$ rpki-client -vvf repo-rpki.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/D8F283D13C79D458461D8E83A481638975B3D90B.mft File: D8F283D13C79D458461D8E83A481638975B3D90B.mft (raw, json) Hash identifier: q1lEZL8JiiXLiVFTChzhloE5gz8vf3s3YtqiTorWDh8= Subject key identifier: C7:47:35:83:82:56:BF:85:D6:88:C2:42:53:E3:21:90:15:C4:92:17 Authority key identifier: D8:F2:83:D1:3C:79:D4:58:46:1D:8E:83:A4:81:63:89:75:B3:D9:0B Certificate issuer: /CN=D8F283D13C79D458461D8E83A481638975B3D90B Certificate serial: 6D5A0DE5B4669DA7A5D35EC5E32C620068BBD03C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D8F283D13C79D458461D8E83A481638975B3D90B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/D8F283D13C79D458461D8E83A481638975B3D90B.mft Manifest number: 02F1 Signing time: Mon 02 Mar 2026 02:27:19 +0000 Manifest this update: Mon 02 Mar 2026 02:22:19 +0000 Manifest next update: Thu 05 Mar 2026 14:08:19 +0000 Files and hashes: 1: D8F283D13C79D458461D8E83A481638975B3D90B.crl (hash: L0tdx5e+TNX2flAEDef/eHmjeFB/LqDS3WY5u20evP0=) 2: 3130332e3134392e3136342e302f32342d3234203d3e20313430303232.roa (hash: K0k+hTBsNJncES2akZnEP3mlQpVqZGGF0g7QmATvqxQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/D8F283D13C79D458461D8E83A481638975B3D90B.crl rsync://repo-rpki.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/D8F283D13C79D458461D8E83A481638975B3D90B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D8F283D13C79D458461D8E83A481638975B3D90B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:5a:0d:e5:b4:66:9d:a7:a5:d3:5e:c5:e3:2c:62:00:68:bb:d0:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8F283D13C79D458461D8E83A481638975B3D90B Validity Not Before: Mar 2 02:22:19 2026 GMT Not After : Mar 5 14:08:19 2026 GMT Subject: CN=C74735838256BF85D688C24253E3219015C49217 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b6:3e:2c:d4:1f:4c:53:89:43:f9:33:c3:be: 8c:7b:d3:7f:b5:15:6f:d7:cc:43:27:ee:9a:b3:e2: c5:90:b9:d5:b9:6a:ed:fa:e0:2d:57:a1:fc:26:b6: 9c:5f:31:9a:be:21:b6:96:a3:41:93:e7:2d:95:61: 06:57:9f:12:cd:c7:ac:05:49:9a:c0:af:44:8e:b2: 89:43:92:b9:b9:b7:b6:3e:2b:f0:c0:d6:2e:f9:51: 81:e2:92:6e:bb:f1:c8:3b:22:70:05:77:32:85:98: e7:bc:1b:b3:d1:68:ab:1f:d5:e5:40:89:58:f2:19: cc:a2:5e:93:9f:06:79:64:a0:aa:3a:7e:20:fa:8c: 2e:16:aa:3e:8f:23:f8:18:8e:08:0c:8c:3b:4c:f8: 3e:16:26:04:aa:0c:7c:59:15:fb:9a:a7:28:0a:d2: 3d:19:4e:23:f9:31:09:9a:73:de:6a:21:71:fd:b6: a4:d7:f1:86:48:29:79:d4:d0:de:4b:39:f9:d6:1d: 05:78:29:6f:1e:69:f4:e7:ca:82:bf:88:1c:90:50: 97:8a:5a:e9:95:33:f9:92:e9:b1:67:54:e5:4b:d5: 36:b3:85:49:9d:4b:0b:c2:d6:04:e3:95:3d:18:a5: 1e:8d:12:f4:59:e6:64:6e:b9:48:40:23:28:cf:dc: cc:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:47:35:83:82:56:BF:85:D6:88:C2:42:53:E3:21:90:15:C4:92:17 X509v3 Authority Key Identifier: keyid:D8:F2:83:D1:3C:79:D4:58:46:1D:8E:83:A4:81:63:89:75:B3:D9:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/D8F283D13C79D458461D8E83A481638975B3D90B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D8F283D13C79D458461D8E83A481638975B3D90B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/D8F283D13C79D458461D8E83A481638975B3D90B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:1f:66:97:09:48:14:71:48:98:89:8f:b5:15:f9:e4:e2:82: 9d:64:9d:aa:24:6d:b5:09:05:af:77:fb:84:5c:a7:df:93:31: 0e:cf:3b:9b:90:b7:67:a6:b9:55:fd:44:74:a0:ee:ef:5b:ae: 36:70:5d:f1:05:25:cf:d6:67:ae:da:7c:a5:f2:55:79:03:8e: 7e:b1:4d:1f:a9:bb:51:e7:5c:c3:15:ad:48:b4:d0:a4:d4:e1: 54:f5:22:78:f6:59:61:30:d3:0e:bb:e1:b2:5c:68:62:bd:7c: 51:f6:de:07:f4:65:11:5d:16:b2:e0:b4:f6:2b:0c:9e:e6:37: e6:7c:de:e1:00:e9:01:a3:f4:f8:81:15:f5:01:c4:6b:fb:5d: 38:f4:36:dd:97:a8:86:bb:63:39:09:96:4b:77:ce:7d:b0:53: 73:3e:92:9f:2f:e6:1d:75:29:b8:8d:16:89:12:da:9c:d9:37: 68:3b:3f:89:a6:7d:bc:a4:9f:05:a0:c1:25:e4:ea:d9:3e:30: 5e:0b:9d:a3:c1:85:99:03:bb:7f:35:b4:42:c1:a8:a2:88:7f: 07:fa:a7:64:71:d6:3e:de:01:a4:6c:48:c9:5c:2f:ab:55:b7: f1:8c:b9:c7:f6:89:65:a8:84:a0:b8:16:be:79:9f:4d:21:3b: 88:5c:df:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbVoN5bRmnael017F4yxiAGi70DwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDhGMjgzRDEzQzc5RDQ1ODQ2MUQ4RTgzQTQ4MTYzODk3 NUIzRDkwQjAeFw0yNjAzMDIwMjIyMTlaFw0yNjAzMDUxNDA4MTlaMDMxMTAvBgNV BAMTKEM3NDczNTgzODI1NkJGODVENjg4QzI0MjUzRTMyMTkwMTVDNDkyMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBtj4s1B9MU4lD+TPDvox703+1 FW/XzEMn7pqz4sWQudW5au364C1XofwmtpxfMZq+IbaWo0GT5y2VYQZXnxLNx6wF SZrAr0SOsolDkrm5t7Y+K/DA1i75UYHikm678cg7InAFdzKFmOe8G7PRaKsf1eVA iVjyGcyiXpOfBnlkoKo6fiD6jC4Wqj6PI/gYjggMjDtM+D4WJgSqDHxZFfuapygK 0j0ZTiP5MQmac95qIXH9tqTX8YZIKXnU0N5LOfnWHQV4KW8eafTnyoK/iByQUJeK WumVM/mS6bFnVOVL1TazhUmdSwvC1gTjlT0YpR6NEvRZ5mRuuUhAIyjP3MzVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUx0c1g4JWv4XWiMJCU+MhkBXEkhcwHwYDVR0j BBgwFoAU2PKD0Tx51FhGHY6DpIFjiXWz2QswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZjljNDQ2Zi1kOTcxLTRiNWUtYjI2OS0xZTgzZDNhMTRmZWYvMC9EOEYyODNEMTND NzlENDU4NDYxRDhFODNBNDgxNjM4OTc1QjNEOTBCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDhGMjgzRDEzQzc5RDQ1ODQ2MUQ4RTgzQTQ4MTYzODk3NUIz RDkwQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWY5YzQ0NmYtZDk3MS00YjVlLWIy NjktMWU4M2QzYTE0ZmVmLzAvRDhGMjgzRDEzQzc5RDQ1ODQ2MUQ4RTgzQTQ4MTYz ODk3NUIzRDkwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG4fZpcJSBRxSJiJj7UV+eTigp1knaokbbUJ Ba93+4Rcp9+TMQ7PO5uQt2emuVX9RHSg7u9brjZwXfEFJc/WZ67afKXyVXkDjn6x TR+pu1HnXMMVrUi00KTU4VT1Inj2WWEw0w674bJcaGK9fFH23gf0ZRFdFrLgtPYr DJ7mN+Z83uEA6QGj9PiBFfUBxGv7XTj0Nt2XqIa7YzkJlkt3zn2wU3M+kp8v5h11 KbiNFokS2pzZN2g7P4mmfbyknwWgwSXk6tk+MF4LnaPBhZkDu381tELBqKKIfwf6 p2Rx1j7eAaRsSMlcL6tVt/GMucf2iWWohKC4Fr55n00hO4hc34I= -----END CERTIFICATE-----Generated at Mon Mar 2 12:01:35 2026 by rpki-client