$ rpki-client -vvf repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/1D4A7562F096F3F753E388C14594BA75AE09E7F3.mft File: 1D4A7562F096F3F753E388C14594BA75AE09E7F3.mft (raw, json) Hash identifier: a8v2JvCLwObxhsG8sia6LmH1j/heo+gOXMSqh554HYU= Subject key identifier: DD:8F:22:D3:E8:68:BC:5A:8C:81:68:07:C3:13:FC:93:33:DA:66:CB Authority key identifier: 1D:4A:75:62:F0:96:F3:F7:53:E3:88:C1:45:94:BA:75:AE:09:E7:F3 Certificate issuer: /CN=1D4A7562F096F3F753E388C14594BA75AE09E7F3 Certificate serial: 301E0261A5A833118E714CBEB8BFDB89476D5898 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D4A7562F096F3F753E388C14594BA75AE09E7F3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/1D4A7562F096F3F753E388C14594BA75AE09E7F3.mft Manifest number: 01CE Signing time: Sun 01 Mar 2026 21:51:42 +0000 Manifest this update: Sun 01 Mar 2026 21:46:42 +0000 Manifest next update: Thu 05 Mar 2026 07:41:42 +0000 Files and hashes: 1: 3130332e3130372e3137362e302f32332d3233203d3e20313530393434.roa (hash: +kGXvvTp0IkbxrGv/DEpgvQeRlEwoEyXoWledhe0tWQ=) 2: 3130332e3130372e3137372e302f32342d3234203d3e20313530393434.roa (hash: Tu2pBk/URNroZW6zOqNNP1pzL3rQikcBMBsuhpkJzRA=) 3: 3130332e3130372e3137362e302f32342d3234203d3e20313530393434.roa (hash: t5cP9pI7pfpZ95tebj5VAs5xM+wyda4Uz0LABi641BU=) 4: 1D4A7562F096F3F753E388C14594BA75AE09E7F3.crl (hash: UuXIGcpj3kRxADuveyoZENkpsWQkdMK2O9rAQcyIV2M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/1D4A7562F096F3F753E388C14594BA75AE09E7F3.crl rsync://repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/1D4A7562F096F3F753E388C14594BA75AE09E7F3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D4A7562F096F3F753E388C14594BA75AE09E7F3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:17:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:1e:02:61:a5:a8:33:11:8e:71:4c:be:b8:bf:db:89:47:6d:58:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D4A7562F096F3F753E388C14594BA75AE09E7F3 Validity Not Before: Mar 1 21:46:42 2026 GMT Not After : Mar 5 07:41:42 2026 GMT Subject: CN=DD8F22D3E868BC5A8C816807C313FC9333DA66CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:6c:97:07:a1:a8:5d:21:b3:c4:fd:f5:92:d7: c8:b6:8a:ac:c3:76:81:84:97:ab:03:19:32:64:2f: f2:f3:06:bd:50:3b:2e:16:70:3e:4d:3d:c6:cf:c2: a1:b2:c4:34:c2:bc:a6:be:72:ad:40:65:10:bf:f6: 7e:9e:36:c9:38:20:04:61:ab:c4:56:d7:5c:71:5d: 4b:42:82:7d:ff:95:10:9f:21:9c:72:1e:6d:45:32: 61:9f:f7:15:d4:87:21:2c:e4:52:0f:d8:98:02:cc: b9:de:e2:7b:40:4b:9d:fe:65:38:d1:b1:ce:7a:e1: f2:96:5b:af:55:36:50:f0:1e:97:b4:b5:dc:cf:21: c6:92:3f:9b:72:08:e7:4e:66:d9:4b:b4:af:f9:2e: db:4a:a2:0c:93:1a:bb:22:7d:bd:cd:be:70:35:0a: 93:d4:74:14:fe:5d:6b:c2:52:27:25:48:6a:30:7e: 2d:42:44:79:f3:ec:dd:99:36:8d:29:91:b3:eb:c9: d1:9b:2d:27:21:31:36:5d:df:4b:ac:94:23:a4:04: 9c:6a:9e:fe:33:53:33:89:c3:67:39:06:6b:34:60: 8a:35:a0:49:6d:8a:46:25:63:79:7a:a6:c0:d9:20: d8:62:43:28:eb:2e:b4:69:ba:b7:52:06:70:15:21: 16:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:8F:22:D3:E8:68:BC:5A:8C:81:68:07:C3:13:FC:93:33:DA:66:CB