$ rpki-client -vvf repo-rpki.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/D1C35136280415655DEC1D442C7C982FD36A5B86.mft File: D1C35136280415655DEC1D442C7C982FD36A5B86.mft (raw, json) Hash identifier: hcEZnPN+Pxv0BY3o23AiGoYkfQB85r5QK3kotcyO78A= Subject key identifier: AA:6F:FB:87:A6:AC:A0:4C:07:5C:59:DD:6C:06:C7:C5:B8:D3:DC:79 Authority key identifier: D1:C3:51:36:28:04:15:65:5D:EC:1D:44:2C:7C:98:2F:D3:6A:5B:86 Certificate issuer: /CN=D1C35136280415655DEC1D442C7C982FD36A5B86 Certificate serial: 0FC7A41837D4CD56516D17FDC90BD76FDD6DDDE4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1C35136280415655DEC1D442C7C982FD36A5B86.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/D1C35136280415655DEC1D442C7C982FD36A5B86.mft Manifest number: C3 Signing time: Sat 28 Feb 2026 14:52:37 +0000 Manifest this update: Sat 28 Feb 2026 14:47:37 +0000 Manifest next update: Tue 03 Mar 2026 22:56:37 +0000 Files and hashes: 1: 3130332e39382e3233392e302f32342d3234203d3e20313336383339.roa (hash: t33hGK2tWrXOFyyr6frOa0APXlIHVzP4IgSNamcMq50=) 2: 323030313a6466323a336430303a3a2f34382d3438203d3e20313336383339.roa (hash: EbL+LGKDt0V5U6jXXy9+v+fX+4Su7Ml6HM1hNFrtkbw=) 3: D1C35136280415655DEC1D442C7C982FD36A5B86.crl (hash: g7fC42P9VymG66n9xZQH2I5lDMUb4anzNUyT+qWA7G8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/D1C35136280415655DEC1D442C7C982FD36A5B86.crl rsync://repo-rpki.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/D1C35136280415655DEC1D442C7C982FD36A5B86.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1C35136280415655DEC1D442C7C982FD36A5B86.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 22:56:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:c7:a4:18:37:d4:cd:56:51:6d:17:fd:c9:0b:d7:6f:dd:6d:dd:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1C35136280415655DEC1D442C7C982FD36A5B86 Validity Not Before: Feb 28 14:47:37 2026 GMT Not After : Mar 3 22:56:37 2026 GMT Subject: CN=AA6FFB87A6ACA04C075C59DD6C06C7C5B8D3DC79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e9:21:f8:35:78:a7:87:9d:e4:f5:88:71:46: b1:ce:f0:2d:66:d5:de:b9:b3:fd:10:93:a4:82:41: ca:03:ee:fa:45:d9:84:12:31:cf:67:65:5c:66:c9: 28:f0:36:b8:d6:10:f1:c8:40:62:56:21:21:8f:d8: 92:c2:bd:ee:1c:fd:b4:fb:83:6e:f2:83:37:6d:89: 71:c5:11:b8:0f:52:2b:3a:2a:69:10:df:e0:b1:ac: 15:06:ac:14:fb:a8:8b:f0:b2:59:fd:3d:96:25:05: 1b:c9:4f:7a:0c:59:e2:62:38:c2:8c:b1:47:1f:a5: fc:4e:5e:a5:0f:0c:97:48:6a:31:b2:ec:50:ea:70: 60:88:0e:4f:e6:9c:4b:56:2b:f3:7c:79:a0:7d:8c: f8:30:ca:b2:3f:ea:43:1e:19:09:97:37:cc:cd:e6: dc:af:90:be:2c:b1:97:36:9e:e3:6f:bb:51:da:5b: c2:27:fa:50:80:3a:21:34:76:8e:cf:f9:de:d1:7b: 9e:32:3c:4b:d1:6d:71:be:c1:e6:ae:1a:0c:88:02: 36:f2:f2:24:41:84:2a:d0:cb:11:0f:08:c7:43:69: 7d:f0:03:68:a9:7a:aa:b1:f5:ed:ce:62:a2:c5:2f: 23:71:52:77:09:a3:f2:de:dd:64:d2:85:7c:dc:f1: fe:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:6F:FB:87:A6:AC:A0:4C:07:5C:59:DD:6C:06:C7:C5:B8:D3:DC:79 X509v3 Authority Key Identifier: keyid:D1:C3:51:36:28:04:15:65:5D:EC:1D:44:2C:7C:98:2F:D3:6A:5B:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/D1C35136280415655DEC1D442C7C982FD36A5B86.