$ rpki-client -vvf repo-rpki.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.mft File: 2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.mft (raw, json) Hash identifier: cdXD7D5m44MZYJAY2dlSNSClcOjsX52JQosCoGHJUBE= Subject key identifier: 9A:72:05:9F:C6:76:FA:DB:C4:84:B4:64:63:61:CC:D3:00:99:5C:41 Authority key identifier: 29:76:AD:C7:44:8B:F0:CA:9B:57:DC:D7:88:49:A1:E0:F9:5F:2B:45 Certificate issuer: /CN=2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45 Certificate serial: 4133D5614385AD126C1C96A37D115907BBFB9336 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.cer Subject info access: rsync://repo-rpki.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.mft Manifest number: 010E Signing time: Sat 28 Feb 2026 20:21:07 +0000 Manifest this update: Sat 28 Feb 2026 20:16:07 +0000 Manifest next update: Wed 04 Mar 2026 05:15:07 +0000 Files and hashes: 1: 3136302e32352e3137382e302f32342d3234203d3e20313533303735.roa (hash: iPqRbkelW4W9hPKQlPKh7dVapT99d9ruqUsqOdahl18=) 2: 3136302e32352e3137382e302f32332d3234203d3e20313533303735.roa (hash: FYy5UtFCXZKGCZxosr1oqFzrTkMP7sB8ytiR2n56UZs=) 3: 2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.crl (hash: 7a9yzdvgZe8+Q+cEBgMZWLWjil6s6Wg/sobXaa1og+Q=) 4: 3136302e32352e3137392e302f32342d3234203d3e20313533303735.roa (hash: duCuSDamX6IXj6dNr3R2KvTWuX1Y0Ld9dMd4eFNkJZc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.crl rsync://repo-rpki.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 05:15:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:33:d5:61:43:85:ad:12:6c:1c:96:a3:7d:11:59:07:bb:fb:93:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45 Validity Not Before: Feb 28 20:16:07 2026 GMT Not After : Mar 4 05:15:07 2026 GMT Subject: CN=9A72059FC676FADBC484B4646361CCD300995C41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e7:98:52:97:f1:a6:34:46:69:76:63:2e:2b: 8e:a5:ce:e8:fb:bb:6d:af:74:4e:f0:60:81:9e:91: 56:9b:24:47:f5:c6:67:bf:80:1a:73:e9:ef:e9:0a: 80:1a:ab:8e:a0:30:bf:d7:d3:b6:57:9a:26:06:39: 80:36:8f:81:9e:b3:4f:ee:d8:51:fc:d6:2b:95:2a: ab:ce:78:1e:74:d6:b5:78:cf:f0:28:cb:d4:31:28: 6e:e3:0c:34:ba:ed:52:9d:68:21:9f:26:a0:25:5f: 65:2e:17:b1:f4:c2:ed:72:d5:73:9d:c3:b3:38:ec: f6:5d:26:ed:b0:6e:27:cb:ad:1f:dc:52:cc:01:b8: f3:a7:b9:93:ce:ff:1e:74:30:91:63:cc:16:f6:ed: b9:07:ad:5e:b8:62:97:83:9d:97:b8:3e:9d:95:75: ba:eb:a9:dc:dc:63:55:3e:a0:7a:bc:69:1c:57:34: 34:8f:8c:3d:65:30:66:58:c4:55:8b:08:e2:1e:87: 38:c9:a3:fd:d2:5d:c3:e3:58:0c:24:7b:85:01:86: 60:a7:8f:e0:39:db:ec:26:2d:e4:2a:4a:b5:3f:d8: 22:ce:71:78:59:4f:d0:bd:f3:c4:26:c5:96:20:60: f2:bd:a4:20:80:03:5c:66:bd:26:54:b2:49:77:be: 6a:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:72:05:9F:C6:76:FA:DB:C4:84:B4:64:63:61:CC:D3:00:99:5C:41 