$ rpki-client -vvf repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.mft File: 9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.mft (raw, json) Hash identifier: CsuN8m7AqBINYr0ENlvVRGP5CpnQ95zVluTjtUATzXs= Subject key identifier: CD:2D:EE:57:1F:E3:BA:22:E5:6B:A7:54:C3:13:6B:60:DC:45:20:40 Authority key identifier: 98:02:D7:CD:84:EC:A3:7A:2E:C2:D6:37:8D:CA:35:B1:11:3F:5D:D1 Certificate issuer: /CN=9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1 Certificate serial: 5ACBF33116301C465C1AC9AD5EC6CBF47B3EED72 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.mft Manifest number: 0122 Signing time: Sat 28 Feb 2026 14:31:18 +0000 Manifest this update: Sat 28 Feb 2026 14:26:18 +0000 Manifest next update: Tue 03 Mar 2026 16:12:18 +0000 Files and hashes: 1: 3135372e31302e36362e302f32342d3234203d3e20313532333531.roa (hash: j5FofZXIJd4POcdB4ESAE0x/xLx8UGEYcWSUY/DWNHw=) 2: 9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.crl (hash: nfGQG3GAcpp89DU0vkfy0I61Ph5+hdv3lB4GfS8yJjU=) 3: 3135372e31302e36372e302f32342d3234203d3e20313532333531.roa (hash: EqIrxJr5cRLahMi6fEAneUU1VnH8z0/jf+Oj0RPBMWg=) 4: 3135372e31302e36362e302f32332d3234203d3e20313532333531.roa (hash: 2ReMekYvbev7jjxFECsJnqLr+wMK4uSY0sQzIGWAR3Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.crl rsync://repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 16:12:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:cb:f3:31:16:30:1c:46:5c:1a:c9:ad:5e:c6:cb:f4:7b:3e:ed:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1 Validity Not Before: Feb 28 14:26:18 2026 GMT Not After : Mar 3 16:12:18 2026 GMT Subject: CN=CD2DEE571FE3BA22E56BA754C3136B60DC452040 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:40:7b:6e:2a:32:62:ff:f8:81:85:6f:10:0a: 59:80:d7:d0:da:e6:ad:45:7b:2c:d2:71:3d:f9:53: 51:58:aa:33:3a:ab:32:12:86:50:c4:26:5e:0e:07: b7:2f:85:08:c1:df:27:76:e0:ee:23:6f:93:8e:bd: 06:52:c0:7b:49:eb:3f:61:28:a6:65:02:a9:46:44: 49:6b:6e:95:7b:e1:01:60:79:a6:7c:ed:a4:77:1e: 23:c4:bb:18:ba:da:e4:78:e1:14:db:47:70:7c:03: b2:de:59:13:43:21:53:5f:2c:58:15:c4:fc:ac:84: b5:56:ec:11:dc:52:80:81:95:ad:66:a0:82:84:c1: 3e:5c:84:8c:b7:aa:fa:8b:2e:36:f0:9f:0e:fd:56: 2a:82:64:92:74:4c:7d:44:0d:1b:9d:0a:ee:dd:43: 3d:b2:66:e1:2b:4e:72:b3:5d:61:f6:76:46:bd:f3: 12:56:be:da:ed:31:c7:95:12:fd:43:f8:ec:b4:96: 94:57:58:73:6d:49:a3:50:ed:ee:4a:f1:93:df:64: a9:a5:6b:41:32:7f:65:7f:b5:c8:3d:04:f5:82:a0: c8:50:92:ae:f7:0a:0d:04:ed:2b:04:fa:28:3b:e6: ba:63:8a:02:87:24:59:3a:f5:30:f8:b0:20:da:3d: 2d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:2D:EE:57:1F:E3:BA:22:E5:6B:A7:54:C3:13:6B:60:DC:45:20:40 X509v3 Authority Key