$ rpki-client -vvf repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/D681DB990E904642A480AE9546646329FF5D0162.mft File: D681DB990E904642A480AE9546646329FF5D0162.mft (raw, json) Hash identifier: 4Q2rYFPlpzjgugIw1tIFOKlA3zaIoldmWdumEoRr3tk= Subject key identifier: 12:D5:51:7C:C0:18:03:96:FC:E5:77:EC:24:5F:BA:F6:3C:E4:74:DC Authority key identifier: D6:81:DB:99:0E:90:46:42:A4:80:AE:95:46:64:63:29:FF:5D:01:62 Certificate issuer: /CN=D681DB990E904642A480AE9546646329FF5D0162 Certificate serial: 2D3D2249ACFBCD87A3B6E59EA423E476000585FC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D681DB990E904642A480AE9546646329FF5D0162.cer Subject info access: rsync://repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/D681DB990E904642A480AE9546646329FF5D0162.mft Manifest number: 028E Signing time: Sun 01 Mar 2026 20:31:56 +0000 Manifest this update: Sun 01 Mar 2026 20:26:56 +0000 Manifest next update: Thu 05 Mar 2026 00:32:56 +0000 Files and hashes: 1: D681DB990E904642A480AE9546646329FF5D0162.crl (hash: RnYqPG/+a0eP/2baRbIGAiK1+N31xiIIZkSoufllWvc=) 2: 3130332e3134352e33352e302f32342d3234203d3e20313339343439.roa (hash: LGFyuwFKevfReVHS/7A/KXwX6tZA3SLgHPvvyNbAtnI=) 3: 323430353a373763303a3a2f33322d3438203d3e20313339343439.roa (hash: tgk3NoI7Yl9Wh8OuLguFYhMn+bQWgfMhzVajW1+V2GA=) 4: 323430353a373763303a313030303a3a2f34382d3438203d3e20313339343439.roa (hash: XofjNzw1yGxwAcIlCRr0IcxzWXlCmMFb8avZjS5oKkg=) 5: 3130332e3134352e33342e302f32342d3234203d3e20313339343439.roa (hash: DosOLQ5CphwuAVjKNWs/TAbY57B9SEJF3bUwLYNSPv8=) 6: 3130332e3134352e33342e302f32332d3234203d3e20313339343439.roa (hash: 0zeOMcJLti5PO9rOACuwXhf403LkxSHV9NKFjogohdU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/D681DB990E904642A480AE9546646329FF5D0162.crl rsync://repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/D681DB990E904642A480AE9546646329FF5D0162.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D681DB990E904642A480AE9546646329FF5D0162.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:32:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:3d:22:49:ac:fb:cd:87:a3:b6:e5:9e:a4:23:e4:76:00:05:85:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D681DB990E904642A480AE9546646329FF5D0162 Validity Not Before: Mar 1 20:26:56 2026 GMT Not After : Mar 5 00:32:56 2026 GMT Subject: CN=12D5517CC0180396FCE577EC245FBAF63CE474DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:98:eb:40:19:3c:83:ca:99:65:3a:2f:97:ec: 90:ce:f7:29:94:d5:ae:26:a5:e6:18:71:69:86:f7: 51:e5:4c:d1:eb:bb:10:0a:40:5a:a4:22:b4:3f:6e: 36:23:6e:c0:cb:2a:99:81:08:bd:e7:3d:c1:2d:5e: 04:09:7d:d4:a3:a3:fb:0c:c3:cc:cb:e2:40:12:ae: 4a:e7:ca:98:fe:9a:c3:69:d0:75:75:bf:9f:38:7b: 4e:45:76:c9:c2:80:15:94:86:34:5d:ac:c7:24:a4: 81:06:6b:83:dd:b2:cb:cc:47:48:48:63:a2:fc:ef: 47:61:7b:b3:4a:88:a1:46:5f:8b:f3:8a:4c:87:c8: 58:e3:ea:66:f6:e2:3e:c7:7d:8c:da:19:8f:73:48: 1e:7f:b3:01:51:e4:d5:a9:ea:b5:b7:4b:3f:9d:cd: 72:54:c0:13:94:3f:ac:43:88:eb:dc:e3:12:a4:67: 7e:5e:47:67:fb:db:a7:9e:e8:a5:ca:36:49:6a:00: 73:d9:42:5a:ee:3e:b9:fa:d0:a3:83:c4:ca:63:27: ae:f9:8f:e2:c1:23:a2:0b:ea:2e:af:98:94:5c:fc: 0a:c5:13:7f:a3:66:97:0f:15:0d:3e:dc:49:de:ae: 6d:7c:05:be:54:7d:dc:28:b5:6a:c5:ba:5f:cc:76: 13:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:D5:51:7C:C0:18:03:96:FC:E5:77:EC:24:5F:BA:F6:3C:E4:74:DC X509v3 Authority Key Identifier: keyid:D6:81:DB:99:0E:90:46:42:A4:80:AE:95:46:64:63:29:FF:5D:01:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/D681DB990E904642A480AE9546646329FF5D0162.