$ rpki-client -vvf repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/D00F48BC877910FDD0B7FF229FD7DA516769C90B.mft File: D00F48BC877910FDD0B7FF229FD7DA516769C90B.mft (raw, json) Hash identifier: snAGPXULk4xxM+IyO5Sx/c5oddPhncaak2tP/IzVd+I= Subject key identifier: BD:15:E2:8E:A4:E0:7E:47:6B:72:7B:51:CB:F4:3B:03:EE:0A:A1:49 Authority key identifier: D0:0F:48:BC:87:79:10:FD:D0:B7:FF:22:9F:D7:DA:51:67:69:C9:0B Certificate issuer: /CN=D00F48BC877910FDD0B7FF229FD7DA516769C90B Certificate serial: 0F93200D17AA8905BA0E3C5784F586E4CFD231AE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D00F48BC877910FDD0B7FF229FD7DA516769C90B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/D00F48BC877910FDD0B7FF229FD7DA516769C90B.mft Manifest number: 0125 Signing time: Sun 01 Mar 2026 16:41:18 +0000 Manifest this update: Sun 01 Mar 2026 16:36:18 +0000 Manifest next update: Thu 05 Mar 2026 01:35:18 +0000 Files and hashes: 1: 3135372e36362e3137362e302f32342d3234203d3e20313532373536.roa (hash: /s+DQzvA6xhmuW7v3g8lejSeio++18zSamEuf0+coIs=) 2: 3135372e36362e3137372e302f32342d3234203d3e20313532373536.roa (hash: ihqP0wUIsQgvCUAc6MPq5r3ZCl+93CJYEtJ3kKzkDF0=) 3: D00F48BC877910FDD0B7FF229FD7DA516769C90B.crl (hash: bMilcajHsUmLZncG2g3rCh4LBy9f9diL6V8uNa5jxes=) 4: 3135372e36362e3137362e302f32332d3233203d3e20313532373536.roa (hash: ep04UBArCBQWkLiZKMcJT4iBnkYi8gyyZr2lPtSwbI8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/D00F48BC877910FDD0B7FF229FD7DA516769C90B.crl rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/D00F48BC877910FDD0B7FF229FD7DA516769C90B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D00F48BC877910FDD0B7FF229FD7DA516769C90B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 01:35:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:93:20:0d:17:aa:89:05:ba:0e:3c:57:84:f5:86:e4:cf:d2:31:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D00F48BC877910FDD0B7FF229FD7DA516769C90B Validity Not Before: Mar 1 16:36:18 2026 GMT Not After : Mar 5 01:35:18 2026 GMT Subject: CN=BD15E28EA4E07E476B727B51CBF43B03EE0AA149 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:f1:72:65:96:ce:1e:0e:07:33:9e:70:01:7f: b3:d7:4a:05:c0:b7:53:c9:25:48:b6:72:71:99:c8: c0:b8:61:ab:9f:38:64:30:26:0e:09:95:86:89:c4: de:c5:c6:0e:27:45:36:82:8e:a0:10:45:f8:8e:33: 80:0c:ac:50:b2:52:1b:e6:d5:04:6f:39:ec:ee:ae: f5:e2:95:84:76:fa:4a:eb:aa:d8:72:2e:8c:cc:9a: 93:32:bc:27:ec:8c:af:55:da:4f:ed:14:c9:ca:71: be:20:f0:8f:aa:6d:a4:72:f4:08:7c:1c:6c:fa:a0: 56:07:2b:6d:3a:f5:15:79:71:be:d8:2c:1e:ac:de: 83:53:d7:c9:7c:25:73:80:3c:06:a0:25:10:4b:27: ff:9c:8e:04:39:75:33:ee:8c:0f:4e:83:cc:42:5f: 86:3c:5b:59:bb:e8:83:8d:7b:69:86:54:10:e9:0e: 80:41:d8:d7:93:21:42:1a:97:c2:14:c9:82:d7:de: 16:44:d5:10:9d:7d:1c:ea:ea:da:fe:8b:af:71:06: ff:7a:0f:37:69:3b:de:3d:29:fe:a3:8f:25:50:54: a7:e0:b2:30:ac:c4:d7:82:f4:c0:87:e2:cb:5a:01: e0:5e:d6:f1:4c:ef:0f:5e:43:ef:c6:b6:13:0b:a9: 6c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:15:E2:8E:A4:E0:7E:47:6B:72:7B:51:CB:F4:3B:03:EE:0A:A1:49 