$ rpki-client -vvf repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/415543D423E0BD035D612DEA9BF060290E5552D2.mft File: 415543D423E0BD035D612DEA9BF060290E5552D2.mft (raw, json) Hash identifier: qQ06fhbqhIYlKkj1QHoe0EImLvAkvZ+tErxvEM52L4U= Subject key identifier: 58:31:AF:EC:AE:90:6E:80:21:0B:92:BD:9C:3B:F0:44:9E:C4:71:58 Authority key identifier: 41:55:43:D4:23:E0:BD:03:5D:61:2D:EA:9B:F0:60:29:0E:55:52:D2 Certificate issuer: /CN=415543D423E0BD035D612DEA9BF060290E5552D2 Certificate serial: 57C9BA01A3EFCEF4FB8112B83683889EC0695119 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/415543D423E0BD035D612DEA9BF060290E5552D2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/415543D423E0BD035D612DEA9BF060290E5552D2.mft Manifest number: 0289 Signing time: Sun 01 Mar 2026 10:31:23 +0000 Manifest this update: Sun 01 Mar 2026 10:26:23 +0000 Manifest next update: Wed 04 Mar 2026 21:44:23 +0000 Files and hashes: 1: 3130332e39352e382e302f32322d3232203d3e20313335343838.roa (hash: AtVHs5kAJBkQyj2u1rc3FvQOLg6GUIRmBQO2EJLX0+Y=) 2: 3130332e39352e392e302f32342d3234203d3e20313335343838.roa (hash: qH4fRHR0W4MFKh1E1105QryHXU3lSEp8fpTQZ+gmPmA=) 3: 3130332e39352e382e302f32342d3234203d3e20313335343838.roa (hash: AA52rkzyrvi9rx6IuPvoxChCUlojIckMTzbSuJyQ2Ps=) 4: 3130332e39352e31302e302f32342d3234203d3e20313335343838.roa (hash: TPGP1WPLeZbCaltrlkU8mbWIgtWk0gBSa5ZHqBY62UE=) 5: 3130332e39352e31312e302f32342d3234203d3e20313335343838.roa (hash: /Lar0zoBB4XPY+wQ2ITKPZI23ikh0KXVF/LsaIxKVs8=) 6: 415543D423E0BD035D612DEA9BF060290E5552D2.crl (hash: rz2oL3I4vUh419L944UbT3XOCa1zf3Sok2Sc5Ky49q0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/415543D423E0BD035D612DEA9BF060290E5552D2.crl rsync://repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/415543D423E0BD035D612DEA9BF060290E5552D2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/415543D423E0BD035D612DEA9BF060290E5552D2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 21:44:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:c9:ba:01:a3:ef:ce:f4:fb:81:12:b8:36:83:88:9e:c0:69:51:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=415543D423E0BD035D612DEA9BF060290E5552D2 Validity Not Before: Mar 1 10:26:23 2026 GMT Not After : Mar 4 21:44:23 2026 GMT Subject: CN=5831AFECAE906E80210B92BD9C3BF0449EC47158 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:9f:e7:9d:07:cc:23:3b:9c:1f:dc:35:47:7b: 02:58:4f:9f:3a:59:f0:d5:05:2d:f9:13:d1:a6:6d: 26:12:a9:62:2f:0f:c7:46:e1:a6:96:1b:33:a7:e7: d1:70:c0:03:ef:b8:a0:76:39:85:8e:19:f3:f7:21: ba:5c:c6:be:fa:64:d1:f2:79:49:5d:1e:b5:95:91: 66:92:25:15:4a:09:3a:54:fa:12:5b:05:a8:29:05: ea:e4:9a:7c:f0:18:5b:af:11:18:70:7a:1f:84:9a: e0:95:87:2b:59:b8:70:47:02:f3:8f:f0:e2:95:0a: 6c:1d:e3:33:3d:ad:c9:53:81:e2:a3:54:60:0d:e2: f4:3d:32:78:f3:9d:36:c8:b1:86:a8:18:15:3b:4c: 69:55:fe:83:d6:b0:a2:d2:ce:de:8a:ca:b5:37:e1: 89:b0:fd:88:9d:39:fd:56:d3:ad:76:7d:fd:14:0b: 1b:eb:22:2c:4f:27:f4:0f:cd:72:75:14:4a:63:00: 2c:cb:5a:7e:64:f2:b2:8f:40:c9:f9:49:51:b2:90: c8:76:6f:55:12:5e:73:84:10:92:f5:b4:7c:f7:6c: 75:a1:e6:83:1c:e7:08:38:73:0a:65:55:cb:dd:1d: cf:43:4d:39:9c:15:41:21:bc:7e:ab:d4:f1:cb:23: 37:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:31:AF:EC:AE:90:6E:80:21:0B:92:BD:9C:3B:F0:44:9E:C4:71:58 X509v3 Authority Key Identifier: keyid:41:55:43:D4:23:E0:BD:03:5D:61:2D:EA:9B:F0:60:29:0E:55:52:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/415543D423E0BD035D612DEA9BF060290E5552D2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/415543D423E0BD035D612DEA9BF060290E5552D2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/415543D423E0BD035D612DEA9BF060290E5552D2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:28:c5:2a:5a:47:1e:c6:c8:fb:89:10:d9:7b:a2:a1:fb:f1: 47:58:d5:9a:4c:91:57:69:6b:d4:59:16:fb:4b:5f:24:ca:bb: 41:11:2c:1c:03:48:fd:09:20:cc:08:62:64:c9:c2:64:a1:4c: eb:e8:ef:c3:96:a7:98:15:0c:f2:68:56:1f:13:49:07:4a:a0: ff:c6:ea:f2:66:17:6b:be:ea:6e:56:07:ab:c9:4a:6f:cf:fb: f6:44:15:f6:b0:0d:60:db:e3:1b:31:2a:9b:f5:41:57:62:1a: 4b:0a:3f:9b:d6:c5:a8:8a:5f:f8:41:7c:a9:f3:42:e4:5b:97: 3e:5e:f9:a9:20:67:5e:ae:3a:4b:a3:77:1a:a4:76:47:8a:ea: d7:f0:48:d6:ca:b3:44:bc:a8:7f:6c:ad:79:89:9d:a7:ce:6a: ba:1c:9e:5c:47:f7:97:b0:5a:f6:56:38:39:38:5b:52:76:31: c6:45:31:b2:cf:b0:df:ac:f9:4c:06:d1:ef:96:13:47:12:68: 21:9d:c6:2a:80:d4:57:98:f9:84:f6:40:4e:84:57:89:dc:ad: a9:6b:e3:b5:8c:25:f3:ae:39:a6:78:db:f6:a0:a8:e0:13:03: 43:f7:ae:6e:02:c9:de:7e:d5:ac:a5:cf:f1:81:2b:dc:55:29: 7c:43:0b:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV8m6AaPvzvT7gRK4NoOInsBpURkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDE1NTQzRDQyM0UwQkQwMzVENjEyREVBOUJGMDYwMjkw RTU1NTJEMjAeFw0yNjAzMDExMDI2MjNaFw0yNjAzMDQyMTQ0MjNaMDMxMTAvBgNV BAMTKDU4MzFBRkVDQUU5MDZFODAyMTBCOTJCRDlDM0JGMDQ0OUVDNDcxNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1n+edB8wjO5wf3DVHewJYT586 WfDVBS35E9GmbSYSqWIvD8dG4aaWGzOn59FwwAPvuKB2OYWOGfP3Ibpcxr76ZNHy eUldHrWVkWaSJRVKCTpU+hJbBagpBerkmnzwGFuvERhweh+EmuCVhytZuHBHAvOP 8OKVCmwd4zM9rclTgeKjVGAN4vQ9MnjznTbIsYaoGBU7TGlV/oPWsKLSzt6KyrU3 4Ymw/YidOf1W0612ff0UCxvrIixPJ/QPzXJ1FEpjACzLWn5k8rKPQMn5SVGykMh2 b1USXnOEEJL1tHz3bHWh5oMc5wg4cwplVcvdHc9DTTmcFUEhvH6r1PHLIzfnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWDGv7K6QboAhC5K9nDvwRJ7EcVgwHwYDVR0j BBgwFoAUQVVD1CPgvQNdYS3qm/BgKQ5VUtIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MzY0NjVlYy05MTYwLTQ1OWItOGQxMS05NDhmYzI2ZGExYzAvMC80MTU1NDNENDIz RTBCRDAzNUQ2MTJERUE5QkYwNjAyOTBFNTU1MkQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDE1NTQzRDQyM0UwQkQwMzVENjEyREVBOUJGMDYwMjkwRTU1 NTJEMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTM2NDY1ZWMtOTE2MC00NTliLThk MTEtOTQ4ZmMyNmRhMWMwLzAvNDE1NTQzRDQyM0UwQkQwMzVENjEyREVBOUJGMDYw MjkwRTU1NTJEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB4oxSpaRx7GyPuJENl7oqH78UdY1ZpMkVdp a9RZFvtLXyTKu0ERLBwDSP0JIMwIYmTJwmShTOvo78OWp5gVDPJoVh8TSQdKoP/G 6vJmF2u+6m5WB6vJSm/P+/ZEFfawDWDb4xsxKpv1QVdiGksKP5vWxaiKX/hBfKnz QuRblz5e+akgZ16uOkujdxqkdkeK6tfwSNbKs0S8qH9srXmJnafOarocnlxH95ew WvZWODk4W1J2McZFMbLPsN+s+UwG0e+WE0cSaCGdxiqA1FeY+YT2QE6EV4ncralr 47WMJfOuOaZ42/agqOATA0P3rm4Cyd5+1aylz/GBK9xVKXxDC5A= -----END CERTIFICATE-----Generated at Tue Mar 3 03:49:30 2026 by rpki-client