) 3: 5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.crl (hash: 7MKx8W9ZCOu+SbxSx9jgOI7hj9QHlBvfVFcuJqyx5Ik=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.crl rsync://repo-rpki.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 09:25:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:d6:05:12:f7:d4:a4:c5:f7:24:00:ed:62:76:03:d6:30:89:5c:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297 Validity Not Before: Mar 1 04:46:37 2026 GMT Not After : Mar 4 09:25:37 2026 GMT Subject: CN=F304068FF1910F61F14E3868369E89E3A54A9A0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:8e:f5:c0:f1:a4:bf:81:1e:0f:06:b8:c9:61: 32:13:80:60:6b:76:af:7e:55:af:6d:40:d8:5d:50: be:ac:e3:17:4f:f2:90:77:0e:ec:d7:2d:e2:0a:0b: 6d:0f:2a:a3:6c:bc:4d:be:df:6f:0f:5b:e4:94:7b: 7d:7c:27:4c:87:11:6d:8a:26:99:e2:0b:02:27:29: 66:30:89:07:6e:a7:ff:f9:15:30:61:f2:e4:52:65: c5:0a:84:72:99:cb:fe:08:b0:7d:1d:fb:e6:37:e9: 4b:35:ea:75:d3:8f:97:dc:06:9b:d1:87:db:54:cb: cc:27:6c:89:4b:71:51:1a:70:5a:4b:8a:3e:36:18: 3f:68:74:b1:4e:4b:cb:80:d6:84:ca:99:b4:3c:e8: 70:d7:b9:11:b5:96:11:4b:b0:a3:24:a5:ad:51:75: b9:9f:e3:63:1a:92:b8:34:b3:14:6d:eb:d4:98:75: f6:0f:26:fd:08:5b:a9:f2:19:9f:e2:15:a7:19:7a: 16:e2:a0:f0:e0:77:7c:d7:ca:57:11:00:80:48:3e: f4:54:91:06:f6:95:f2:69:1f:86:a0:dd:be:b4:70: a7:e4:db:2b:ca:24:b2:36:50:7f:ca:39:b2:95:68: e1:f1:30:3a:c7:9e:ce:8c:ad:07:cd:9c:3b:1a:52: fe:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:04:06:8F:F1:91:0F:61:F1:4E:38:68:36:9E:89:E3:A5:4A:9A:0A X509v3 Authority Key Identifier: keyid:51:97:E2:A7:8B:BA:1E:8C:9E:B8:08:E4:5A:99:DD:2B:E7:B4:12:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:d9:e7:72:76:16:fa:54:07:89:42:e5:5b:38:99:03:1e:83: 4d:bd:55:b3:f6:1a:3b:56:a7:71:a3:9c:fb:2a:a0:b5:e8:bb: fe:1e:48:68:c0:42:0b:d6:43:3d:34:32:57:22:c5:13:60:d4: 3e:11:7a:ac:f7:5e:92:b7:b2:f6:a4:38:9e:f6:de:30:bb:06: c0:0b:f0:3e:71:9d:0c:e7:71:8e:05:d3:45:86:fa:7b:3d:3f: ff:b5:43:80:04:af:00:96:d4:ec:f4:34:99:f4:43:cb:9d:96: 07:fa:ce:23:32:22:88:ab:54:a7:40:72:c3:57:ce:ab:69:ef: 9e:75:95:69:47:96:1e:58:29:d5:dc:6c:74:df:49:3c:15:5e: 41:1e:0e:bd:99:b1:a3:a9:d1:3c:9c:40:6e:ce:e2:71:de:e1: 98:62:e2:a4:56:ad:24:17:a1:58:d0:12:27:b5:86:12:40:60: a4:b8:36:25:d9:aa:a1:ab:20:72:0b:c4:09:5b:3f:2a:7f:73: b9:9e:42:01:ac:e7:c6:7f:f1:a5:b3:ae:f1:f4:28:13:26:02: bc:23:ff:12:f1:69:1a:f9:73:49:7d:ad:fd:45:67:fe:d6:d7: c3:85:2f:3f:06:c6:e0:fb:0c:b3:96:88:a3:7c:be:a2:e1:91: d1:22:1b:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAtYFEvfUpMX3JADtYnYD1jCJXCowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTE5N0UyQTc4QkJBMUU4QzlFQjgwOEU0NUE5OUREMkJF N0I0MTI5NzAeFw0yNjAzMDEwNDQ2MzdaFw0yNjAzMDQwOTI1MzdaMDMxMTAvBgNV BAMTKEYzMDQwNjhGRjE5MTBGNjFGMTRFMzg2ODM2OUU4OUUzQTU0QTlBMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxjvXA8aS/gR4PBrjJYTITgGBr dq9+Va9tQNhdUL6s4xdP8pB3DuzXLeIKC20PKqNsvE2+328PW+SUe318J0yHEW2K JpniCwInKWYwiQdup//5FTBh8uRSZcUKhHKZy/4IsH0d++Y36Us16nXTj5fcBpvR h9tUy8wnbIlLcVEacFpLij42GD9odLFOS8uA1oTKmbQ86HDXuRG1lhFLsKMkpa1R dbmf42Makrg0sxRt69SYdfYPJv0IW6nyGZ/iFacZehbioPDgd3zXylcRAIBIPvRU kQb2lfJpH4ag3b60cKfk2yvKJLI2UH/KObKVaOHxMDrHns6MrQfNnDsaUv4VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8wQGj/GRD2HxTjhoNp6J46VKmgowHwYDVR0j BBgwFoAUUZfip4u6HoyeuAjkWpndK+e0EpcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NjU0MjgzOS0yODU4LTQ5ZjAtYWNkZi1mYTdkM2FiOWM1NTgvMC81MTk3RTJBNzhC QkExRThDOUVCODA4RTQ1QTk5REQyQkU3QjQxMjk3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTE5N0UyQTc4QkJBMUU4QzlFQjgwOEU0NUE5OUREMkJFN0I0 MTI5Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzY1NDI4MzktMjg1OC00OWYwLWFj ZGYtZmE3ZDNhYjljNTU4LzAvNTE5N0UyQTc4QkJBMUU4QzlFQjgwOEU0NUE5OURE MkJFN0I0MTI5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABTZ53J2FvpUB4lC5Vs4mQMeg029VbP2GjtW p3GjnPsqoLXou/4eSGjAQgvWQz00MlcixRNg1D4Reqz3XpK3svakOJ723jC7BsAL 8D5xnQzncY4F00WG+ns9P/+1Q4AErwCW1Oz0NJn0Q8udlgf6ziMyIoirVKdAcsNX zqtp7551lWlHlh5YKdXcbHTfSTwVXkEeDr2ZsaOp0TycQG7O4nHe4Zhi4qRWrSQX oVjQEie1hhJAYKS4NiXZqqGrIHILxAlbPyp/c7meQgGs58Z/8aWzrvH0KBMmArwj /xLxaRr5c0l9rf1FZ/7W18OFLz8GxuD7DLOWiKN8vqLhkdEiG2M= -----END CERTIFICATE-----Generated at Mon Mar 2 11:24:42 2026 by rpki-client