$ rpki-client -vvf repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.mft File: 1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.mft (raw, json) Hash identifier: Bs4nGbGt+ZXEYSvqjh1tkJKQgm6O+0mJQKkSIHgAkzI= Subject key identifier: A2:BA:3F:D3:20:0B:68:D1:4F:FA:CC:2F:02:D8:8C:6C:F2:6E:10:82 Authority key identifier: 1D:21:38:5E:B5:B3:F8:2C:7D:1A:B5:C7:FD:3E:F2:7B:E8:E8:3A:7B Certificate issuer: /CN=1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B Certificate serial: 22F37B4E93D714342D2F555DCA20B5860F5A7AF8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.mft Manifest number: 012A Signing time: Mon 02 Mar 2026 03:32:38 +0000 Manifest this update: Mon 02 Mar 2026 03:27:38 +0000 Manifest next update: Thu 05 Mar 2026 12:24:38 +0000 Files and hashes: 1: 3130332e3138362e3231312e302f32342d3234203d3e20313439373136.roa (hash: j4UVAm85xznfydPQ3h7b+m7Leez4agyKq00s/igegvE=) 2: 1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.crl (hash: zUXk0+0ojOk6dGDMDpEpIUJ1o/FOaOvqiQLY7MQenAY=) 3: 3130332e3138362e3231302e302f32342d3234203d3e20313439373136.roa (hash: V3n7iTqFLIuD2Vsrr8YhXUNiWyUGWv7MsjGLhbtU/DY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.crl rsync://repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:f3:7b:4e:93:d7:14:34:2d:2f:55:5d:ca:20:b5:86:0f:5a:7a:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B Validity Not Before: Mar 2 03:27:38 2026 GMT Not After : Mar 5 12:24:38 2026 GMT Subject: CN=A2BA3FD3200B68D14FFACC2F02D88C6CF26E1082 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:47:13:68:ed:3c:4c:1a:7e:6b:8c:99:07:31: de:6a:a7:7f:93:57:77:b5:8c:bd:4a:43:71:f1:9a: ef:2f:f7:e9:82:36:0a:2a:1a:df:cc:f0:da:fa:79: 8b:db:3b:fd:62:b7:3c:0e:49:f2:02:62:b1:25:a7: 1e:b9:50:08:38:f0:ca:36:43:6b:e6:0d:80:7a:b5: 00:26:94:03:46:62:20:b1:40:35:d7:53:73:ff:b5: 41:46:d6:95:c9:a1:98:bc:e7:5e:0f:ff:52:e8:c4: 2f:a3:d9:7e:eb:a5:e6:37:9d:8b:45:07:f9:d0:64: e8:43:83:f4:51:69:29:79:6d:85:de:43:7c:ea:99: 0f:c2:98:77:61:27:15:6e:d5:b4:c6:80:e6:56:4d: 00:28:a1:cb:01:0f:3a:ae:7b:5a:59:c1:92:19:88: 35:3f:28:86:ee:66:8b:cb:82:13:22:a7:49:39:9f: ed:fc:6c:da:b3:2d:e1:f3:0b:00:87:18:44:8a:7c: 89:26:03:d5:c7:58:0a:3c:78:f2:ac:e6:3b:36:92: 93:86:86:f3:3b:c6:f4:76:09:a8:b0:f5:ed:ed:d1: 38:7d:c1:ef:3a:19:3f:ba:c2:26:d5:f2:46:9e:35: 6b:05:1d:12:ce:45:ce:bc:a7:e4:87:c9:3d:de:07: 90:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:BA:3F:D3:20:0B:68:D1:4F:FA:CC:2F:02:D8:8C:6C:F2:6E:10:82 X509v3 Authority Key Identifier: keyid:1D:21:38:5E:B5:B3:F8:2C:7D:1A:B5:C7:FD:3E:F2:7B:E8:E8:3A:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:59:3c:66:0e:b7:0f:0e:fe:e8:06:68:57:96:1a:2e:e2:2a: 47:30:e8:aa:56:ba:8c:1d:da:5e:5d:81:97:de:5e:e3:33:cc: 68:22:68:de:b1:1a:5a:98:2d:4c:e7:65:d6:fd:0a:f9:9e:d6: 36:bc:b6:88:5a:e3:93:72:7d:e0:2a:0e:02:fb:73:7c:84:d5: 6e:50:3b:e6:33:9a:51:2a:6b:50:c7:92:42:2c:15:46:e8:1e: d4:05:69:e4:24:90:a0:2a:90:36:78:ae:85:71:ef:7a:89:74: bc:b5:fb:39:d6:93:e6:3e:4e:e8:ee:7a:01:01:32:f4:15:2b: c0:71:07:47:15:54:a1:ac:91:c3:14:76:cf:f9:cb:62:be:a5: 99:35:85:00:88:25:9f:38:55:08:c4:6c:c7:35:73:83:c2:c3: 1f:10:95:43:84:0a:2d:ad:9c:c5:fc:bf:4e:07:de:23:86:66: 4b:21:86:a3:8e:27:79:06:d3:01:ef:2e:d4:1e:d1:96:c0:0e: 7c:9b:e0:21:bb:f5:86:f2:a6:d0:7c:97:9b:e0:37:11:19:01: 5a:a0:dc:a6:68:9e:65:e7:7c:62:87:08:12:f4:35:2f:22:72: 84:50:eb:ff:71:f6:21:ad:e2:be:4a:c9:cf:48:9e:72:0f:f8: 46:17:65:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIvN7TpPXFDQtL1VdyiC1hg9aevgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQyMTM4NUVCNUIzRjgyQzdEMUFCNUM3RkQzRUYyN0JF OEU4M0E3QjAeFw0yNjAzMDIwMzI3MzhaFw0yNjAzMDUxMjI0MzhaMDMxMTAvBgNV BAMTKEEyQkEzRkQzMjAwQjY4RDE0RkZBQ0MyRjAyRDg4QzZDRjI2RTEwODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzRxNo7TxMGn5rjJkHMd5qp3+T V3e1jL1KQ3Hxmu8v9+mCNgoqGt/M8Nr6eYvbO/1itzwOSfICYrElpx65UAg48Mo2 Q2vmDYB6tQAmlANGYiCxQDXXU3P/tUFG1pXJoZi8514P/1LoxC+j2X7rpeY3nYtF B/nQZOhDg/RRaSl5bYXeQ3zqmQ/CmHdhJxVu1bTGgOZWTQAoocsBDzque1pZwZIZ iDU/KIbuZovLghMip0k5n+38bNqzLeHzCwCHGESKfIkmA9XHWAo8ePKs5js2kpOG hvM7xvR2Caiw9e3t0Th9we86GT+6wibV8kaeNWsFHRLORc68p+SHyT3eB5BjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoro/0yALaNFP+swvAtiMbPJuEIIwHwYDVR0j BBgwFoAUHSE4XrWz+Cx9GrXH/T7ye+joOnswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NGRjZWY2NS01ZGUzLTQxMjktYWMyNy03NzA2ZDcyNjYwMDEvMC8xRDIxMzg1RUI1 QjNGODJDN0QxQUI1QzdGRDNFRjI3QkU4RTgzQTdCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUQyMTM4NUVCNUIzRjgyQzdEMUFCNUM3RkQzRUYyN0JFOEU4 M0E3Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTRkY2VmNjUtNWRlMy00MTI5LWFj MjctNzcwNmQ3MjY2MDAxLzAvMUQyMTM4NUVCNUIzRjgyQzdEMUFCNUM3RkQzRUYy N0JFOEU4M0E3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJlZPGYOtw8O/ugGaFeWGi7iKkcw6KpWuowd 2l5dgZfeXuMzzGgiaN6xGlqYLUznZdb9Cvme1ja8toha45NyfeAqDgL7c3yE1W5Q O+YzmlEqa1DHkkIsFUboHtQFaeQkkKAqkDZ4roVx73qJdLy1+znWk+Y+TujuegEB MvQVK8BxB0cVVKGskcMUds/5y2K+pZk1hQCIJZ84VQjEbMc1c4PCwx8QlUOECi2t nMX8v04H3iOGZkshhqOOJ3kG0wHvLtQe0ZbADnyb4CG79YbyptB8l5vgNxEZAVqg 3KZonmXnfGKHCBL0NS8icoRQ6/9x9iGt4r5Kyc9InnIP+EYXZfM= -----END CERTIFICATE-----Generated at Mon Mar 2 08:08:16 2026 by rpki-client