$ rpki-client -vvf repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.mft File: 1DD4F8984667E142BB9C6F1133AA56899352286C.mft (raw, json) Hash identifier: om6x9n4Qjc/Tjr9LawKHrvejWoSZn0WuEV76187g4Ok= Subject key identifier: 9F:D0:40:85:14:AE:01:67:CD:07:C6:C8:B1:30:7D:77:10:F5:F0:45 Authority key identifier: 1D:D4:F8:98:46:67:E1:42:BB:9C:6F:11:33:AA:56:89:93:52:28:6C Certificate issuer: /CN=1DD4F8984667E142BB9C6F1133AA56899352286C Certificate serial: 18E3E01CF95750C57787E80F6F8574206F8F3294 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DD4F8984667E142BB9C6F1133AA56899352286C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.mft Manifest number: 024C Signing time: Sun 01 Mar 2026 23:12:28 +0000 Manifest this update: Sun 01 Mar 2026 23:07:28 +0000 Manifest next update: Thu 05 Mar 2026 02:59:28 +0000 Files and hashes: 1: 3130332e3137382e38352e302f32342d3234203d3e20313439333138.roa (hash: q8DwNNKz74IoWEZzT+iAC/h08ft27LvacBdr8MXv1MI=) 2: 3130332e3137382e38342e302f32342d3234203d3e20313439333138.roa (hash: sc/9k5RxrPoUKjA1WeRmsmulQQW2CkQ+ijXNT0b/Zmg=) 3: 1DD4F8984667E142BB9C6F1133AA56899352286C.crl (hash: YDKvyCjKgxbC1hnLpzRmhe9chSCeE2yFv8CYkpqhG34=) 4: 3130332e3137382e38342e302f32332d3233203d3e20313439333138.roa (hash: wfLjY3p90gmlaNyyJgSUiHlnW1A0eYIofnmRcN5XLWg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.crl rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DD4F8984667E142BB9C6F1133AA56899352286C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:59:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:e3:e0:1c:f9:57:50:c5:77:87:e8:0f:6f:85:74:20:6f:8f:32:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1DD4F8984667E142BB9C6F1133AA56899352286C Validity Not Before: Mar 1 23:07:28 2026 GMT Not After : Mar 5 02:59:28 2026 GMT Subject: CN=9FD0408514AE0167CD07C6C8B1307D7710F5F045 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d3:4a:96:fb:3d:d9:89:4b:37:16:62:d9:fb: 1d:5b:b4:39:28:2d:43:31:43:9e:00:12:e7:6a:c3: 4e:d0:d5:d8:7e:e6:32:73:fd:c4:4b:03:d0:93:96: 80:83:13:f8:87:e0:06:80:0b:d0:ab:f9:75:e4:69: d3:93:10:31:0a:a4:c1:40:d8:be:91:2e:e1:fa:31: da:17:51:4a:48:25:b0:ad:24:4b:19:e7:34:7a:9c: 1b:ab:e1:a9:77:dc:12:b7:fb:ba:5a:a5:78:36:4e: 70:a1:36:c2:29:7b:4f:b4:21:17:91:3b:b6:a6:95: e3:9d:8b:74:9b:81:75:11:2d:72:7c:68:66:27:62: d3:ec:31:69:67:ca:f3:88:67:ec:95:3b:5c:55:aa: 92:be:9c:9e:11:68:47:f0:5c:9d:f0:34:19:08:06: c4:11:7d:86:a0:84:02:dc:47:0a:37:01:f6:03:93: 72:d1:a4:d1:82:fc:35:58:d2:59:09:19:72:3e:28: 62:64:f7:dd:1e:e0:c3:58:bc:54:bf:f5:24:a2:a4: dc:c8:b4:ea:50:18:40:14:2a:21:21:35:ac:88:ae: 25:6c:83:73:c9:a6:b3:98:b9:f0:47:05:cd:87:d5: 9f:72:be:c2:62:3f:0e:fd:e4:36:89:41:b8:fa:4a: f9:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:D0:40:85:14:AE:01:67:CD:07:C6:C8:B1:30:7D:77:10:F5:F0:45 