$ rpki-client -vvf repo-rpki.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.mft File: C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.mft (raw, json) Hash identifier: 2KiBVB3TKrtORF9GJARYzUc6wTDUvqufUsFBK3Z/rgk= Subject key identifier: 83:7D:DA:C1:7A:E3:24:A9:4A:51:2E:EF:B8:6A:05:DC:C1:AC:53:B4 Authority key identifier: C1:9B:13:30:25:B2:D9:47:03:4F:2B:0F:C5:82:B9:F2:AB:C7:A6:B2 Certificate issuer: /CN=C19B133025B2D947034F2B0FC582B9F2ABC7A6B2 Certificate serial: 7CF10DE75146072E2C47DE37AF400B81869AC9AB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.mft Manifest number: 01F7 Signing time: Sat 28 Feb 2026 16:11:24 +0000 Manifest this update: Sat 28 Feb 2026 16:06:24 +0000 Manifest next update: Tue 03 Mar 2026 18:44:24 +0000 Files and hashes: 1: 3130332e3138362e322e302f32342d3234203d3e20313439383837.roa (hash: XKb8rxYeYuD4PKUeGTZQ0dDYWCAE/hKgR+dYvEQGg4I=) 2: C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.crl (hash: X0DkoV57O5+VVRDqe8IC6BLAlPE1GKifLFXJq6TC2B8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.crl rsync://repo-rpki.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 18:44:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:f1:0d:e7:51:46:07:2e:2c:47:de:37:af:40:0b:81:86:9a:c9:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C19B133025B2D947034F2B0FC582B9F2ABC7A6B2 Validity Not Before: Feb 28 16:06:24 2026 GMT Not After : Mar 3 18:44:24 2026 GMT Subject: CN=837DDAC17AE324A94A512EEFB86A05DCC1AC53B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:89:3f:26:c6:78:c4:f1:a0:ae:d3:4b:fd:5f: 64:ba:b2:c5:d9:df:9b:b0:5e:31:0f:48:a9:96:ec: 1b:a4:25:84:79:75:82:58:f1:24:69:05:8b:11:e2: ff:57:49:1e:f2:d6:fa:84:4a:ab:03:7a:43:15:e0: 48:81:a3:11:eb:47:b0:23:57:2a:a1:cf:9d:db:80: 9a:cf:e1:c8:ca:d8:a9:47:a6:29:a2:f7:ea:a8:36: 04:6a:1f:4b:49:e2:4d:23:1c:1c:86:fc:bb:17:d7: f0:2f:6d:69:fe:88:f2:d5:e9:f3:f2:a6:4d:fc:12: 8a:cd:4a:b3:d9:36:bb:ce:0f:f6:f4:6f:5e:ab:c8: 7f:34:63:ac:bd:3d:2a:5d:fe:c3:2f:f3:58:43:14: 76:96:0b:88:68:60:a8:7f:7f:ab:ff:bd:a8:b2:38: e0:b2:09:c5:af:64:37:d8:88:60:a0:5e:fd:02:15: 99:7e:8a:38:f5:27:a5:2e:2d:00:e7:32:7a:ec:61: f5:b9:d8:30:6b:c8:86:a6:4d:cc:5e:b4:0b:ad:d9: fa:11:8e:75:1d:d1:f7:1f:49:d4:11:e9:c4:b6:40: 47:21:40:aa:1a:e8:c8:8f:7f:27:8e:a7:90:ae:6b: a6:a7:1d:c5:0e:1f:f1:4c:b6:67:8d:54:49:61:fe: 14:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:7D:DA:C1:7A:E3:24:A9:4A:51:2E:EF:B8:6A:05:DC:C1:AC:53:B4 X509v3 Authority Key Identifier: keyid:C1:9B:13:30:25:B2:D9:47:03:4F:2B:0F:C5:82:B9:F2:AB:C7:A6:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:12:16:ec:a2:13:56:82:3b:b3:61:86:a1:4b:23:61:b9:b1: 0d:91:c7:e3:ce:7d:e7:27:6f:19:75:17:6e:ee:4d:8b:9a:b4: 3a:6f:7a:ce:bc:4b:07:19:31:29:de:e4:49:42:a4:77:16:84: dc:d1:a2:49:14:72:c7:c2:c9:69:f0:b3:ac:55:2e:12:b8:35: e8:93:41:fd:ce:e1:dc:e9:48:7c:c4:8e:25:73:7c:5a:07:d0: 08:1c:f6:b0:d2:a5:69:67:b0:53:6b:77:88:b8:79:0a:76:24: 1c:6f:9e:6d:a3:2c:92:34:f7:60:67:ea:b2:a9:f1:77:59:4c: c1:3e:02:9c:1c:03:5e:99:26:b3:25:4f:4c:ee:ed:6c:28:ca: 86:69:21:57:5a:c7:a0:e0:a0:de:9e:6e:97:8b:d9:5f:f7:fa: c4:ec:09:e4:e7:48:63:82:6d:3c:fc:82:59:9d:a9:f8:1c:a9: 49:c4:98:0e:74:19:67:53:5d:32:06:38:e8:