$ rpki-client -vvf repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/D456F5EAD8D734455DAEF896A9055409FF4A078F.mft File: D456F5EAD8D734455DAEF896A9055409FF4A078F.mft (raw, json) Hash identifier: Sn9q+mP/CYRBZYI0h9lng9yp5M/86NDmF6IogRLrlD4= Subject key identifier: E6:F0:42:FD:F1:15:F4:74:9B:8B:79:88:27:14:DE:E0:AF:EE:EA:F2 Authority key identifier: D4:56:F5:EA:D8:D7:34:45:5D:AE:F8:96:A9:05:54:09:FF:4A:07:8F Certificate issuer: /CN=D456F5EAD8D734455DAEF896A9055409FF4A078F Certificate serial: 632CFA389C65C74E03C5EE72D403422CBF432782 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D456F5EAD8D734455DAEF896A9055409FF4A078F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/D456F5EAD8D734455DAEF896A9055409FF4A078F.mft Manifest number: 01D4 Signing time: Mon 02 Mar 2026 07:11:04 +0000 Manifest this update: Mon 02 Mar 2026 07:06:04 +0000 Manifest next update: Thu 05 Mar 2026 10:57:04 +0000 Files and hashes: 1: 323030313a6466323a356434303a3a2f34382d3438203d3e20313530393832.roa (hash: xlxWynyg4hfKziS2fdPWIlDySNvIWbbHvXpQyS625Nc=) 2: D456F5EAD8D734455DAEF896A9055409FF4A078F.crl (hash: q3XvqyNz92SVDD6sHNKEpG7oxsct9lJg6Z52sHD+w60=) 3: 3130332e32312e36342e302f32332d3233203d3e20313530393832.roa (hash: gwbJnPHpSeHg+TMGbvaYpRRpr3Bq8iLm10t802UwTG4=) 4: 3130332e32312e36352e302f32342d3234203d3e20313530393832.roa (hash: 9oxT5RDcr9Ek1xIr6QpdXnO6XUo20PqnOOCrdJPUbMk=) 5: 3130332e32312e36342e302f32342d3234203d3e20313530393832.roa (hash: wCS0nyyn34cApWcZ5FUBxPZYDFIlv5DQUxLaCfWoRF4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/D456F5EAD8D734455DAEF896A9055409FF4A078F.crl rsync://repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/D456F5EAD8D734455DAEF896A9055409FF4A078F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D456F5EAD8D734455DAEF896A9055409FF4A078F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:2c:fa:38:9c:65:c7:4e:03:c5:ee:72:d4:03:42:2c:bf:43:27:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D456F5EAD8D734455DAEF896A9055409FF4A078F Validity Not Before: Mar 2 07:06:04 2026 GMT Not After : Mar 5 10:57:04 2026 GMT Subject: CN=E6F042FDF115F4749B8B79882714DEE0AFEEEAF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:13:92:9a:79:96:3b:14:e8:93:22:f6:3d:73: 62:82:54:39:2c:1f:4c:f2:43:2f:4f:22:31:ed:87: 77:fe:3d:11:d2:21:99:e7:b1:cf:20:00:0d:21:ce: 38:47:b8:21:3a:0d:83:8f:4b:56:6f:6b:8d:4e:57: 6a:9e:04:08:d4:b4:46:06:c4:64:dd:54:35:40:53: e4:e6:c4:9b:5a:11:21:4c:f8:6f:dc:37:dd:b5:31: af:cd:90:a2:4d:e6:84:31:77:72:1a:cc:eb:fe:02: 88:75:e8:78:af:25:2a:ac:00:d6:f5:06:5f:34:34: 1f:4e:14:f2:28:d7:fa:93:29:89:04:1b:34:cd:f5: 5a:4b:c5:40:d3:21:39:75:88:74:67:f3:07:9a:74: 4a:98:48:f6:c0:63:da:26:a2:70:fa:68:a5:2f:e4: 08:22:47:b0:14:c9:5d:45:50:88:21:c2:6a:63:1f: aa:f2:3f:83:68:a6:5f:05:ad:5f:66:df:e2:ee:82: f4:e8:49:44:e6:d2:7e:7a:34:54:98:34:51:01:e1: 68:98:f2:db:41:b0:6d:01:c2:99:7f:89:62:37:0b: 41:68:25:eb:9d:11:63:37:7e:53:87:b5:b0:f3:e5: 36:99:48:b1:52:5c:d0:55:66:25:90:b6:88:42:d7: e2:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:F0:42:FD:F1:15:F4:74:9B:8B:79:88:27:14:DE:E0:AF:EE:EA:F2 X509v3 Authority Key Identifier: keyid:D4:56:F5:EA:D8:D7:34:45:5D:AE:F8:96:A9:05:54:09:FF:4A:07:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/D456F5EAD8D734455DAEF896A9055409FF4A078F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D456F5EAD8D734455DAEF896A9055409FF4A078F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/D456F5EAD8D734455DAEF896A9055409FF4A078F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:dd:b2:a1:2d:c5:9b:3f:68:83:99:fc:cd:06:c7:d5:6f:2f: 5e:00:8d:d4:21:a7:a9:62:75:6d:7a:ae:07:77:a9:77:39:81: 55:76:e2:9c:de:d1:91:cb:c0:f0:a7:07:ec:99:11:34:23:78: 84:c0:ea:d3:db:17:5d:ac:6e:52:ab:e0:e5:54:d0:a9:5b:aa: cf:42:62:08:48:51:50:cf:9a:d9:ba:de:e2:a3:cd:d3:92:20: 5f:a6:31:cd:dc:3b:82:4f:8c:15:d1:9f:a5:9b:f5:f6:fe:52: 8d:d1:d4:2f:4f:f9:c7:79:c1:6b:4a:c0:70:67:91:76:c5:c0: 9b:ac:2b:d5:de:d3:69:41:fc:af:32:7e:fc:29:59:d5:ad:03: 65:b7:45:ab:48:24:c4:dd:73:5a:21:3b:21:4d:9c:60:81:08: b3:01:15:d7:cd:2a:e6:4e:1f:f3:fa:02:a5:14:5c:67:4f:3c: ff:d9:f2:38:7a:f8:ad:e6:28:41:e9:82:5a:4e:a9:c0:59:47: 6b:4d:52:04:ba:b7:44:29:fd:e6:db:54:73:ec:af:04:bd:6c: ad:ea:b7:35:12:c6:f4:f5:93:b1:da:f9:55:54:de:c0:77:d3: f7:36:15:95:b7:e4:cf:ec:f3:c1:a8:09:f3:12:fb:05:a1:1b: 8c:db:42:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYyz6OJxlx04Dxe5y1ANCLL9DJ4IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQ1NkY1RUFEOEQ3MzQ0NTVEQUVGODk2QTkwNTU0MDlG RjRBMDc4RjAeFw0yNjAzMDIwNzA2MDRaFw0yNjAzMDUxMDU3MDRaMDMxMTAvBgNV BAMTKEU2RjA0MkZERjExNUY0NzQ5QjhCNzk4ODI3MTRERUUwQUZFRUVBRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBE5KaeZY7FOiTIvY9c2KCVDks H0zyQy9PIjHth3f+PRHSIZnnsc8gAA0hzjhHuCE6DYOPS1Zva41OV2qeBAjUtEYG xGTdVDVAU+TmxJtaESFM+G/cN921Ma/NkKJN5oQxd3IazOv+Aoh16HivJSqsANb1 Bl80NB9OFPIo1/qTKYkEGzTN9VpLxUDTITl1iHRn8weadEqYSPbAY9omonD6aKUv 5AgiR7AUyV1FUIghwmpjH6ryP4Nopl8FrV9m3+LugvToSUTm0n56NFSYNFEB4WiY 8ttBsG0Bwpl/iWI3C0FoJeudEWM3flOHtbDz5TaZSLFSXNBVZiWQtohC1+KnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5vBC/fEV9HSbi3mIJxTe4K/u6vIwHwYDVR0j BBgwFoAU1Fb16tjXNEVdrviWqQVUCf9KB48wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NmJlYzhlOS02NTY4LTQ3OGQtYmQyNi1mNmU3Nzc4NzU1MTEvMC9ENDU2RjVFQUQ4 RDczNDQ1NURBRUY4OTZBOTA1NTQwOUZGNEEwNzhGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDQ1NkY1RUFEOEQ3MzQ0NTVEQUVGODk2QTkwNTU0MDlGRjRB MDc4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzZiZWM4ZTktNjU2OC00NzhkLWJk MjYtZjZlNzc3ODc1NTExLzAvRDQ1NkY1RUFEOEQ3MzQ0NTVEQUVGODk2QTkwNTU0 MDlGRjRBMDc4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFjdsqEtxZs/aIOZ/M0Gx9VvL14AjdQhp6li dW16rgd3qXc5gVV24pze0ZHLwPCnB+yZETQjeITA6tPbF12sblKr4OVU0Klbqs9C YghIUVDPmtm63uKjzdOSIF+mMc3cO4JPjBXRn6Wb9fb+Uo3R1C9P+cd5wWtKwHBn kXbFwJusK9Xe02lB/K8yfvwpWdWtA2W3RatIJMTdc1ohOyFNnGCBCLMBFdfNKuZO H/P6AqUUXGdPPP/Z8jh6+K3mKEHpglpOqcBZR2tNUgS6t0Qp/ebbVHPsrwS9bK3q tzUSxvT1k7Ha+VVU3sB30/c2FZW35M/s88GoCfMS+wWhG4zbQso= -----END CERTIFICATE-----Generated at Mon Mar 2 20:18:05 2026 by rpki-client