$ rpki-client -vvf repo-rpki.idnic.net/repo/9fbe10d1-fe64-433f-b5e8-09e8c704ec91/0/915F81BA8BD82880FF7DBCAD0DC99685CCBD17B5.mft File: 915F81BA8BD82880FF7DBCAD0DC99685CCBD17B5.mft (raw, json) Hash identifier: K/xQd98iR/YyawmwiADyCbCk1XIZ1WETvAhE70Hr2DY= Subject key identifier: F0:5C:7E:C9:F9:DF:17:C4:46:72:C9:FB:3C:1B:FA:B4:95:79:2B:91 Authority key identifier: 91:5F:81:BA:8B:D8:28:80:FF:7D:BC:AD:0D:C9:96:85:CC:BD:17:B5 Certificate issuer: /CN=915F81BA8BD82880FF7DBCAD0DC99685CCBD17B5 Certificate serial: 5C7292C4FF98645134CC60E3C1A3DAF62800E97D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/915F81BA8BD82880FF7DBCAD0DC99685CCBD17B5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9fbe10d1-fe64-433f-b5e8-09e8c704ec91/0/915F81BA8BD82880FF7DBCAD0DC99685CCBD17B5.mft Manifest number: 29 Signing time: Sun 01 Mar 2026 09:41:22 +0000 Manifest this update: Sun 01 Mar 2026 09:36:22 +0000 Manifest next update: Wed 04 Mar 2026 12:40:22 +0000 Files and hashes: 1: 3130332e332e34362e302f32342d3234203d3e203536323337.roa (hash: oMyB49fjG0qXg06zokEf9C1O9cFBM5Wz4/XD4oP7uLw=) 2: 915F81BA8BD82880FF7DBCAD0DC99685CCBD17B5.crl (hash: +LLxbEgyqJ/R+w7yvVON+mhP0l7tsiQ4Bm2q/oQHjUg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9fbe10d1-fe64-433f-b5e8-09e8c704ec91/0/915F81BA8BD82880FF7DBCAD0DC99685CCBD17B5.crl rsync://repo-rpki.idnic.net/repo/9fbe10d1-fe64-433f-b5e8-09e8c704ec91/0/915F81BA8BD82880FF7DBCAD0DC99685CCBD17B5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/915F81BA8BD82880FF7DBCAD0DC99685CCBD17B5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 12:40:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:72:92:c4:ff:98:64:51:34:cc:60:e3:c1:a3:da:f6:28:00:e9:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=915F81BA8BD82880FF7DBCAD0DC99685CCBD17B5 Validity Not Before: Mar 1 09:36:22 2026 GMT Not After : Mar 4 12:40:22 2026 GMT Subject: CN=F05C7EC9F9DF17C44672C9FB3C1BFAB495792B91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:68:d0:84:09:88:b4:17:f4:c5:ef:3e:a6:23: 8c:ce:70:a9:bc:a4:5d:54:ec:38:6e:9e:fc:fa:3d: 9e:96:ae:21:c2:05:f4:8c:ff:8d:8f:cc:52:0c:16: 5d:2e:c1:08:49:dc:51:24:8c:3f:a3:2b:3d:05:69: 77:c1:65:57:76:54:6d:b4:9d:12:95:80:99:41:77: 85:52:94:49:31:e4:08:94:a7:4c:87:9b:0c:24:41: ef:49:68:b5:88:eb:c3:5e:de:ef:85:e5:b3:24:df: d4:bb:49:fd:72:48:ce:c1:6c:27:e7:bc:82:ea:10: 41:68:05:f6:e5:6a:63:51:46:ef:6e:4b:ff:74:ee: 82:42:d5:80:ed:50:59:69:de:f3:cc:3c:c2:d8:35: 97:4e:2f:ad:12:6c:a9:2e:59:7b:97:d3:b7:b9:8e: 13:68:cf:f2:43:44:96:c0:64:3c:53:03:b3:9c:b4: 7f:95:bd:66:27:ff:d7:fc:fa:c4:fa:a8:5a:08:62: 1e:b5:6b:48:c8:96:22:87:bc:7d:d8:4b:28:1a:4c: 60:29:0a:c8:42:cd:c6:8c:89:ce:fa:53:63:38:7e: 1d:a8:a4:d0:07:13:e6:9a:a7:99:f9:d0:87:51:df: db:49:07:57:ae:b0:d2:36:00:48:6e:7d:80:b5:c5: a1:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:5C:7E:C9:F9:DF:17:C4:46:72:C9:FB:3C:1B:FA:B4:95:79:2B:91 X509v3 Authority Key Identifier: keyid:91:5F:81:BA:8B:D8:28:80:FF:7D:BC:AD:0D:C9:96:85:CC:BD:17:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9fbe10d1-fe64-433f-b5e8-09e8c704ec91/0/915F81BA8BD82880FF7DBCAD0DC99685CCBD17B5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/915F81BA8BD82880FF7DBCAD0DC99685CCBD17B5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9fbe10d1-fe64-433f-b5e8-09e8c704ec91/0/915F81BA8BD82880FF7DBCAD0DC99685CCBD17B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:88:09:db:07:6b:07:6d:71:26:c3:85:b7:20:41:3e:d5:45: 04:4c:75:7a:62:12:4a:9e:39:9a:af:21:a3:08:82:7c:26:08: f9:56:6d:c1:10:4b:a7:5b:df:b7:02:f7:c1:67:1c:72:71:ed: e5:83:dc:3a:93:50:db:48:7a:17:8b:4d:d3:60:34:a0:1f:19: 80:10:ea:0b:12:b6:35:11:53:2b:44:5a:79:ba:51:3a:a3:02: 36:d9:90:65:2c:0c:33:74:cb:7f:9c:d2:da:15:da:55:9c:00: 27:c7:bf:fb:50:bf:b6:12:31:81:ba:b6:8d:e2:03:f5:8c:a6: 8c:0a:93:77:fa:37:df:91:2f:e0:fc:96:6a:ec:f7:88:15:9c: 10:6b:7c:06:b7:b9:f7:0d:dc:be:09:e8:f4:ab:6f:37:42:25: 10:06:73:a7:ed:be:f8:5e:24:15:27:6e:09:a3:d3:3f:3c:0b: f4:74:3b:b1:62:b7:30:5a:fb:12:f6:22:0b:3c:f2:b3:62:69: be:50:be:0c:4d:4a:a7:ef:fa:06:77:5f:9f:52:26:65:82:27: 00:71:89:7c:31:83:ff:f1:27:77:8c:e4:4c:1a:62:65:dc:2d: 09:05:ba:25:b3:5f:3a:db:04:b7:c6:50:98:38:dd:b9:e4:0c: d0:ff:f6:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXHKSxP+YZFE0zGDjwaPa9igA6X0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTE1RjgxQkE4QkQ4Mjg4MEZGN0RCQ0FEMERDOTk2ODVD Q0JEMTdCNTAeFw0yNjAzMDEwOTM2MjJaFw0yNjAzMDQxMjQwMjJaMDMxMTAvBgNV BAMTKEYwNUM3RUM5RjlERjE3QzQ0NjcyQzlGQjNDMUJGQUI0OTU3OTJCOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8aNCECYi0F/TF7z6mI4zOcKm8 pF1U7Dhunvz6PZ6WriHCBfSM/42PzFIMFl0uwQhJ3FEkjD+jKz0FaXfBZVd2VG20 nRKVgJlBd4VSlEkx5AiUp0yHmwwkQe9JaLWI68Ne3u+F5bMk39S7Sf1ySM7BbCfn vILqEEFoBfblamNRRu9uS/907oJC1YDtUFlp3vPMPMLYNZdOL60SbKkuWXuX07e5 jhNoz/JDRJbAZDxTA7OctH+VvWYn/9f8+sT6qFoIYh61a0jIliKHvH3YSygaTGAp CshCzcaMic76U2M4fh2opNAHE+aap5n50IdR39tJB1eusNI2AEhufYC1xaFnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8Fx+yfnfF8RGcsn7PBv6tJV5K5EwHwYDVR0j BBgwFoAUkV+BuovYKID/fbytDcmWhcy9F7UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZmJlMTBkMS1mZTY0LTQzM2YtYjVlOC0wOWU4YzcwNGVjOTEvMC85MTVGODFCQThC RDgyODgwRkY3REJDQUQwREM5OTY4NUNDQkQxN0I1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTE1RjgxQkE4QkQ4Mjg4MEZGN0RCQ0FEMERDOTk2ODVDQ0JE MTdCNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWZiZTEwZDEtZmU2NC00MzNmLWI1 ZTgtMDllOGM3MDRlYzkxLzAvOTE1RjgxQkE4QkQ4Mjg4MEZGN0RCQ0FEMERDOTk2 ODVDQ0JEMTdCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABiICdsHawdtcSbDhbcgQT7VRQRMdXpiEkqe OZqvIaMIgnwmCPlWbcEQS6db37cC98FnHHJx7eWD3DqTUNtIeheLTdNgNKAfGYAQ 6gsStjURUytEWnm6UTqjAjbZkGUsDDN0y3+c0toV2lWcACfHv/tQv7YSMYG6to3i A/WMpowKk3f6N9+RL+D8lmrs94gVnBBrfAa3ufcN3L4J6PSrbzdCJRAGc6ftvvhe JBUnbgmj0z88C/R0O7FitzBa+xL2Igs88rNiab5QvgxNSqfv+gZ3X59SJmWCJwBx iXwxg//xJ3eM5EwaYmXcLQkFuiWzXzrbBLfGUJg43bnkDND/9pg= -----END CERTIFICATE-----Generated at Mon Mar 2 14:29:04 2026 by rpki-client