$ rpki-client -vvf repo-rpki.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.mft File: 1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.mft (raw, json) Hash identifier: A2MITq+RJ+I1QuRGKOnzsMBrMB8VJn8khF9DfJQTYwc= Subject key identifier: 20:E3:BD:BF:FA:A5:2E:7D:17:CB:86:6A:FA:9F:4D:EA:17:D3:EF:EB Authority key identifier: 19:54:C3:3C:FB:AF:8A:07:2B:A3:B9:0B:3E:83:8D:63:D1:2B:FD:2E Certificate issuer: /CN=1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E Certificate serial: 15E88B48FE0A447024427A74669EFD290AB484BF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.mft Manifest number: 0275 Signing time: Sat 28 Feb 2026 13:01:38 +0000 Manifest this update: Sat 28 Feb 2026 12:56:38 +0000 Manifest next update: Tue 03 Mar 2026 18:39:38 +0000 Files and hashes: 1: 1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.crl (hash: tCKO8PyRnXGV0tESGdzhqjcjSv4LVf9rlsPuREnoDiM=) 2: 3130332e3137372e31302e302f32342d3234203d3e20313437313634.roa (hash: e866bgD8+WV+E66L19k4qbdrOD68wAEFfxlCAZGgSi4=) 3: 3130332e3137372e31312e302f32342d3234203d3e20313437313634.roa (hash: wdg18zJQmcMX1jP6b67v/A0N+8jFBnFGoxqu8Vs9QZM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.crl rsync://repo-rpki.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 18:39:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:e8:8b:48:fe:0a:44:70:24:42:7a:74:66:9e:fd:29:0a:b4:84:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E Validity Not Before: Feb 28 12:56:38 2026 GMT Not After : Mar 3 18:39:38 2026 GMT Subject: CN=20E3BDBFFAA52E7D17CB866AFA9F4DEA17D3EFEB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f9:ce:36:9e:dc:d4:db:05:f1:95:68:2c:70: 42:db:b9:52:d8:3a:b7:ee:58:23:f4:ff:ac:ea:8c: 61:c9:f6:85:d3:61:f6:03:c9:92:96:89:ed:60:d7: a5:e8:a2:9c:9e:03:2b:a3:ac:e3:f3:2f:53:ae:c8: 8c:b4:53:9e:50:c1:ad:e2:c0:88:fc:d2:e1:12:ea: 0a:05:3a:7f:18:f6:a7:8e:9e:fe:f5:09:2c:65:34: 8e:d0:78:1d:05:79:47:bc:07:a9:2c:ff:06:27:2d: 0b:fa:b9:72:f0:37:b1:1c:80:aa:1c:f7:26:3f:cf: b4:40:35:48:18:7c:cb:0e:62:4d:50:d8:71:c3:47: 25:05:b3:cc:16:1c:6e:40:61:0b:8f:c7:73:06:22: 5b:22:24:02:76:9e:d2:b4:c3:a2:c4:1d:05:03:d3: 4a:72:26:83:d4:13:b7:dc:54:0e:13:4a:17:e5:a8: a2:ca:46:84:15:25:05:ac:58:52:d6:ad:34:02:fb: 6f:c1:cf:be:4d:30:c3:e6:1e:ef:f4:c2:b1:83:70: fc:04:e7:0d:f1:bd:95:e0:d1:a7:66:93:0e:bf:95: 12:f8:b8:30:27:c2:5e:45:96:eb:76:15:bb:f4:8b: c1:26:5f:03:df:38:af:63:28:4d:82:ca:5e:5e:78: 57:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:E3:BD:BF:FA:A5:2E:7D:17:CB:86:6A:FA:9F:4D:EA:17:D3:EF:EB X509v3 Authority Key Identifier: