$ rpki-client -vvf repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.mft File: 115880D133393FF2D96A5861679B5166AFDB1248.mft (raw, json) Hash identifier: RRfdIAM8DRFdIaPaDwHkzlG8a3C4eUAU+4m/uft1nUk= Subject key identifier: 05:33:06:06:DD:FA:DD:1B:B3:AB:7E:E8:2E:8B:6B:4D:D5:72:9C:BE Authority key identifier: 11:58:80:D1:33:39:3F:F2:D9:6A:58:61:67:9B:51:66:AF:DB:12:48 Certificate issuer: /CN=115880D133393FF2D96A5861679B5166AFDB1248 Certificate serial: 36E138C09FDFDF29D71D3EEF1C19E05FEB76C3C9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/115880D133393FF2D96A5861679B5166AFDB1248.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.mft Manifest number: 0208 Signing time: Sun 01 Mar 2026 11:02:28 +0000 Manifest this update: Sun 01 Mar 2026 10:57:28 +0000 Manifest next update: Wed 04 Mar 2026 11:54:28 +0000 Files and hashes: 1: 3130332e3136312e3133342e302f32342d3234203d3e203539323832.roa (hash: qOgMs8L+7L6hzGSgXrwuDdjZMuQgbmzasXiAjPj9OOI=) 2: 3130332e3136312e3133352e302f32342d3234203d3e20313530343635.roa (hash: 7cjr2Mf8da23M7780NOwEQz2pNcc6LU8HdKHbP3bqXY=) 3: 3130332e3136312e3133352e302f32342d3234203d3e203539323832.roa (hash: PUB3O8b9f0V9upxUQ1vz/Akmef3nw9nhl+zmK2wYTN8=) 4: 3130332e3136312e3133342e302f32342d3234203d3e20313530343635.roa (hash: 1qHo3owsIra2DLunWHCtcR/bz4Z6XiVGZF9DHU6ujCU=) 5: 3130332e3136312e3133352e302f32342d3234203d3e203438343635.roa (hash: mM1uMrTnIIOB9qV95bnMry0CA1H0myomJNfLWIW9li4=) 6: 115880D133393FF2D96A5861679B5166AFDB1248.crl (hash: zAF0rL0wHmIOz2oTrJAvGAv8uK9r29xPgzWJ8fQAJa4=) 7: 3130332e3136312e3133342e302f32342d3234203d3e203438343635.roa (hash: ovzcVNQEy/mX6iGBONz7ezsyibr0pRiafYk0E6VSJek=) 8: 3130332e3136312e3133342e302f32332d3233203d3e203539323832.roa (hash: dsbjoyKjKxL4iwUB8V3WadTuSmVRqe7mRaojqe/cx6g=) 9: 3130332e3136312e3133342e302f32332d3233203d3e20313530343635.roa (hash: VvBdfRoXJdspZfeWpUDljLmbCHnzMGWW+ov3JCtu9WA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.crl rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/115880D133393FF2D96A5861679B5166AFDB1248.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 11:54:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:e1:38:c0:9f:df:df:29:d7:1d:3e:ef:1c:19:e0:5f:eb:76:c3:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=115880D133393FF2D96A5861679B5166AFDB1248 Validity Not Before: Mar 1 10:57:28 2026 GMT Not After : Mar 4 11:54:28 2026 GMT Subject: CN=05330606DDFADD1BB3AB7EE82E8B6B4DD5729CBE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:df:dc:5e:aa:0a:3e:81:a3:0b:50:82:70:f3: f0:3a:3f:f4:f1:6a:a8:bd:40:cc:b3:18:d2:f6:11: ef:15:a0:30:60:00:1f:94:4a:2b:8b:f5:35:0c:f8: 48:70:11:77:7c:54:39:94:b5:da:aa:89:69:53:da: 82:da:95:87:b3:c4:d3:6f:85:be:03:74:18:24:fc: ac:f3:26:c5:f2:e8:85:21:09:aa:e3:16:d8:ee:bc: 00:fd:c0:10:b3:70:b6:62:7b:a5:5a:bf:2d:fb:14: 30:94:67:a3:2f:53:ca:0b:08:9c:63:37:12:dc:00: 57:70:b4:c8:26:e0:68:ed:34:81:a9:af:cd:11:55: e4:61:36:5f:57:7c:5a:a0:eb:58:f3:e9:c2:ab:89: de:c2:d5:cf:8a:f3:d6:42:80:18:a8:7a:a1:75:6b: a6:bf:2f:57:79:40:4e:3b:a0:ea:19:1b:8c:94:4d: 57:57:e9:90:bd:3c:2e:8d:7f:f8:d2:9e:c5:60:97: 