$ rpki-client -vvf repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.mft File: D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.mft (raw, json) Hash identifier: ps/9oRHWK/DLP8n1nMDscWwIn5zLLrsqLaf1gb++wLU= Subject key identifier: 09:0E:CA:69:54:8D:8B:7D:AB:E7:57:7A:04:82:1C:D7:F4:AE:2D:C7 Authority key identifier: D7:85:2A:F0:5D:FB:B9:7A:CD:46:A3:73:99:F2:0D:EA:19:C2:EF:2C Certificate issuer: /CN=D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C Certificate serial: 1FEAB16FAAF530883D8FB450D039752A27E03A75 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.mft Manifest number: 035F Signing time: Sat 28 Feb 2026 17:12:13 +0000 Manifest this update: Sat 28 Feb 2026 17:07:13 +0000 Manifest next update: Tue 03 Mar 2026 18:58:13 +0000 Files and hashes: 1: 3130332e3136342e3137322e302f32342d3234203d3e20313338313331.roa (hash: oLV8DpLz1l+1Ajh0O28O/v5GcjJ/k+/Vq+9P5fe+FMU=) 2: D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.crl (hash: 4nFN8AO7o7J6UFHICmaql0egJD71Z41hvTLPWUwCTcE=) 3: 3130332e3136342e3137332e302f32342d3234203d3e20313338313331.roa (hash: KhAy9i7rNh+YO2rkl451EFCJ0ALmEvE00mvytErQzRA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.crl rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 18:58:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:ea:b1:6f:aa:f5:30:88:3d:8f:b4:50:d0:39:75:2a:27:e0:3a:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C Validity Not Before: Feb 28 17:07:13 2026 GMT Not After : Mar 3 18:58:13 2026 GMT Subject: CN=090ECA69548D8B7DABE7577A04821CD7F4AE2DC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d6:85:bb:79:96:a7:07:96:92:83:aa:6b:0f: ad:50:fa:82:e0:80:5d:be:66:67:84:ab:85:2b:6d: 8e:e3:ae:87:4f:f1:ea:9c:b4:e9:a0:ea:16:24:69: 53:c5:8f:cd:62:94:b1:71:b8:5d:2a:79:6d:10:51: 3e:94:bf:12:a4:88:35:25:82:aa:77:af:cc:dc:eb: 87:45:53:8d:f8:bd:2c:c4:f8:61:30:99:d1:ca:52: 01:da:c6:2a:d8:18:c9:0d:0e:2f:31:5b:85:f2:45: 8a:9b:53:99:5e:69:b9:d0:6d:87:2b:59:fc:15:9a: 00:a9:cc:c2:b3:a4:b3:72:af:54:4b:81:32:3c:74: c9:1c:b4:aa:ad:48:ac:4a:e6:20:2c:53:ca:d1:4b: b4:2a:f9:48:df:84:8d:25:5a:f1:72:da:d5:fb:b6: 36:35:ef:bc:35:5b:89:5c:b2:a8:12:ba:c7:74:6c: e0:04:7d:a6:49:3a:7b:73:b1:b2:1a:a5:ad:10:e1: 3a:bb:e0:d2:64:30:cf:44:35:1b:66:c7:d9:ea:0f: b7:eb:70:05:a3:d6:f4:fb:62:9f:9f:e6:b6:46:83: 04:27:58:e1:52:2b:86:17:56:c2:84:80:2e:e0:40: 7f:b5:95:63:53:06:63:f9:78:6d:3a:db:e5:d7:61: 29:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:0E:CA:69:54:8D:8B:7D:AB:E7:57:7A:04:82:1C:D7:F4:AE:2D:C7 X509v3 Authority Key Identifier: