$ rpki-client -vvf repo-rpki.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/D34F7D48A07BB8A2DEEDC8C87819771181935231.mft File: D34F7D48A07BB8A2DEEDC8C87819771181935231.mft (raw, json) Hash identifier: CVjuWWcK5VZPOKu/SnokHmquXT6rOe6plkt516NkPng= Subject key identifier: D2:8B:AE:7A:A6:7B:AF:E9:E6:93:E3:3F:EF:02:91:E5:54:A9:08:1E Authority key identifier: D3:4F:7D:48:A0:7B:B8:A2:DE:ED:C8:C8:78:19:77:11:81:93:52:31 Certificate issuer: /CN=D34F7D48A07BB8A2DEEDC8C87819771181935231 Certificate serial: 1C36D76CB3C7996BF77F1989619BABECDEB45720 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D34F7D48A07BB8A2DEEDC8C87819771181935231.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/D34F7D48A07BB8A2DEEDC8C87819771181935231.mft Manifest number: 024B Signing time: Sun 01 Mar 2026 15:20:00 +0000 Manifest this update: Sun 01 Mar 2026 15:15:00 +0000 Manifest next update: Thu 05 Mar 2026 00:10:00 +0000 Files and hashes: 1: 3130332e3138392e3131342e302f32342d3234203d3e20313439373533.roa (hash: mJRfdF8Fdla37pRzxHiZB6KLj2ueLFTilKfm0V/9nTs=) 2: D34F7D48A07BB8A2DEEDC8C87819771181935231.crl (hash: hwTA6Iw3I5aVCXKtZ9MLFersOiuczBOPBhnvsa8xgiY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/D34F7D48A07BB8A2DEEDC8C87819771181935231.crl rsync://repo-rpki.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/D34F7D48A07BB8A2DEEDC8C87819771181935231.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D34F7D48A07BB8A2DEEDC8C87819771181935231.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:10:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:36:d7:6c:b3:c7:99:6b:f7:7f:19:89:61:9b:ab:ec:de:b4:57:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D34F7D48A07BB8A2DEEDC8C87819771181935231 Validity Not Before: Mar 1 15:15:00 2026 GMT Not After : Mar 5 00:10:00 2026 GMT Subject: CN=D28BAE7AA67BAFE9E693E33FEF0291E554A9081E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:3c:50:7c:4b:d9:0c:0d:15:9d:70:c0:f3:6a: c2:b1:9c:e7:02:69:6d:bf:57:71:ed:b4:5d:46:17: c6:cb:99:db:ba:d3:c5:58:5a:28:e2:7b:3e:a5:35: 72:9f:d5:b4:9d:02:fb:91:b9:7b:ae:ef:9b:8c:ca: 85:77:d9:ba:20:30:f5:56:d7:f9:c4:06:25:d5:1c: 79:6d:35:f2:92:ab:98:ab:2a:81:5b:b5:c7:aa:47: ae:cd:b0:a2:77:85:7a:ca:90:2f:b9:47:f9:4f:99: 7b:ac:14:ed:72:b6:05:b2:b3:c8:91:79:48:6f:02: a5:a1:55:b4:ee:74:c4:fe:bd:11:8b:1c:38:e6:17: c4:2b:37:4d:55:ff:cc:a1:a4:9f:ab:7e:6a:d8:cf: 3e:b8:d8:c3:e1:07:63:04:95:1e:75:51:79:32:a6: d3:2a:82:e9:1e:3d:85:eb:23:af:70:67:b2:c5:30: 0f:d4:5b:d6:b7:5e:87:85:b5:65:57:02:d8:f2:1a: ef:fd:22:06:4b:15:08:62:3d:cb:4c:3d:09:3f:62: 06:30:5c:47:1d:0f:78:ce:e1:be:ec:b0:8f:7c:19: d0:ae:95:30:6c:cb:93:73:74:b1:a4:6c:a7:72:b7: 2a:16:21:42:ed:3e:19:0d:3a:72:de:63:e9:b6:35: ce:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:8B:AE:7A:A6:7B:AF:E9:E6:93:E3:3F:EF:02:91:E5:54:A9:08:1E X509v3 Authority Key Identifier: keyid:D3:4F:7D:48:A0:7B:B8:A2:DE:ED:C8:C8:78:19:77:11:81:93:52:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/D34F7D48A07BB8A2DEEDC8C87819771181935231.