X509v3 Authority Key Identifier: keyid:D0:0F:48:BC:87:79:10:FD:D0:B7:FF:22:9F:D7:DA:51:67:69:C9:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/D00F48BC877910FDD0B7FF229FD7DA516769C90B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D00F48BC877910FDD0B7FF229FD7DA516769C90B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/D00F48BC877910FDD0B7FF229FD7DA516769C90B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:52:89:cb:24:19:ca:34:96:24:f0:3f:08:88:93:06:38:6c: 35:ff:89:a3:31:cc:10:46:f5:0e:65:6f:9d:84:cd:13:67:b0: 64:8d:e9:8c:43:d1:f5:23:03:54:60:66:8c:7b:42:4a:46:07: 8b:50:42:fe:6f:fa:01:f7:f5:a3:06:ac:b9:c1:3f:00:cf:21: ec:55:49:db:8d:76:9c:80:69:c9:a6:29:14:d3:e0:43:d2:da: c8:04:70:78:c0:f1:31:8d:27:13:9a:e5:0d:5f:16:d7:4a:2d: 6a:37:66:d4:d5:6f:0f:6f:0c:4a:3e:9d:54:ef:da:96:a5:5d: a9:20:64:39:95:62:ff:89:16:67:57:47:83:ef:54:1e:19:1e: 38:a3:5f:a0:aa:0b:b9:fc:0f:fc:73:a6:08:3d:fd:db:a2:50: 94:69:a6:ba:d2:87:3c:24:52:7d:a7:94:aa:2d:70:f8:df:7d: a1:88:b0:38:9d:1d:a7:0a:4c:0a:a4:9c:06:26:8d:c7:0e:c5: b1:cd:2e:35:9e:73:f4:44:d8:89:05:ea:c2:0e:30:91:4b:6b: 87:ea:d8:3c:c7:af:a3:cf:c4:4c:a5:7f:da:36:02:a5:ba:a1: ac:c0:32:74:b6:15:66:53:f3:bb:4a:22:57:cb:21:71:b3:4f: 1f:53:d8:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD5MgDReqiQW6DjxXhPWG5M/SMa4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDAwRjQ4QkM4Nzc5MTBGREQwQjdGRjIyOUZEN0RBNTE2 NzY5QzkwQjAeFw0yNjAzMDExNjM2MThaFw0yNjAzMDUwMTM1MThaMDMxMTAvBgNV BAMTKEJEMTVFMjhFQTRFMDdFNDc2QjcyN0I1MUNCRjQzQjAzRUUwQUExNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDj8XJlls4eDgcznnABf7PXSgXA t1PJJUi2cnGZyMC4YaufOGQwJg4JlYaJxN7Fxg4nRTaCjqAQRfiOM4AMrFCyUhvm 1QRvOezurvXilYR2+krrqthyLozMmpMyvCfsjK9V2k/tFMnKcb4g8I+qbaRy9Ah8 HGz6oFYHK2069RV5cb7YLB6s3oNT18l8JXOAPAagJRBLJ/+cjgQ5dTPujA9Og8xC X4Y8W1m76IONe2mGVBDpDoBB2NeTIUIal8IUyYLX3hZE1RCdfRzq6tr+i69xBv96 DzdpO949Kf6jjyVQVKfgsjCsxNeC9MCH4staAeBe1vFM7w9eQ+/GthMLqWyXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvRXijqTgfkdrcntRy/Q7A+4KoUkwHwYDVR0j BBgwFoAU0A9IvId5EP3Qt/8in9faUWdpyQswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YWI0ZTE0ZC0wMjFkLTQwZGMtOTIzYS1jMTJkMWFmNDQzYjUvMC9EMDBGNDhCQzg3 NzkxMEZERDBCN0ZGMjI5RkQ3REE1MTY3NjlDOTBCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDAwRjQ4QkM4Nzc5MTBGREQwQjdGRjIyOUZEN0RBNTE2NzY5 QzkwQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWFiNGUxNGQtMDIxZC00MGRjLTky M2EtYzEyZDFhZjQ0M2I1LzAvRDAwRjQ4QkM4Nzc5MTBGREQwQjdGRjIyOUZEN0RB NTE2NzY5QzkwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACFSicskGco0liTwPwiIkwY4bDX/iaMxzBBG 9Q5lb52EzRNnsGSN6YxD0fUjA1RgZox7QkpGB4tQQv5v+gH39aMGrLnBPwDPIexV SduNdpyAacmmKRTT4EPS2sgEcHjA8TGNJxOa5Q1fFtdKLWo3ZtTVbw9vDEo+nVTv 2palXakgZDmVYv+JFmdXR4PvVB4ZHjijX6CqC7n8D/xzpgg9/duiUJRpprrShzwk Un2nlKotcPjffaGIsDidHacKTAqknAYmjccOxbHNLjWec/RE2IkF6sIOMJFLa4fq 2DzHr6PPxEylf9o2AqW6oazAMnS2FWZT87tKIlfLIXGzTx9T2HI= -----END CERTIFICATE-----Generated at Mon Mar 2 14:59:24 2026 by rpki-client