X509v3 Authority Key Identifier: keyid:29:76:AD:C7:44:8B:F0:CA:9B:57:DC:D7:88:49:A1:E0:F9:5F:2B:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:5b:2c:36:f1:90:7b:29:93:dc:2b:f6:fd:a5:ae:b6:1f:23: ad:92:7e:7b:b6:f6:79:e8:d0:00:c8:d9:31:ef:17:99:bb:c0: 67:79:20:bd:c1:b1:8c:a2:60:b5:0a:f3:62:c4:ab:b2:13:44: 58:5d:44:ef:90:59:90:ea:91:e3:eb:d8:10:f4:9d:83:e4:ec: 4e:d0:13:a5:c0:d0:f1:cf:89:0d:cf:87:d6:08:be:29:bc:c7: 05:5a:c0:e7:87:4b:db:31:26:ae:69:e7:44:a0:75:e3:cd:96: 33:e8:e4:2b:9a:84:18:9c:27:d6:fb:55:9e:60:e4:64:51:98: e5:a4:31:22:14:95:5f:18:44:82:5a:03:2e:78:01:9f:99:03: bd:7a:db:c0:af:90:e5:3a:c3:29:c0:50:73:4b:2b:1e:70:4b: 4c:4e:58:bb:b3:a4:08:16:55:7e:04:bd:06:0c:09:9b:85:2b: 54:fe:17:e4:07:a7:f1:5d:bd:9a:42:43:c5:cc:fc:e3:50:b5: 66:ce:e6:62:fe:2c:4d:99:d9:89:26:81:6e:bd:7d:85:f1:53: ef:9d:ca:1e:bf:b3:7f:bc:e6:02:6c:e7:0c:81:cf:63:be:bc: f7:d2:96:24:84:38:68:82:69:a5:7d:28:57:b8:b7:bd:5d:79: 6a:fe:7d:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQTPVYUOFrRJsHJajfRFZB7v7kzYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk3NkFEQzc0NDhCRjBDQTlCNTdEQ0Q3ODg0OUExRTBG OTVGMkI0NTAeFw0yNjAyMjgyMDE2MDdaFw0yNjAzMDQwNTE1MDdaMDMxMTAvBgNV BAMTKDlBNzIwNTlGQzY3NkZBREJDNDg0QjQ2NDYzNjFDQ0QzMDA5OTVDNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi55hSl/GmNEZpdmMuK46lzuj7 u22vdE7wYIGekVabJEf1xme/gBpz6e/pCoAaq46gML/X07ZXmiYGOYA2j4Ges0/u 2FH81iuVKqvOeB501rV4z/Aoy9QxKG7jDDS67VKdaCGfJqAlX2UuF7H0wu1y1XOd w7M47PZdJu2wbifLrR/cUswBuPOnuZPO/x50MJFjzBb27bkHrV64YpeDnZe4Pp2V dbrrqdzcY1U+oHq8aRxXNDSPjD1lMGZYxFWLCOIehzjJo/3SXcPjWAwke4UBhmCn j+A52+wmLeQqSrU/2CLOcXhZT9C988QmxZYgYPK9pCCAA1xmvSZUskl3vmovAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmnIFn8Z2+tvEhLRkY2HM0wCZXEEwHwYDVR0j BBgwFoAUKXatx0SL8MqbV9zXiEmh4PlfK0UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 N2M0MzJlMC1kYzNlLTQyY2MtYmNjMC02MjliMTYyMDZjOWEvMC8yOTc2QURDNzQ0 OEJGMENBOUI1N0RDRDc4ODQ5QTFFMEY5NUYyQjQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjk3NkFEQzc0NDhCRjBDQTlCNTdEQ0Q3ODg0OUExRTBGOTVG MkI0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODdjNDMyZTAtZGMzZS00MmNjLWJj YzAtNjI5YjE2MjA2YzlhLzAvMjk3NkFEQzc0NDhCRjBDQTlCNTdEQ0Q3ODg0OUEx RTBGOTVGMkI0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE9bLDbxkHspk9wr9v2lrrYfI62Sfnu29nno 0ADI2THvF5m7wGd5IL3BsYyiYLUK82LEq7ITRFhdRO+QWZDqkePr2BD0nYPk7E7Q E6XA0PHPiQ3Ph9YIvim8xwVawOeHS9sxJq5p50SgdePNljPo5CuahBicJ9b7VZ5g 5GRRmOWkMSIUlV8YRIJaAy54AZ+ZA71628CvkOU6wynAUHNLKx5wS0xOWLuzpAgW VX4EvQYMCZuFK1T+F+QHp/FdvZpCQ8XM/ONQtWbO5mL+LE2Z2YkmgW69fYXxU++d yh6/s3+85gJs5wyBz2O+vPfSliSEOGiCaaV9KFe4t71deWr+fZU= -----END CERTIFICATE-----Generated at Mon Mar 2 09:49:46 2026 by rpki-client