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D34F7D48A07BB8A2DEEDC8C87819771181935231.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/D34F7D48A07BB8A2DEEDC8C87819771181935231.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:4a:de:35:3f:09:e6:79:12:09:89:d7:51:4c:6f:2b:8d:b7: 7c:44:03:80:3b:84:ba:b1:87:d0:a3:4f:05:75:5c:ec:58:62: d3:8e:38:ad:af:88:93:a2:24:24:e0:c5:39:d8:7a:07:d9:7d: a2:4e:17:56:56:fe:ba:45:b0:e5:d5:22:cf:2d:1d:93:11:e3: b1:46:59:7a:bf:80:49:73:2e:46:d5:a6:06:c1:e9:e7:ff:d7: 86:79:81:e5:4c:f0:6e:55:88:23:f6:86:37:ba:86:61:e3:26: 5b:ea:e1:3d:1b:0d:0b:ca:bc:b2:fb:5a:72:62:e8:60:7c:77: e7:09:48:9a:73:a0:17:c7:d1:a5:5e:0d:88:c7:75:ba:2d:7d: 25:f1:5c:dd:99:77:55:1d:87:61:b5:a0:4e:9e:57:a1:28:e1: 9f:2f:7c:53:e1:e1:84:90:4a:f3:85:c5:1e:bf:e0:65:f5:fd: a7:e5:16:4f:87:fd:ee:c5:05:bb:0a:3c:fd:f6:17:21:d1:c0: 00:83:93:ab:f4:fe:6a:66:84:3a:f4:e6:88:94:a4:96:da:fa: a4:b9:79:c1:90:cc:83:95:58:95:f5:9f:46:b1:ec:7e:fd:30: 4e:a3:eb:a7:0b:89:ba:22:be:ca:07:24:f8:ee:ce:5a:fc:71: 2b:ef:13:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHDbXbLPHmWv3fxmJYZur7N60VyAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0RjdENDhBMDdCQjhBMkRFRURDOEM4NzgxOTc3MTE4 MTkzNTIzMTAeFw0yNjAzMDExNTE1MDBaFw0yNjAzMDUwMDEwMDBaMDMxMTAvBgNV BAMTKEQyOEJBRTdBQTY3QkFGRTlFNjkzRTMzRkVGMDI5MUU1NTRBOTA4MUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXPFB8S9kMDRWdcMDzasKxnOcC aW2/V3HttF1GF8bLmdu608VYWijiez6lNXKf1bSdAvuRuXuu75uMyoV32bogMPVW 1/nEBiXVHHltNfKSq5irKoFbtceqR67NsKJ3hXrKkC+5R/lPmXusFO1ytgWys8iR eUhvAqWhVbTudMT+vRGLHDjmF8QrN01V/8yhpJ+rfmrYzz642MPhB2MElR51UXky ptMqgukePYXrI69wZ7LFMA/UW9a3XoeFtWVXAtjyGu/9IgZLFQhiPctMPQk/YgYw XEcdD3jO4b7ssI98GdCulTBsy5NzdLGkbKdytyoWIULtPhkNOnLeY+m2Nc4LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0ouueqZ7r+nmk+M/7wKR5VSpCB4wHwYDVR0j BBgwFoAU0099SKB7uKLe7cjIeBl3EYGTUjEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MzU5YjZhMy1iNzRiLTRiYWEtOTkzYS04MThmYjcyMTA3MjIvMC9EMzRGN0Q0OEEw N0JCOEEyREVFREM4Qzg3ODE5NzcxMTgxOTM1MjMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDM0RjdENDhBMDdCQjhBMkRFRURDOEM4NzgxOTc3MTE4MTkz NTIzMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzM1OWI2YTMtYjc0Yi00YmFhLTk5 M2EtODE4ZmI3MjEwNzIyLzAvRDM0RjdENDhBMDdCQjhBMkRFRURDOEM4NzgxOTc3 MTE4MTkzNTIzMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALhK3jU/CeZ5EgmJ11FMbyuNt3xEA4A7hLqx h9CjTwV1XOxYYtOOOK2viJOiJCTgxTnYegfZfaJOF1ZW/rpFsOXVIs8tHZMR47FG WXq/gElzLkbVpgbB6ef/14Z5geVM8G5ViCP2hje6hmHjJlvq4T0bDQvKvLL7WnJi 6GB8d+cJSJpzoBfH0aVeDYjHdbotfSXxXN2Zd1Udh2G1oE6eV6Eo4Z8vfFPh4YSQ SvOFxR6/4GX1/aflFk+H/e7FBbsKPP32FyHRwACDk6v0/mpmhDr05oiUpJba+qS5 ecGQzIOVWJX1n0ax7H79ME6j66cLiboivsoHJPjuzlr8cSvvEwo= -----END CERTIFICATE-----Generated at Mon Mar 2 14:48:41 2026 by rpki-client