$ rpki-client -vvf repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.mft File: D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.mft (raw, json) Hash identifier: +jz7+/LMaJ8p8sF+AyCTCdRp7ENJMmCMwJawywH7+QA= Subject key identifier: 90:2F:93:A5:63:2B:16:6C:14:2D:6F:2E:30:F8:FE:4C:A4:24:06:C7 Authority key identifier: D5:54:24:C9:15:3D:E3:C2:85:DA:2B:00:86:FF:76:EF:FD:F6:D0:ED Certificate issuer: /CN=D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED Certificate serial: 394DCD19C56DC5DF6A471E0A900E36B156458DD3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.mft Manifest number: D6 Signing time: Sun 01 Mar 2026 11:51:11 +0000 Manifest this update: Sun 01 Mar 2026 11:46:11 +0000 Manifest next update: Wed 04 Mar 2026 13:37:11 +0000 Files and hashes: 1: 323030313a6466343a366234303a3a2f34382d3438203d3e20313533313331.roa (hash: U1yBT1SPjwTm71wjsvPBRQ+2gxg77ajbPlJlD+suADk=) 2: D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.crl (hash: d9OzFrJnrb6cjJHgC4WuSgqHwsF9UBEJ1WZF1UeaDuQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.crl rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 13:37:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:4d:cd:19:c5:6d:c5:df:6a:47:1e:0a:90:0e:36:b1:56:45:8d:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED Validity Not Before: Mar 1 11:46:11 2026 GMT Not After : Mar 4 13:37:11 2026 GMT Subject: CN=902F93A5632B166C142D6F2E30F8FE4CA42406C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:06:f4:ab:df:9b:8f:a9:b3:8a:6c:8b:7e:dc: 72:f1:02:85:0f:0a:e0:6e:85:5a:1e:9d:90:9a:27: 03:a6:84:38:19:e2:d7:3c:1e:33:f5:d9:12:70:4e: df:5f:16:25:ff:64:98:8c:75:aa:cf:d7:f0:ee:e6: ad:89:03:55:70:6e:4d:24:6f:58:a2:41:c1:16:02: d7:7c:dd:ca:75:35:2d:0e:16:a1:b6:c5:d6:7a:9b: af:4a:81:55:9c:ec:f6:63:98:0d:e5:21:31:bc:19: 72:21:4e:44:e2:b6:42:b9:eb:2a:71:90:04:f9:76: 21:24:5d:b0:8d:0e:b6:86:46:32:1f:3e:ab:26:8a: b5:10:15:24:73:8f:24:35:8f:13:8f:1f:e5:39:78: 14:f1:1e:9a:27:ef:52:37:0c:51:b0:79:b5:15:b7: 07:4c:e5:d5:1c:68:07:59:fd:b9:69:4a:3d:84:39: dc:f4:4f:92:3d:92:35:8d:f4:d3:22:4a:c7:01:38: 2e:6d:80:f2:b2:08:73:c3:7b:6e:b2:12:59:a7:44: 26:de:2c:13:63:4a:78:4d:48:85:8a:8e:f0:45:b0: b3:f8:f6:a4:be:25:96:96:ac:fe:95:a6:0d:29:1a: c4:05:e4:24:9e:21:a4:cb:65:58:2c:6f:e7:bb:f4: d1:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:2F:93:A5:63:2B:16:6C:14:2D:6F:2E:30:F8:FE:4C:A4:24:06:C7 X509v3 Authority Key Identifier: keyid:D5:54:24:C9:15:3D:E3:C2:85:DA:2B:00:86:FF:76:EF:FD:F6:D0:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:27:21:63:53:0f:b2:b2:4a:8b:5f:5d:92:ca:a8:e8:b5:1c: 