$ rpki-client -vvf repo-rpki.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.mft File: C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.mft (raw, json) Hash identifier: waH+Si11Egr7nBhWo6GMbaxzWMvm7CCIx3pyBqCC3mY= Subject key identifier: 36:2D:6A:27:02:5B:7B:0C:83:32:2A:15:0B:6C:8C:93:0A:CB:18:08 Authority key identifier: C2:0D:D3:7A:F0:EF:3C:A0:55:DF:DF:8F:3F:5D:18:F0:81:81:96:F4 Certificate issuer: /CN=C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4 Certificate serial: 601F027E3022E30895127C99C65E4379D889CF58 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.mft Manifest number: 03A0 Signing time: Sat 28 Feb 2026 21:22:12 +0000 Manifest this update: Sat 28 Feb 2026 21:17:12 +0000 Manifest next update: Wed 04 Mar 2026 04:33:12 +0000 Files and hashes: 1: 3130332e3136312e37332e302f32342d3234203d3e203538333738.roa (hash: yhKeiwU+JCs9UN8oh228h1Q0h11o4+yJwLGZRxsDQjM=) 2: 3130332e3136312e37322e302f32342d3234203d3e203538333738.roa (hash: KGeHvvLL7YUj6ruPXwXmEedVa7petv8U3MdeekZgjts=) 3: C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.crl (hash: u5sZpxj8jHg0PHrm/hw+SRNS5AJIb46vH1DNJZPq4xM=) 4: 3130332e3136312e37332e302f32342d3234203d3e20313430333936.roa (hash: /rt35EUSw4Ix6/cmxLUEYEesdVZ42xEum9IJJSBZ0aY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.crl rsync://repo-rpki.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 04:33:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:1f:02:7e:30:22:e3:08:95:12:7c:99:c6:5e:43:79:d8:89:cf:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4 Validity Not Before: Feb 28 21:17:12 2026 GMT Not After : Mar 4 04:33:12 2026 GMT Subject: CN=362D6A27025B7B0C83322A150B6C8C930ACB1808 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:af:96:4c:24:85:60:a8:b7:3f:7d:40:a5:a3: 8d:aa:8f:34:ed:fd:02:d4:7a:29:5a:7d:06:74:f5: c4:c7:1d:8f:f7:55:04:8b:93:a7:fa:59:5b:34:5d: 19:ce:d2:d5:93:de:aa:32:be:ec:5c:69:d7:4a:d2: 7b:c1:28:eb:bd:c3:d7:0c:23:e4:da:0f:3a:c2:d6: dd:cf:6c:0a:59:8a:c3:37:62:3b:23:00:65:d3:5a: f7:a4:48:0e:39:dc:bf:40:e8:10:04:4e:fa:96:22: 47:e0:b4:5c:1d:42:5d:c7:55:40:81:8d:37:52:5e: b1:57:1d:34:7a:18:f0:e8:34:26:6c:27:3a:48:e9: 07:0a:f4:80:90:1e:ec:00:5f:3c:9d:08:40:0c:33: 69:2f:80:96:e7:59:b3:e1:95:5a:04:52:e5:08:42: 4a:b3:5b:ac:3f:3e:e0:22:47:57:ea:9f:c9:33:f2: 52:72:c8:ef:23:b7:ef:fb:f2:47:0b:75:1d:5c:c8: 16:1d:cd:15:b5:6f:f0:59:3d:63:a0:16:02:2e:d8: a5:69:8b:61:eb:88:2b:08:3c:f3:54:51:e7:bd:62: 54:1f:8a:71:40:86:8a:00:d1:a6:00:12:2a:8b:25: 63:f2:fc:55:88:08:0e:87:31:36:0e:a4:7b:dc:a2: 72:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:2D:6A:27:02:5B:7B:0C:83:32:2A:15:0B:6C:8C:93:0A:CB:18:08 X509v3 