$ rpki-client -vvf repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.mft File: 194F6EF659F1115C068AB59065D57F150E23F5B6.mft (raw, json) Hash identifier: KO1fUNNP+I0ZtVFcQO61AR1dh5+TIyEEyvlAf2dIvGw= Subject key identifier: 86:C4:6B:07:11:35:29:35:94:DA:85:0D:F8:2F:5F:C6:76:0F:D3:11 Authority key identifier: 19:4F:6E:F6:59:F1:11:5C:06:8A:B5:90:65:D5:7F:15:0E:23:F5:B6 Certificate issuer: /CN=194F6EF659F1115C068AB59065D57F150E23F5B6 Certificate serial: 1CA2C225A3D90D6F6DB637521CA9C279303DCE35 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/194F6EF659F1115C068AB59065D57F150E23F5B6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.mft Manifest number: 021D Signing time: Sun 01 Mar 2026 19:22:38 +0000 Manifest this update: Sun 01 Mar 2026 19:17:38 +0000 Manifest next update: Wed 04 Mar 2026 22:09:38 +0000 Files and hashes: 1: 194F6EF659F1115C068AB59065D57F150E23F5B6.crl (hash: spPXkRdxrioFimfPOyqG+KmXUVlp4uxsjwGs5lCGHrI=) 2: 34332e3234302e3232362e302f32342d3234203d3e20313530323130.roa (hash: o8nDAJaAvWinmc3Z4YAlpvVlMtuLdAP8yAjpUiEUK14=) 3: 34332e3234302e3232352e302f32342d3234203d3e203633343933.roa (hash: iiMdXC5IwE7CrNkyDM/L6svytNKfCeHud3DpbhTkmXw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.crl rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/194F6EF659F1115C068AB59065D57F150E23F5B6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 22:09:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:a2:c2:25:a3:d9:0d:6f:6d:b6:37:52:1c:a9:c2:79:30:3d:ce:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=194F6EF659F1115C068AB59065D57F150E23F5B6 Validity Not Before: Mar 1 19:17:38 2026 GMT Not After : Mar 4 22:09:38 2026 GMT Subject: CN=86C46B071135293594DA850DF82F5FC6760FD311 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:b2:f0:91:0e:06:59:69:c8:d8:5f:d5:da:c5: 36:87:3f:94:bd:9e:28:0b:35:7f:72:af:9d:8f:a2: d1:6b:69:c3:4f:6e:8f:62:b3:e9:ae:bf:60:22:63: 6f:2f:c3:54:c1:0c:a4:7d:af:2a:6e:61:ee:1d:e3: 7f:f6:1f:5e:e0:6c:91:30:0a:0b:89:5b:c9:01:fe: e5:55:48:10:de:04:c7:30:99:dc:ca:71:86:c7:04: 76:a9:c9:bb:4e:2e:de:f5:04:3f:0c:e0:ac:68:1f: 3f:32:cb:57:04:e7:36:64:00:bc:a3:bb:9a:54:59: 52:c1:ab:03:18:d0:ee:b9:9d:56:ab:52:32:9a:42: 5c:71:2d:82:bf:19:fe:fb:f5:1b:15:61:1c:8d:25: 8e:0d:12:6d:ca:7a:d1:6f:62:fb:94:a8:d8:9f:30: e8:e4:06:d4:01:4b:9c:c1:29:44:c5:3f:3f:56:b7: 56:63:7c:5f:64:df:65:04:75:13:85:34:08:66:38: 8a:24:db:bd:d6:a6:92:fa:3e:7e:ef:30:3d:62:b7: 55:59:c6:06:01:c0:55:48:6d:96:58:f1:05:7e:e8: 78:3f:4c:31:7d:fd:de:ec:20:1d:0c:8a:df:2b:c2: 5d:6d:5c:10:0c:cf:f7:e4:25:38:5f:3a:89:91:7f: da:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:C4:6B:07:11:35:29:35:94:DA:85:0D:F8:2F:5F:C6:76:0F:D3:11 X509v3 Authority Key Identifier: keyid:19:4F:6E:F6:59:F1:11:5C:06:8A:B5:90:65:D5:7F:15:0E:23:F5:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/194F6EF659F1115C068AB59065D57F150E23F5B6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:ee:3c:d9:d2:c3:65:ea:19:b3:00:73:be:4a:f9:77:9c:6e: c8:52:06:c1:81:ee:ea:3a:96:ad:fa:2d:69:28:c0:a1:6b:72: f9:09:f4:ee:8f:de:4f:b7:a5:b7:58:af:32:51:04:7c:21:d6: c8:83:d0:d0:21:09:2a:e1:ab:fd:dd:6a:2a:17:d3:15:3f:26: e4:82:76:e1:84:ec:47:79:f4:3e:b1:79:08:87:4f:c7:d3:78: 3f:09:3d:03:0a:cb:00:4a:3d:02:55:7f:6f:dd:2e:6c:97:b6: be:2c:39:5b:77:b6:ad:da:a2:a6:4e:95:28:34:7b:e0:dc:d7: 23:9a:c4:e1:7d:e4:38:ec:b7:41:6f:6b:2c:a0:79:1e:89:81: fe:b1:4c:c1:0c:ec:ac:a9:63:3d:38:1e:74:08:7e:63:3a:8d: 8f:a0:36:48:5f:2f:07:36:f3:9c:84:f8:4d:64:04:b1:3d:f6: 71:d1:b8:c5:64:f6:61:5f:b1:e4:b0:19:78:10:50:59:b8:5d: ee:d1:84:d9:7e:1d:91:21:96:76:3b:79:01:3b:94:3b:dd:c7: ef:67:23:b2:15:3d:cc:37:0c:2b:cb:e3:2a:5c:d2:bb:18:6c: 07:5e:de:cd:19:6d:af:cb:a7:d5:6a:09:98:e3:18:6a:47:c0: 85:2e:05:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHKLCJaPZDW9ttjdSHKnCeTA9zjUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk0RjZFRjY1OUYxMTE1QzA2OEFCNTkwNjVENTdGMTUw RTIzRjVCNjAeFw0yNjAzMDExOTE3MzhaFw0yNjAzMDQyMjA5MzhaMDMxMTAvBgNV BAMTKDg2QzQ2QjA3MTEzNTI5MzU5NERBODUwREY4MkY1RkM2NzYwRkQzMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdsvCRDgZZacjYX9XaxTaHP5S9 nigLNX9yr52PotFracNPbo9is+muv2AiY28vw1TBDKR9rypuYe4d43/2H17gbJEw CguJW8kB/uVVSBDeBMcwmdzKcYbHBHapybtOLt71BD8M4KxoHz8yy1cE5zZkALyj u5pUWVLBqwMY0O65nVarUjKaQlxxLYK/Gf779RsVYRyNJY4NEm3KetFvYvuUqNif MOjkBtQBS5zBKUTFPz9Wt1ZjfF9k32UEdROFNAhmOIok273WppL6Pn7vMD1it1VZ xgYBwFVIbZZY8QV+6Hg/TDF9/d7sIB0Mit8rwl1tXBAMz/fkJThfOomRf9pBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhsRrBxE1KTWU2oUN+C9fxnYP0xEwHwYDVR0j BBgwFoAUGU9u9lnxEVwGirWQZdV/FQ4j9bYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZmFiZWM3MS03ZWNiLTRkYmQtYTQyMS05OWI5Y2QyMDkwM2EvMC8xOTRGNkVGNjU5 RjExMTVDMDY4QUI1OTA2NUQ1N0YxNTBFMjNGNUI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTk0RjZFRjY1OUYxMTE1QzA2OEFCNTkwNjVENTdGMTUwRTIz RjVCNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2ZhYmVjNzEtN2VjYi00ZGJkLWE0 MjEtOTliOWNkMjA5MDNhLzAvMTk0RjZFRjY1OUYxMTE1QzA2OEFCNTkwNjVENTdG MTUwRTIzRjVCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM3uPNnSw2XqGbMAc75K+XecbshSBsGB7uo6 lq36LWkowKFrcvkJ9O6P3k+3pbdYrzJRBHwh1siD0NAhCSrhq/3daioX0xU/JuSC duGE7Ed59D6xeQiHT8fTeD8JPQMKywBKPQJVf2/dLmyXtr4sOVt3tq3aoqZOlSg0 e+Dc1yOaxOF95Djst0FvayygeR6Jgf6xTMEM7KypYz04HnQIfmM6jY+gNkhfLwc2 85yE+E1kBLE99nHRuMVk9mFfseSwGXgQUFm4Xe7RhNl+HZEhlnY7eQE7lDvdx+9n I7IVPcw3DCvL4ypc0rsYbAde3s0Zba/Lp9VqCZjjGGpHwIUuBQQ= -----END CERTIFICATE-----Generated at Mon Mar 2 04:35:13 2026 by rpki-client