0f:b1:77:19:da:a6:6b:3f:03:55:75:0e:3a:65:f8:81:08:a7: b4:4f:68:c5:0b:e1:22:95:4d:61:04:39:cd:fd:f0:f9:bb:18: c4:69:20:f1:48:92:1d:4c:6d:9a:f3:97:32:50:9a:13:92:ec: 9a:c1:c6:18:4b:8a:6e:30:90:b9:38:a1:7f:8f:f7:ee:56:64: 43:9b:86:5f:4f:6b:da:76:f6:33:28:24:02:a0:67:17:4b:98: 75:10:29:be:42:94:4b:fc:25:05:08:d2:ca:ff:45:c6:4d:cc: b7:3c:54:46:b9:d2:de:c9:8b:61:4f:58:f4:0c:2a:8d:dc:9f: 17:a1:84:b9:4c:70:c4:ea:9a:d0:8a:7a:07:c5:e1:26:fb:a0: e8:17:a3:3c:19:7c:4f:4b:0f:41:ee:04:32:d8:93:51:54:20: 04:91:bc:a0:dc:98:39:16:f1:a0:a2:da:9e:bb:cd:95:c5:ff: 9d:30:7a:fd:a2:02:55:a4:02:f7:a3:6f:91:66:41:b5:71:f6: ea:d7:ec:bb:9a:bd:88:4d:55:d6:24:f3:17:5d:a2:98:59:e4: 9d:fc:7e:7c:c1:08:b4:12:62:af:78:fa:5d:73:ca:99:b1:c9: 74:f0:c9:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOU3NGcVtxd9qRx4KkA42sVZFjdMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU1NDI0QzkxNTNERTNDMjg1REEyQjAwODZGRjc2RUZG REY2RDBFRDAeFw0yNjAzMDExMTQ2MTFaFw0yNjAzMDQxMzM3MTFaMDMxMTAvBgNV BAMTKDkwMkY5M0E1NjMyQjE2NkMxNDJENkYyRTMwRjhGRTRDQTQyNDA2QzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDBvSr35uPqbOKbIt+3HLxAoUP CuBuhVoenZCaJwOmhDgZ4tc8HjP12RJwTt9fFiX/ZJiMdarP1/Du5q2JA1Vwbk0k b1iiQcEWAtd83cp1NS0OFqG2xdZ6m69KgVWc7PZjmA3lITG8GXIhTkTitkK56ypx kAT5diEkXbCNDraGRjIfPqsmirUQFSRzjyQ1jxOPH+U5eBTxHpon71I3DFGwebUV twdM5dUcaAdZ/blpSj2EOdz0T5I9kjWN9NMiSscBOC5tgPKyCHPDe26yElmnRCbe LBNjSnhNSIWKjvBFsLP49qS+JZaWrP6Vpg0pGsQF5CSeIaTLZVgsb+e79NGdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkC+TpWMrFmwULW8uMPj+TKQkBscwHwYDVR0j BBgwFoAU1VQkyRU948KF2isAhv927/320O0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MjExZjM0Ny1hMWU3LTQ3MWQtYWQyMC1kYTc2YWFiZjM4NGMvMS9ENTU0MjRDOTE1 M0RFM0MyODVEQTJCMDA4NkZGNzZFRkZERjZEMEVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDU1NDI0QzkxNTNERTNDMjg1REEyQjAwODZGRjc2RUZGREY2 RDBFRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTIxMWYzNDctYTFlNy00NzFkLWFk MjAtZGE3NmFhYmYzODRjLzEvRDU1NDI0QzkxNTNERTNDMjg1REEyQjAwODZGRjc2 RUZGREY2RDBFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAknIWNTD7KySotfXZLKqOi1HA+xdxnapms/ A1V1Djpl+IEIp7RPaMUL4SKVTWEEOc398Pm7GMRpIPFIkh1MbZrzlzJQmhOS7JrB xhhLim4wkLk4oX+P9+5WZEObhl9Pa9p29jMoJAKgZxdLmHUQKb5ClEv8JQUI0sr/ RcZNzLc8VEa50t7Ji2FPWPQMKo3cnxehhLlMcMTqmtCKegfF4Sb7oOgXozwZfE9L D0HuBDLYk1FUIASRvKDcmDkW8aCi2p67zZXF/50wev2iAlWkAvejb5FmQbVx9urX 7LuavYhNVdYk8xddophZ5J38fnzBCLQSYq94+l1zypmxyXTwyQ0= -----END CERTIFICATE-----Generated at Mon Mar 2 04:05:48 2026 by rpki-client