$ rpki-client -vvf repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.mft File: 131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.mft (raw, json) Hash identifier: ooKzhsq3tipDiPs5yXVJaHwFh1fkYzmnV7i7rv0RL9o= Subject key identifier: C6:76:46:31:81:43:4A:7E:DC:14:90:60:A3:6C:5C:37:BE:09:E1:1C Authority key identifier: 13:18:07:BD:DA:AF:97:ED:72:21:4D:FB:C5:C5:39:AC:B0:4F:DC:BE Certificate issuer: /CN=131807BDDAAF97ED72214DFBC5C539ACB04FDCBE Certificate serial: 1A61723911928FF5225D3E427C636321A3C41FBC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.mft Manifest number: 0358 Signing time: Sat 28 Feb 2026 17:51:03 +0000 Manifest this update: Sat 28 Feb 2026 17:46:03 +0000 Manifest next update: Wed 04 Mar 2026 01:55:03 +0000 Files and hashes: 1: 131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.crl (hash: F5nfb6VO42CsZ8HZ70WnjkUvqpp0Mjs1TpOMSO9BHro=) 2: 3130332e3137342e32342e302f32332d3234203d3e20313331313131.roa (hash: IcV/PuSEjSNsy6cbDUeXZVgPYs8xhMimlvvll5vTiXU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.crl rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 01:55:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:61:72:39:11:92:8f:f5:22:5d:3e:42:7c:63:63:21:a3:c4:1f:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=131807BDDAAF97ED72214DFBC5C539ACB04FDCBE Validity Not Before: Feb 28 17:46:03 2026 GMT Not After : Mar 4 01:55:03 2026 GMT Subject: CN=C676463181434A7EDC149060A36C5C37BE09E11C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:48:c4:59:c7:db:6c:53:8c:cf:94:df:61:55: 50:c2:e5:65:d4:7d:82:ad:60:0f:36:57:58:db:a1: 7d:eb:8a:f9:01:5f:54:ac:fe:47:c6:c8:98:39:07: e4:7e:96:7f:72:3e:de:d8:f5:da:46:79:9d:e2:8b: 9f:b9:05:35:ee:31:08:df:8d:89:be:f9:1d:ac:18: c0:2c:a4:9e:c8:43:ff:d7:49:42:dc:77:41:18:0d: 4a:f4:ab:a6:1e:92:ca:d9:b4:1c:9b:ab:fe:28:9f: 24:1a:29:2b:0f:e1:cb:dd:5a:d8:44:e8:ce:2d:40: 73:a1:2a:1b:0d:5d:81:a8:e5:f2:81:63:28:84:f8: 5a:a1:d1:a3:7c:00:65:93:82:c3:be:22:c3:5d:a1: 05:03:2a:51:a6:2d:b3:ab:f6:53:1e:96:27:a6:d9: 27:d3:83:da:b4:48:4a:cd:f1:3f:c9:5e:0a:71:01: 1b:a0:fb:ee:ba:68:9b:6f:fc:36:93:fe:ab:5c:c0: e1:6d:df:f3:2a:90:1f:9e:3d:83:82:e1:c3:f4:05: ab:6a:85:e6:88:25:ff:6d:6d:aa:ec:c6:52:5b:ee: a1:a3:7f:8e:9d:19:81:b3:da:3e:e2:1c:3e:3d:6e: 1a:45:2e:4d:1f:3e:db:11:03:40:61:33:5f:0a:25: eb:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:76:46:31:81:43:4A:7E:DC:14:90:60:A3:6C:5C:37:BE:09:E1:1C X509v3 Authority Key Identifier: keyid:13:18:07:BD:DA:AF:97:ED:72:21:4D:FB:C5:C5:39:AC:B0:4F:DC:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:98:b6:7c:27:21:62:e4:c3:b1:49:eb:92:b7:67:ee:27:cc: 