$ rpki-client -vvf repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.mft File: 0246DD14AF68F5E5512ABD88D1DB7507E6913C96.mft (raw, json) Hash identifier: y/ocqaeMstzwXoL7Xh/7R9tZ9dbiVP7NPC02yEyT0QY= Subject key identifier: 6B:31:3D:FC:E4:2D:64:37:36:C9:2B:01:D2:DA:90:84:41:26:5B:C3 Authority key identifier: 02:46:DD:14:AF:68:F5:E5:51:2A:BD:88:D1:DB:75:07:E6:91:3C:96 Certificate issuer: /CN=0246DD14AF68F5E5512ABD88D1DB7507E6913C96 Certificate serial: 742091F1CC4AEC525321C0F35829C51EAC0A269D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.mft Manifest number: 01DC Signing time: Mon 02 Mar 2026 18:21:07 +0000 Manifest this update: Mon 02 Mar 2026 18:16:07 +0000 Manifest next update: Thu 05 Mar 2026 20:37:07 +0000 Files and hashes: 1: 0246DD14AF68F5E5512ABD88D1DB7507E6913C96.crl (hash: O/ASZBnap9QIc2tVsqLUz2mYDBLJPiE7vjMRq4iN5XA=) 2: 323430373a366434303a3a2f33322d3438203d3e203538383230.roa (hash: HVzVEZKhesoTY020j8ak7SvbYVxGbYC4+RXUTxdFP9U=) 3: 3130332e3136372e3133362e302f32332d3234203d3e20313339343536.roa (hash: obYtUl2lQpNdpgObPXIZcvY8GGanlMGkMuiOZqIlQPc=) 4: 323430373a366434303a3a2f33322d3332203d3e203538383230.roa (hash: oqNdF4uJU42w94bKSytVgmfGCQbpEC2b6KNqL//ouqg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.crl rsync://repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:20:91:f1:cc:4a:ec:52:53:21:c0:f3:58:29:c5:1e:ac:0a:26:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0246DD14AF68F5E5512ABD88D1DB7507E6913C96 Validity Not Before: Mar 2 18:16:07 2026 GMT Not After : Mar 5 20:37:07 2026 GMT Subject: CN=6B313DFCE42D643736C92B01D2DA908441265BC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:0f:33:82:26:2b:83:09:b5:32:3d:cf:2b:34: e5:ab:44:17:90:9c:20:97:c7:13:7e:9e:7e:d8:1a: 0a:f9:a5:d6:3c:de:6f:bb:a0:4a:d0:df:b1:ea:6e: 33:83:64:3e:1e:a1:48:d0:7f:f6:59:67:ac:2b:3d: 9a:ec:91:e6:ff:ed:e0:9d:d2:15:07:97:ef:c8:05: 32:6a:7c:5c:5c:db:00:5e:e4:45:13:70:03:ba:29: 69:96:0f:10:2c:27:38:3c:8d:fa:28:72:ea:44:e0: 65:b1:1c:b7:1a:d2:1b:58:bd:64:6e:9b:80:aa:53: 50:72:34:94:19:3e:ea:10:8b:14:09:a7:66:9c:51: e1:69:d0:d0:db:b5:7f:5b:7a:d6:c1:47:3d:ac:22: 0c:47:e4:4a:c7:d6:29:ed:25:fb:aa:1e:82:82:0b: 9e:62:68:30:e8:32:20:70:0c:9a:ef:bc:5d:00:5a: 52:ed:c9:cf:46:5c:4c:76:88:89:f8:e6:65:46:1a: a5:b2:06:37:41:5b:1d:62:87:99:59:ca:8b:76:98: 2a:eb:59:43:fa:3d:8e:47:61:e3:a1:b2:4f:cc:a8: 66:9f:72:e4:31:b7:13:57:84:0a:22:fc:71:9e:43: 18:99:af:51:ce:b9:64:2d:f2:82:27:99:06:0e:3e: 57:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:31:3D:FC:E4:2D:64:37:36:C9:2B:01:D2:DA:90:84:41:26:5B:C3 X509v3 Authority Key Identifier: