$ rpki-client -vvf repo-rpki.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/20566897603B029812606C25ABC972BAC5BF4AFB.mft File: 20566897603B029812606C25ABC972BAC5BF4AFB.mft (raw, json) Hash identifier: tHoRI3ufhJ+zGiWVa3pvLyCdml0Wya/ggWHbDiXWi/4= Subject key identifier: 07:1A:A4:3D:52:FC:FB:28:89:E2:86:B6:97:5D:12:3B:77:A5:06:96 Authority key identifier: 20:56:68:97:60:3B:02:98:12:60:6C:25:AB:C9:72:BA:C5:BF:4A:FB Certificate issuer: /CN=20566897603B029812606C25ABC972BAC5BF4AFB Certificate serial: 50C985F3ECD873BB82F86D46BEE3ECD22ED11D50 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20566897603B029812606C25ABC972BAC5BF4AFB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/20566897603B029812606C25ABC972BAC5BF4AFB.mft Manifest number: 029C Signing time: Sun 01 Mar 2026 10:22:32 +0000 Manifest this update: Sun 01 Mar 2026 10:17:32 +0000 Manifest next update: Wed 04 Mar 2026 15:10:32 +0000 Files and hashes: 1: 323430363a316230303a3a2f33322d3438203d3e203435333137.roa (hash: TjP7GmHfPb+wwoosrfBI6nsarX9S8cjrwBDpRp71p84=) 2: 20566897603B029812606C25ABC972BAC5BF4AFB.crl (hash: 9MlRTUDnDuUS8sh9kjRuRrTdhTmRKQUhZ7yQqAIYYCs=) 3: 3230332e3139302e34302e302f32312d3234203d3e203435333137.roa (hash: HofDLGmwqIsnj587taUbViIIFJnwZV6L29IBKkzVuIE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/20566897603B029812606C25ABC972BAC5BF4AFB.crl rsync://repo-rpki.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/20566897603B029812606C25ABC972BAC5BF4AFB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20566897603B029812606C25ABC972BAC5BF4AFB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 15:10:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:c9:85:f3:ec:d8:73:bb:82:f8:6d:46:be:e3:ec:d2:2e:d1:1d:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20566897603B029812606C25ABC972BAC5BF4AFB Validity Not Before: Mar 1 10:17:32 2026 GMT Not After : Mar 4 15:10:32 2026 GMT Subject: CN=071AA43D52FCFB2889E286B6975D123B77A50696 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a3:50:39:d0:22:ae:62:db:5e:96:8b:ac:9f: 10:fa:4a:17:84:94:c8:e8:57:f6:d9:8c:1e:57:9d: 1e:6e:5b:b2:18:d7:a8:23:f0:0d:f3:12:22:9e:6a: 86:70:84:f2:d9:f4:c1:91:9a:58:1b:90:2c:d2:4e: 6d:28:79:5b:9d:54:d7:f0:58:c1:ab:b3:d9:49:95: ec:be:0a:de:0e:24:45:84:17:23:3d:59:ee:35:af: 9c:06:2e:da:50:e0:bb:c5:60:c1:d8:70:85:b6:7f: 06:d3:3e:43:e3:a8:a3:31:d1:22:12:18:a0:b8:b3: 34:ff:b6:3a:3f:a2:6b:fd:7a:7a:90:50:1b:92:9b: d7:85:26:bb:54:bc:b6:da:59:49:30:90:23:47:51: 14:86:88:72:30:d0:4e:26:ff:93:4e:5d:7c:d4:20: 85:92:32:d5:c4:6e:0c:58:82:10:6e:07:3c:8f:a0: 21:a2:ba:b0:8f:a8:a5:56:eb:25:9b:fc:b8:a9:df: 77:b6:b6:56:41:0f:48:d3:b5:75:44:fc:42:f6:85: 94:33:bd:c8:42:c6:61:37:b9:e1:5b:cf:e7:a4:d7: 4f:d8:ea:24:c4:2b:5a:55:d2:25:59:69:7c:0d:5b: e6:e2:b6:a2:18:7b:cb:d2:97:36:1f:9e:7e:51:89: 2e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:1A:A4:3D:52:FC:FB:28:89:E2:86:B6:97:5D:12:3B:77:A5:06:96 X509v3 Authority