$ rpki-client -vvf repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.mft File: B197F427572524588487CFDB163A9E512FAE4DF2.mft (raw, json) Hash identifier: rPyVilMfkuaId+KWZEn9FctwPc5GLxJm4vLAA+6Wnb8= Subject key identifier: D0:95:2C:F5:01:4A:5D:FB:E0:BE:E5:FC:BF:7A:77:1A:27:78:8F:89 Authority key identifier: B1:97:F4:27:57:25:24:58:84:87:CF:DB:16:3A:9E:51:2F:AE:4D:F2 Certificate issuer: /CN=B197F427572524588487CFDB163A9E512FAE4DF2 Certificate serial: 5F4D172C93AE3D1FE920BC5964A754EB22BB4524 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B197F427572524588487CFDB163A9E512FAE4DF2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.mft Manifest number: 0274 Signing time: Sun 01 Mar 2026 02:51:34 +0000 Manifest this update: Sun 01 Mar 2026 02:46:34 +0000 Manifest next update: Wed 04 Mar 2026 09:46:34 +0000 Files and hashes: 1: 3130332e3135332e3234362e302f32342d3234203d3e20313430343735.roa (hash: pc293ep/4fQQOE2DdqqWAYfU1Bh+ldyDqPDpR8SqPEU=) 2: 323430363a346563303a3a2f33322d3332203d3e20313430343735.roa (hash: sqH8mgq0fr+XiznMLTzogmtodA1+q341U0FlkHOzY5k=) 3: B197F427572524588487CFDB163A9E512FAE4DF2.crl (hash: rr118c5ReT35Z0/a6Az80OkaMgwVs+h0HXPBFzrTTeg=) 4: 3130332e3135332e3234372e302f32342d3234203d3e20313430343735.roa (hash: 8ZWQPdcJgeKZrsbUmRYq2OzkrsqVWW52cECdkg/5pH0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.crl rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B197F427572524588487CFDB163A9E512FAE4DF2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 09:46:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:4d:17:2c:93:ae:3d:1f:e9:20:bc:59:64:a7:54:eb:22:bb:45:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B197F427572524588487CFDB163A9E512FAE4DF2 Validity Not Before: Mar 1 02:46:34 2026 GMT Not After : Mar 4 09:46:34 2026 GMT Subject: CN=D0952CF5014A5DFBE0BEE5FCBF7A771A27788F89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:20:a6:3a:bc:02:60:1c:43:e7:2a:fa:72:5e: b2:67:88:50:b0:c9:69:d8:c1:a3:9d:00:11:cf:bd: 48:3d:2f:ed:1e:26:fa:01:58:29:56:ea:b9:7c:b3: 2a:64:89:55:76:05:1a:24:fd:a3:52:a8:83:53:ef: 87:f5:4c:ae:9e:d5:c3:c8:f5:e5:0a:62:c5:37:c1: 88:16:13:83:56:b2:25:c7:78:0e:f4:86:a6:36:ee: 5b:13:dd:bb:32:f0:01:91:c7:f3:0a:76:3c:67:1d: e5:c3:c7:b5:00:dd:cc:b7:c4:16:ef:28:cf:da:75: f0:c2:24:33:37:7b:9f:84:91:43:af:a8:b9:a6:c5: d2:a6:55:d4:e2:38:f2:17:17:ea:fe:fe:bb:63:90: e5:f4:b7:75:23:f8:b5:d2:db:3d:92:93:f9:12:bb: 46:f9:00:1f:b7:e2:53:35:b8:d8:63:5d:42:1b:1d: 25:c7:ad:13:b0:a9:59:ee:48:90:e1:4c:72:15:0d: dd:42:74:b4:38:92:e9:2e:9d:22:a7:76:88:76:c8: 10:78:0f:e0:84:3f:e3:46:66:47:28:a1:ce:e2:32: 37:0c:5c:19:c7:cf:12:3b:c7:6f:4d:76:14:63:2b: dd:e3:6e:b4:f5:2f:d2:70:c4:fa:83:bf:d4:db:c9: d0:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:95:2C:F5:01:4A:5D:FB:E0:BE:E5:FC:BF:7A:77:1A:27:78:8F:89 