$ rpki-client -vvf repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.mft File: D469937BD030575A6389B1FF4CDB185EFBC4B1FA.mft (raw, json) Hash identifier: bKlgFmlhvF/DDn7UnI4EGZGVSwxo+tQPCwfb/0T7+Rg= Subject key identifier: 8E:F7:50:35:36:A2:1C:E6:EC:8A:60:6D:53:CD:4B:30:C0:D0:02:3C Authority key identifier: D4:69:93:7B:D0:30:57:5A:63:89:B1:FF:4C:DB:18:5E:FB:C4:B1:FA Certificate issuer: /CN=D469937BD030575A6389B1FF4CDB185EFBC4B1FA Certificate serial: 5FDEF12209B97D72EDD272B87177B78982118D55 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.mft Manifest number: 0239 Signing time: Mon 02 Mar 2026 20:20:50 +0000 Manifest this update: Mon 02 Mar 2026 20:15:50 +0000 Manifest next update: Fri 06 Mar 2026 04:56:50 +0000 Files and hashes: 1: 3130332e34312e3234382e302f32332d3233203d3e20313336383431.roa (hash: Q9gcXsnmhgdIFiAoT+4PlNJP+vGRpaSMes16ABWpf6E=) 2: 3130332e34312e3234382e302f32342d3234203d3e20313336383431.roa (hash: V3NQepAED/G4v92/Kw8wwvusDJ/oK/3dp6EJLA6gw0s=) 3: 3130332e34312e3234392e302f32342d3234203d3e20313336383431.roa (hash: 7IiFMO+HhVDLxjHT2X4iJ4FHi1Re2KahShbn05EtlK4=) 4: D469937BD030575A6389B1FF4CDB185EFBC4B1FA.crl (hash: 9/qzZgloiUzGi1/6UgWpRyW/pN9DkTxomIrepiADIBw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.crl rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:de:f1:22:09:b9:7d:72:ed:d2:72:b8:71:77:b7:89:82:11:8d:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D469937BD030575A6389B1FF4CDB185EFBC4B1FA Validity Not Before: Mar 2 20:15:50 2026 GMT Not After : Mar 6 04:56:50 2026 GMT Subject: CN=8EF7503536A21CE6EC8A606D53CD4B30C0D0023C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:fb:a0:f1:c3:20:d2:ef:cb:2b:c6:1d:c0:eb: e2:5b:1b:77:70:26:5a:f2:8d:6a:8c:0b:9c:06:e1: 3b:5c:18:9c:7e:61:4d:08:4e:8a:5a:d8:77:d0:53: 44:80:d7:5d:13:9d:96:e4:40:fe:dd:64:dd:0e:33: 01:49:b3:52:2c:c8:9c:4e:c7:40:74:ad:9b:45:29: 8a:78:85:ae:29:a9:f4:02:1a:19:d2:61:71:84:36: d9:b0:b2:7c:b9:0c:28:d4:6c:b1:78:a0:49:1e:ca: a3:9b:fc:57:56:2b:a5:d5:1a:cf:58:17:ac:91:b8: c4:67:73:08:0a:48:44:f8:5c:b3:46:e0:94:31:84: 73:ac:77:17:7f:0a:e7:98:77:93:a6:ff:87:f7:32: 96:14:ac:e9:63:a6:bc:0f:cc:27:cd:35:42:12:af: 3b:65:32:ed:2f:3e:2e:33:7e:26:2e:c6:a6:5f:73: 75:4d:49:a8:60:49:ad:60:b6:e6:d8:e1:a2:14:cc: fe:81:b1:dd:58:80:c9:36:1f:93:d8:dd:91:52:77: c9:12:6a:a0:1f:17:38:bc:22:07:58:d9:ea:19:e7: 1d:24:84:bd:d6:a3:06:c6:8a:0b:94:03:76:fc:ea: 39:6d:48:37:c8:0f:fe:96:3a:a2:fa:35:d4:bf:b1: 3c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:F7:50:35:36:A2:1C:E6:EC:8A:60:6D:53:CD:4B:30:C0:D0:02:3C X509v3 Authority Key Identifier: keyid:D4:69:93:7B:D0:30:57:5A:63:89:B1:FF:4C:DB:18:5E:FB:C4:B1:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:7e:9d:1d:c6:63:07:0a:d3:01:cb:d8:35:f3:9c:4a:91:f8: 9f:4a:80:1d:69:29:0c:cc:63:cf:5c:3b:f1:2a:a1:2d:61:49: 2f:16:5d:f7:1b:05:70:f7:cd:53:ff:ec:74:1e:6f:3a:49:bc: 24:bc:1b:e7:90:5f:86:89:eb:f4:56:1b:2e:10:78:d8:47:fa: 48:3a:49:28:1a:f4:5d:54:06:c3:84:68:7f:8a:fa:6f:8a:55: 5b:78:04:f3:b5:33:54:29:1c:ba:25:83:a6:f6:00:af:f1:18: 2a:1c:0f:1b:e7:3c:dc:c6:5f:23:4f:53:1b:01:be:d3:62:f4: 4d:e4:0e:39:21:1b:27:66:37:12:b9:ec:37:03:0d:a2:18:e8: 37:2c:cb:1d:90:8c:0e:5e:aa:5d:47:58:de:6c:cd:6a:a7:2c: 64:1b:13:14:2e:13:4b:cb:21:f0:bc:1f:77:e9:a2:f9:8f:df: 69:fc:e6:8a:d6:bf:df:9f:59:7a:9d:06:32:7d:0d:fc:35:36: c5:aa:d3:0c:05:e2:85:39:e0:db:a4:2c:b7:ee:46:ae:e2:50: 7e:11:38:e1:93:f7:6f:52:77:0f:3b:e7:0d:b5:4a:83:81:7d: ed:ad:4d:48:ab:6b:16:9f:7f:0e:ea:83:58:ea:b2:a8:b3:ee: 69:6f:79:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX97xIgm5fXLt0nK4cXe3iYIRjVUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQ2OTkzN0JEMDMwNTc1QTYzODlCMUZGNENEQjE4NUVG QkM0QjFGQTAeFw0yNjAzMDIyMDE1NTBaFw0yNjAzMDYwNDU2NTBaMDMxMTAvBgNV BAMTKDhFRjc1MDM1MzZBMjFDRTZFQzhBNjA2RDUzQ0Q0QjMwQzBEMDAyM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt+6DxwyDS78srxh3A6+JbG3dw JlryjWqMC5wG4TtcGJx+YU0ITopa2HfQU0SA110TnZbkQP7dZN0OMwFJs1IsyJxO x0B0rZtFKYp4ha4pqfQCGhnSYXGENtmwsny5DCjUbLF4oEkeyqOb/FdWK6XVGs9Y F6yRuMRncwgKSET4XLNG4JQxhHOsdxd/CueYd5Om/4f3MpYUrOljprwPzCfNNUIS rztlMu0vPi4zfiYuxqZfc3VNSahgSa1gtubY4aIUzP6Bsd1YgMk2H5PY3ZFSd8kS aqAfFzi8IgdY2eoZ5x0khL3WowbGiguUA3b86jltSDfID/6WOqL6NdS/sTz7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjvdQNTaiHObsimBtU81LMMDQAjwwHwYDVR0j BBgwFoAU1GmTe9AwV1pjibH/TNsYXvvEsfowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NzUyNzdlOC03ZDBmLTQxODQtOWMyOC1hNjYzNWVmZWYyOWMvMC9ENDY5OTM3QkQw MzA1NzVBNjM4OUIxRkY0Q0RCMTg1RUZCQzRCMUZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDQ2OTkzN0JEMDMwNTc1QTYzODlCMUZGNENEQjE4NUVGQkM0 QjFGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzc1Mjc3ZTgtN2QwZi00MTg0LTlj MjgtYTY2MzVlZmVmMjljLzAvRDQ2OTkzN0JEMDMwNTc1QTYzODlCMUZGNENEQjE4 NUVGQkM0QjFGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABd+nR3GYwcK0wHL2DXznEqR+J9KgB1pKQzM Y89cO/EqoS1hSS8WXfcbBXD3zVP/7HQebzpJvCS8G+eQX4aJ6/RWGy4QeNhH+kg6 SSga9F1UBsOEaH+K+m+KVVt4BPO1M1QpHLolg6b2AK/xGCocDxvnPNzGXyNPUxsB vtNi9E3kDjkhGydmNxK57DcDDaIY6Dcsyx2QjA5eql1HWN5szWqnLGQbExQuE0vL IfC8H3fpovmP32n85orWv9+fWXqdBjJ9Dfw1NsWq0wwF4oU54NukLLfuRq7iUH4R OOGT929Sdw875w21SoOBfe2tTUiraxaffw7qg1jqsqiz7mlveZw= -----END CERTIFICATE-----Generated at Mon Mar 2 22:36:01 2026 by rpki-client