Authority Key Identifier: keyid:C2:0D:D3:7A:F0:EF:3C:A0:55:DF:DF:8F:3F:5D:18:F0:81:81:96:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:4a:9b:3f:eb:26:f3:ce:34:64:73:4f:77:8c:d0:4a:a0:ae: e0:14:27:96:93:27:53:8a:17:95:23:76:4c:5d:7b:b6:d9:07: 23:8c:27:ff:66:2a:14:ee:92:5b:6a:fd:c8:51:e7:04:25:23: 2b:58:52:46:ff:0a:bf:e6:0b:f3:63:56:8b:e1:3e:6e:6e:f3: 6c:fd:c3:b1:01:b3:10:1a:f9:20:3e:63:0e:13:70:8e:96:3d: 41:37:de:85:68:41:ab:da:b1:21:60:4e:8d:ef:52:a1:70:09: b3:18:0e:08:90:ba:86:88:3c:54:0a:a9:49:02:6f:e0:c6:cf: b5:8c:4d:1e:70:04:55:ab:60:7f:fd:c9:93:6e:74:3d:01:d4: 69:1b:57:d1:6c:f4:62:83:2a:8e:3c:9c:e7:24:7a:de:81:13: bc:63:53:4b:bf:68:c7:41:23:e7:cd:fb:8c:99:51:fe:17:38: e4:a3:62:e8:c4:24:7e:f7:07:9a:f0:7f:a6:ab:cb:22:b4:6d: 98:29:f0:62:6a:86:c7:73:52:67:72:83:f2:2c:0d:19:d7:d6: 5e:df:6f:71:21:78:38:62:7f:7d:4d:ad:96:d5:9f:ab:90:40: 86:f8:9c:6b:75:7b:a4:4a:da:6b:4f:e3:49:87:e6:62:d9:6b: 67:ed:77:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYB8CfjAi4wiVEnyZxl5DediJz1gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzIwREQzN0FGMEVGM0NBMDU1REZERjhGM0Y1RDE4RjA4 MTgxOTZGNDAeFw0yNjAyMjgyMTE3MTJaFw0yNjAzMDQwNDMzMTJaMDMxMTAvBgNV BAMTKDM2MkQ2QTI3MDI1QjdCMEM4MzMyMkExNTBCNkM4QzkzMEFDQjE4MDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZr5ZMJIVgqLc/fUClo42qjzTt /QLUeilafQZ09cTHHY/3VQSLk6f6WVs0XRnO0tWT3qoyvuxcaddK0nvBKOu9w9cM I+TaDzrC1t3PbApZisM3YjsjAGXTWvekSA453L9A6BAETvqWIkfgtFwdQl3HVUCB jTdSXrFXHTR6GPDoNCZsJzpI6QcK9ICQHuwAXzydCEAMM2kvgJbnWbPhlVoEUuUI QkqzW6w/PuAiR1fqn8kz8lJyyO8jt+/78kcLdR1cyBYdzRW1b/BZPWOgFgIu2KVp i2HriCsIPPNUUee9YlQfinFAhooA0aYAEiqLJWPy/FWICA6HMTYOpHvconLRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNi1qJwJbewyDMioVC2yMkwrLGAgwHwYDVR0j BBgwFoAUwg3TevDvPKBV39+PP10Y8IGBlvQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZWJlN2FkOC1lMTVjLTQwMTQtYmZiMy1iZTY5YjdkNWRlODgvMC9DMjBERDM3QUYw RUYzQ0EwNTVERkRGOEYzRjVEMThGMDgxODE5NkY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzIwREQzN0FGMEVGM0NBMDU1REZERjhGM0Y1RDE4RjA4MTgx OTZGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWViZTdhZDgtZTE1Yy00MDE0LWJm YjMtYmU2OWI3ZDVkZTg4LzAvQzIwREQzN0FGMEVGM0NBMDU1REZERjhGM0Y1RDE4 RjA4MTgxOTZGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ5Kmz/rJvPONGRzT3eM0EqgruAUJ5aTJ1OK F5Ujdkxde7bZByOMJ/9mKhTukltq/chR5wQlIytYUkb/Cr/mC/NjVovhPm5u82z9 w7EBsxAa+SA+Yw4TcI6WPUE33oVoQavasSFgTo3vUqFwCbMYDgiQuoaIPFQKqUkC b+DGz7WMTR5wBFWrYH/9yZNudD0B1GkbV9Fs9GKDKo48nOcket6BE7xjU0u/aMdB I+fN+4yZUf4XOOSjYujEJH73B5rwf6aryyK0bZgp8GJqhsdzUmdyg/IsDRnX1l7f b3EheDhif31NrZbVn6uQQIb4nGt1e6RK2mtP40mH5mLZa2ftd7Q= -----END CERTIFICATE-----Generated at Sun Mar 1 23:55:31 2026 by rpki-client