$ rpki-client -vvf repo-rpki.idnic.net/repo/97134f18-11e1-41ae-bb05-9fbf48212b7d/0/394BCC5C0310DB0117DDC1DC1A176026DB421D88.mft File: 394BCC5C0310DB0117DDC1DC1A176026DB421D88.mft (raw, json) Hash identifier: 6F4L/RJnSjFItHLfkzrCoFnfx3/wDK+kL3vPdmeQ3Yk= Subject key identifier: 94:55:BE:2F:E8:E3:CC:E2:35:34:23:EB:72:A2:57:4E:6A:06:16:FC Authority key identifier: 39:4B:CC:5C:03:10:DB:01:17:DD:C1:DC:1A:17:60:26:DB:42:1D:88 Certificate issuer: /CN=394BCC5C0310DB0117DDC1DC1A176026DB421D88 Certificate serial: 0B16B3651E1CE01CF337A5C4085580AD4BD21EC7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/394BCC5C0310DB0117DDC1DC1A176026DB421D88.cer Subject info access: rsync://repo-rpki.idnic.net/repo/97134f18-11e1-41ae-bb05-9fbf48212b7d/0/394BCC5C0310DB0117DDC1DC1A176026DB421D88.mft Manifest number: 011F Signing time: Sun 01 Mar 2026 08:20:55 +0000 Manifest this update: Sun 01 Mar 2026 08:15:55 +0000 Manifest next update: Wed 04 Mar 2026 17:10:55 +0000 Files and hashes: 1: 394BCC5C0310DB0117DDC1DC1A176026DB421D88.crl (hash: k3r+TY/YzjHeGVeH3FJtO5fuu/bdNhxhTE9b2aU3hHA=) 2: 3135372e36362e3139302e302f32342d3234203d3e20313532373533.roa (hash: 5Tt3RRAons/MpLAKdI+nVYdG1EV4O6aC9q3gMfZTySg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/97134f18-11e1-41ae-bb05-9fbf48212b7d/0/394BCC5C0310DB0117DDC1DC1A176026DB421D88.crl rsync://repo-rpki.idnic.net/repo/97134f18-11e1-41ae-bb05-9fbf48212b7d/0/394BCC5C0310DB0117DDC1DC1A176026DB421D88.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/394BCC5C0310DB0117DDC1DC1A176026DB421D88.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 17:10:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:16:b3:65:1e:1c:e0:1c:f3:37:a5:c4:08:55:80:ad:4b:d2:1e:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=394BCC5C0310DB0117DDC1DC1A176026DB421D88 Validity Not Before: Mar 1 08:15:55 2026 GMT Not After : Mar 4 17:10:55 2026 GMT Subject: CN=9455BE2FE8E3CCE2353423EB72A2574E6A0616FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:2e:22:59:e9:93:ba:a1:75:79:24:b6:69:db: a8:45:7f:90:d1:ef:84:6d:75:d1:74:91:85:3c:c7: 09:62:8f:8b:6e:af:07:88:55:fb:46:c6:7b:b9:fe: 4f:75:51:89:cd:f9:09:29:6b:db:06:ad:27:d9:68: 05:f5:a1:05:51:95:2e:cb:56:7e:ed:d7:ff:0c:ff: 47:42:fe:14:ee:4b:04:10:62:cb:ca:6e:f1:c7:b3: ed:43:1f:c3:e3:14:fa:5c:8e:a2:63:55:c5:3b:4a: 72:8d:a9:41:a7:20:06:97:92:ba:b1:19:cd:b2:43: 0f:a5:a0:5b:ee:d5:6a:bc:67:55:a0:e8:3e:34:9b: 1e:83:ac:14:10:90:1a:a4:1d:c4:86:3e:5a:b8:91: 42:a8:98:55:93:ab:61:2b:e8:e5:02:51:c0:04:be: c4:1d:dc:0c:b8:53:96:db:42:94:64:5b:13:07:8a: ba:8c:b5:0b:d3:05:d6:8c:8d:24:38:08:44:18:e0: bc:25:f3:6d:84:5a:19:82:d8:0a:dc:7d:78:25:04: e4:a2:4d:74:d6:f8:96:ea:77:6a:c0:18:02:e5:e0: 8f:bd:51:a2:30:20:5f:c6:5f:dd:25:21:97:bf:47: b9:b4:0c:9c:21:ed:a1:a3:8d:79:b3:6a:e2:33:28: e1:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:55:BE:2F:E8:E3:CC:E2:35:34:23:EB:72:A2:57:4E:6A:06:16:FC X509v3 Authority Key Identifier: keyid:39:4B:CC:5C:03:10:DB:01:17:DD:C1:DC:1A:17:60:26:DB:42:1D:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/97134f18-11e1-41ae-bb05-9fbf48212b7d/0/394BCC5C0310DB0117DDC1DC1A176026DB421D88.