$ rpki-client -vvf repo-rpki.idnic.net/repo/a66a8f28-9a03-4376-b612-31f5ad1c1ed6/0/67A428D3DC89DDEF5BE7AC43FB7C88175EC3871F.mft File: 67A428D3DC89DDEF5BE7AC43FB7C88175EC3871F.mft (raw, json) Hash identifier: W2/5TNr8loSDI0C8QZ2A0SoFDB3vAxWnH4k9dKjL2z4= Subject key identifier: 94:95:CA:12:BB:E8:60:F7:E8:5A:1D:AC:E7:24:77:1B:5D:71:63:8F Authority key identifier: 67:A4:28:D3:DC:89:DD:EF:5B:E7:AC:43:FB:7C:88:17:5E:C3:87:1F Certificate issuer: /CN=67A428D3DC89DDEF5BE7AC43FB7C88175EC3871F Certificate serial: 775693D3024C16CC82F0118FD8D62681FE0451BD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/67A428D3DC89DDEF5BE7AC43FB7C88175EC3871F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a66a8f28-9a03-4376-b612-31f5ad1c1ed6/0/67A428D3DC89DDEF5BE7AC43FB7C88175EC3871F.mft Manifest number: 0205 Signing time: Sun 01 Mar 2026 11:12:27 +0000 Manifest this update: Sun 01 Mar 2026 11:07:27 +0000 Manifest next update: Wed 04 Mar 2026 19:32:27 +0000 Files and hashes: 1: 3130332e35392e39342e302f32332d3234203d3e20313336303532.roa (hash: 8iEgHOEIqDfpr7gSt8jxyho1deCIzw83qW565uPVSgs=) 2: 67A428D3DC89DDEF5BE7AC43FB7C88175EC3871F.crl (hash: wcLpLxuRV/a7WU0Gm5jgA4zidXg6yfhzYAbzcLrf9zA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a66a8f28-9a03-4376-b612-31f5ad1c1ed6/0/67A428D3DC89DDEF5BE7AC43FB7C88175EC3871F.crl rsync://repo-rpki.idnic.net/repo/a66a8f28-9a03-4376-b612-31f5ad1c1ed6/0/67A428D3DC89DDEF5BE7AC43FB7C88175EC3871F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/67A428D3DC89DDEF5BE7AC43FB7C88175EC3871F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 19:32:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:56:93:d3:02:4c:16:cc:82:f0:11:8f:d8:d6:26:81:fe:04:51:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67A428D3DC89DDEF5BE7AC43FB7C88175EC3871F Validity Not Before: Mar 1 11:07:27 2026 GMT Not After : Mar 4 19:32:27 2026 GMT Subject: CN=9495CA12BBE860F7E85A1DACE724771B5D71638F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:96:75:52:db:40:4d:72:bc:bc:eb:fb:74:db: 99:97:1a:84:36:88:b4:f3:6d:ee:c9:63:b1:6e:22: 19:a6:3c:76:f0:ba:0d:b4:20:a7:93:aa:ab:7d:76: f8:61:5b:75:ec:79:51:06:3b:78:e3:c4:eb:f8:3a: 78:4f:28:40:2d:10:74:c8:a8:54:04:8b:96:ed:94: 8a:bf:ad:2e:e6:d9:a2:c2:3c:de:41:9d:33:45:80: 1a:6d:ed:28:ab:0a:fd:5f:30:56:50:dc:ba:59:40: fe:f0:dc:c3:c7:a6:63:be:45:19:88:50:7f:59:b6: ad:cb:d8:b3:ac:f1:65:48:a1:75:7e:14:31:c1:59: ce:dd:e2:ba:50:11:9b:b8:09:e6:c4:b9:22:41:72: cd:91:80:ff:b9:da:5d:eb:9c:80:b2:32:d7:46:21: 38:f7:ab:b1:cf:c3:ce:f0:9f:f3:d2:50:23:5e:c8: 2d:e2:64:c7:d8:6b:2d:ad:64:c4:94:d5:6e:52:55: 9f:95:4d:9f:cf:2e:2c:e0:2c:05:a8:b4:6b:c2:1f: b5:00:5e:23:cf:72:cd:72:49:04:32:f4:84:38:66: f5:69:e4:b2:4e:07:47:15:2a:86:ef:13:0e:27:6f: 1c:78:00:ea:01:c1:01:ba:5a:9a:96:de:dc:89:02: 82:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:95:CA:12:BB:E8:60:F7:E8:5A:1D:AC:E7:24:77:1B:5D:71:63:8F X509v3 Authority Key Identifier: keyid:67:A4:28:D3:DC:89:DD:EF:5B:E7:AC:43:FB:7C:88:17:5E:C3:87:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a66a8f28-9a03-4376-b612-31f5ad1c1ed6/0/67A428D3DC89DDEF5BE7AC43FB7C88175EC3871F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/67A428D3DC89DDEF5BE7AC43FB7C88175EC3871F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a66a8f28-9a03-4376-b612-31f5ad1c1ed6/0/67A428D3DC89DDEF5BE7AC43FB7C88175EC3871F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:5d:28:9b:99:71:31:e3:6e:76:61:84:2a:aa:ca:4d:b7:cc: 75:71:67:0c:79:f2:25:80:03:7c:2e:f3:ad:94:a8:bc:85:7d: b5:e3:ed:7e:3e:ef:cf:d4:00:54:5b:98:84:cb:eb:84:6f:fc: 88:13:6e:9b:27:ce:86:e5:60:2b:3e:16:60:b3:9d:d4:f8:9c: 90:ee:01:ca:f8:07:4f:0e:45:c4:61:eb:89:a2:d6:32:ff:e6: 91:f2:ad:95:8b:88:e6:22:af:7e:63:45:ec:28:a2:21:93:60: e3:fe:3e:71:cf:56:42:93:3c:b7:c4:71:d2:ef:07:5b:62:ff: d3:7f:30:7f:4e:0e:88:5a:44:38:7d:51:57:8b:53:f9:3f:a0: 84:d2:48:b1:87:fe:93:64:72:77:94:e2:38:d8:7f:88:d4:2e: a1:75:4e:b6:16:6b:7e:2e:b5:5c:8d:5c:de:ff:4a:a1:bf:f1: 76:16:df:02:ef:cf:f7:48:4a:fd:75:d2:31:60:15:79:9e:b3: 39:0a:68:f3:52:c7:40:30:f9:c2:93:f9:7f:cd:46:01:f2:05: f6:9c:bd:0a:95:f3:19:27:56:3a:0a:6a:da:20:ef:95:e3:3a: 89:e5:fc:16:6b:ac:af:92:62:7c:35:6f:01:f3:19:d8:90:c1: b8:28:db:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd1aT0wJMFsyC8BGP2NYmgf4EUb0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjdBNDI4RDNEQzg5RERFRjVCRTdBQzQzRkI3Qzg4MTc1 RUMzODcxRjAeFw0yNjAzMDExMTA3MjdaFw0yNjAzMDQxOTMyMjdaMDMxMTAvBgNV BAMTKDk0OTVDQTEyQkJFODYwRjdFODVBMURBQ0U3MjQ3NzFCNUQ3MTYzOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFlnVS20BNcry86/t025mXGoQ2 iLTzbe7JY7FuIhmmPHbwug20IKeTqqt9dvhhW3XseVEGO3jjxOv4OnhPKEAtEHTI qFQEi5btlIq/rS7m2aLCPN5BnTNFgBpt7SirCv1fMFZQ3LpZQP7w3MPHpmO+RRmI UH9Ztq3L2LOs8WVIoXV+FDHBWc7d4rpQEZu4CebEuSJBcs2RgP+52l3rnICyMtdG ITj3q7HPw87wn/PSUCNeyC3iZMfYay2tZMSU1W5SVZ+VTZ/PLizgLAWotGvCH7UA XiPPcs1ySQQy9IQ4ZvVp5LJOB0cVKobvEw4nbxx4AOoBwQG6WpqW3tyJAoLjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlJXKErvoYPfoWh2s5yR3G11xY48wHwYDVR0j BBgwFoAUZ6Qo09yJ3e9b56xD+3yIF17Dhx8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NjZhOGYyOC05YTAzLTQzNzYtYjYxMi0zMWY1YWQxYzFlZDYvMC82N0E0MjhEM0RD ODlEREVGNUJFN0FDNDNGQjdDODgxNzVFQzM4NzFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjdBNDI4RDNEQzg5RERFRjVCRTdBQzQzRkI3Qzg4MTc1RUMz ODcxRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTY2YThmMjgtOWEwMy00Mzc2LWI2 MTItMzFmNWFkMWMxZWQ2LzAvNjdBNDI4RDNEQzg5RERFRjVCRTdBQzQzRkI3Qzg4 MTc1RUMzODcxRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKFdKJuZcTHjbnZhhCqqyk23zHVxZwx58iWA A3wu862UqLyFfbXj7X4+78/UAFRbmITL64Rv/IgTbpsnzoblYCs+FmCzndT4nJDu Acr4B08ORcRh64mi1jL/5pHyrZWLiOYir35jRewooiGTYOP+PnHPVkKTPLfEcdLv B1ti/9N/MH9ODohaRDh9UVeLU/k/oITSSLGH/pNkcneU4jjYf4jULqF1TrYWa34u tVyNXN7/SqG/8XYW3wLvz/dISv110jFgFXmeszkKaPNSx0Aw+cKT+X/NRgHyBfac vQqV8xknVjoKatog75XjOonl/BZrrK+SYnw1bwHzGdiQwbgo2/4= -----END CERTIFICATE-----Generated at Mon Mar 2 02:40:10 2026 by rpki-client