$ rpki-client -vvf repo-rpki.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.mft File: D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.mft (raw, json) Hash identifier: f03JHWjdt4vNkHI9eXOAMmwb1t5sCVHr7+2+K4dIbZ4= Subject key identifier: 1C:EC:D9:D5:26:0E:53:57:F7:A0:5E:90:21:38:87:A9:5E:6B:50:84 Authority key identifier: D0:DD:54:04:78:1A:BE:E3:CF:6A:74:AD:A8:E9:3F:41:ED:4B:5F:85 Certificate issuer: /CN=D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85 Certificate serial: 1B9AE449D7A723C27A433B58D6600D1F161973E3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.mft Manifest number: 0111 Signing time: Sun 01 Mar 2026 07:51:58 +0000 Manifest this update: Sun 01 Mar 2026 07:46:58 +0000 Manifest next update: Wed 04 Mar 2026 12:59:58 +0000 Files and hashes: 1: 3135372e36362e3235302e302f32342d3234203d3e20313532373635.roa (hash: j5xRnyx9ltTxdxtyDGq7eViM99V3PYzjmvt9btMBjHc=) 2: 3135372e36362e3235302e302f32332d3234203d3e20313532373635.roa (hash: TKXDUHh1t8mtQi4naXyKvXUBHMTJG7N6MALAiE8leAU=) 3: 3135372e36362e3235312e302f32342d3234203d3e20313532373635.roa (hash: 8Vg70sDR83+R4h61BM4oF6HfBSYpvZjABNGi/+A+V20=) 4: D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.crl (hash: SgSPtg28DPY+FlpoqoTRj2ENFygOpK3lfs56duSb9JA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.crl rsync://repo-rpki.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 12:59:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:9a:e4:49:d7:a7:23:c2:7a:43:3b:58:d6:60:0d:1f:16:19:73:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85 Validity Not Before: Mar 1 07:46:58 2026 GMT Not After : Mar 4 12:59:58 2026 GMT Subject: CN=1CECD9D5260E5357F7A05E90213887A95E6B5084 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e5:32:8f:7d:2d:0a:d6:f1:31:e6:f9:91:6f: 1d:85:d0:97:73:58:2b:d7:8e:1d:69:fb:6b:19:f7: 2c:82:fc:25:79:d5:1f:79:4f:39:21:f1:8f:19:9e: 44:60:16:e1:c1:a7:da:1b:71:89:b6:ea:73:da:89: ad:55:c1:48:be:1c:86:80:77:f1:65:fb:9d:e6:d8: c1:7a:e4:b1:21:9c:11:d8:92:45:08:12:ef:d3:7b: 03:e1:51:c8:60:e3:2c:7e:3d:7d:84:91:33:d8:9e: 89:54:e4:1c:e8:d4:ab:69:b6:1f:16:b8:c4:f8:c5: 10:a4:35:2a:e3:ab:39:4d:40:2b:94:78:54:36:cd: 99:89:fc:91:f3:dc:ea:20:23:49:c4:3a:3e:cc:d9: 76:c3:49:4c:44:cc:01:6c:46:a3:57:9c:7e:90:76: 9f:fe:2c:07:0a:e2:7f:ba:79:09:27:29:be:8f:ca: d7:94:14:a3:a5:73:69:dc:37:04:50:48:d8:40:f6: a2:39:3c:86:40:d9:69:4c:e3:9c:27:83:98:9b:32: c0:bc:b4:8f:4b:98:92:e0:8e:a5:3c:1d:c7:4a:95: 28:a4:ea:c7:ef:5d:7a:1b:f5:ef:9e:98:6d:09:33: 9b:f1:bb:e3:96:3f:1c:c7:cc:11:81:02:3b:01:f1: 3d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:EC:D9:D5:26:0E:53:57:F7:A0:5E:90:21:38:87:A9:5E:6B:50:84 X509v3 