$ rpki-client -vvf repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.mft File: E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.mft (raw, json) Hash identifier: OB4DxpzmLN4Y2xmf3DSw2rDCUEZT+IERbio+DXnFO0w= Subject key identifier: B6:DA:27:F3:EA:36:1E:57:30:FD:D5:0B:74:74:57:F3:50:47:4C:D1 Authority key identifier: E7:26:22:AE:0F:69:B4:CD:AB:C9:CD:22:3B:3E:06:C7:DC:5E:10:14 Certificate issuer: /CN=E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014 Certificate serial: 4677D18B909056873D11C3E2FF9C4EB6A03C4199 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.mft Manifest number: 055F Signing time: Sun 01 Mar 2026 19:52:37 +0000 Manifest this update: Sun 01 Mar 2026 19:47:37 +0000 Manifest next update: Thu 05 Mar 2026 03:23:37 +0000 Files and hashes: 1: E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.crl (hash: czmBpqcVvOoeN2wtzLAglhsYIAYC169TgXHXqaTHgtU=) 2: 323430323a366163303a3a2f33332d3333203d3e20313337333036.roa (hash: +LtGD0I+CcS2FlJTjK9Ti6xX24NgEqNHjvhmLsu4MGU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.crl rsync://repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 03:23:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:77:d1:8b:90:90:56:87:3d:11:c3:e2:ff:9c:4e:b6:a0:3c:41:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014 Validity Not Before: Mar 1 19:47:37 2026 GMT Not After : Mar 5 03:23:37 2026 GMT Subject: CN=B6DA27F3EA361E5730FDD50B747457F350474CD1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d8:a8:17:03:7c:f3:28:d3:88:10:31:02:a8: 08:cd:40:21:da:49:e4:6d:6e:33:6d:91:23:df:66: 35:b9:17:ad:44:3c:99:cd:28:c6:b3:87:d2:f3:ef: 77:d4:e4:33:c8:e5:9f:32:f6:e2:3c:ca:01:bd:b7: 75:59:0e:6d:9e:90:f6:d3:a1:a5:a2:8e:cc:f7:52: 46:c7:ea:44:10:4a:f2:9f:25:66:b4:23:8d:97:3a: b9:02:74:bc:e1:f7:70:a1:79:e2:3f:a8:be:24:b7: 67:81:21:07:77:d8:25:04:05:40:df:4d:e3:7f:ba: ba:d0:f0:76:b3:10:75:08:86:60:3d:71:61:cb:47: cd:96:1d:af:9c:8f:6f:f5:6b:7f:96:df:5c:c8:54: 21:3f:fa:dc:f9:a3:82:e1:f3:ff:38:c3:dd:d2:1c: 39:10:a6:a9:ee:a1:68:55:6f:5f:b0:6e:24:40:9d: cc:27:03:6b:b5:8e:bf:4f:b4:e9:33:79:36:f9:e5: 03:e7:a4:9e:fd:46:5f:c5:a0:3c:eb:1a:c4:15:59: 3d:86:5c:89:6c:f3:85:cf:e6:0f:f5:9a:fb:16:da: 95:10:ed:63:e5:34:3b:c3:d7:8a:a1:80:f3:3a:62: c4:9b:90:dc:3c:89:9c:10:29:04:97:55:26:85:39: 01:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:DA:27:F3:EA:36:1E:57:30:FD:D5:0B:74:74:57:F3:50:47:4C:D1 X509v3 Authority Key Identifier: keyid:E7:26:22:AE:0F:69:B4:CD:AB:C9:CD:22:3B:3E:06:C7:DC:5E:10:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:df:78:17:ed:8f:01:ff:42:2f:21:37:83:46:de:60:80:f6: 