$ rpki-client -vvf repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.mft File: 687247CE80E62AD4B40F0B9915A1B6F3020F684C.mft (raw, json) Hash identifier: SclXZzLdoMMdjx/HRo8wlcn/ZI6s7nxX4s1IpD+6xWs= Subject key identifier: A5:25:C0:9D:08:18:BB:61:21:18:4E:F7:C4:99:04:AA:38:E5:37:A6 Authority key identifier: 68:72:47:CE:80:E6:2A:D4:B4:0F:0B:99:15:A1:B6:F3:02:0F:68:4C Certificate issuer: /CN=687247CE80E62AD4B40F0B9915A1B6F3020F684C Certificate serial: 5BA418DCF9364699E7B800B44A38594CD6DD12F7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/687247CE80E62AD4B40F0B9915A1B6F3020F684C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.mft Manifest number: 03D3 Signing time: Sun 01 Mar 2026 07:31:44 +0000 Manifest this update: Sun 01 Mar 2026 07:26:43 +0000 Manifest next update: Wed 04 Mar 2026 08:27:43 +0000 Files and hashes: 1: 687247CE80E62AD4B40F0B9915A1B6F3020F684C.crl (hash: V1GbRsAwmulH6MzBa7kPgsjpbEN85aGSVutctJ37ZkQ=) 2: 3130332e3136352e3235342e302f32332d3234203d3e203137393935.roa (hash: I5vk4CZVaOAQSTZi+mpaPTk3GaYie2KrNjsP/ZfsCsY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.crl rsync://repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/687247CE80E62AD4B40F0B9915A1B6F3020F684C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 08:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:a4:18:dc:f9:36:46:99:e7:b8:00:b4:4a:38:59:4c:d6:dd:12:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=687247CE80E62AD4B40F0B9915A1B6F3020F684C Validity Not Before: Mar 1 07:26:43 2026 GMT Not After : Mar 4 08:27:43 2026 GMT Subject: CN=A525C09D0818BB6121184EF7C49904AA38E537A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:09:c1:1e:59:d9:0c:60:29:5c:9f:66:58:a4: f0:98:90:70:82:fb:6c:aa:89:b9:37:19:68:4a:f2: 87:0a:f3:5d:43:46:43:cd:fc:c4:b4:74:93:87:62: 9e:88:9c:af:4f:25:39:00:ff:6f:0f:7b:8a:4b:9f: e6:c6:79:b8:77:43:93:8b:00:77:d7:7e:76:2a:b6: 44:5d:92:4b:cd:28:45:03:ba:d7:e6:c5:c1:b8:dc: ab:0f:04:5c:ac:05:6c:46:49:de:55:3e:3b:5d:54: 2c:ac:56:0b:27:be:66:f0:0b:63:23:10:6f:af:5a: 35:c2:ab:ac:91:ce:87:1b:d6:ea:52:b2:3a:ce:b7: 24:b3:56:5a:e3:1b:0c:3d:d5:8a:77:36:ce:ec:d4: d2:b4:1b:3d:81:b9:d5:28:2f:2f:10:6a:a3:5c:4e: 4a:28:e4:db:b7:1b:58:b9:fc:db:fe:17:4d:ac:71: 39:f3:cb:6e:6d:e4:fa:66:48:87:f8:cf:6c:d4:11: 1f:6a:b0:c9:b6:04:1e:fc:89:f4:67:e9:7b:48:1e: 04:79:cd:33:8b:c9:24:6d:f0:9e:c7:c7:c7:19:8e: 19:db:de:39:43:0a:cf:4b:75:58:ab:2e:0a:7d:b9: fe:38:3a:0e:38:5a:d9:9f:c5:55:db:86:19:4b:6b: 52:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:25:C0:9D:08:18:BB:61:21:18:4E:F7:C4:99:04:AA:38:E5:37:A6 X509v3 Authority Key Identifier: keyid:68:72:47:CE:80:E6:2A:D4:B4:0F:0B:99:15:A1:B6:F3:02:0F:68:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/687247CE80E62AD4B40F0B9915A1B6F3020F684C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:b8:49:8e:9b:71:15:74:31:78:f1:7a:03:bf:84:8d:ed:37: 5a:81:d6:c0:23:1c:5f:d5:a8:ff:d1:e5:44:9d:b0:ae:71:44: c0:e4:8e:be:39:85:09:22:60:ac:25:5b:7e:84:f9:bb:56:79: 5e:60:b4:31:e1:73:8c:5e:03:b6:4f:68:99:2f:4c:12:ad:b3: 60:c0:76:2a:a6:f4:24:3c:4d:07:d0:22:ae:44:c5:76:01:24: e9:90:06:73:3a:dc:cf:b5:7f:2a:01:1f:24:a3:df:b4:9b:d0: bd:27:ca:d0:23:4d:d0:71:63:f0:6b:f1:a4:4f:64:1b:2e:64: 43:14:fd:e4:9a:d4:a9:fe:bd:e5:40:ee:b5:57:8d:6c:71:bc: 06:20:62:d0:73:70:95:ab:ea:d5:19:db:15:d2:e4:aa:88:bd: ce:3b:d2:f6:66:9a:a2:ba:9b:3a:13:01:4f:9a:cf:3f:0a:75: ed:78:24:6d:2b:60:0e:80:55:a5:49:39:b3:f5:1f:eb:6c:20: 9b:80:d2:54:5a:54:24:32:15:a8:8e:4a:ee:b2:eb:15:70:8e: b4:b2:f5:43:44:74:55:81:1b:43:f4:f9:a6:e9:f9:f4:fc:83: bd:cd:7d:4f:0d:3c:31:38:b1:71:39:f2:d2:ff:96:00:ef:6e: 31:a1:2b:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW6QY3Pk2RpnnuAC0SjhZTNbdEvcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg3MjQ3Q0U4MEU2MkFENEI0MEYwQjk5MTVBMUI2RjMw MjBGNjg0QzAeFw0yNjAzMDEwNzI2NDNaFw0yNjAzMDQwODI3NDNaMDMxMTAvBgNV BAMTKEE1MjVDMDlEMDgxOEJCNjEyMTE4NEVGN0M0OTkwNEFBMzhFNTM3QTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpCcEeWdkMYClcn2ZYpPCYkHCC +2yqibk3GWhK8ocK811DRkPN/MS0dJOHYp6InK9PJTkA/28Pe4pLn+bGebh3Q5OL AHfXfnYqtkRdkkvNKEUDutfmxcG43KsPBFysBWxGSd5VPjtdVCysVgsnvmbwC2Mj EG+vWjXCq6yRzocb1upSsjrOtySzVlrjGww91Yp3Ns7s1NK0Gz2BudUoLy8QaqNc Tkoo5Nu3G1i5/Nv+F02scTnzy25t5PpmSIf4z2zUER9qsMm2BB78ifRn6XtIHgR5 zTOLySRt8J7Hx8cZjhnb3jlDCs9LdVirLgp9uf44Og44WtmfxVXbhhlLa1K7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpSXAnQgYu2EhGE73xJkEqjjlN6YwHwYDVR0j BBgwFoAUaHJHzoDmKtS0DwuZFaG28wIPaEwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NWU1NDY4Yy0wYWM3LTQ0YTktODgyMS0yODI1N2M1YTg2MDcvMC82ODcyNDdDRTgw RTYyQUQ0QjQwRjBCOTkxNUExQjZGMzAyMEY2ODRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjg3MjQ3Q0U4MEU2MkFENEI0MEYwQjk5MTVBMUI2RjMwMjBG Njg0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzVlNTQ2OGMtMGFjNy00NGE5LTg4 MjEtMjgyNTdjNWE4NjA3LzAvNjg3MjQ3Q0U4MEU2MkFENEI0MEYwQjk5MTVBMUI2 RjMwMjBGNjg0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK24SY6bcRV0MXjxegO/hI3tN1qB1sAjHF/V qP/R5USdsK5xRMDkjr45hQkiYKwlW36E+btWeV5gtDHhc4xeA7ZPaJkvTBKts2DA diqm9CQ8TQfQIq5ExXYBJOmQBnM63M+1fyoBHySj37Sb0L0nytAjTdBxY/Br8aRP ZBsuZEMU/eSa1Kn+veVA7rVXjWxxvAYgYtBzcJWr6tUZ2xXS5KqIvc470vZmmqK6 mzoTAU+azz8Kde14JG0rYA6AVaVJObP1H+tsIJuA0lRaVCQyFaiOSu6y6xVwjrSy 9UNEdFWBG0P0+abp+fT8g73NfU8NPDE4sXE58tL/lgDvbjGhK+0= -----END CERTIFICATE-----Generated at Mon Mar 2 06:22:17 2026 by rpki-client