Authority Key Identifier: keyid:D0:DD:54:04:78:1A:BE:E3:CF:6A:74:AD:A8:E9:3F:41:ED:4B:5F:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:e5:41:70:03:f7:41:ba:dd:ec:b0:b5:cd:5d:1b:36:8e:7e: c2:0d:43:36:78:a8:bf:1e:1d:75:84:da:6f:5d:4e:6f:e9:5d: de:eb:9f:cf:61:b9:17:f2:a1:5b:68:18:e8:83:58:5e:96:06: 07:13:26:aa:5a:2f:bd:b2:40:fd:41:ce:27:35:c2:d7:5e:b9: 80:5e:2f:d5:60:a9:e4:03:23:9b:41:40:2f:b2:22:8b:17:90: 0e:5d:4c:d3:95:9e:e9:ea:a6:df:df:93:16:8e:8c:8f:8e:3f: c3:46:42:f8:a9:e9:9a:92:9c:f9:cb:30:1b:96:b3:fa:65:ab: 83:1d:26:2c:3b:eb:59:91:c6:d9:12:f9:98:c1:1b:17:48:45: 4b:4b:4c:ad:0b:92:96:12:7e:ef:05:9a:af:56:db:d6:90:18: d6:47:22:cc:6a:17:f5:da:70:ea:83:76:21:87:16:d1:28:6a: 80:9c:88:3e:8d:d2:70:3f:bf:98:a5:a6:d8:45:54:1a:b6:12: a9:5c:62:b5:58:fd:8c:2e:31:19:11:6c:2d:a0:14:b8:e3:4d: 47:1a:bf:f5:8b:ec:3d:1f:fe:eb:31:fd:66:a6:57:72:90:f8: a8:da:ce:c5:aa:70:3e:4b:e1:d4:b9:2d:12:3a:77:3c:35:2f: 02:22:e7:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG5rkSdenI8J6QztY1mANHxYZc+MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBERDU0MDQ3ODFBQkVFM0NGNkE3NEFEQThFOTNGNDFF RDRCNUY4NTAeFw0yNjAzMDEwNzQ2NThaFw0yNjAzMDQxMjU5NThaMDMxMTAvBgNV BAMTKDFDRUNEOUQ1MjYwRTUzNTdGN0EwNUU5MDIxMzg4N0E5NUU2QjUwODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu5TKPfS0K1vEx5vmRbx2F0Jdz WCvXjh1p+2sZ9yyC/CV51R95Tzkh8Y8ZnkRgFuHBp9obcYm26nPaia1VwUi+HIaA d/Fl+53m2MF65LEhnBHYkkUIEu/TewPhUchg4yx+PX2EkTPYnolU5Bzo1Ktpth8W uMT4xRCkNSrjqzlNQCuUeFQ2zZmJ/JHz3OogI0nEOj7M2XbDSUxEzAFsRqNXnH6Q dp/+LAcK4n+6eQknKb6PyteUFKOlc2ncNwRQSNhA9qI5PIZA2WlM45wng5ibMsC8 tI9LmJLgjqU8HcdKlSik6sfvXXob9e+emG0JM5vxu+OWPxzHzBGBAjsB8T2DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHOzZ1SYOU1f3oF6QITiHqV5rUIQwHwYDVR0j BBgwFoAU0N1UBHgavuPPanStqOk/Qe1LX4UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MTJiZjg2My1hMWYwLTQyZDAtOWUzYS0zZjlmZjY5YTJkMTUvMC9EMERENTQwNDc4 MUFCRUUzQ0Y2QTc0QURBOEU5M0Y0MUVENEI1Rjg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDBERDU0MDQ3ODFBQkVFM0NGNkE3NEFEQThFOTNGNDFFRDRC NUY4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjEyYmY4NjMtYTFmMC00MmQwLTll M2EtM2Y5ZmY2OWEyZDE1LzAvRDBERDU0MDQ3ODFBQkVFM0NGNkE3NEFEQThFOTNG NDFFRDRCNUY4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFnlQXAD90G63eywtc1dGzaOfsINQzZ4qL8e HXWE2m9dTm/pXd7rn89huRfyoVtoGOiDWF6WBgcTJqpaL72yQP1Bzic1wtdeuYBe L9VgqeQDI5tBQC+yIosXkA5dTNOVnunqpt/fkxaOjI+OP8NGQvip6ZqSnPnLMBuW s/plq4MdJiw761mRxtkS+ZjBGxdIRUtLTK0LkpYSfu8Fmq9W29aQGNZHIsxqF/Xa cOqDdiGHFtEoaoCciD6N0nA/v5ilpthFVBq2EqlcYrVY/YwuMRkRbC2gFLjjTUca v/WL7D0f/usx/WamV3KQ+KjazsWqcD5L4dS5LRI6dzw1LwIi5xs= -----END CERTIFICATE-----Generated at Mon Mar 2 11:18:31 2026 by rpki-client