$ rpki-client -vvf repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft File: D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft (raw, json) Hash identifier: JxYEiHRdTCAK298rGHGnMcHXvzIXxir2OvzAXIT9KpU= Subject key identifier: 99:BA:69:24:1A:7C:98:5F:BB:28:51:36:A9:86:47:4D:93:01:4F:8E Authority key identifier: D1:CE:4E:F9:10:CA:B7:84:EF:29:3D:26:D9:83:A9:2F:CB:3A:34:28 Certificate issuer: /CN=D1CE4EF910CAB784EF293D26D983A92FCB3A3428 Certificate serial: 4B2027C7B34FA21ADC3E074F4D773B0341077D37 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.cer Subject info access: rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft Manifest number: 0392 Signing time: Sun 01 Mar 2026 15:31:04 +0000 Manifest this update: Sun 01 Mar 2026 15:26:04 +0000 Manifest next update: Wed 04 Mar 2026 15:41:04 +0000 Files and hashes: 1: 3130332e38322e3138332e302f32342d3234203d3e203535303032.roa (hash: fgpsoyfDzLyMcnx59ChelAzY0mutvwsLTeGKdYegbvA=) 2: D1CE4EF910CAB784EF293D26D983A92FCB3A3428.crl (hash: 61LtCLfgmkQJ8UU0wbuqY+MZVBCLWEOJCoAlJJOt9w8=) 3: 3130332e38322e3138312e302f32342d3234203d3e20313336303631.roa (hash: JBTT95tgZh/X/QugtDrHY7+xX4nEcgcpicxDVZKVxRA=) 4: 3130332e38322e3138302e302f32332d3233203d3e203535303032.roa (hash: +FTF4nfRYC5wsN7EuNxSdS7IKhjhi49gS7F0z0AapdE=) 5: 3130332e38322e3138302e302f32342d3234203d3e20313336303631.roa (hash: J0EZhqosWRvlsFynFqUSuIzOBFwrUDGcW8i8aa6gdz0=) 6: 3130332e38322e3138322e302f32342d3234203d3e203535303032.roa (hash: TOlmToT6ArG31254ugnepFlJm7GRal9sFalZQtBB9ZU=) 7: 3130332e38322e3138332e302f32342d3234203d3e20313336303631.roa (hash: jcnGTwMxragJZygMI7x8GrOzTkyTrpwEdMq5rorWZ5w=) 8: 3130332e38322e3138322e302f32342d3234203d3e20313336303631.roa (hash: WjIjT3NjVVlR5hMapPhqI5pb0J0MFGcIoHXnqSGNGKM=) 9: 3130332e38322e3138302e302f32332d3233203d3e20313336303631.roa (hash: aFm1cy3NmwA8t2HY8uThbjC+zS/PKRo7I8s9/bpxDts=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.crl rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 15:41:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:20:27:c7:b3:4f:a2:1a:dc:3e:07:4f:4d:77:3b:03:41:07:7d:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1CE4EF910CAB784EF293D26D983A92FCB3A3428 Validity Not Before: Mar 1 15:26:04 2026 GMT Not After : Mar 4 15:41:04 2026 GMT Subject: CN=99BA69241A7C985FBB285136A986474D93014F8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3d:56:94:ee:6f:f6:e2:fe:b9:1a:4b:c3:ef: a5:ce:52:49:1d:4c:6a:bf:e5:d6:66:7f:91:2c:1d: b5:5a:c1:b0:37:c0:5d:fc:0a:14:b9:75:f2:ab:c7: 6a:e0:10:0d:87:85:18:e2:99:c5:5d:45:1d:7e:c2: 2b:38:20:cc:a4:d6:3d:1a:3e:0f:31:d8:0e:8d:1d: 48:55:89:6a:e6:57:70:99:2d:d8:2a:8c:a2:23:5b: a1:f4:be:a1:79:56:42:97:25:3e:15:c0:82:9b:dc: 6b:e5:d4:81:42:2d:4d:e3:db:c1:77:f9:7c:e4:5f: 25:90:fe:7b:ee:15:3e:be:1a:dd:06:2b:90:b0:20: 05:64:08:b7:6c:9f:ab:76:87:87:94:c4:ed:d6:ae: 9f:51:f3:9d:ff:b8:d6:2e:d4:46:53:13:fb:77:d9: 8a:7d:3f:38:c8:f1:ad:7c:46:75:25:66:ea:69:01: 4d:4a:0b:40:0f:08:31:94:f1:42:fa:e2:40:7b:d5: f6:d6:aa:f5:90:2b:7a:d4:e2:b1:e1:70:c6:6c:2f: 22:1f:65:44:80:6b:fd:6b:83:fa:0c:49:42:89:02: 87:7f:00:b7:62:f6:0f:1d:a6:d8:21:8c:2a:b4:0b: d8:bf:a0:d2:e7:76:1f:48:bf:b4:72:73:df:d1:8b: 68:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:BA:69:24:1A:7C:98:5F:BB:28:51:36:A9:86:47:4D:93:01:4F:8E X509v3 Authority Key Identifier: keyid:D1:CE:4E:F9:10:CA:B7:84:EF:29:3D:26:D9:83:A9:2F:CB:3A:34:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:3d:3b:23:0f:be:c2:d1:6d:c4:72:b8:61:75:eb:46:da:e2: 23:7c:c0:58:36:df:6a:8e:2a:df:dd:a5:16:0e:f7:01:57:d7: df:81:d6:f1:24:2b:c6:de:af:46:2f:8a:22:30:0c:fd:ab:b8: 08:57:e5:99:c1:fb:1c:59:67:0e:65:8c:50:09:3a:78:30:bb: e9:5d:a1:02:7e:d5:6f:af:bf:5b:06:01:8e:ce:ff:aa:45:dd: f7:c5:4a:c7:22:86:4f:b2:b4:aa:1b:2c:77:ea:c7:51:27:83: 8a:9e:08:2b:92:9d:a5:c4:6e:9f:38:d2:a3:bc:cc:99:5e:dc: ba:e8:9d:0f:64:df:15:ce:db:93:4c:48:be:43:e4:93:b5:6f: 81:da:8e:57:a7:d2:a5:3a:ed:1e:56:fb:8c:78:fc:67:90:80: 6d:da:77:6d:c2:46:9f:6f:3e:6f:18:f3:32:9b:53:8b:86:a9: f5:39:aa:6a:cc:b4:ea:f6:3b:9d:61:f3:62:d9:ba:0d:06:e9: 5f:16:61:b0:95:bf:eb:47:b8:73:00:af:00:09:20:44:c4:fd: 01:00:27:89:1b:61:92:73:b9:87:4b:17:af:48:a1:f8:6c:8f: 04:01:9a:c7:a9:95:73:8b:b7:44:15:65:2e:71:dd:cc:d3:2e: 3a:03:7f:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSyAnx7NPohrcPgdPTXc7A0EHfTcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDFDRTRFRjkxMENBQjc4NEVGMjkzRDI2RDk4M0E5MkZD QjNBMzQyODAeFw0yNjAzMDExNTI2MDRaFw0yNjAzMDQxNTQxMDRaMDMxMTAvBgNV BAMTKDk5QkE2OTI0MUE3Qzk4NUZCQjI4NTEzNkE5ODY0NzREOTMwMTRGOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqPVaU7m/24v65GkvD76XOUkkd TGq/5dZmf5EsHbVawbA3wF38ChS5dfKrx2rgEA2HhRjimcVdRR1+wis4IMyk1j0a Pg8x2A6NHUhViWrmV3CZLdgqjKIjW6H0vqF5VkKXJT4VwIKb3Gvl1IFCLU3j28F3 +XzkXyWQ/nvuFT6+Gt0GK5CwIAVkCLdsn6t2h4eUxO3Wrp9R853/uNYu1EZTE/t3 2Yp9PzjI8a18RnUlZuppAU1KC0APCDGU8UL64kB71fbWqvWQK3rU4rHhcMZsLyIf ZUSAa/1rg/oMSUKJAod/ALdi9g8dptghjCq0C9i/oNLndh9Iv7Ryc9/Ri2gHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmbppJBp8mF+7KFE2qYZHTZMBT44wHwYDVR0j BBgwFoAU0c5O+RDKt4TvKT0m2YOpL8s6NCgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MDc1OGYxNS01ZGU4LTQ4N2QtOTk0NS1jM2VhMjA3ZTQ0YWQvMC9EMUNFNEVGOTEw Q0FCNzg0RUYyOTNEMjZEOTgzQTkyRkNCM0EzNDI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDFDRTRFRjkxMENBQjc4NEVGMjkzRDI2RDk4M0E5MkZDQjNB MzQyOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODA3NThmMTUtNWRlOC00ODdkLTk5 NDUtYzNlYTIwN2U0NGFkLzAvRDFDRTRFRjkxMENBQjc4NEVGMjkzRDI2RDk4M0E5 MkZDQjNBMzQyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACc9OyMPvsLRbcRyuGF160ba4iN8wFg232qO Kt/dpRYO9wFX19+B1vEkK8ber0YviiIwDP2ruAhX5ZnB+xxZZw5ljFAJOngwu+ld oQJ+1W+vv1sGAY7O/6pF3ffFSscihk+ytKobLHfqx1Eng4qeCCuSnaXEbp840qO8 zJle3LronQ9k3xXO25NMSL5D5JO1b4Hajlen0qU67R5W+4x4/GeQgG3ad23CRp9v Pm8Y8zKbU4uGqfU5qmrMtOr2O51h82LZug0G6V8WYbCVv+tHuHMArwAJIETE/QEA J4kbYZJzuYdLF69IofhsjwQBmseplXOLt0QVZS5x3czTLjoDf+I= -----END CERTIFICATE-----Generated at Mon Mar 2 17:10:23 2026 by rpki-client