$ rpki-client -vvf repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.mft File: 284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.mft (raw, json) Hash identifier: uMrTDW5Ew+EEcEdMl8IrjO1nKE4hjPjXCnIfUbSjplw= Subject key identifier: B7:41:EF:13:06:B4:50:78:F2:60:B2:3B:0C:9F:E1:3B:72:C0:1C:79 Authority key identifier: 28:4B:8A:DA:D3:E0:98:E9:BF:BE:AC:6A:91:29:EF:A6:44:4D:F2:EA Certificate issuer: /CN=284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA Certificate serial: 02B3D13C7D0824884B8CE19A4ECBB124D3C66AF5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.mft Manifest number: 029A Signing time: Sun 01 Mar 2026 05:23:51 +0000 Manifest this update: Sun 01 Mar 2026 05:18:51 +0000 Manifest next update: Wed 04 Mar 2026 11:37:51 +0000 Files and hashes: 1: 323430343a356434303a343a3a2f34382d3438203d3e20313338353938.roa (hash: /selJRjYRY2RXdacberK6RXbNBqDD4h8KJuD+6tSmiM=) 2: 323430343a356434303a333a3a2f34382d3438203d3e20313338353938.roa (hash: xTc48z78x2hTWAz50fsj2u48rca6GyIeaspfgC6Ied0=) 3: 323430343a356434303a353a3a2f34382d3438203d3e20313338353938.roa (hash: Lbx56bi7U9t4V4gIX7m4fulkNS6DqtlvmzQW0U2Yss4=) 4: 3130332e3133342e35302e302f32342d3234203d3e20313332383239.roa (hash: wPGQG7Rt1kacm2tmufY49AIhUGmQ/veZ5+jCQWW/f5U=) 5: 3130332e3133342e35312e302f32342d3234203d3e20313338353938.roa (hash: rzmqH60uJRn3sGzkNJLLdHpbEepRCB0kAM+v2dcsYmc=) 6: 3130332e3133342e34392e302f32342d3234203d3e20313332383239.roa (hash: DY64pprFnHFOaGNLsgUuWKWN2nPg3FOgN/Io+biTvOM=) 7: 3130332e3133342e34382e302f32342d3234203d3e20313338353938.roa (hash: vdRaqu+ifEWqE1r8nytgBjN36IR5VUDio5Qen7pybes=) 8: 323430343a356434303a373a3a2f34382d3438203d3e20313338353938.roa (hash: 2JoT7M7m37m0xJyrGZ0XzlMJ4mVcLTVKVu699zp/2U0=) 9: 323430343a356434303a393a3a2f34382d3438203d3e20313338353938.roa (hash: s7BQD7yLxj5kSwHPL3ObyjKROEx8KemxAu+k28dACKE=) 10: 323430343a356434303a313a3a2f34382d3438203d3e20313338353938.roa (hash: 7Ra3Fe83WVldtrwmBn6CcKZZT+lK+aCd/JbT64/wrRw=) 11: 323430343a356434303a323a3a2f34382d3438203d3e20313338353938.roa (hash: vUuh6v5PPRzVvuwUZOwe6R6chuRFULbcu3aLCW2qA2Y=) 12: 323430343a356434303a383a3a2f34382d3438203d3e20313338353938.roa (hash: LCHOag0uJb1cjVFsg2v6UKKoMu1dXnSpGeS35y1AH+w=) 13: 323430343a356434303a363a3a2f34382d3438203d3e20313338353938.roa (hash: BMaPZKd4S9fQAuwU5kc5O93/vGGp5sulKN1fvWKFFuE=) 14: 284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.crl (hash: /dT3z2+1tY1331TTlSWXPeNRrPDVwxV0qb/R+jb5rgY=) 15: 323430343a356434303a3a2f34382d3438203d3e20313338353938.roa (hash: XQn6RBqlg6RuaEoPTX1Jp1jRKOhAgtTrK3uAW566Uwk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.crl rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 11:37:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:b3:d1:3c:7d:08:24:88:4b:8c:e1:9a:4e:cb:b1:24:d3:c6:6a:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA Validity Not Before: Mar 1 05:18:51 2026 GMT Not After : Mar 4 11:37:51 2026 GMT Subject: CN=B741EF1306B45078F260B23B0C9FE13B72C01C79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ad:1b:2e:67:cb:f6:1d:fd:54:24:b3:ba:2a: b5:c6:b4:f4:e4:f9:fb:23:23:25:6d:91:ad:60:47: a3:5c:ff:d3:1c:69:93:96:a5:45:5c:6c:0e:80:c2: 9e:16:7f:47:92:ca:7b:be:28:93:1e:89:8a:5c:56: 80:36:4b:1c:2c:e7:f7:7d:d1:0d:7a:d8:2b:86:4f: 15:4a:77:88:55:39:42:44:36:af:7e:d9:5e:92:7d: 