keyid:D7:85:2A:F0:5D:FB:B9:7A:CD:46:A3:73:99:F2:0D:EA:19:C2:EF:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:24:b5:95:f3:2d:01:24:7b:db:24:50:f7:cb:92:98:be:ef: c6:e3:2b:c0:56:94:8b:aa:ad:64:3a:6b:ef:b0:2e:d3:bc:16: 34:a8:d8:53:f6:55:e9:c3:66:4f:24:f7:6c:f2:11:2c:07:04: 06:60:7d:41:c9:11:46:8b:c3:44:a6:c2:a8:4b:a2:85:2c:27: 4c:17:22:a6:a5:1a:ea:21:99:dd:4e:7e:c3:1b:8e:ee:b1:e4: 2f:81:d8:67:c2:bb:38:cc:f4:03:d2:2f:88:51:23:9e:37:ed: 41:4f:3b:27:4e:00:2e:7a:d0:1f:f5:1b:8d:6e:ac:61:37:ba: 9b:8e:8c:97:a2:af:12:6d:63:36:71:7a:9b:60:8f:0c:aa:6f: 7f:cf:1a:b7:43:7d:18:ae:3b:d6:9e:f1:92:4d:f4:19:0f:3f: 66:4a:e1:de:26:79:02:8c:34:75:7f:42:7c:79:66:4d:8e:f1: 42:dc:26:a4:e8:ec:e1:12:a0:de:1a:da:67:ab:eb:0a:b7:93: e5:ac:8d:fa:84:6b:cb:8d:a2:81:80:69:5e:f7:da:c0:8d:81: 00:f4:57:bf:02:b2:04:dc:7b:87:69:dc:97:b4:38:cf:1b:af: 9f:83:5f:90:55:44:67:bf:b6:c4:14:eb:77:29:34:7b:13:54: c6:62:8b:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH+qxb6r1MIg9j7RQ0Dl1KifgOnUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDc4NTJBRjA1REZCQjk3QUNENDZBMzczOTlGMjBERUEx OUMyRUYyQzAeFw0yNjAyMjgxNzA3MTNaFw0yNjAzMDMxODU4MTNaMDMxMTAvBgNV BAMTKDA5MEVDQTY5NTQ4RDhCN0RBQkU3NTc3QTA0ODIxQ0Q3RjRBRTJEQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC61oW7eZanB5aSg6prD61Q+oLg gF2+ZmeEq4UrbY7jrodP8eqctOmg6hYkaVPFj81ilLFxuF0qeW0QUT6UvxKkiDUl gqp3r8zc64dFU434vSzE+GEwmdHKUgHaxirYGMkNDi8xW4XyRYqbU5leabnQbYcr WfwVmgCpzMKzpLNyr1RLgTI8dMkctKqtSKxK5iAsU8rRS7Qq+UjfhI0lWvFy2tX7 tjY177w1W4lcsqgSusd0bOAEfaZJOntzsbIapa0Q4Tq74NJkMM9ENRtmx9nqD7fr cAWj1vT7Yp+f5rZGgwQnWOFSK4YXVsKEgC7gQH+1lWNTBmP5eG062+XXYSnNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCQ7KaVSNi32r51d6BIIc1/SuLccwHwYDVR0j BBgwFoAU14Uq8F37uXrNRqNzmfIN6hnC7ywwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTg5ZjFiNC1lZjYzLTQ1MzktODQ1NS05OGM2NzE5OTVjY2YvMC9ENzg1MkFGMDVE RkJCOTdBQ0Q0NkEzNzM5OUYyMERFQTE5QzJFRjJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDc4NTJBRjA1REZCQjk3QUNENDZBMzczOTlGMjBERUExOUMy RUYyQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWU4OWYxYjQtZWY2My00NTM5LTg0 NTUtOThjNjcxOTk1Y2NmLzAvRDc4NTJBRjA1REZCQjk3QUNENDZBMzczOTlGMjBE RUExOUMyRUYyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIYktZXzLQEke9skUPfLkpi+78bjK8BWlIuq rWQ6a++wLtO8FjSo2FP2VenDZk8k92zyESwHBAZgfUHJEUaLw0SmwqhLooUsJ0wX IqalGuohmd1OfsMbju6x5C+B2GfCuzjM9APSL4hRI5437UFPOydOAC560B/1G41u rGE3upuOjJeirxJtYzZxeptgjwyqb3/PGrdDfRiuO9ae8ZJN9BkPP2ZK4d4meQKM NHV/Qnx5Zk2O8ULcJqTo7OESoN4a2mer6wq3k+WsjfqEa8uNooGAaV732sCNgQD0 V78CsgTce4dp3Je0OM8br5+DX5BVRGe/tsQU63cpNHsTVMZii6A= -----END CERTIFICATE-----Generated at Mon Mar 2 14:08:18 2026 by rpki-client