$ rpki-client -vvf repo-rpki.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/1160709118182E564A6D9E250FF5000EFA5166A5.mft File: 1160709118182E564A6D9E250FF5000EFA5166A5.mft (raw, json) Hash identifier: DWetAx8VwhMhwmZf2cp2t+KPnIWbSxlh12fCvJ9PySM= Subject key identifier: D2:CE:A5:BC:D2:91:64:58:E3:66:26:E4:20:19:63:5D:D1:24:BF:8B Authority key identifier: 11:60:70:91:18:18:2E:56:4A:6D:9E:25:0F:F5:00:0E:FA:51:66:A5 Certificate issuer: /CN=1160709118182E564A6D9E250FF5000EFA5166A5 Certificate serial: 43A4120F9FD097D2C61034ABBFCBA2DF0AC2D816 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1160709118182E564A6D9E250FF5000EFA5166A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/1160709118182E564A6D9E250FF5000EFA5166A5.mft Manifest number: 01E2 Signing time: Mon 02 Mar 2026 09:41:28 +0000 Manifest this update: Mon 02 Mar 2026 09:36:28 +0000 Manifest next update: Thu 05 Mar 2026 12:19:28 +0000 Files and hashes: 1: 3130332e38362e3131362e302f32342d3234203d3e20313530353532.roa (hash: /s0/dWuKDJ5KcMV4TcCY6m4gQJ9kiuXe231l853zFcE=) 2: 3130332e38362e3131362e302f32332d3233203d3e20313530353532.roa (hash: gK1xwa1IRVWzH9jnWujpMkoyIuM1Zd6H+mqdxxClcIU=) 3: 3130332e38362e3131372e302f32342d3234203d3e20313530353532.roa (hash: BXImbGD0gQ/N6bJsY3EceoekzYvvly2E1FsJUbVpe+g=) 4: 1160709118182E564A6D9E250FF5000EFA5166A5.crl (hash: 5HCrg3WUX/GVxaAehILNH1OzLQcjoVpiTdMkjZn6X3s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/1160709118182E564A6D9E250FF5000EFA5166A5.crl rsync://repo-rpki.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/1160709118182E564A6D9E250FF5000EFA5166A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1160709118182E564A6D9E250FF5000EFA5166A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:a4:12:0f:9f:d0:97:d2:c6:10:34:ab:bf:cb:a2:df:0a:c2:d8:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1160709118182E564A6D9E250FF5000EFA5166A5 Validity Not Before: Mar 2 09:36:28 2026 GMT Not After : Mar 5 12:19:28 2026 GMT Subject: CN=D2CEA5BCD2916458E36626E42019635DD124BF8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:11:d0:e2:3a:c7:c5:2e:21:47:2f:5f:51:07: f9:da:16:8f:e7:42:fd:f3:40:ba:42:3d:7f:81:b0: fb:e5:ef:9e:2f:f5:94:36:f5:4c:fc:c1:a5:f6:05: c5:72:36:ca:44:87:25:cb:db:7d:59:65:6d:cf:7e: 28:21:b0:ce:00:65:14:bb:01:d7:c9:06:8f:d3:bf: d5:8d:34:d6:69:2c:33:8c:14:f9:9c:d8:14:bd:8b: 1a:7b:73:c5:de:6a:f0:35:5c:1b:cf:8c:15:54:53: b3:83:4c:ea:7d:c6:6d:d1:7d:1a:db:0f:70:1b:d6: 7c:d6:1e:40:4b:d4:78:15:0b:94:c5:32:78:bf:9d: 66:43:d3:bf:40:8c:f1:6c:01:41:26:b6:15:52:78: fd:01:da:bb:70:e5:83:7e:c7:4f:29:22:dd:5e:e3: a0:f3:57:2f:d0:c5:00:e9:07:f8:c9:28:14:9a:de: dc:89:55:37:11:84:9f:60:f3:3a:26:eb:1e:d1:17: 1f:73:f8:2a:e6:39:45:a1:c4:d9:bb:37:d5:15:cb: 5f:b1:b9:e4:e9:75:94:9e:eb:2a:f3:48:6b:4a:78: 9f:8e:39:e2:12:21:7c:46:b1:74:21:7f:da:cb:68: 92:b4:a1:e2:15:45:cc:b7:ec:23:3d:fe:0e:3a:d7: 25:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:CE:A5:BC:D2:91:64:58:E3:66:26:E4:20:19:63:5D:D1:24:BF:8B