$ rpki-client -vvf repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.mft File: 0246DD14AF68F5E5512ABD88D1DB7507E6913C96.mft (raw, json) Hash identifier: p95rDFcv0Y29Q2fhqP2wHezkdQi09kp9PzXQJJ2hiBs= Subject key identifier: D1:C5:F3:90:DC:E3:7D:A7:79:DF:02:A6:BE:F3:8A:26:8B:88:95:EA Authority key identifier: 02:46:DD:14:AF:68:F5:E5:51:2A:BD:88:D1:DB:75:07:E6:91:3C:96 Certificate issuer: /CN=0246DD14AF68F5E5512ABD88D1DB7507E6913C96 Certificate serial: 4A5E6B983EFB61AE92AECE01C2A4F14BEA14AE3A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.mft Manifest number: 01DB Signing time: Sat 28 Feb 2026 13:01:06 +0000 Manifest this update: Sat 28 Feb 2026 12:56:06 +0000 Manifest next update: Tue 03 Mar 2026 18:21:06 +0000 Files and hashes: 1: 323430373a366434303a3a2f33322d3332203d3e203538383230.roa (hash: oqNdF4uJU42w94bKSytVgmfGCQbpEC2b6KNqL//ouqg=) 2: 323430373a366434303a3a2f33322d3438203d3e203538383230.roa (hash: HVzVEZKhesoTY020j8ak7SvbYVxGbYC4+RXUTxdFP9U=) 3: 3130332e3136372e3133362e302f32332d3234203d3e20313339343536.roa (hash: obYtUl2lQpNdpgObPXIZcvY8GGanlMGkMuiOZqIlQPc=) 4: 0246DD14AF68F5E5512ABD88D1DB7507E6913C96.crl (hash: M/vfDycdmktvrZT79B7jmJ6UB8XQg+KKd4UfHYaJXpI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.crl rsync://repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 18:21:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:5e:6b:98:3e:fb:61:ae:92:ae:ce:01:c2:a4:f1:4b:ea:14:ae:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0246DD14AF68F5E5512ABD88D1DB7507E6913C96 Validity Not Before: Feb 28 12:56:06 2026 GMT Not After : Mar 3 18:21:06 2026 GMT Subject: CN=D1C5F390DCE37DA779DF02A6BEF38A268B8895EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ff:35:e7:65:1e:07:6c:eb:12:71:7a:1d:23: 00:dc:78:0d:8a:02:5d:e1:c2:50:eb:2d:4f:8d:75: fc:48:5a:cd:e0:13:72:9f:6e:68:8f:91:dc:3d:9c: a0:b7:1e:0e:c9:0d:94:7d:29:8d:38:0b:cf:9a:77: 90:af:fc:8d:25:48:86:1e:82:6c:ef:ea:e4:19:ff: 33:44:04:6f:7a:f6:a9:f9:c7:7e:fa:df:93:73:65: 41:65:22:fd:dd:0f:88:06:b2:04:2f:c8:fb:40:eb: e8:fa:83:28:77:6a:99:94:9c:b8:58:cf:66:c8:2e: 57:4b:95:ed:49:80:24:31:45:2b:76:03:80:0e:82: 95:87:e7:30:3d:0d:a9:5c:60:ab:17:a6:94:17:bd: 73:82:7d:96:12:4f:31:58:40:d2:7c:b8:cf:93:d5: 12:4e:46:1c:c4:23:38:1e:d8:e2:1c:ff:c8:b2:9c: 71:d5:c7:14:27:27:7f:dc:37:90:c9:b5:91:f9:73: 2a:ed:9b:88:1d:36:3e:a3:97:cf:b6:6c:1a:2a:f6: b7:bb:83:c9:9b:d3:05:dc:9a:66:d1:a9:89:42:ee: 8f:1a:98:35:97:f1:d1:48:c2:af:0d:14:05:34:07: 2e:db:fb:33:55:e0:09:11:12:4f:90:31:4d:e9:ac: 5c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:C5:F3:90:DC:E3:7D:A7:79:DF:02:A6:BE:F3:8A:26:8B:88:95:EA X509v3 Authority Key