X509v3 Authority Key Identifier: keyid:1D:4A:75:62:F0:96:F3:F7:53:E3:88:C1:45:94:BA:75:AE:09:E7:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/1D4A7562F096F3F753E388C14594BA75AE09E7F3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D4A7562F096F3F753E388C14594BA75AE09E7F3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/1D4A7562F096F3F753E388C14594BA75AE09E7F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:f0:f1:67:ca:b8:1a:74:88:73:4b:01:63:ae:24:8a:37:16: 73:59:52:15:d5:fe:d0:12:98:de:cb:f6:5b:28:5a:5f:4e:e7: 49:51:10:c9:57:8b:e4:92:aa:97:9c:eb:fb:ed:e9:1c:cb:78: 8a:a9:0e:5f:2e:4f:53:14:82:98:1a:33:2f:ad:c8:7a:6e:4a: 56:11:87:a9:d0:92:48:0e:cb:b6:ff:26:62:f6:57:a9:32:41: c2:f9:ac:cb:f8:c6:3d:10:af:cd:c5:f5:79:c7:8d:b7:63:37: 63:9e:d1:a9:96:22:73:51:96:4f:5c:c2:08:b9:7a:dd:ea:54: 7d:9e:87:32:08:a4:e5:3a:d5:e6:f2:8f:31:d9:3a:f4:ca:58: e3:8c:46:96:d9:f4:1f:f6:42:d3:d1:9d:df:81:09:b0:8e:fb: c3:d6:0b:04:c1:be:4a:7a:21:8d:b0:03:5a:3a:93:63:11:c7: d4:43:12:56:c0:61:e6:cc:f0:26:66:f7:74:2b:ce:ae:a3:74: fe:c2:d9:5a:ae:80:27:90:e3:d6:bd:52:39:d8:9c:e6:91:c8: 2b:8c:ce:ca:64:3f:14:e3:77:06:82:41:91:84:35:d4:78:a5: 1a:4b:10:67:44:df:95:2c:93:4d:c4:e4:23:2a:4f:a2:0d:92: 19:4a:85:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMB4CYaWoMxGOcUy+uL/biUdtWJgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ0QTc1NjJGMDk2RjNGNzUzRTM4OEMxNDU5NEJBNzVB RTA5RTdGMzAeFw0yNjAzMDEyMTQ2NDJaFw0yNjAzMDUwNzQxNDJaMDMxMTAvBgNV BAMTKEREOEYyMkQzRTg2OEJDNUE4QzgxNjgwN0MzMTNGQzkzMzNEQTY2Q0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYbJcHoahdIbPE/fWS18i2iqzD doGEl6sDGTJkL/LzBr1QOy4WcD5NPcbPwqGyxDTCvKa+cq1AZRC/9n6eNsk4IARh q8RW11xxXUtCgn3/lRCfIZxyHm1FMmGf9xXUhyEs5FIP2JgCzLne4ntAS53+ZTjR sc564fKWW69VNlDwHpe0tdzPIcaSP5tyCOdOZtlLtK/5LttKogyTGrsifb3NvnA1 CpPUdBT+XWvCUiclSGowfi1CRHnz7N2ZNo0pkbPrydGbLSchMTZd30uslCOkBJxq nv4zUzOJw2c5Bms0YIo1oEltikYlY3l6psDZINhiQyjrLrRpurdSBnAVIRZvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3Y8i0+hovFqMgWgHwxP8kzPaZsswHwYDVR0j BBgwFoAUHUp1YvCW8/dT44jBRZS6da4J5/MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MzZhYjA0ZC02OGM3LTQyNDktYjEwOS00NmIyOGNmODAzZjMvMC8xRDRBNzU2MkYw OTZGM0Y3NTNFMzg4QzE0NTk0QkE3NUFFMDlFN0YzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUQ0QTc1NjJGMDk2RjNGNzUzRTM4OEMxNDU5NEJBNzVBRTA5 RTdGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDM2YWIwNGQtNjhjNy00MjQ5LWIx MDktNDZiMjhjZjgwM2YzLzAvMUQ0QTc1NjJGMDk2RjNGNzUzRTM4OEMxNDU5NEJB NzVBRTA5RTdGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADTw8WfKuBp0iHNLAWOuJIo3FnNZUhXV/tAS mN7L9lsoWl9O50lREMlXi+SSqpec6/vt6RzLeIqpDl8uT1MUgpgaMy+tyHpuSlYR h6nQkkgOy7b/JmL2V6kyQcL5rMv4xj0Qr83F9XnHjbdjN2Oe0amWInNRlk9cwgi5 et3qVH2ehzIIpOU61ebyjzHZOvTKWOOMRpbZ9B/2QtPRnd+BCbCO+8PWCwTBvkp6 IY2wA1o6k2MRx9RDElbAYebM8CZm93Qrzq6jdP7C2VqugCeQ49a9UjnYnOaRyCuM zspkPxTjdwaCQZGENdR4pRpLEGdE35Usk03E5CMqT6INkhlKhdY= -----END CERTIFICATE-----Generated at Mon Mar 2 04:44:35 2026 by rpki-client