X509v3 Authority Key Identifier: keyid:11:60:70:91:18:18:2E:56:4A:6D:9E:25:0F:F5:00:0E:FA:51:66:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/1160709118182E564A6D9E250FF5000EFA5166A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1160709118182E564A6D9E250FF5000EFA5166A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/1160709118182E564A6D9E250FF5000EFA5166A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:42:e4:36:01:c6:65:89:49:c0:3e:fd:f9:27:8a:d1:00:64: 5a:ba:43:09:fc:83:20:54:e7:83:19:fd:75:7b:39:d0:d8:a1: 9e:96:5c:13:3e:2b:29:9f:d5:8d:f8:f8:2d:7c:ad:fd:10:63: 67:e7:b6:32:30:a6:13:31:17:6b:84:e8:5a:c1:cf:22:1d:30: 0a:fb:35:c9:c2:0c:e1:89:1c:a9:6e:3e:0f:2f:ff:54:da:08: 57:75:ce:7a:ef:dc:cd:4e:9b:9f:18:47:36:fd:d2:07:b7:43: 48:ab:4a:2a:6c:e7:e5:e6:56:65:15:e3:13:b2:b7:a6:ce:d1: 46:ae:6f:31:2c:7b:8f:60:bb:35:e9:c6:f3:5f:f5:71:fa:a8: 84:5f:c3:57:22:0c:06:f0:46:fa:d6:cf:c7:06:d7:57:6c:34: 06:0c:0a:ad:4c:ce:e8:2b:5e:ce:d8:5c:4f:74:86:2e:62:2e: 5f:3b:eb:ab:45:da:7c:0e:65:c3:a8:dc:e6:c5:2a:30:9e:f5: 40:24:22:78:af:c8:d5:4a:81:08:56:e1:92:90:ed:45:47:1f: ac:36:4f:86:69:75:21:5c:b6:d0:d7:87:07:8f:33:c1:ab:36: 53:d1:b3:87:10:fa:c4:6f:99:38:8a:74:1c:1e:76:35:59:e4: be:aa:27:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ6QSD5/Ql9LGEDSrv8ui3wrC2BYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTE2MDcwOTExODE4MkU1NjRBNkQ5RTI1MEZGNTAwMEVG QTUxNjZBNTAeFw0yNjAzMDIwOTM2MjhaFw0yNjAzMDUxMjE5MjhaMDMxMTAvBgNV BAMTKEQyQ0VBNUJDRDI5MTY0NThFMzY2MjZFNDIwMTk2MzVERDEyNEJGOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDEdDiOsfFLiFHL19RB/naFo/n Qv3zQLpCPX+BsPvl754v9ZQ29Uz8waX2BcVyNspEhyXL231ZZW3PfighsM4AZRS7 AdfJBo/Tv9WNNNZpLDOMFPmc2BS9ixp7c8XeavA1XBvPjBVUU7ODTOp9xm3RfRrb D3Ab1nzWHkBL1HgVC5TFMni/nWZD079AjPFsAUEmthVSeP0B2rtw5YN+x08pIt1e 46DzVy/QxQDpB/jJKBSa3tyJVTcRhJ9g8zom6x7RFx9z+CrmOUWhxNm7N9UVy1+x ueTpdZSe6yrzSGtKeJ+OOeISIXxGsXQhf9rLaJK0oeIVRcy37CM9/g461yW7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0s6lvNKRZFjjZibkIBljXdEkv4swHwYDVR0j BBgwFoAUEWBwkRgYLlZKbZ4lD/UADvpRZqUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OTcxOGY2Yi1iNTE2LTQzYWUtYjU4OS04M2EyNWZhYTMwYmUvMC8xMTYwNzA5MTE4 MTgyRTU2NEE2RDlFMjUwRkY1MDAwRUZBNTE2NkE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTE2MDcwOTExODE4MkU1NjRBNkQ5RTI1MEZGNTAwMEVGQTUx NjZBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODk3MThmNmItYjUxNi00M2FlLWI1 ODktODNhMjVmYWEzMGJlLzAvMTE2MDcwOTExODE4MkU1NjRBNkQ5RTI1MEZGNTAw MEVGQTUxNjZBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK9C5DYBxmWJScA+/fknitEAZFq6Qwn8gyBU 54MZ/XV7OdDYoZ6WXBM+Kymf1Y34+C18rf0QY2fntjIwphMxF2uE6FrBzyIdMAr7 NcnCDOGJHKluPg8v/1TaCFd1znrv3M1Om58YRzb90ge3Q0irSips5+XmVmUV4xOy t6bO0UaubzEse49guzXpxvNf9XH6qIRfw1ciDAbwRvrWz8cG11dsNAYMCq1Mzugr Xs7YXE90hi5iLl8766tF2nwOZcOo3ObFKjCe9UAkInivyNVKgQhW4ZKQ7UVHH6w2 T4ZpdSFcttDXhwePM8GrNlPRs4cQ+sRvmTiKdBwedjVZ5L6qJ3s= -----END CERTIFICATE-----Generated at Mon Mar 2 15:20:28 2026 by rpki-client