0e:72:df:5d:ba:5a:44:c4:90:25:fa:e8:b8:93:75: f7:81:89:8a:e7:dd:09:4b:ee:a0:97:0a:1a:67:c8: ca:1c:fc:ca:45:a8:ea:56:07:73:12:68:07:17:07: fe:99:c1:ba:1e:e4:80:ae:fd:e5:6a:23:69:b6:6a: 73:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:33:06:06:DD:FA:DD:1B:B3:AB:7E:E8:2E:8B:6B:4D:D5:72:9C:BE X509v3 Authority Key Identifier: keyid:11:58:80:D1:33:39:3F:F2:D9:6A:58:61:67:9B:51:66:AF:DB:12:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/115880D133393FF2D96A5861679B5166AFDB1248.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:f6:b2:39:ed:6a:7e:ed:8b:ca:1f:51:25:f0:d6:9a:a0:06: 23:47:82:8f:be:3a:dd:da:5c:19:1c:30:b6:5a:f4:29:94:fb: 9f:1a:96:e0:f2:12:ce:ee:8a:cf:3a:0c:b9:2b:a6:3a:03:17: f9:a6:5e:ad:f4:ca:a1:93:80:29:87:3c:35:76:76:dc:07:13: 51:4e:02:b9:e7:b3:25:8c:37:5a:1f:04:65:62:8f:f1:b4:50: bf:f6:e4:31:86:08:b2:f8:d0:64:77:6f:b1:46:31:71:9f:2a: 4b:71:1f:7d:e5:62:03:35:07:62:1f:25:ba:d9:f2:b0:e4:b2: 25:99:40:e3:d5:69:2d:f6:6d:99:d7:e2:e0:86:82:ac:c2:a8: 1d:eb:53:88:06:0a:97:62:72:ff:4c:14:a4:ee:fd:ed:a2:4e: d1:92:ed:8c:09:cc:e4:c0:93:77:3f:91:bb:11:18:44:06:9e: 71:8d:37:c8:23:ee:c5:be:3b:8b:c1:8f:50:e4:80:26:46:0f: 36:7a:59:34:72:6c:33:4e:e5:fa:7b:51:40:7f:58:0a:70:4d: 54:3d:a8:08:16:e5:e6:a4:4b:47:f7:01:99:f0:c5:de:2c:30: e6:cd:bf:20:d6:dd:2b:76:5c:26:75:3a:65:9e:5d:2c:7a:24: 62:69:b4:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNuE4wJ/f3ynXHT7vHBngX+t2w8kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTE1ODgwRDEzMzM5M0ZGMkQ5NkE1ODYxNjc5QjUxNjZB RkRCMTI0ODAeFw0yNjAzMDExMDU3MjhaFw0yNjAzMDQxMTU0MjhaMDMxMTAvBgNV BAMTKDA1MzMwNjA2RERGQUREMUJCM0FCN0VFODJFOEI2QjRERDU3MjlDQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL39xeqgo+gaMLUIJw8/A6P/Tx aqi9QMyzGNL2Ee8VoDBgAB+USiuL9TUM+EhwEXd8VDmUtdqqiWlT2oLalYezxNNv hb4DdBgk/KzzJsXy6IUhCarjFtjuvAD9wBCzcLZie6Vavy37FDCUZ6MvU8oLCJxj NxLcAFdwtMgm4GjtNIGpr80RVeRhNl9XfFqg61jz6cKrid7C1c+K89ZCgBioeqF1 a6a/L1d5QE47oOoZG4yUTVdX6ZC9PC6Nf/jSnsVglw5y3126WkTEkCX66LiTdfeB iYrn3QlL7qCXChpnyMoc/MpFqOpWB3MSaAcXB/6Zwboe5ICu/eVqI2m2anOVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBTMGBt363Ruzq37oLotrTdVynL4wHwYDVR0j BBgwFoAUEViA0TM5P/LZalhhZ5tRZq/bEkgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MTU2ODAxZi1hNjdiLTQzZGQtOGY2Mi1iN2IwZDYwMzE3YWYvMC8xMTU4ODBEMTMz MzkzRkYyRDk2QTU4NjE2NzlCNTE2NkFGREIxMjQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTE1ODgwRDEzMzM5M0ZGMkQ5NkE1ODYxNjc5QjUxNjZBRkRC MTI0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODE1NjgwMWYtYTY3Yi00M2RkLThm NjItYjdiMGQ2MDMxN2FmLzAvMTE1ODgwRDEzMzM5M0ZGMkQ5NkE1ODYxNjc5QjUx NjZBRkRCMTI0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD/2sjntan7ti8ofUSXw1pqgBiNHgo++Ot3a XBkcMLZa9CmU+58aluDyEs7uis86DLkrpjoDF/mmXq30yqGTgCmHPDV2dtwHE1FO ArnnsyWMN1ofBGVij/G0UL/25DGGCLL40GR3b7FGMXGfKktxH33lYgM1B2IfJbrZ 8rDksiWZQOPVaS32bZnX4uCGgqzCqB3rU4gGCpdicv9MFKTu/e2iTtGS7YwJzOTA k3c/kbsRGEQGnnGNN8gj7sW+O4vBj1DkgCZGDzZ6WTRybDNO5fp7UUB/WApwTVQ9 qAgW5eakS0f3AZnwxd4sMObNvyDW3St2XCZ1OmWeXSx6JGJptOY= -----END CERTIFICATE-----Generated at Mon Mar 2 08:16:25 2026 by rpki-client