Key Identifier: keyid:20:56:68:97:60:3B:02:98:12:60:6C:25:AB:C9:72:BA:C5:BF:4A:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/20566897603B029812606C25ABC972BAC5BF4AFB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20566897603B029812606C25ABC972BAC5BF4AFB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/20566897603B029812606C25ABC972BAC5BF4AFB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:08:60:fe:1a:a5:c8:58:5c:a2:c3:4c:e0:2b:fc:7e:91:7c: 76:6b:59:71:12:df:13:b1:cf:5f:72:72:9d:f8:76:2f:2d:b8: 7b:71:48:7f:d7:31:8d:a8:eb:67:1b:3e:5c:af:1a:35:54:5f: 01:ac:2f:ef:71:7e:6d:98:4e:67:95:65:03:03:c4:cc:14:dd: 6f:9e:4e:cb:c2:d0:f8:7b:79:72:cb:8a:cc:20:4c:03:44:9d: b0:8a:e1:13:e1:b9:a3:3e:d3:12:d1:f6:db:2e:5c:9a:e8:c0: 13:8d:4e:ad:5f:3b:aa:b9:73:ea:80:5d:58:df:f4:8f:cc:9a: 72:12:4b:08:e9:d8:ec:45:2e:e2:6e:83:d0:12:b5:67:5b:e7: 9a:a2:a9:f4:b6:b6:99:0b:a3:a9:73:dc:51:c4:1b:70:56:25: c2:fc:bc:5c:ab:b8:67:a7:7b:bf:55:3f:4c:07:a5:60:f6:62: 1f:52:a3:d0:82:d3:7c:68:fb:74:0b:08:08:09:09:11:b2:b9: 1f:87:c2:00:e1:8a:f3:72:74:f8:22:d9:2f:c7:d2:65:9e:0e: 2f:79:c4:78:78:10:8a:b6:ea:38:83:48:c0:15:16:c6:b1:f7: 2c:da:ff:ac:c9:5b:72:c6:18:5c:aa:99:d6:2b:4b:dc:d7:3e: eb:93:2e:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUMmF8+zYc7uC+G1GvuPs0i7RHVAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA1NjY4OTc2MDNCMDI5ODEyNjA2QzI1QUJDOTcyQkFD NUJGNEFGQjAeFw0yNjAzMDExMDE3MzJaFw0yNjAzMDQxNTEwMzJaMDMxMTAvBgNV BAMTKDA3MUFBNDNENTJGQ0ZCMjg4OUUyODZCNjk3NUQxMjNCNzdBNTA2OTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMo1A50CKuYttelousnxD6SheE lMjoV/bZjB5XnR5uW7IY16gj8A3zEiKeaoZwhPLZ9MGRmlgbkCzSTm0oeVudVNfw WMGrs9lJley+Ct4OJEWEFyM9We41r5wGLtpQ4LvFYMHYcIW2fwbTPkPjqKMx0SIS GKC4szT/tjo/omv9enqQUBuSm9eFJrtUvLbaWUkwkCNHURSGiHIw0E4m/5NOXXzU IIWSMtXEbgxYghBuBzyPoCGiurCPqKVW6yWb/Lip33e2tlZBD0jTtXVE/EL2hZQz vchCxmE3ueFbz+ek10/Y6iTEK1pV0iVZaXwNW+bitqIYe8vSlzYfnn5RiS5PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBxqkPVL8+yiJ4oa2l10SO3elBpYwHwYDVR0j BBgwFoAUIFZol2A7ApgSYGwlq8lyusW/SvswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZGFjYzM2NS1lMTk0LTRhYzAtOTUzYS00ZGYzYTU5MDBiMTQvMC8yMDU2Njg5NzYw M0IwMjk4MTI2MDZDMjVBQkM5NzJCQUM1QkY0QUZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjA1NjY4OTc2MDNCMDI5ODEyNjA2QzI1QUJDOTcyQkFDNUJG NEFGQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWRhY2MzNjUtZTE5NC00YWMwLTk1 M2EtNGRmM2E1OTAwYjE0LzAvMjA1NjY4OTc2MDNCMDI5ODEyNjA2QzI1QUJDOTcy QkFDNUJGNEFGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACsIYP4apchYXKLDTOAr/H6RfHZrWXES3xOx z19ycp34di8tuHtxSH/XMY2o62cbPlyvGjVUXwGsL+9xfm2YTmeVZQMDxMwU3W+e TsvC0Ph7eXLLiswgTANEnbCK4RPhuaM+0xLR9tsuXJrowBONTq1fO6q5c+qAXVjf 9I/MmnISSwjp2OxFLuJug9AStWdb55qiqfS2tpkLo6lz3FHEG3BWJcL8vFyruGen e79VP0wHpWD2Yh9So9CC03xo+3QLCAgJCRGyuR+HwgDhivNydPgi2S/H0mWeDi95 xHh4EIq26jiDSMAVFsax9yza/6zJW3LGGFyqmdYrS9zXPuuTLn8= -----END CERTIFICATE-----Generated at Mon Mar 2 14:38:14 2026 by rpki-client