$ rpki-client -vvf repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/D5265466AE0186702AF52D11170A29AC32F54EF5.mft File: D5265466AE0186702AF52D11170A29AC32F54EF5.mft (raw, json) Hash identifier: PPbDd1j56co7Mq0a8XXiFD89cVKnjCpYCHMh0IBe6Qs= Subject key identifier: 85:09:1E:13:B1:94:5B:8D:1A:99:71:C6:AC:92:AB:C0:03:45:A3:46 Authority key identifier: D5:26:54:66:AE:01:86:70:2A:F5:2D:11:17:0A:29:AC:32:F5:4E:F5 Certificate issuer: /CN=D5265466AE0186702AF52D11170A29AC32F54EF5 Certificate serial: 23B7ED091ECC347AA31EDAA55FBD3304EAC05357 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D5265466AE0186702AF52D11170A29AC32F54EF5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/D5265466AE0186702AF52D11170A29AC32F54EF5.mft Manifest number: 011C Signing time: Sat 28 Feb 2026 01:30:45 +0000 Manifest this update: Sat 28 Feb 2026 01:25:45 +0000 Manifest next update: Tue 03 Mar 2026 12:37:45 +0000 Files and hashes: 1: 3135372e31352e302e302f32332d3234203d3e20313532373639.roa (hash: wP7WlQEFbQk8vKWjoSw9Vlhgkk9UBNqB1fB0mYPDnk8=) 2: D5265466AE0186702AF52D11170A29AC32F54EF5.crl (hash: 4zgp+il4zYPZ6xJgp745OgsUzsGKAtca49jPFdN5Cwc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/D5265466AE0186702AF52D11170A29AC32F54EF5.crl rsync://repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/D5265466AE0186702AF52D11170A29AC32F54EF5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D5265466AE0186702AF52D11170A29AC32F54EF5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 12:37:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:b7:ed:09:1e:cc:34:7a:a3:1e:da:a5:5f:bd:33:04:ea:c0:53:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5265466AE0186702AF52D11170A29AC32F54EF5 Validity Not Before: Feb 28 01:25:45 2026 GMT Not After : Mar 3 12:37:45 2026 GMT Subject: CN=85091E13B1945B8D1A9971C6AC92ABC00345A346 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:2b:34:35:0a:d3:26:69:98:eb:45:1a:db:ce: c2:ad:70:a0:04:51:a4:39:e1:c5:04:4c:88:64:4d: 44:cd:46:bc:77:ae:15:69:6a:ce:e1:b6:21:b9:e4: 9c:5e:56:a8:0d:d1:ba:75:08:f9:fb:d2:50:f8:c3: 11:81:4c:7c:7b:d5:21:f9:98:92:d6:85:ed:22:38: 15:be:b8:e9:d9:ad:c4:c9:8d:5a:aa:ca:19:ca:b3: 13:12:fe:f1:9b:b3:79:f4:04:34:93:67:bc:e1:80: 19:5d:51:23:45:29:bf:1d:b8:65:13:15:4d:98:63: 72:ad:8a:7d:67:a2:25:f3:f3:9c:c4:61:88:ec:b1: ef:bb:e6:d6:0f:dd:44:a6:45:c2:bf:76:46:2b:8b: 2b:a8:d3:8a:ae:88:e2:ff:40:2b:af:ab:ac:d7:1b: fb:b2:20:26:80:d4:97:a4:13:fc:f5:be:bf:7f:05: 80:c5:1b:8c:e4:a0:ab:67:1e:d1:d1:66:11:bd:70: 23:82:a9:50:83:90:79:fb:97:ee:93:f2:56:ed:e1: f3:14:8c:2e:d8:52:cc:96:33:07:22:37:e7:fc:5d: 9c:66:dd:8a:d1:c3:ee:c7:fa:ef:0a:7d:38:b8:39: 9b:21:64:59:b2:de:2b:72:cb:2b:d1:ae:8a:3f:1d: 8a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:09:1E:13:B1:94:5B:8D:1A:99:71:C6:AC:92:AB:C0:03:45:A3:46 X509v3 Authority Key Identifier: keyid:D5:26:54:66:AE:01:86:70:2A:F5:2D:11:17:0A:29:AC:32:F5:4E:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/D5265466AE0186702AF52D11170A29AC32F54EF5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D5265466AE0186702AF52D11170A29AC32F54EF5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/D5265466AE0186702AF52D11170A29AC32F54EF5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:02:32:29:fc:82:b0:56:d9:97:24:a6:06:e9:37:55:9d:79: fa:d0:b3:7b:34:0a:65:5d:15:5f:7c:ed:df:07:6e:f3:07:7f: 36:ce:cb:c2:bf:59:43:ce:8f:ea:24:d1:fe:9b:9f:ec:ed:2c: f3:ce:da:93:b4:f6:b5:f8:f6:8b:28:4d:3d:39:04:21:08:f6: ef:8e:61:89:a2:3c:85:5f:a0:c4:22:0d:65:0d:e2:6e:1f:fb: ae:2e:9f:65:90:e0:2c:b3:89:f9:55:87:99:32:91:9f:2c:e4: 9c:d4:b6:d2:24:41:a0:4d:cd:b8:5b:8e:b5:17:06:95:20:4d: 63:17:cc:59:ab:22:b1:e5:39:4d:af:01:80:f7:64:6d:c2:fd: c4:82:8d:54:16:d0:27:68:fc:6a:7d:04:b1:67:89:17:f6:61: db:34:05:73:f7:2c:bf:67:8c:95:24:9b:ac:68:0e:f8:a3:5d: de:a7:c2:8b:7c:ae:5c:c8:3e:6c:96:52:dc:89:df:a9:75:aa: 07:d4:ba:0e:17:5e:35:67:29:45:a0:a4:f5:f2:02:a1:90:1c: 58:ea:dd:55:a6:49:dd:08:73:71:d6:e2:54:a1:a9:97:df:bc: bc:0a:3c:9d:f4:c7:21:f4:7f:d4:b9:ce:f8:7c:fa:c4:e1:1d: 31:e8:d6:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI7ftCR7MNHqjHtqlX70zBOrAU1cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDUyNjU0NjZBRTAxODY3MDJBRjUyRDExMTcwQTI5QUMz MkY1NEVGNTAeFw0yNjAyMjgwMTI1NDVaFw0yNjAzMDMxMjM3NDVaMDMxMTAvBgNV BAMTKDg1MDkxRTEzQjE5NDVCOEQxQTk5NzFDNkFDOTJBQkMwMDM0NUEzNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuKzQ1CtMmaZjrRRrbzsKtcKAE UaQ54cUETIhkTUTNRrx3rhVpas7htiG55JxeVqgN0bp1CPn70lD4wxGBTHx71SH5 mJLWhe0iOBW+uOnZrcTJjVqqyhnKsxMS/vGbs3n0BDSTZ7zhgBldUSNFKb8duGUT FU2YY3Ktin1noiXz85zEYYjsse+75tYP3USmRcK/dkYriyuo04quiOL/QCuvq6zX G/uyICaA1JekE/z1vr9/BYDFG4zkoKtnHtHRZhG9cCOCqVCDkHn7l+6T8lbt4fMU jC7YUsyWMwciN+f8XZxm3YrRw+7H+u8KfTi4OZshZFmy3ityyyvRroo/HYpvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhQkeE7GUW40amXHGrJKrwANFo0YwHwYDVR0j BBgwFoAU1SZUZq4BhnAq9S0RFwoprDL1TvUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NDYxMzdhZS0yZWZiLTQzYzAtYmRiNy00M2Y1ZDkzOWNmMGMvMC9ENTI2NTQ2NkFF MDE4NjcwMkFGNTJEMTExNzBBMjlBQzMyRjU0RUY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDUyNjU0NjZBRTAxODY3MDJBRjUyRDExMTcwQTI5QUMzMkY1 NEVGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjQ2MTM3YWUtMmVmYi00M2MwLWJk YjctNDNmNWQ5MzljZjBjLzAvRDUyNjU0NjZBRTAxODY3MDJBRjUyRDExMTcwQTI5 QUMzMkY1NEVGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALUCMin8grBW2ZckpgbpN1WdefrQs3s0CmVd FV987d8HbvMHfzbOy8K/WUPOj+ok0f6bn+ztLPPO2pO09rX49osoTT05BCEI9u+O YYmiPIVfoMQiDWUN4m4f+64un2WQ4CyziflVh5kykZ8s5JzUttIkQaBNzbhbjrUX BpUgTWMXzFmrIrHlOU2vAYD3ZG3C/cSCjVQW0Cdo/Gp9BLFniRf2Yds0BXP3LL9n jJUkm6xoDvijXd6nwot8rlzIPmyWUtyJ36l1qgfUug4XXjVnKUWgpPXyAqGQHFjq 3VWmSd0Ic3HW4lShqZffvLwKPJ30xyH0f9S5zvh8+sThHTHo1oc= -----END CERTIFICATE-----Generated at Mon Mar 2 14:58:16 2026 by rpki-client