keyid:02:46:DD:14:AF:68:F5:E5:51:2A:BD:88:D1:DB:75:07:E6:91:3C:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:d1:12:ed:c2:38:75:0d:bb:7c:db:14:fb:bc:d9:d2:35:c9: c0:e7:36:64:12:3c:49:13:41:c7:bf:14:20:d5:86:c3:65:86: c6:aa:52:04:a7:b4:80:84:cc:92:af:00:a5:1f:1f:48:7d:70: fd:e8:11:65:a8:f9:0c:14:58:3c:aa:a6:c8:60:75:2e:ba:43: 0d:3d:d0:60:55:55:f8:0e:87:5e:95:28:bd:d2:db:0c:8e:41: ca:61:5e:0f:81:5c:f2:8f:6d:98:ea:5b:89:d8:3f:f8:ae:01: 02:63:cd:b0:9b:63:a4:03:0f:7f:e8:c9:4b:34:86:ab:db:56: 93:c1:fd:2d:72:b7:e8:1b:8c:c1:b2:0d:6a:8d:ea:0d:1d:53: f4:e2:4f:9a:7e:3a:54:b0:7f:69:13:9a:5e:50:bf:63:43:e8: 4a:91:fb:28:80:3a:b7:9e:d9:45:d8:1d:25:aa:31:96:dd:08: a5:5c:47:67:0d:61:8a:8d:0c:92:1d:bb:18:8d:cc:8e:74:e3: 0c:b6:f9:ff:6e:89:0a:d0:8a:f3:5e:e6:d5:4f:54:a7:cb:87: 81:b8:64:fa:3b:69:40:62:6f:83:9c:4d:28:50:a0:cd:61:c7: f3:7d:b3:c7:38:72:06:7b:56:7f:35:18:a6:a0:28:86:6f:e1: 30:cf:3e:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdCCR8cxK7FJTIcDzWCnFHqwKJp0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI0NkREMTRBRjY4RjVFNTUxMkFCRDg4RDFEQjc1MDdF NjkxM0M5NjAeFw0yNjAzMDIxODE2MDdaFw0yNjAzMDUyMDM3MDdaMDMxMTAvBgNV BAMTKDZCMzEzREZDRTQyRDY0MzczNkM5MkIwMUQyREE5MDg0NDEyNjVCQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClDzOCJiuDCbUyPc8rNOWrRBeQ nCCXxxN+nn7YGgr5pdY83m+7oErQ37HqbjODZD4eoUjQf/ZZZ6wrPZrskeb/7eCd 0hUHl+/IBTJqfFxc2wBe5EUTcAO6KWmWDxAsJzg8jfoocupE4GWxHLca0htYvWRu m4CqU1ByNJQZPuoQixQJp2acUeFp0NDbtX9betbBRz2sIgxH5ErH1intJfuqHoKC C55iaDDoMiBwDJrvvF0AWlLtyc9GXEx2iIn45mVGGqWyBjdBWx1ih5lZyot2mCrr WUP6PY5HYeOhsk/MqGafcuQxtxNXhAoi/HGeQxiZr1HOuWQt8oInmQYOPlfFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUazE9/OQtZDc2ySsB0tqQhEEmW8MwHwYDVR0j BBgwFoAUAkbdFK9o9eVRKr2I0dt1B+aRPJYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZGZiMzk5Mi0xZDJmLTQ2Y2UtODg2YS04ZTIyYTMyNjExZjgvMC8wMjQ2REQxNEFG NjhGNUU1NTEyQUJEODhEMURCNzUwN0U2OTEzQzk2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDI0NkREMTRBRjY4RjVFNTUxMkFCRDg4RDFEQjc1MDdFNjkx M0M5Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWRmYjM5OTItMWQyZi00NmNlLTg4 NmEtOGUyMmEzMjYxMWY4LzAvMDI0NkREMTRBRjY4RjVFNTUxMkFCRDg4RDFEQjc1 MDdFNjkxM0M5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIjREu3COHUNu3zbFPu82dI1ycDnNmQSPEkT Qce/FCDVhsNlhsaqUgSntICEzJKvAKUfH0h9cP3oEWWo+QwUWDyqpshgdS66Qw09 0GBVVfgOh16VKL3S2wyOQcphXg+BXPKPbZjqW4nYP/iuAQJjzbCbY6QDD3/oyUs0 hqvbVpPB/S1yt+gbjMGyDWqN6g0dU/TiT5p+OlSwf2kTml5Qv2ND6EqR+yiAOree 2UXYHSWqMZbdCKVcR2cNYYqNDJIduxiNzI504wy2+f9uiQrQivNe5tVPVKfLh4G4 ZPo7aUBib4OcTShQoM1hx/N9s8c4cgZ7Vn81GKagKIZv4TDPPhU= -----END CERTIFICATE-----Generated at Mon Mar 2 21:25:48 2026 by rpki-client