0e:b7:40:ae:64:1a:6b:3d:01:57:a5:dc:2c:9d:46: f3:04:69:1c:c8:25:e8:e2:48:8e:1d:d5:6a:72:9e: 3a:6a:e8:ba:ea:a9:bc:79:ad:5d:ce:5a:22:3b:47: d9:b3:0a:b6:17:ff:56:42:6c:11:32:cb:04:c5:dd: e5:fb:f8:e0:2c:a0:5d:dc:0f:09:82:1c:dd:b6:11: 98:7c:21:4b:65:1d:5d:4c:11:e6:85:5d:a7:5e:ba: 1e:7a:8f:39:af:b4:5a:f3:5d:7c:c3:43:68:8b:1a: b7:c4:8a:0e:f8:64:0d:c6:1f:da:a3:d5:18:6b:4a: 60:21:12:15:c2:a1:8a:05:58:c0:4e:b9:6d:bc:51: 5a:14:f1:32:09:59:6d:63:3c:b4:e2:95:47:1a:3e: 1c:28:c4:6d:45:76:30:fa:2f:c3:5c:aa:fd:d3:94: 32:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:41:EF:13:06:B4:50:78:F2:60:B2:3B:0C:9F:E1:3B:72:C0:1C:79 X509v3 Authority Key Identifier: keyid:28:4B:8A:DA:D3:E0:98:E9:BF:BE:AC:6A:91:29:EF:A6:44:4D:F2:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:09:b8:67:31:ea:f1:6f:fc:99:22:a7:78:e0:89:a5:53:65: 1b:f7:66:37:26:3d:1d:1b:ad:ec:af:38:62:07:ab:22:cb:2b: 22:87:bc:8e:cf:55:ba:88:af:86:d0:ed:e7:49:a4:11:0a:4b: 54:4f:13:f8:e2:04:18:23:6e:b1:0d:81:ae:48:85:95:9b:dd: 86:e9:c2:37:72:da:db:0e:91:0b:ec:a6:08:1e:7b:bc:20:18: 9c:7a:d3:d7:b8:13:90:dc:dd:89:97:b0:e2:21:45:0e:73:bf: 71:41:db:7d:e3:39:75:f1:3e:5b:6b:ee:be:51:f3:1f:f7:a2: 8f:e3:49:aa:58:6b:96:93:77:c6:30:e1:95:66:c0:6b:51:1d: df:28:fc:74:e9:6d:b9:46:17:26:86:49:8f:6b:5a:70:e0:0f: 1b:cb:a8:fd:75:0a:2d:ae:b5:c4:cb:47:34:2f:d2:7c:0e:ec: b9:26:6d:b2:86:0b:b5:42:cb:b4:88:e3:09:db:ad:3f:37:5a: 71:ae:a5:5c:41:6e:5a:9e:56:eb:0a:3d:d0:ce:8c:28:10:33: 12:b0:a8:71:2b:d5:d3:65:2b:70:10:c7:c7:2e:a2:bd:a5:f5: 99:1f:76:a6:ca:a1:e3:3d:a0:a4:c4:cf:61:66:44:e5:05:06: c7:a2:49:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUArPRPH0IJIhLjOGaTsuxJNPGavUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg0QjhBREFEM0UwOThFOUJGQkVBQzZBOTEyOUVGQTY0 NDRERjJFQTAeFw0yNjAzMDEwNTE4NTFaFw0yNjAzMDQxMTM3NTFaMDMxMTAvBgNV BAMTKEI3NDFFRjEzMDZCNDUwNzhGMjYwQjIzQjBDOUZFMTNCNzJDMDFDNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChrRsuZ8v2Hf1UJLO6KrXGtPTk +fsjIyVtka1gR6Nc/9McaZOWpUVcbA6Awp4Wf0eSynu+KJMeiYpcVoA2Sxws5/d9 0Q162CuGTxVKd4hVOUJENq9+2V6SfQ63QK5kGms9AVel3CydRvMEaRzIJejiSI4d 1Wpynjpq6Lrqqbx5rV3OWiI7R9mzCrYX/1ZCbBEyywTF3eX7+OAsoF3cDwmCHN22 EZh8IUtlHV1MEeaFXadeuh56jzmvtFrzXXzDQ2iLGrfEig74ZA3GH9qj1RhrSmAh EhXCoYoFWMBOuW28UVoU8TIJWW1jPLTilUcaPhwoxG1FdjD6L8Ncqv3TlDI1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt0HvEwa0UHjyYLI7DJ/hO3LAHHkwHwYDVR0j BBgwFoAUKEuK2tPgmOm/vqxqkSnvpkRN8uowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 Yzg1YzZiOS0zNGY5LTRhODUtOWNlYS1jMTZlOThhOGI1ZTAvMC8yODRCOEFEQUQz RTA5OEU5QkZCRUFDNkE5MTI5RUZBNjQ0NERGMkVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg0QjhBREFEM0UwOThFOUJGQkVBQzZBOTEyOUVGQTY0NDRE RjJFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWM4NWM2YjktMzRmOS00YTg1LTlj ZWEtYzE2ZTk4YThiNWUwLzAvMjg0QjhBREFEM0UwOThFOUJGQkVBQzZBOTEyOUVG QTY0NDRERjJFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIYJuGcx6vFv/Jkip3jgiaVTZRv3ZjcmPR0b reyvOGIHqyLLKyKHvI7PVbqIr4bQ7edJpBEKS1RPE/jiBBgjbrENga5IhZWb3Ybp wjdy2tsOkQvspggee7wgGJx609e4E5Dc3YmXsOIhRQ5zv3FB233jOXXxPltr7r5R 8x/3oo/jSapYa5aTd8Yw4ZVmwGtRHd8o/HTpbblGFyaGSY9rWnDgDxvLqP11Ci2u tcTLRzQv0nwO7LkmbbKGC7VCy7SI4wnbrT83WnGupVxBblqeVusKPdDOjCgQMxKw qHEr1dNlK3AQx8cuor2l9ZkfdqbKoeM9oKTEz2FmROUFBseiSTY= -----END CERTIFICATE-----Generated at Mon Mar 2 07:48:25 2026 by rpki-client