keyid:19:54:C3:3C:FB:AF:8A:07:2B:A3:B9:0B:3E:83:8D:63:D1:2B:FD:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:93:93:d0:d4:3a:06:1e:5f:9c:ac:be:42:d8:36:29:ed:41: d6:6e:e5:0c:8d:d6:6a:81:77:4c:84:c8:33:e4:e7:2b:43:0c: 66:22:6e:c9:73:2f:5b:69:71:9f:41:5e:eb:a5:33:d3:f7:a4: 2d:c4:31:25:6a:ee:cd:6f:7a:8a:91:35:9e:40:83:7d:a3:4e: 5d:8c:6e:43:d8:0b:1a:66:0d:da:d2:f2:9e:3a:dd:ef:14:6c: a6:77:d9:fd:bc:0e:f5:bc:93:f5:d8:28:25:26:18:85:71:28: 90:ac:8f:8d:ad:f6:36:0a:dd:2a:38:18:57:e5:eb:0d:cf:3d: cb:5b:0e:46:c8:fb:4d:04:72:5d:72:9c:86:47:bb:58:f5:00: dc:29:4a:9c:95:2f:b0:10:ae:a4:51:e5:36:b4:98:24:84:ce: e6:1a:ba:9b:25:ec:01:3f:02:86:9b:79:1b:9a:ae:b3:0f:70: 6a:a1:bd:9b:a5:e1:c7:be:41:e0:cd:dc:35:f9:99:bf:80:0a: 3d:30:e1:ca:1d:8a:2a:04:72:36:7d:43:70:58:cc:a8:8b:a9: d8:86:e3:d3:be:8d:c8:bb:f4:a4:f9:f3:17:5a:59:bd:6f:dd: c3:bb:f4:09:da:34:64:85:59:72:c5:12:80:eb:31:d4:94:1e: c4:0b:cb:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFeiLSP4KRHAkQnp0Zp79KQq0hL8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk1NEMzM0NGQkFGOEEwNzJCQTNCOTBCM0U4MzhENjNE MTJCRkQyRTAeFw0yNjAyMjgxMjU2MzhaFw0yNjAzMDMxODM5MzhaMDMxMTAvBgNV BAMTKDIwRTNCREJGRkFBNTJFN0QxN0NCODY2QUZBOUY0REVBMTdEM0VGRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK+c42ntzU2wXxlWgscELbuVLY OrfuWCP0/6zqjGHJ9oXTYfYDyZKWie1g16XoopyeAyujrOPzL1OuyIy0U55Qwa3i wIj80uES6goFOn8Y9qeOnv71CSxlNI7QeB0FeUe8B6ks/wYnLQv6uXLwN7EcgKoc 9yY/z7RANUgYfMsOYk1Q2HHDRyUFs8wWHG5AYQuPx3MGIlsiJAJ2ntK0w6LEHQUD 00pyJoPUE7fcVA4TShflqKLKRoQVJQWsWFLWrTQC+2/Bz75NMMPmHu/0wrGDcPwE 5w3xvZXg0admkw6/lRL4uDAnwl5Flut2Fbv0i8EmXwPfOK9jKE2Cyl5eeFetAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIOO9v/qlLn0Xy4Zq+p9N6hfT7+swHwYDVR0j BBgwFoAUGVTDPPuvigcro7kLPoONY9Er/S4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZDE5NmQ2NS0yMWE4LTRiMDQtYTlkZS03MjgzZmJlM2MxY2IvMC8xOTU0QzMzQ0ZC QUY4QTA3MkJBM0I5MEIzRTgzOEQ2M0QxMkJGRDJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTk1NEMzM0NGQkFGOEEwNzJCQTNCOTBCM0U4MzhENjNEMTJC RkQyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmQxOTZkNjUtMjFhOC00YjA0LWE5 ZGUtNzI4M2ZiZTNjMWNiLzAvMTk1NEMzM0NGQkFGOEEwNzJCQTNCOTBCM0U4MzhE NjNEMTJCRkQyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ6Tk9DUOgYeX5ysvkLYNintQdZu5QyN1mqB d0yEyDPk5ytDDGYibslzL1tpcZ9BXuulM9P3pC3EMSVq7s1veoqRNZ5Ag32jTl2M bkPYCxpmDdrS8p463e8UbKZ32f28DvW8k/XYKCUmGIVxKJCsj42t9jYK3So4GFfl 6w3PPctbDkbI+00Ecl1ynIZHu1j1ANwpSpyVL7AQrqRR5Ta0mCSEzuYaupsl7AE/ AoabeRuarrMPcGqhvZul4ce+QeDN3DX5mb+ACj0w4codiioEcjZ9Q3BYzKiLqdiG 49O+jci79KT58xdaWb1v3cO79AnaNGSFWXLFEoDrMdSUHsQLy9s= -----END CERTIFICATE-----Generated at Mon Mar 2 04:04:31 2026 by rpki-client