7a:2d:e6:31:e7:c7:d6:ff:5e:03:58:f0:4a:a7:39:31:38:6c: d8:11:18:28:0e:1e:b4:79:55:13:97:62:e7:b2:f3:3c:33:53: 0b:5e:bb:a1:6d:40:09:32:07:c3:60:11:d8:7a:06:8a:e5:89: 93:47:7f:b3:fa:74:97:fa:e4:fa:bd:6c:cd:3f:33:57:4e:32: 57:e1:69:d5:88:17:d5:77:41:e5:4d:ff:1d:1d:46:85:e4:9a: 0c:a2:0f:5f:38:f0:a1:34:86:4b:ad:1b:d9:58:c2:48:a9:f5: 07:46:4c:cf:a0:2f:47:5a:30:18:1d:c8:3a:3d:87:e4:5a:8f: cb:fa:0c:6c:a9:09:61:00:3f:fc:e1:f0:b6:bc:a6:8c:4e:63: c3:68:d3:a5:1b:53:07:a3:c2:0c:a8:02:0b:d0:9e:c9:b7:a8: 68:41:fa:4a:dd:c3:25:19:81:84:64:8d:02:5d:9b:c5:6e:44: 25:a7:19:9b:03:52:82:48:00:53:7f:8d:40:23:a3:50:5c:ef: 8e:91:96:ea:43:eb:6e:8d:76:ed:e6:ec:c0:8f:28:86:35:b6: 75:1f:14:85:fb:62:cb:4d:8d:97:86:0e:5a:06:be:70:a5:0f: ba:8d:64:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURnfRi5CQVoc9EcPi/5xOtqA8QZkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTcyNjIyQUUwRjY5QjRDREFCQzlDRDIyM0IzRTA2QzdE QzVFMTAxNDAeFw0yNjAzMDExOTQ3MzdaFw0yNjAzMDUwMzIzMzdaMDMxMTAvBgNV BAMTKEI2REEyN0YzRUEzNjFFNTczMEZERDUwQjc0NzQ1N0YzNTA0NzRDRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZ2KgXA3zzKNOIEDECqAjNQCHa SeRtbjNtkSPfZjW5F61EPJnNKMazh9Lz73fU5DPI5Z8y9uI8ygG9t3VZDm2ekPbT oaWijsz3UkbH6kQQSvKfJWa0I42XOrkCdLzh93CheeI/qL4kt2eBIQd32CUEBUDf TeN/urrQ8HazEHUIhmA9cWHLR82WHa+cj2/1a3+W31zIVCE/+tz5o4Lh8/84w93S HDkQpqnuoWhVb1+wbiRAncwnA2u1jr9PtOkzeTb55QPnpJ79Rl/FoDzrGsQVWT2G XIls84XP5g/1mvsW2pUQ7WPlNDvD14qhgPM6YsSbkNw8iZwQKQSXVSaFOQFpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtton8+o2Hlcw/dULdHRX81BHTNEwHwYDVR0j BBgwFoAU5yYirg9ptM2ryc0iOz4Gx9xeEBQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZDM1YmY3OS1lODRhLTQwZTAtOGZkNC1mMTY5YzE4NmJlOGYvMC9FNzI2MjJBRTBG NjlCNENEQUJDOUNEMjIzQjNFMDZDN0RDNUUxMDE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTcyNjIyQUUwRjY5QjRDREFCQzlDRDIyM0IzRTA2QzdEQzVF MTAxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmQzNWJmNzktZTg0YS00MGUwLThm ZDQtZjE2OWMxODZiZThmLzAvRTcyNjIyQUUwRjY5QjRDREFCQzlDRDIyM0IzRTA2 QzdEQzVFMTAxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI/feBftjwH/Qi8hN4NG3mCA9not5jHnx9b/ XgNY8EqnOTE4bNgRGCgOHrR5VROXYuey8zwzUwteu6FtQAkyB8NgEdh6BorliZNH f7P6dJf65Pq9bM0/M1dOMlfhadWIF9V3QeVN/x0dRoXkmgyiD1848KE0hkutG9lY wkip9QdGTM+gL0daMBgdyDo9h+Raj8v6DGypCWEAP/zh8La8poxOY8No06UbUwej wgyoAgvQnsm3qGhB+krdwyUZgYRkjQJdm8VuRCWnGZsDUoJIAFN/jUAjo1Bc746R lupD626Ndu3m7MCPKIY1tnUfFIX7YstNjZeGDloGvnClD7qNZJU= -----END CERTIFICATE-----Generated at Mon Mar 2 07:43:23 2026 by rpki-client