X509v3 Authority Key Identifier: keyid:1D:D4:F8:98:46:67:E1:42:BB:9C:6F:11:33:AA:56:89:93:52:28:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DD4F8984667E142BB9C6F1133AA56899352286C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:dd:4f:de:e4:4c:6f:cb:e3:c3:3b:e1:09:01:06:c6:7b:ea: fc:24:e1:be:f4:8e:89:af:e7:0d:f2:d3:09:76:5b:9b:f9:e3: 82:35:50:cc:3e:a4:92:07:3f:c1:75:5f:2b:ce:42:52:e6:11: e3:28:c1:d8:92:a1:44:7d:1d:69:70:6f:33:5b:3c:a7:f8:4e: 71:8a:81:7b:d0:90:6d:6c:a3:57:45:bf:96:ef:87:00:a2:b7: 22:a5:45:31:0d:2c:0e:79:be:58:c0:8b:78:7f:a6:23:b0:4a: 1c:31:f2:58:86:d7:d7:c9:ad:4a:5c:71:50:fd:1e:eb:3a:97: 84:ed:05:c6:eb:cd:85:47:8a:86:c6:17:1d:70:32:e9:07:5b: a1:4a:3d:12:ac:bf:78:98:81:8a:1d:f6:bf:99:e0:81:5e:d4: b7:8f:dd:3c:8f:01:de:37:4a:62:82:38:ef:f7:e9:88:e7:1d: 7e:1a:99:ae:a2:aa:bb:39:84:84:2f:f7:f8:be:3a:ab:3c:8c: 96:96:90:52:59:1a:b2:1d:c7:79:8e:c2:df:01:e2:8e:69:fa: f4:64:0c:63:dd:20:90:38:8d:6e:ae:7f:fd:0f:13:79:43:71: 98:aa:7d:b9:3f:a9:33:80:ab:8c:a4:5e:80:70:86:bd:5e:e2: 9d:11:f2:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGOPgHPlXUMV3h+gPb4V0IG+PMpQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMURENEY4OTg0NjY3RTE0MkJCOUM2RjExMzNBQTU2ODk5 MzUyMjg2QzAeFw0yNjAzMDEyMzA3MjhaFw0yNjAzMDUwMjU5MjhaMDMxMTAvBgNV BAMTKDlGRDA0MDg1MTRBRTAxNjdDRDA3QzZDOEIxMzA3RDc3MTBGNUYwNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ00qW+z3ZiUs3FmLZ+x1btDko LUMxQ54AEudqw07Q1dh+5jJz/cRLA9CTloCDE/iH4AaAC9Cr+XXkadOTEDEKpMFA 2L6RLuH6MdoXUUpIJbCtJEsZ5zR6nBur4al33BK3+7papXg2TnChNsIpe0+0IReR O7amleOdi3SbgXURLXJ8aGYnYtPsMWlnyvOIZ+yVO1xVqpK+nJ4RaEfwXJ3wNBkI BsQRfYaghALcRwo3AfYDk3LRpNGC/DVY0lkJGXI+KGJk990e4MNYvFS/9SSipNzI tOpQGEAUKiEhNayIriVsg3PJprOYufBHBc2H1Z9yvsJiPw795DaJQbj6SvlRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUn9BAhRSuAWfNB8bIsTB9dxD18EUwHwYDVR0j BBgwFoAUHdT4mEZn4UK7nG8RM6pWiZNSKGwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YzA3NWVmNi1hMjUxLTQ3ZGQtOGRkYS1jYWRmZjQ5N2E3ZTUvMC8xREQ0Rjg5ODQ2 NjdFMTQyQkI5QzZGMTEzM0FBNTY4OTkzNTIyODZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMURENEY4OTg0NjY3RTE0MkJCOUM2RjExMzNBQTU2ODk5MzUy Mjg2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2MwNzVlZjYtYTI1MS00N2RkLThk ZGEtY2FkZmY0OTdhN2U1LzAvMURENEY4OTg0NjY3RTE0MkJCOUM2RjExMzNBQTU2 ODk5MzUyMjg2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHLdT97kTG/L48M74QkBBsZ76vwk4b70jomv 5w3y0wl2W5v544I1UMw+pJIHP8F1XyvOQlLmEeMowdiSoUR9HWlwbzNbPKf4TnGK gXvQkG1so1dFv5bvhwCityKlRTENLA55vljAi3h/piOwShwx8liG19fJrUpccVD9 Hus6l4TtBcbrzYVHiobGFx1wMukHW6FKPRKsv3iYgYod9r+Z4IFe1LeP3TyPAd43 SmKCOO/36YjnHX4ama6iqrs5hIQv9/i+Oqs8jJaWkFJZGrIdx3mOwt8B4o5p+vRk DGPdIJA4jW6uf/0PE3lDcZiqfbk/qTOAq4ykXoBwhr1e4p0R8po= -----END CERTIFICATE-----Generated at Mon Mar 2 11:45:55 2026 by rpki-client