20:9e:69:58:f6:c3:64:da:c0:69:e0:1e:7d:53:1d:94:ab:8f: a8:85:d3:fb:07:56:dc:a6:cc:62:57:bd:4c:aa:a9:fd:66:a7: 46:92:71:e3:b9:8d:68:42:f7:91:64:1d:72:d8:4f:08:c6:ce: 42:be:09:c4:5d:88:80:17:ab:29:c7:11:62:c0:8c:c4:9b:30: 39:17:31:c9:cf:1d:59:65:48:2a:64:bf:5b:24:7f:f8:21:7e: 73:b1:02:cf:f6:00:69:21:fb:93:37:9e:d6:3b:9c:68:4d:7c: ea:ea:04:75:51:2c:3a:33:06:3e:02:4b:89:5b:52:61:ef:bf: eb:aa:25:b9:b8:5a:78:de:fa:86:84:d8:9f:19:8e:ca:3e:4c: 20:16:7a:cd:e4:49:4e:e1:ea:d3:93:7a:32:23:7e:f1:d3:e1: f3:87:87:6a:38:6c:cf:3f:04:37:f3:c2:33:49:81:fe:bf:63: c3:53:9b:8b:2a:7a:51:16:f3:31:5f:ce:e7:61:e2:73:21:ce: 94:7a:13:9f:0c:e0:1e:19:4e:70:11:81:84:84:b3:54:e6:86: 73:7c:10:36:6b:ff:f6:99:11:11:80:38:a8:fe:65:8e:65:5e: a9:29:62:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGmFyORGSj/UiXT5CfGNjIaPEH7wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTMxODA3QkREQUFGOTdFRDcyMjE0REZCQzVDNTM5QUNC MDRGRENCRTAeFw0yNjAyMjgxNzQ2MDNaFw0yNjAzMDQwMTU1MDNaMDMxMTAvBgNV BAMTKEM2NzY0NjMxODE0MzRBN0VEQzE0OTA2MEEzNkM1QzM3QkUwOUUxMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClSMRZx9tsU4zPlN9hVVDC5WXU fYKtYA82V1jboX3rivkBX1Ss/kfGyJg5B+R+ln9yPt7Y9dpGeZ3ii5+5BTXuMQjf jYm++R2sGMAspJ7IQ//XSULcd0EYDUr0q6YeksrZtBybq/4onyQaKSsP4cvdWthE 6M4tQHOhKhsNXYGo5fKBYyiE+Fqh0aN8AGWTgsO+IsNdoQUDKlGmLbOr9lMeliem 2SfTg9q0SErN8T/JXgpxARug++66aJtv/DaT/qtcwOFt3/MqkB+ePYOC4cP0Batq heaIJf9tbarsxlJb7qGjf46dGYGz2j7iHD49bhpFLk0fPtsRA0BhM18KJevTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxnZGMYFDSn7cFJBgo2xcN74J4RwwHwYDVR0j BBgwFoAUExgHvdqvl+1yIU37xcU5rLBP3L4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZjI1Yjk2OC0wOTI3LTQ1OTQtODg3ZS02N2Y1M2Y5NjdiMTIvMC8xMzE4MDdCRERB QUY5N0VENzIyMTRERkJDNUM1MzlBQ0IwNEZEQ0JFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTMxODA3QkREQUFGOTdFRDcyMjE0REZCQzVDNTM5QUNCMDRG RENCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmYyNWI5NjgtMDkyNy00NTk0LTg4 N2UtNjdmNTNmOTY3YjEyLzAvMTMxODA3QkREQUFGOTdFRDcyMjE0REZCQzVDNTM5 QUNCMDRGRENCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEqYtnwnIWLkw7FJ65K3Z+4nzCCeaVj2w2Ta wGngHn1THZSrj6iF0/sHVtymzGJXvUyqqf1mp0aSceO5jWhC95FkHXLYTwjGzkK+ CcRdiIAXqynHEWLAjMSbMDkXMcnPHVllSCpkv1skf/ghfnOxAs/2AGkh+5M3ntY7 nGhNfOrqBHVRLDozBj4CS4lbUmHvv+uqJbm4Wnje+oaE2J8Zjso+TCAWes3kSU7h 6tOTejIjfvHT4fOHh2o4bM8/BDfzwjNJgf6/Y8NTm4sqelEW8zFfzudh4nMhzpR6 E58M4B4ZTnARgYSEs1TmhnN8EDZr//aZERGAOKj+ZY5lXqkpYvY= -----END CERTIFICATE-----Generated at Mon Mar 2 14:14:13 2026 by rpki-client