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/394BCC5C0310DB0117DDC1DC1A176026DB421D88.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/97134f18-11e1-41ae-bb05-9fbf48212b7d/0/394BCC5C0310DB0117DDC1DC1A176026DB421D88.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:7b:6d:96:33:73:2d:99:bf:cc:fd:0b:ec:8e:7b:e1:4a:6b: 15:0e:2c:4a:4a:3f:0e:6a:35:16:ba:48:6a:d2:d4:88:0a:4b: b1:4e:bd:9e:4c:d5:3c:e3:4b:5a:af:27:1c:ed:ca:e0:32:e7: 9c:55:35:7f:ca:b4:05:42:6c:34:ec:b1:98:0d:00:46:87:86: 7e:94:bd:b3:96:d9:c1:95:77:da:50:4d:e7:21:02:26:d8:84: 4b:f1:13:7f:ed:06:e3:46:9b:ac:77:9b:1d:4b:13:19:2b:86: 20:b1:e9:2c:ca:de:71:d1:fc:90:54:c9:32:34:62:ff:d2:56: af:d6:46:76:5e:85:65:df:74:20:14:0e:8d:31:0a:f8:5a:dc: fd:ad:e6:4a:68:22:e7:40:32:95:64:4e:97:63:0c:65:48:84: e7:26:e9:f6:cd:97:8c:cd:76:bd:87:91:47:4c:3c:a1:45:04: c7:37:df:1d:1d:93:7f:df:33:47:59:13:ec:3d:1d:d4:15:c8: 09:6c:c0:0a:ac:f2:e8:89:b7:eb:a3:7c:e5:99:05:a5:f1:8e: bc:0b:99:44:13:3d:db:b7:dd:36:74:06:76:31:f2:ad:1a:ea: f5:4a:3a:06:1f:68:0d:07:20:f9:ce:a7:9d:68:fe:f6:46:a2: da:ad:b1:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCxazZR4c4BzzN6XECFWArUvSHscwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzk0QkNDNUMwMzEwREIwMTE3RERDMURDMUExNzYwMjZE QjQyMUQ4ODAeFw0yNjAzMDEwODE1NTVaFw0yNjAzMDQxNzEwNTVaMDMxMTAvBgNV BAMTKDk0NTVCRTJGRThFM0NDRTIzNTM0MjNFQjcyQTI1NzRFNkEwNjE2RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJLiJZ6ZO6oXV5JLZp26hFf5DR 74RtddF0kYU8xwlij4turweIVftGxnu5/k91UYnN+Qkpa9sGrSfZaAX1oQVRlS7L Vn7t1/8M/0dC/hTuSwQQYsvKbvHHs+1DH8PjFPpcjqJjVcU7SnKNqUGnIAaXkrqx Gc2yQw+loFvu1Wq8Z1Wg6D40mx6DrBQQkBqkHcSGPlq4kUKomFWTq2Er6OUCUcAE vsQd3Ay4U5bbQpRkWxMHirqMtQvTBdaMjSQ4CEQY4Lwl822EWhmC2ArcfXglBOSi TXTW+Jbqd2rAGALl4I+9UaIwIF/GX90lIZe/R7m0DJwh7aGjjXmzauIzKOGTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlFW+L+jjzOI1NCPrcqJXTmoGFvwwHwYDVR0j BBgwFoAUOUvMXAMQ2wEX3cHcGhdgJttCHYgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NzEzNGYxOC0xMWUxLTQxYWUtYmIwNS05ZmJmNDgyMTJiN2QvMC8zOTRCQ0M1QzAz MTBEQjAxMTdEREMxREMxQTE3NjAyNkRCNDIxRDg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzk0QkNDNUMwMzEwREIwMTE3RERDMURDMUExNzYwMjZEQjQy MUQ4OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTcxMzRmMTgtMTFlMS00MWFlLWJi MDUtOWZiZjQ4MjEyYjdkLzAvMzk0QkNDNUMwMzEwREIwMTE3RERDMURDMUExNzYw MjZEQjQyMUQ4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEh7bZYzcy2Zv8z9C+yOe+FKaxUOLEpKPw5q NRa6SGrS1IgKS7FOvZ5M1TzjS1qvJxztyuAy55xVNX/KtAVCbDTssZgNAEaHhn6U vbOW2cGVd9pQTechAibYhEvxE3/tBuNGm6x3mx1LExkrhiCx6SzK3nHR/JBUyTI0 Yv/SVq/WRnZehWXfdCAUDo0xCvha3P2t5kpoIudAMpVkTpdjDGVIhOcm6fbNl4zN dr2HkUdMPKFFBMc33x0dk3/fM0dZE+w9HdQVyAlswAqs8uiJt+ujfOWZBaXxjrwL mUQTPdu33TZ0BnYx8q0a6vVKOgYfaA0HIPnOp51o/vZGotqtsbU= -----END CERTIFICATE-----Generated at Mon Mar 2 10:02:35 2026 by rpki-client