$ rpki-client -vvf repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.mft File: 994DAB84DB40175C3635F0F432BAABCF20F5E80A.mft (raw, json) Hash identifier: 8MpWAe02bknOBfZIDdsqJgus3mstcajlMhUX8SXvWC4= Subject key identifier: 8C:1E:41:46:82:30:E5:8A:00:EE:F1:C1:B9:AB:3C:79:62:62:51:CB Authority key identifier: 99:4D:AB:84:DB:40:17:5C:36:35:F0:F4:32:BA:AB:CF:20:F5:E8:0A Certificate issuer: /CN=994DAB84DB40175C3635F0F432BAABCF20F5E80A Certificate serial: 4CC0D44BBDAFAB45FE90570A84CA994F9AC41A43 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/994DAB84DB40175C3635F0F432BAABCF20F5E80A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.mft Manifest number: 0110 Signing time: Sun 01 Mar 2026 23:11:47 +0000 Manifest this update: Sun 01 Mar 2026 23:06:47 +0000 Manifest next update: Thu 05 Mar 2026 01:58:47 +0000 Files and hashes: 1: 3130332e33352e3231392e302f32342d3234203d3e20313439393735.roa (hash: +5Txp9rL/wtpyru49a753Z8Sc1QIs/NyTcAJqiOVK6s=) 2: 994DAB84DB40175C3635F0F432BAABCF20F5E80A.crl (hash: T1K0eK+tEyQ7QTiiCa636zqlImZytpWpwjvjK+4DorY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.crl rsync://repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/994DAB84DB40175C3635F0F432BAABCF20F5E80A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 01:58:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:c0:d4:4b:bd:af:ab:45:fe:90:57:0a:84:ca:99:4f:9a:c4:1a:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=994DAB84DB40175C3635F0F432BAABCF20F5E80A Validity Not Before: Mar 1 23:06:47 2026 GMT Not After : Mar 5 01:58:47 2026 GMT Subject: CN=8C1E41468230E58A00EEF1C1B9AB3C79626251CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:22:9b:82:7b:02:44:93:8e:7c:e6:24:3e:31: d5:86:f9:fc:34:32:85:8d:fd:3b:fd:4d:ce:d8:5d: c7:42:c1:f9:ee:c5:3c:ad:23:3c:f7:29:53:a6:89: 89:a5:71:98:42:65:da:76:62:28:e4:a9:7e:b1:5e: cd:63:d0:00:1c:b4:fc:b9:bc:db:4b:35:9b:ba:b0: 75:ac:dd:6e:bd:f8:97:12:4b:d8:b6:33:b7:34:f5: 89:27:62:27:1a:f1:4a:d9:aa:18:76:3d:db:d6:bb: d2:e0:30:d2:c2:0f:8f:b1:82:a6:3a:5b:e1:07:34: b9:e7:36:fc:da:68:dd:f2:a9:d8:a3:42:be:fe:7f: a7:cd:de:60:e9:62:03:a7:f0:d2:a8:44:74:b2:a3: 84:5f:d8:43:a4:2d:66:fa:d6:1b:47:af:a7:70:c2: 84:99:b0:85:99:29:51:b0:0d:5c:2d:e0:a4:98:80: 13:f1:7c:74:03:3d:e5:8b:ac:4a:bd:28:05:3d:02: c5:fc:23:4e:65:5a:7b:f1:b6:1c:83:bb:08:35:28: 0b:62:27:be:20:10:28:ed:60:cd:e5:3f:fc:bb:19: 4a:5d:ae:6e:94:2b:60:51:46:6a:58:fd:a7:52:6b: e0:97:c9:3a:88:81:c6:b3:28:c7:b2:79:1b:f1:f8: 9a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:1E:41:46:82:30:E5:8A:00:EE:F1:C1:B9:AB:3C:79:62:62:51:CB X509v3 Authority Key Identifier: keyid:99:4D:AB:84:DB:40:17:5C:36:35:F0:F4:32:BA:AB:CF:20:F5:E8:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/994DAB84DB40175C3635F0F432BAABCF20F5E80A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:9a:e6:7d:18:62:35:20:a6:42:87:07:74:8e:97:63:d9:4d: a7:35:a3:47:ce:84:86:83:d8:77:5e:a0:21:c4:67:bf:df:d7: cb:29:46:11:07:5e:af:66:7e:a1:fa:53:6f:f6:2b:4c:f2:78: 9e:68:b1:1f:3f:0c:02:ce:f4:6c:f2:11:79:2f:00:0a:1a:8d: 61:c1:5b:82:31:1b:5c:7a:d6:70:32:fc:27:46:18:04:d6:87: cd:58:ec:64:2f:31:9f:cd:bc:fc:51:7c:82:a4:bb:35:48:a5: c4:f4:b2:bd:ba:09:8b:8e:e3:a6:8a:24:46:a5:6e:a4:0e:42: 8e:29:e9:40:0f:a8:31:d5:e4:d9:b8:12:63:ff:e3:94:94:21: 4d:ed:17:4e:95:dd:ae:24:f1:2c:ae:18:f9:bc:0f:df:5a:93: 76:10:2a:65:25:50:54:7f:85:4f:4c:0c:5a:2c:7c:54:9b:75: c8:57:00:a5:d4:f9:7f:61:aa:0d:6e:8e:19:e8:8e:31:eb:14: cf:63:49:8c:a1:a7:da:9b:04:eb:08:60:68:72:b6:d7:95:56: 08:a6:57:d2:aa:5a:80:2f:05:fc:4c:34:a7:42:c5:32:99:e2: 94:92:6e:74:55:81:97:fc:25:e2:47:d7:d7:f1:72:83:75:48: be:9f:09:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTMDUS72vq0X+kFcKhMqZT5rEGkMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTk0REFCODREQjQwMTc1QzM2MzVGMEY0MzJCQUFCQ0Yy MEY1RTgwQTAeFw0yNjAzMDEyMzA2NDdaFw0yNjAzMDUwMTU4NDdaMDMxMTAvBgNV BAMTKDhDMUU0MTQ2ODIzMEU1OEEwMEVFRjFDMUI5QUIzQzc5NjI2MjUxQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjIpuCewJEk4585iQ+MdWG+fw0 MoWN/Tv9Tc7YXcdCwfnuxTytIzz3KVOmiYmlcZhCZdp2YijkqX6xXs1j0AActPy5 vNtLNZu6sHWs3W69+JcSS9i2M7c09YknYica8UrZqhh2PdvWu9LgMNLCD4+xgqY6 W+EHNLnnNvzaaN3yqdijQr7+f6fN3mDpYgOn8NKoRHSyo4Rf2EOkLWb61htHr6dw woSZsIWZKVGwDVwt4KSYgBPxfHQDPeWLrEq9KAU9AsX8I05lWnvxthyDuwg1KAti J74gECjtYM3lP/y7GUpdrm6UK2BRRmpY/adSa+CXyTqIgcazKMeyeRvx+JqbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjB5BRoIw5YoA7vHBuas8eWJiUcswHwYDVR0j BBgwFoAUmU2rhNtAF1w2NfD0MrqrzyD16AowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MmQ0MmEyOS1iZDQ4LTRlZjctYWY0OC0wYWEwZDM1ZGIzN2IvMC85OTREQUI4NERC NDAxNzVDMzYzNUYwRjQzMkJBQUJDRjIwRjVFODBBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTk0REFCODREQjQwMTc1QzM2MzVGMEY0MzJCQUFCQ0YyMEY1 RTgwQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDJkNDJhMjktYmQ0OC00ZWY3LWFm NDgtMGFhMGQzNWRiMzdiLzAvOTk0REFCODREQjQwMTc1QzM2MzVGMEY0MzJCQUFC Q0YyMEY1RTgwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHGa5n0YYjUgpkKHB3SOl2PZTac1o0fOhIaD 2HdeoCHEZ7/f18spRhEHXq9mfqH6U2/2K0zyeJ5osR8/DALO9GzyEXkvAAoajWHB W4IxG1x61nAy/CdGGATWh81Y7GQvMZ/NvPxRfIKkuzVIpcT0sr26CYuO46aKJEal bqQOQo4p6UAPqDHV5Nm4EmP/45SUIU3tF06V3a4k8SyuGPm8D99ak3YQKmUlUFR/ hU9MDFosfFSbdchXAKXU+X9hqg1ujhnojjHrFM9jSYyhp9qbBOsIYGhytteVVgim V9KqWoAvBfxMNKdCxTKZ4pSSbnRVgZf8JeJH19fxcoN1SL6fCeY= -----END CERTIFICATE-----Generated at Mon Mar 2 10:54:43 2026 by rpki-client