$ rpki-client -vvf repo-rpki.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.mft File: C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.mft (raw, json) Hash identifier: nHTTN/isG4uQEVSVQCWZ7n4KB5P0I7+aS+WT5svseIQ= Subject key identifier: 8C:18:04:74:57:5C:84:D5:5E:55:2E:A4:8A:88:00:F9:E8:9F:12:C3 Authority key identifier: C7:84:C8:EE:6F:7C:E3:C8:47:FC:BD:1C:CD:F2:32:72:00:EF:5C:70 Certificate issuer: /CN=C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70 Certificate serial: 6DB31E966B4B5951EB1AEEC184F63E61F5578841 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.mft Manifest number: 01F0 Signing time: Sat 28 Feb 2026 18:11:09 +0000 Manifest this update: Sat 28 Feb 2026 18:06:09 +0000 Manifest next update: Tue 03 Mar 2026 18:35:09 +0000 Files and hashes: 1: C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.crl (hash: o2P33FKqeOe3Yo8MbiBIM4crOTYJD2eKJP1IqSqFOjU=) 2: 3130332e3137382e38332e302f32342d3234203d3e20313437313730.roa (hash: SPILoD0YuDgHkCG/UcROiBKV6NuzifUgiPor6w8kdtI=) 3: 3130332e3137342e31332e302f32342d3234203d3e20313437313730.roa (hash: EANS/BbBSV3D2lqyFzIlb0gYJ6M3G6ZH8tGtZE5xhF4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.crl rsync://repo-rpki.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 18:35:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:b3:1e:96:6b:4b:59:51:eb:1a:ee:c1:84:f6:3e:61:f5:57:88:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70 Validity Not Before: Feb 28 18:06:09 2026 GMT Not After : Mar 3 18:35:09 2026 GMT Subject: CN=8C180474575C84D55E552EA48A8800F9E89F12C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:0d:5d:21:3a:e8:75:24:1f:18:b4:48:3b:59: 85:85:c0:38:8c:cf:a7:8f:23:fc:53:5e:d2:05:d3: 70:5e:c7:7a:1c:7d:e9:2b:fb:e4:3f:4f:0e:e3:48: 80:23:14:74:29:9a:82:20:c3:39:4a:6a:d1:36:86: 3e:aa:aa:71:22:23:09:a0:dc:d6:16:d6:a1:f1:be: 58:1c:b2:83:3b:a2:f0:d1:86:be:1f:6f:51:fb:74: 74:a2:47:d7:00:13:3b:53:52:e3:a3:d2:a2:83:79: 86:7c:5c:2e:01:3b:78:13:cb:d3:31:5b:04:37:fb: b7:9b:3e:4d:b4:f9:39:6d:ea:cc:30:90:d3:63:df: db:e4:6c:f8:d2:c4:7f:fd:b4:22:0c:78:07:90:8f: 2d:0e:47:87:c9:ef:39:57:c0:ce:f3:50:20:20:65: e0:53:5f:e2:58:46:ed:d2:d4:86:23:d4:6c:c0:b8: a1:fb:c7:03:7a:9e:c7:f5:a5:1b:42:41:92:68:a5: 39:bc:67:2b:e1:ba:8e:08:21:36:f0:69:5c:e6:fa: 11:4c:6f:07:2f:5a:48:e1:44:50:6f:ad:74:73:13: 68:20:98:5f:60:bd:03:7c:16:a0:ea:86:d1:23:a8: 72:a8:aa:f6:c5:82:4d:be:ee:ab:d8:5d:d4:49:50: 80:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:18:04:74:57:5C:84:D5:5E:55:2E:A4:8A:88:00:F9:E8:9F:12:C3 X509v3 Authority Key Identifier: keyid:C7:84:C8:EE:6F:7C:E3:C8:47:FC:BD:1C:CD:F2:32:72:00:EF:5C:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:15:80:19:fc:84:49:52:6d:d8:cd:6c:d0:a9:c7:81:ee:08: ce:99:aa:f4:8c:15:be:40:f4:06:41:b1:71:7a:2b:e9:01:06: 1a:d2:35:0c:dd:0e:26:b3:81:eb:c4:49:36:ff:d2:85:d1:67: 12:4b:e7:54:39:0e:ed:27:cc:49:c8:06:71:14:b1:d8:3b:0c: ac:13:b1:55:a4:8b:8e:fc:eb:ca:ce:89:60:fa:dd:01:df:73: 20:2f:ec:dc:44:be:89:8b:08:21:a1:dd:4c:ee:0a:d2:fc:9e: f9:e2:1e:da:d6:d2:e8:64:aa:79:95:0d:95:4d:77:9b:4f:c4: 80:f9:a6:82:6a:5b:bd:db:7c:a1:39:90:06:1f:06:8b:4d:25: 2d:10:d2:c8:6c:8b:32:82:d8:1f:ac:a9:1e:54:28:a4:99:fc: 49:d7:7b:ad:4b:84:c1:14:97:cc:8e:17:f6:e6:94:c5:4d:32: e6:a3:46:49:87:6d:eb:bd:f5:6b:28:51:6b:8a:ee:69:cb:27: a3:19:8a:75:49:82:54:d4:b4:3b:f0:56:95:00:6f:a9:81:82: 09:dd:13:47:f6:8f:74:05:9e:8f:ea:dd:d9:74:1e:17:26:c5: b6:a3:fe:b1:34:28:0d:4b:97:fe:65:5f:80:4c:4d:64:ad:10: ff:e8:18:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbbMelmtLWVHrGu7BhPY+YfVXiEEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzc4NEM4RUU2RjdDRTNDODQ3RkNCRDFDQ0RGMjMyNzIw MEVGNUM3MDAeFw0yNjAyMjgxODA2MDlaFw0yNjAzMDMxODM1MDlaMDMxMTAvBgNV BAMTKDhDMTgwNDc0NTc1Qzg0RDU1RTU1MkVBNDhBODgwMEY5RTg5RjEyQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+DV0hOuh1JB8YtEg7WYWFwDiM z6ePI/xTXtIF03Bex3ocfekr++Q/Tw7jSIAjFHQpmoIgwzlKatE2hj6qqnEiIwmg 3NYW1qHxvlgcsoM7ovDRhr4fb1H7dHSiR9cAEztTUuOj0qKDeYZ8XC4BO3gTy9Mx WwQ3+7ebPk20+Tlt6swwkNNj39vkbPjSxH/9tCIMeAeQjy0OR4fJ7zlXwM7zUCAg ZeBTX+JYRu3S1IYj1GzAuKH7xwN6nsf1pRtCQZJopTm8Zyvhuo4IITbwaVzm+hFM bwcvWkjhRFBvrXRzE2ggmF9gvQN8FqDqhtEjqHKoqvbFgk2+7qvYXdRJUIBXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjBgEdFdchNVeVS6kiogA+eifEsMwHwYDVR0j BBgwFoAUx4TI7m9848hH/L0czfIycgDvXHAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZmRlMWYwZS0yMzFmLTQ0Y2UtOTBjMy0zMmFjZGY5ZDI2YzAvMC9DNzg0QzhFRTZG N0NFM0M4NDdGQ0JEMUNDREYyMzI3MjAwRUY1QzcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzc4NEM4RUU2RjdDRTNDODQ3RkNCRDFDQ0RGMjMyNzIwMEVG NUM3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWZkZTFmMGUtMjMxZi00NGNlLTkw YzMtMzJhY2RmOWQyNmMwLzAvQzc4NEM4RUU2RjdDRTNDODQ3RkNCRDFDQ0RGMjMy NzIwMEVGNUM3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB0VgBn8hElSbdjNbNCpx4HuCM6ZqvSMFb5A 9AZBsXF6K+kBBhrSNQzdDiazgevESTb/0oXRZxJL51Q5Du0nzEnIBnEUsdg7DKwT sVWki47868rOiWD63QHfcyAv7NxEvomLCCGh3UzuCtL8nvniHtrW0uhkqnmVDZVN d5tPxID5poJqW73bfKE5kAYfBotNJS0Q0shsizKC2B+sqR5UKKSZ/EnXe61LhMEU l8yOF/bmlMVNMuajRkmHbeu99WsoUWuK7mnLJ6MZinVJglTUtDvwVpUAb6mBggnd E0f2j3QFno/q3dl0Hhcmxbaj/rE0KA1Ll/5lX4BMTWStEP/oGAM= -----END CERTIFICATE-----Generated at Mon Mar 2 04:11:33 2026 by rpki-client