$ rpki-client -vvf repo-rpki.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.mft File: CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.mft (raw, json) Hash identifier: nYggP4f/hQuqYdlRWZCxivPOtsss2tIre7h1fDyMcIo= Subject key identifier: 58:6E:FB:E2:12:67:C9:9F:A5:C7:DA:75:4B:C4:84:BA:CD:C3:46:38 Authority key identifier: CA:13:A9:BA:C2:93:15:E5:C5:DA:CF:0B:C7:38:8C:34:2A:D6:E5:92 Certificate issuer: /CN=CA13A9BAC29315E5C5DACF0BC7388C342AD6E592 Certificate serial: 408B0E3AC9C5DC2654C140FB876FE93E06A305A3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.mft Manifest number: 033D Signing time: Sat 28 Feb 2026 09:51:20 +0000 Manifest this update: Sat 28 Feb 2026 09:46:20 +0000 Manifest next update: Tue 03 Mar 2026 13:13:20 +0000 Files and hashes: 1: 3130332e3137322e3139362e302f32332d3234203d3e20313432333934.roa (hash: Z1tGWFEjU6+Gt3zLjm1kyQrIJ2QvnjBbeJw3y7l63DU=) 2: CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.crl (hash: TnqM0HXuj+UbvY/tCfBTFOWTmtZzrF/KjLjXuSY2BCc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.crl rsync://repo-rpki.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 13:13:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:8b:0e:3a:c9:c5:dc:26:54:c1:40:fb:87:6f:e9:3e:06:a3:05:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA13A9BAC29315E5C5DACF0BC7388C342AD6E592 Validity Not Before: Feb 28 09:46:20 2026 GMT Not After : Mar 3 13:13:20 2026 GMT Subject: CN=586EFBE21267C99FA5C7DA754BC484BACDC34638 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:11:fa:d8:5c:05:da:bf:91:5c:ed:f6:92:de: 65:1f:89:a6:c6:2a:4e:4f:cb:a8:c8:bc:e6:c9:d6: df:2b:d2:0c:5e:01:b0:8d:b3:85:86:59:51:cf:17: 0f:e8:56:a7:6e:0d:76:30:75:6b:f6:2e:92:10:f8: e2:35:b9:20:69:de:a6:b1:0a:05:a1:95:21:ec:1a: 27:54:e2:17:ee:cc:c5:6c:22:1c:19:42:44:e9:85: 0e:e0:b1:35:cc:b5:ee:2f:5d:69:1c:7f:62:79:11: bf:c0:95:84:68:60:45:88:e2:48:53:80:b2:e9:35: e4:eb:3e:55:a6:d1:2f:5c:12:3c:29:8b:05:c5:2c: dd:df:55:0a:3b:ac:c0:7f:df:3c:51:c5:b0:4c:72: 7b:cb:d0:53:56:a3:cb:d7:6b:69:69:6a:5b:62:f7: b7:d0:7f:8f:da:88:ca:54:a0:58:b9:e3:47:9f:b5: 2a:b0:7e:7c:7b:48:2e:e8:8e:59:bb:e1:99:be:93: dc:82:3a:95:29:bd:37:f7:54:10:df:7d:23:b2:86: f4:02:e7:f3:92:8c:b9:41:55:dc:d1:47:cf:f5:42: 11:c2:14:5f:37:bd:96:f4:95:4c:cd:11:3a:d7:78: 20:d4:7a:4e:dc:3b:29:1f:d9:e4:e1:d1:b1:c1:72: d9:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:6E:FB:E2:12:67:C9:9F:A5:C7:DA:75:4B:C4:84:BA:CD:C3:46:38 X509v3 Authority Key Identifier: keyid:CA:13:A9:BA:C2:93:15:E5:C5:DA:CF:0B:C7:38:8C:34:2A:D6:E5:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:67:f8:f5:a7:86:42:8e:13:5c:77:4c:90:7b:41:e3:a3:7c: af:27:04:3e:a2:6a:3c:59:2c:22:ea:89:bf:39:b9:53:64:c7: 49:d8:d3:cb:d0:46:ec:9d:42:5a:1c:2d:5f:89:7d:80:ac:71: 7d:60:f5:0e:3b:d9:a2:3e:84:19:70:cf:0d:f2:c0:c2:9f:a9: 13:b8:41:56:95:db:a6:45:a0:dc:ea:20:0d:d4:3f:7d:e8:0a: 82:d5:56:ca:da:5a:06:e1:4b:7a:6c:bb:c5:f8:a1:57:d7:1b: 93:2f:cd:b5:11:cd:26:69:01:15:93:f0:7a:a8:d7:d5:8e:1c: b1:04:19:58:96:4b:9a:bb:72:4e:ee:83:18:a4:10:40:38:a4: 63:c1:a0:7c:2d:e0:b6:44:ae:84:89:97:67:76:9d:1b:42:5f: 7a:39:e4:5c:66:50:54:b1:d3:ce:f3:4c:3b:af:e0:ac:24:2f: cd:3a:b9:a5:62:8f:10:67:40:04:84:8c:eb:03:c6:fa:18:55: 49:56:31:de:51:a4:1a:0a:0c:70:06:39:dc:98:b5:8d:1b:00: de:42:9c:a0:e8:1b:29:c7:2a:e2:b6:b4:36:12:63:3c:11:1f: b4:3f:80:83:89:e1:f5:91:33:64:6f:d5:a7:dc:eb:4b:9e:18: fd:e2:ed:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQIsOOsnF3CZUwUD7h2/pPgajBaMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ExM0E5QkFDMjkzMTVFNUM1REFDRjBCQzczODhDMzQy QUQ2RTU5MjAeFw0yNjAyMjgwOTQ2MjBaFw0yNjAzMDMxMzEzMjBaMDMxMTAvBgNV BAMTKDU4NkVGQkUyMTI2N0M5OUZBNUM3REE3NTRCQzQ4NEJBQ0RDMzQ2MzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9EfrYXAXav5Fc7faS3mUfiabG Kk5Py6jIvObJ1t8r0gxeAbCNs4WGWVHPFw/oVqduDXYwdWv2LpIQ+OI1uSBp3qax CgWhlSHsGidU4hfuzMVsIhwZQkTphQ7gsTXMte4vXWkcf2J5Eb/AlYRoYEWI4khT gLLpNeTrPlWm0S9cEjwpiwXFLN3fVQo7rMB/3zxRxbBMcnvL0FNWo8vXa2lpalti 97fQf4/aiMpUoFi540eftSqwfnx7SC7ojlm74Zm+k9yCOpUpvTf3VBDffSOyhvQC 5/OSjLlBVdzRR8/1QhHCFF83vZb0lUzNETrXeCDUek7cOykf2eTh0bHBctmvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWG774hJnyZ+lx9p1S8SEus3DRjgwHwYDVR0j BBgwFoAUyhOpusKTFeXF2s8LxziMNCrW5ZIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Mzk3Y2ZjNS1lMGIwLTQ4MjAtYjg1OS03OTYyNTIwMWVjYWYvMC9DQTEzQTlCQUMy OTMxNUU1QzVEQUNGMEJDNzM4OEMzNDJBRDZFNTkyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0ExM0E5QkFDMjkzMTVFNUM1REFDRjBCQzczODhDMzQyQUQ2 RTU5Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzM5N2NmYzUtZTBiMC00ODIwLWI4 NTktNzk2MjUyMDFlY2FmLzAvQ0ExM0E5QkFDMjkzMTVFNUM1REFDRjBCQzczODhD MzQyQUQ2RTU5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFFn+PWnhkKOE1x3TJB7QeOjfK8nBD6iajxZ LCLqib85uVNkx0nY08vQRuydQlocLV+JfYCscX1g9Q472aI+hBlwzw3ywMKfqRO4 QVaV26ZFoNzqIA3UP33oCoLVVsraWgbhS3psu8X4oVfXG5MvzbURzSZpARWT8Hqo 19WOHLEEGViWS5q7ck7ugxikEEA4pGPBoHwt4LZEroSJl2d2nRtCX3o55FxmUFSx 087zTDuv4KwkL806uaVijxBnQASEjOsDxvoYVUlWMd5RpBoKDHAGOdyYtY0bAN5C nKDoGynHKuK2tDYSYzwRH7Q/gIOJ4fWRM2Rv1afc60ueGP3i7Vk= -----END CERTIFICATE-----Generated at Mon Mar 2 12:42:30 2026 by rpki-client