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1C35136280415655DEC1D442C7C982FD36A5B86.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/D1C35136280415655DEC1D442C7C982FD36A5B86.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:59:81:81:40:70:f1:4d:aa:fe:3a:85:d1:af:d4:35:6c:b4: 34:50:06:79:fd:15:f0:83:5f:54:01:c1:58:02:1d:a5:ec:99: f2:cd:61:91:b2:be:c7:b3:94:e0:5e:22:f5:41:d7:94:05:47: 90:55:3d:38:9f:5f:09:14:fb:71:4b:b7:98:d9:6e:ab:ba:d2: 10:8e:5a:a2:36:0a:2d:01:60:b2:bd:33:2f:59:d5:1a:9a:c3: 01:26:e0:6d:01:4f:8f:fd:79:b0:80:95:de:17:1c:dc:7d:c1: 20:bf:23:d1:91:4b:cd:da:a0:b2:a5:c6:cb:a6:f4:0b:ce:ef: dc:97:a0:38:1d:6a:54:e8:17:0c:e5:e3:dd:1e:97:60:4b:26: 7e:df:1b:5d:a6:39:b8:2a:cb:d4:40:9e:bb:b8:4f:cb:03:5d: 7c:61:c4:21:59:b9:e4:c6:b0:2a:4c:0a:1b:e2:ae:62:d6:b2: 27:c2:2b:db:d5:31:5b:36:11:ec:79:96:66:c5:9a:ff:90:bf: 7e:ac:5e:8c:bf:99:0b:ff:7d:c7:57:30:29:25:4c:ed:f8:26: 4e:9f:9c:b0:b4:d7:9b:90:31:2a:5e:82:db:d7:82:2b:09:7e: 10:25:52:81:a0:b2:b7:54:c4:7f:44:ec:42:bb:84:de:4c:e8: 32:38:17:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD8ekGDfUzVZRbRf9yQvXb91t3eQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDFDMzUxMzYyODA0MTU2NTVERUMxRDQ0MkM3Qzk4MkZE MzZBNUI4NjAeFw0yNjAyMjgxNDQ3MzdaFw0yNjAzMDMyMjU2MzdaMDMxMTAvBgNV BAMTKEFBNkZGQjg3QTZBQ0EwNEMwNzVDNTlERDZDMDZDN0M1QjhEM0RDNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx6SH4NXinh53k9YhxRrHO8C1m 1d65s/0Qk6SCQcoD7vpF2YQSMc9nZVxmySjwNrjWEPHIQGJWISGP2JLCve4c/bT7 g27ygzdtiXHFEbgPUis6KmkQ3+CxrBUGrBT7qIvwsln9PZYlBRvJT3oMWeJiOMKM sUcfpfxOXqUPDJdIajGy7FDqcGCIDk/mnEtWK/N8eaB9jPgwyrI/6kMeGQmXN8zN 5tyvkL4ssZc2nuNvu1HaW8In+lCAOiE0do7P+d7Re54yPEvRbXG+weauGgyIAjby 8iRBhCrQyxEPCMdDaX3wA2ipeqqx9e3OYqLFLyNxUncJo/Le3WTShXzc8f5ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqm/7h6asoEwHXFndbAbHxbjT3HkwHwYDVR0j BBgwFoAU0cNRNigEFWVd7B1ELHyYL9NqW4YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZjljMDI5YS1kYjUxLTRhMGUtOTIwMy02ZWUyMzMyZGY4M2YvMC9EMUMzNTEzNjI4 MDQxNTY1NURFQzFENDQyQzdDOTgyRkQzNkE1Qjg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDFDMzUxMzYyODA0MTU2NTVERUMxRDQ0MkM3Qzk4MkZEMzZB NUI4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2Y5YzAyOWEtZGI1MS00YTBlLTky MDMtNmVlMjMzMmRmODNmLzAvRDFDMzUxMzYyODA0MTU2NTVERUMxRDQ0MkM3Qzk4 MkZEMzZBNUI4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ1ZgYFAcPFNqv46hdGv1DVstDRQBnn9FfCD X1QBwVgCHaXsmfLNYZGyvsezlOBeIvVB15QFR5BVPTifXwkU+3FLt5jZbqu60hCO WqI2Ci0BYLK9My9Z1RqawwEm4G0BT4/9ebCAld4XHNx9wSC/I9GRS83aoLKlxsum 9AvO79yXoDgdalToFwzl490el2BLJn7fG12mObgqy9RAnru4T8sDXXxhxCFZueTG sCpMChvirmLWsifCK9vVMVs2Eex5lmbFmv+Qv36sXoy/mQv/fcdXMCklTO34Jk6f nLC015uQMSpegtvXgisJfhAlUoGgsrdUxH9E7EK7hN5M6DI4F3w= -----END CERTIFICATE-----Generated at Mon Mar 2 05:03:07 2026 by rpki-client