$ rpki-client -vvf repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.mft File: CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.mft (raw, json) Hash identifier: CumPHkLbMNnB9cza6j9C2X+oMmR3XDEMUpZgRC+etsg= Subject key identifier: CD:C7:09:74:79:BB:FA:40:B5:A5:D4:1D:03:1D:E9:1D:34:7C:8B:65 Authority key identifier: CD:7C:26:7C:58:AE:2F:51:81:7F:AA:52:02:B0:BF:91:C8:4E:CE:D4 Certificate issuer: /CN=CD7C267C58AE2F51817FAA5202B0BF91C84ECED4 Certificate serial: 1EB0333D3715150BDD6E7A8C3BA4A24AC21A3267 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.mft Manifest number: 03C1 Signing time: Sun 01 Mar 2026 11:41:37 +0000 Manifest this update: Sun 01 Mar 2026 11:36:37 +0000 Manifest next update: Wed 04 Mar 2026 21:57:37 +0000 Files and hashes: 1: CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.crl (hash: Fq2XJcJTyaCbajhCOC7sonYslfu7LXxVsmejY7TKabs=) 2: 3130332e3137302e3233342e302f32332d3234203d3e20313338383535.roa (hash: IxN9svLI+xbQZepLoYvevJgYJZXm9f4dHwY2r7LPXIw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.crl rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 21:57:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:b0:33:3d:37:15:15:0b:dd:6e:7a:8c:3b:a4:a2:4a:c2:1a:32:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD7C267C58AE2F51817FAA5202B0BF91C84ECED4 Validity Not Before: Mar 1 11:36:37 2026 GMT Not After : Mar 4 21:57:37 2026 GMT Subject: CN=CDC7097479BBFA40B5A5D41D031DE91D347C8B65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:9c:f1:48:1f:98:31:ee:96:62:1d:63:a4:2f: 19:90:ad:17:e6:d1:c3:de:b5:2a:fa:67:04:ac:f2: 8a:54:33:31:8d:5d:30:b1:93:3e:67:a7:0c:d8:fd: 2a:05:ba:2a:6d:68:58:6a:c7:19:54:5a:9b:2f:88: 5d:3e:d8:36:ad:53:a1:b8:a6:77:53:c9:6c:5c:a7: 4e:52:46:19:29:9c:2f:ec:97:e0:43:78:03:30:7c: 6f:e9:78:55:51:b6:57:17:14:6d:1f:5c:c6:9e:22: 36:98:f5:d9:ca:13:e8:b7:74:b4:c8:0c:1c:83:58: cb:4c:13:ed:b4:b7:73:40:8d:c3:6c:6c:8f:75:57: 95:0f:cf:46:30:84:26:0f:dc:6a:6a:25:c1:1a:40: eb:d8:ec:d2:2a:cd:c7:8e:70:66:f4:e1:0b:57:21: 33:f2:43:b3:6c:7d:36:44:10:8f:a3:14:f0:e8:62: 75:09:fc:3c:94:b3:46:b9:65:05:03:6e:3f:7f:25: cc:7d:98:1b:2c:11:72:4c:44:a3:05:2e:d5:ee:24: cb:38:6b:0e:87:40:be:3c:2b:e4:a8:10:a5:05:1a: 0e:ff:ee:4f:50:d7:88:6e:a8:52:fc:13:4c:6a:f2: a8:57:b2:cc:da:c1:f9:2e:16:9a:21:62:fc:c9:94: f2:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:C7:09:74:79:BB:FA:40:B5:A5:D4:1D:03:1D:E9:1D:34:7C:8B:65 X509v3 Authority Key Identifier: keyid:CD:7C:26:7C:58:AE:2F:51:81:7F:AA:52:02:B0:BF:91:C8:4E:CE:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:2c:0d:29:0f:f2:72:fd:38:34:32:2a:67:66:d0:2b:fa:34: e9:cc:37:b5:1c:c3:77:14:17:a8:e7:c0:b6:0b:a4:f9:cd:26: 63:6a:36:be:22:ff:df:fd:43:f8:5a:32:2a:e2:5c:76:98:94: 47:fb:01:c9:d2:29:92:c6:a9:7c:15:89:27:fe:3d:90:5f:ae: c3:77:75:32:64:03:e6:77:f1:97:11:da:8f:2b:d4:03:f9:b8: 80:f9:8b:9c:d3:c1:20:e0:b3:95:1e:f8:6f:fa:48:65:9b:89: 6c:d5:5b:d2:2d:69:fb:71:9a:c6:b9:28:09:fa:42:53:b7:2d: 7c:24:7e:03:e9:3d:8d:ec:47:31:9f:e5:cc:62:45:55:7c:80: 4b:31:4a:2e:a8:ce:3d:3d:24:d4:45:ea:d1:c8:9f:8b:1c:9e: 57:35:cc:ff:e2:bb:b0:da:2f:d5:e4:b4:08:c5:ac:41:20:25: 7a:36:d9:fa:d1:87:e3:88:e3:5a:ff:55:a2:80:ce:89:e0:d4: 5c:1a:5c:ca:d9:86:5a:c5:08:d2:c5:39:0b:ff:3e:44:fb:18: b6:74:1b:e5:1a:72:07:25:15:b2:aa:1e:a2:31:e3:94:49:e2: 3d:4a:21:be:3d:16:b3:f3:e9:7b:19:c1:1a:d6:31:a6:ef:62: da:ab:6d:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHrAzPTcVFQvdbnqMO6SiSsIaMmcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q3QzI2N0M1OEFFMkY1MTgxN0ZBQTUyMDJCMEJGOTFD ODRFQ0VENDAeFw0yNjAzMDExMTM2MzdaFw0yNjAzMDQyMTU3MzdaMDMxMTAvBgNV BAMTKENEQzcwOTc0NzlCQkZBNDBCNUE1RDQxRDAzMURFOTFEMzQ3QzhCNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsnPFIH5gx7pZiHWOkLxmQrRfm 0cPetSr6ZwSs8opUMzGNXTCxkz5npwzY/SoFuiptaFhqxxlUWpsviF0+2DatU6G4 pndTyWxcp05SRhkpnC/sl+BDeAMwfG/peFVRtlcXFG0fXMaeIjaY9dnKE+i3dLTI DByDWMtME+20t3NAjcNsbI91V5UPz0YwhCYP3GpqJcEaQOvY7NIqzceOcGb04QtX ITPyQ7NsfTZEEI+jFPDoYnUJ/DyUs0a5ZQUDbj9/Jcx9mBssEXJMRKMFLtXuJMs4 aw6HQL48K+SoEKUFGg7/7k9Q14huqFL8E0xq8qhXsszawfkuFpohYvzJlPLPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzccJdHm7+kC1pdQdAx3pHTR8i2UwHwYDVR0j BBgwFoAUzXwmfFiuL1GBf6pSArC/kchOztQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MTQ0ZDU3Ni0zODE4LTQ5ZDYtODY2Mi1mOGRmODlhYjI4NjMvMC9DRDdDMjY3QzU4 QUUyRjUxODE3RkFBNTIwMkIwQkY5MUM4NEVDRUQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0Q3QzI2N0M1OEFFMkY1MTgxN0ZBQTUyMDJCMEJGOTFDODRF Q0VENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODE0NGQ1NzYtMzgxOC00OWQ2LTg2 NjItZjhkZjg5YWIyODYzLzAvQ0Q3QzI2N0M1OEFFMkY1MTgxN0ZBQTUyMDJCMEJG OTFDODRFQ0VENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALIsDSkP8nL9ODQyKmdm0Cv6NOnMN7Ucw3cU F6jnwLYLpPnNJmNqNr4i/9/9Q/haMiriXHaYlEf7AcnSKZLGqXwViSf+PZBfrsN3 dTJkA+Z38ZcR2o8r1AP5uID5i5zTwSDgs5Ue+G/6SGWbiWzVW9Itaftxmsa5KAn6 QlO3LXwkfgPpPY3sRzGf5cxiRVV8gEsxSi6ozj09JNRF6tHIn4scnlc1zP/iu7Da L9XktAjFrEEgJXo22frRh+OI41r/VaKAzong1FwaXMrZhlrFCNLFOQv/PkT7GLZ0 G+UacgclFbKqHqIx45RJ4j1KIb49FrPz6XsZwRrWMabvYtqrbQU= -----END CERTIFICATE-----Generated at Mon Mar 2 13:53:21 2026 by rpki-client