X509v3 Authority Key Identifier: keyid:B1:97:F4:27:57:25:24:58:84:87:CF:DB:16:3A:9E:51:2F:AE:4D:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B197F427572524588487CFDB163A9E512FAE4DF2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:81:2c:e0:1b:1a:a9:f3:b5:31:cf:a6:a9:45:f2:fc:2b:38: 69:2d:8c:fb:86:f3:c5:61:1e:99:d9:a0:e5:55:18:29:eb:ce: d4:94:e1:3e:e0:69:ce:b7:23:93:58:6b:94:bb:8a:7a:0a:0a: a7:15:08:b9:8d:aa:68:71:0b:49:cf:e0:fb:bc:d9:19:09:73: b7:23:fb:0a:3f:f2:da:86:c3:4e:8c:e3:a9:29:2b:f4:8a:5c: 0a:46:97:11:9b:f9:48:b0:36:db:21:30:d6:e9:05:72:ca:3a: fe:ae:7f:9b:29:d6:83:b1:09:91:7c:58:5e:35:5f:dc:7c:94: 60:87:d8:88:5e:87:66:a2:d7:a4:c3:1a:c3:d2:1d:5c:57:50: 80:43:bb:7a:d5:69:e0:70:2b:ab:72:1a:32:6e:0e:a7:d9:a6: 5d:80:bf:ff:84:06:63:fe:d6:45:4e:37:2f:c8:20:24:eb:99: 5a:01:5e:3c:13:a0:45:79:9a:cd:ec:a5:13:53:4c:dd:f0:fb: 00:29:40:74:c7:d1:ea:ac:aa:1c:c3:83:a9:6a:48:f2:a9:40: bd:1b:35:4f:bb:10:81:2e:e0:f7:61:4a:97:b3:a0:28:35:5e: ae:6d:c0:de:18:d9:23:0f:f0:35:2f:23:16:41:24:1d:69:c4: a4:da:0f:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX00XLJOuPR/pILxZZKdU6yK7RSQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE5N0Y0Mjc1NzI1MjQ1ODg0ODdDRkRCMTYzQTlFNTEy RkFFNERGMjAeFw0yNjAzMDEwMjQ2MzRaFw0yNjAzMDQwOTQ2MzRaMDMxMTAvBgNV BAMTKEQwOTUyQ0Y1MDE0QTVERkJFMEJFRTVGQ0JGN0E3NzFBMjc3ODhGODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWIKY6vAJgHEPnKvpyXrJniFCw yWnYwaOdABHPvUg9L+0eJvoBWClW6rl8sypkiVV2BRok/aNSqINT74f1TK6e1cPI 9eUKYsU3wYgWE4NWsiXHeA70hqY27lsT3bsy8AGRx/MKdjxnHeXDx7UA3cy3xBbv KM/adfDCJDM3e5+EkUOvqLmmxdKmVdTiOPIXF+r+/rtjkOX0t3Uj+LXS2z2Sk/kS u0b5AB+34lM1uNhjXUIbHSXHrROwqVnuSJDhTHIVDd1CdLQ4kukunSKndoh2yBB4 D+CEP+NGZkcooc7iMjcMXBnHzxI7x29NdhRjK93jbrT1L9JwxPqDv9TbydBNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0JUs9QFKXfvgvuX8v3p3Gid4j4kwHwYDVR0j BBgwFoAUsZf0J1clJFiEh8/bFjqeUS+uTfIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZGNmNDA2Ny1hNjlkLTQ5MDgtYmVlOC1iNDY1NWJkYzE1ZjgvMC9CMTk3RjQyNzU3 MjUyNDU4ODQ4N0NGREIxNjNBOUU1MTJGQUU0REYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjE5N0Y0Mjc1NzI1MjQ1ODg0ODdDRkRCMTYzQTlFNTEyRkFF NERGMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGRjZjQwNjctYTY5ZC00OTA4LWJl ZTgtYjQ2NTViZGMxNWY4LzAvQjE5N0Y0Mjc1NzI1MjQ1ODg0ODdDRkRCMTYzQTlF NTEyRkFFNERGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ2BLOAbGqnztTHPpqlF8vwrOGktjPuG88Vh HpnZoOVVGCnrztSU4T7gac63I5NYa5S7inoKCqcVCLmNqmhxC0nP4Pu82RkJc7cj +wo/8tqGw06M46kpK/SKXApGlxGb+UiwNtshMNbpBXLKOv6uf5sp1oOxCZF8WF41 X9x8lGCH2Iheh2ai16TDGsPSHVxXUIBDu3rVaeBwK6tyGjJuDqfZpl2Av/+EBmP+ 1kVONy/IICTrmVoBXjwToEV5ms3spRNTTN3w+wApQHTH0eqsqhzDg6lqSPKpQL0b NU+7EIEu4PdhSpezoCg1Xq5twN4Y2SMP8DUvIxZBJB1pxKTaD6Y= -----END CERTIFICATE-----Generated at Mon Mar 2 07:47:30 2026 by rpki-client