Identifier: keyid:02:46:DD:14:AF:68:F5:E5:51:2A:BD:88:D1:DB:75:07:E6:91:3C:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:6a:78:5d:90:84:f2:94:79:fd:21:32:d7:e0:eb:42:41:a8: 7a:1e:66:17:8e:aa:75:a5:50:2d:81:c5:2e:31:50:94:7c:ec: 5d:64:62:7d:34:ef:22:c5:08:49:9c:4e:ec:36:30:5d:67:7d: ba:dd:bd:73:30:9b:aa:cb:d3:4c:dd:13:4d:e0:3b:2f:07:0d: bb:b1:ee:76:83:eb:7c:d9:86:f8:15:e9:84:a0:dc:fd:8a:44: eb:c8:db:9a:f6:06:d2:ec:24:db:f1:31:8f:57:c7:db:ad:24: ba:47:40:22:61:7c:26:b3:94:66:30:7b:ac:02:e5:05:50:ba: e8:b3:06:48:5f:28:2f:0b:b3:14:1f:da:6a:b9:52:be:5a:cf: 26:ab:3b:63:c7:97:c8:8a:de:30:8f:8f:98:cf:80:dc:a8:87: 11:7f:08:9e:56:b7:ea:b9:b6:fc:74:be:b4:a9:47:41:ed:d4: d0:f9:92:42:a3:e8:68:dd:72:3d:6c:a7:94:20:61:29:75:3a: 5b:21:69:31:8c:83:5e:5e:07:46:7c:c8:97:66:1d:4f:c5:58: 34:e4:5a:80:49:d1:b9:0c:3c:35:eb:4c:14:2b:c9:3d:53:1b: d3:6c:88:c9:54:cb:26:3c:5a:18:ed:e7:c5:50:c8:ce:1c:ad: 74:c3:ff:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSl5rmD77Ya6Srs4BwqTxS+oUrjowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI0NkREMTRBRjY4RjVFNTUxMkFCRDg4RDFEQjc1MDdF NjkxM0M5NjAeFw0yNjAyMjgxMjU2MDZaFw0yNjAzMDMxODIxMDZaMDMxMTAvBgNV BAMTKEQxQzVGMzkwRENFMzdEQTc3OURGMDJBNkJFRjM4QTI2OEI4ODk1RUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC/zXnZR4HbOsScXodIwDceA2K Al3hwlDrLU+NdfxIWs3gE3KfbmiPkdw9nKC3Hg7JDZR9KY04C8+ad5Cv/I0lSIYe gmzv6uQZ/zNEBG969qn5x37635NzZUFlIv3dD4gGsgQvyPtA6+j6gyh3apmUnLhY z2bILldLle1JgCQxRSt2A4AOgpWH5zA9DalcYKsXppQXvXOCfZYSTzFYQNJ8uM+T 1RJORhzEIzge2OIc/8iynHHVxxQnJ3/cN5DJtZH5cyrtm4gdNj6jl8+2bBoq9re7 g8mb0wXcmmbRqYlC7o8amDWX8dFIwq8NFAU0By7b+zNV4AkREk+QMU3prFxvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0cXzkNzjfad53wKmvvOKJouIleowHwYDVR0j BBgwFoAUAkbdFK9o9eVRKr2I0dt1B+aRPJYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZGZiMzk5Mi0xZDJmLTQ2Y2UtODg2YS04ZTIyYTMyNjExZjgvMC8wMjQ2REQxNEFG NjhGNUU1NTEyQUJEODhEMURCNzUwN0U2OTEzQzk2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDI0NkREMTRBRjY4RjVFNTUxMkFCRDg4RDFEQjc1MDdFNjkx M0M5Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWRmYjM5OTItMWQyZi00NmNlLTg4 NmEtOGUyMmEzMjYxMWY4LzAvMDI0NkREMTRBRjY4RjVFNTUxMkFCRDg4RDFEQjc1 MDdFNjkxM0M5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE5qeF2QhPKUef0hMtfg60JBqHoeZheOqnWl UC2BxS4xUJR87F1kYn007yLFCEmcTuw2MF1nfbrdvXMwm6rL00zdE03gOy8HDbux 7naD63zZhvgV6YSg3P2KROvI25r2BtLsJNvxMY9Xx9utJLpHQCJhfCazlGYwe6wC 5QVQuuizBkhfKC8LsxQf2mq5Ur5azyarO2PHl8iK3jCPj5jPgNyohxF/CJ5Wt+q5 tvx0vrSpR0Ht1ND5kkKj6Gjdcj1sp5QgYSl1OlshaTGMg15eB0Z8yJdmHU/FWDTk WoBJ0bkMPDXrTBQryT1TG9NsiMlUyyY8Whjt58VQyM4crXTD/wE= -----END CERTIFICATE-----Generated at Mon Mar 2 18:27:01 2026 by rpki-client