Identifier: keyid:98:02:D7:CD:84:EC:A3:7A:2E:C2:D6:37:8D:CA:35:B1:11:3F:5D:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:db:30:fb:0a:6f:5f:5d:54:86:06:ec:5a:a0:39:52:bd:cb: 37:1f:25:27:84:da:b8:bc:26:48:2a:df:e1:96:d5:35:76:c6: a3:c0:27:27:2c:c9:ca:19:b0:99:b7:45:21:c3:e2:82:aa:58: 74:c2:36:ff:2e:9f:61:17:25:de:36:cc:76:73:1f:18:3f:a6: fe:ab:18:28:73:03:49:e3:16:45:2c:3d:f3:54:28:1d:3a:08: a8:40:47:ce:3c:e7:25:90:53:27:b8:5d:ea:cb:ee:91:db:33: 71:27:81:05:23:d0:fc:17:9b:1d:bb:c4:45:2d:9d:3d:6b:a1: 70:9e:4a:4b:ca:7f:20:e7:89:2b:e2:eb:af:91:0c:ff:ee:f8: 4a:36:36:ea:9a:95:55:10:d2:71:87:27:d6:06:96:ef:86:63: 85:b9:fb:4d:0e:89:24:cd:8f:2c:9c:fa:5d:bc:a6:4e:5c:de: cd:8c:d1:69:a9:c3:f2:9b:74:96:35:71:43:b8:9d:eb:02:8c: 38:19:c6:21:27:5d:28:70:e3:d3:8b:c9:ec:46:83:70:ac:a0: b3:f1:cb:5d:39:71:bb:81:40:d3:28:25:bb:37:d1:ad:be:b9: 69:c3:4d:26:ad:10:80:c0:25:99:5d:70:f2:7a:7d:af:a6:83: fa:9c:9f:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWsvzMRYwHEZcGsmtXsbL9Hs+7XIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTgwMkQ3Q0Q4NEVDQTM3QTJFQzJENjM3OERDQTM1QjEx MTNGNUREMTAeFw0yNjAyMjgxNDI2MThaFw0yNjAzMDMxNjEyMThaMDMxMTAvBgNV BAMTKENEMkRFRTU3MUZFM0JBMjJFNTZCQTc1NEMzMTM2QjYwREM0NTIwNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsQHtuKjJi//iBhW8QClmA19Da 5q1FeyzScT35U1FYqjM6qzIShlDEJl4OB7cvhQjB3yd24O4jb5OOvQZSwHtJ6z9h KKZlAqlGRElrbpV74QFgeaZ87aR3HiPEuxi62uR44RTbR3B8A7LeWRNDIVNfLFgV xPyshLVW7BHcUoCBla1moIKEwT5chIy3qvqLLjbwnw79ViqCZJJ0TH1EDRudCu7d Qz2yZuErTnKzXWH2dka98xJWvtrtMceVEv1D+Oy0lpRXWHNtSaNQ7e5K8ZPfZKml a0Eyf2V/tcg9BPWCoMhQkq73Cg0E7SsE+ig75rpjigKHJFk69TD4sCDaPS1LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzS3uVx/juiLla6dUwxNrYNxFIEAwHwYDVR0j BBgwFoAUmALXzYTso3ouwtY3jco1sRE/XdEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MGMyNjZlNi0wYjg0LTQzMWYtOWU3NC0wNmQzZDkzZTk3MDQvMC85ODAyRDdDRDg0 RUNBMzdBMkVDMkQ2Mzc4RENBMzVCMTExM0Y1REQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTgwMkQ3Q0Q4NEVDQTM3QTJFQzJENjM3OERDQTM1QjExMTNG NUREMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODBjMjY2ZTYtMGI4NC00MzFmLTll NzQtMDZkM2Q5M2U5NzA0LzAvOTgwMkQ3Q0Q4NEVDQTM3QTJFQzJENjM3OERDQTM1 QjExMTNGNUREMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACTbMPsKb19dVIYG7FqgOVK9yzcfJSeE2ri8 Jkgq3+GW1TV2xqPAJycsycoZsJm3RSHD4oKqWHTCNv8un2EXJd42zHZzHxg/pv6r GChzA0njFkUsPfNUKB06CKhAR8485yWQUye4XerL7pHbM3EngQUj0PwXmx27xEUt nT1roXCeSkvKfyDniSvi66+RDP/u+Eo2NuqalVUQ0nGHJ9YGlu+GY4W5+00OiSTN jyyc+l28pk5c3s2M0Wmpw/KbdJY1cUO4nesCjDgZxiEnXShw49OLyexGg3CsoLPx y105cbuBQNMoJbs30a2+uWnDTSatEIDAJZldcPJ6fa+mg/qcn34= -----END CERTIFICATE-----Generated at Mon Mar 2 11:21:28 2026 by rpki-client