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D681DB990E904642A480AE9546646329FF5D0162.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/D681DB990E904642A480AE9546646329FF5D0162.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:dd:dd:b7:87:60:89:16:f5:80:bd:33:eb:ad:c9:9a:8d:47: f7:57:97:15:31:2c:88:47:c4:69:76:43:5b:2b:48:7f:d3:c8: f9:ba:26:f6:31:80:ab:a3:4a:f2:f3:7d:e3:e5:84:b7:cf:77: b8:7e:04:a9:3d:f0:aa:85:34:bb:14:27:5e:6a:ef:8e:c1:8b: e2:2c:3d:81:4e:bb:b4:66:bf:c1:17:44:bb:02:b8:31:96:46: 80:6f:d5:c9:4a:01:d2:d8:d2:1b:d3:f2:df:01:e2:4c:36:6f: 8b:00:ce:8f:5c:f9:c9:b2:3d:c1:c3:43:6b:5e:aa:8b:eb:96: c6:02:5c:fe:92:d4:f1:03:a5:d4:5b:a2:3f:2b:f6:04:35:47: e4:f0:58:0d:bc:d8:b7:fb:1b:d0:8c:ca:6e:7a:e7:f9:ea:5f: 37:c3:4a:36:67:9f:25:0f:c8:09:7d:75:85:07:cb:2d:1a:95: 57:7f:52:38:05:ed:fb:ea:88:e8:f3:4e:98:97:8d:35:f0:06: 68:26:01:cf:37:83:4e:ae:c9:14:0f:68:6d:7f:61:3b:58:42: d5:2b:ba:61:42:7d:49:84:69:e4:dd:b1:26:6d:30:e3:90:bf: 63:e9:46:ca:d5:40:c3:75:b9:fc:ac:78:c0:75:c4:98:b6:74: 88:07:56:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULT0iSaz7zYejtuWepCPkdgAFhfwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDY4MURCOTkwRTkwNDY0MkE0ODBBRTk1NDY2NDYzMjlG RjVEMDE2MjAeFw0yNjAzMDEyMDI2NTZaFw0yNjAzMDUwMDMyNTZaMDMxMTAvBgNV BAMTKDEyRDU1MTdDQzAxODAzOTZGQ0U1NzdFQzI0NUZCQUY2M0NFNDc0REMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpmOtAGTyDypllOi+X7JDO9ymU 1a4mpeYYcWmG91HlTNHruxAKQFqkIrQ/bjYjbsDLKpmBCL3nPcEtXgQJfdSjo/sM w8zL4kASrkrnypj+msNp0HV1v584e05FdsnCgBWUhjRdrMckpIEGa4PdssvMR0hI Y6L870dhe7NKiKFGX4vzikyHyFjj6mb24j7HfYzaGY9zSB5/swFR5NWp6rW3Sz+d zXJUwBOUP6xDiOvc4xKkZ35eR2f726ee6KXKNklqAHPZQlruPrn60KODxMpjJ675 j+LBI6IL6i6vmJRc/ArFE3+jZpcPFQ0+3Enerm18Bb5UfdwotWrFul/MdhNFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEtVRfMAYA5b85XfsJF+69jzkdNwwHwYDVR0j BBgwFoAU1oHbmQ6QRkKkgK6VRmRjKf9dAWIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OWZiZTA4OC0wZDg0LTQ3ODktYjQwNS0yNWMyZTc2OTM3ZjYvMC9ENjgxREI5OTBF OTA0NjQyQTQ4MEFFOTU0NjY0NjMyOUZGNUQwMTYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDY4MURCOTkwRTkwNDY0MkE0ODBBRTk1NDY2NDYzMjlGRjVE MDE2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzlmYmUwODgtMGQ4NC00Nzg5LWI0 MDUtMjVjMmU3NjkzN2Y2LzAvRDY4MURCOTkwRTkwNDY0MkE0ODBBRTk1NDY2NDYz MjlGRjVEMDE2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC7d3beHYIkW9YC9M+utyZqNR/dXlxUxLIhH xGl2Q1srSH/TyPm6JvYxgKujSvLzfePlhLfPd7h+BKk98KqFNLsUJ15q747Bi+Is PYFOu7Rmv8EXRLsCuDGWRoBv1clKAdLY0hvT8t8B4kw2b4sAzo9c+cmyPcHDQ2te qovrlsYCXP6S1PEDpdRboj8r9gQ1R+TwWA282Lf7G9CMym565/nqXzfDSjZnnyUP yAl9dYUHyy0alVd/UjgF7fvqiOjzTpiXjTXwBmgmAc83g06uyRQPaG1/YTtYQtUr umFCfUmEaeTdsSZtMOOQv2PpRsrVQMN1ufyseMB1xJi2dIgHVjw= -----END CERTIFICATE-----Generated at Mon Mar 2 17:29:41 2026 by rpki-client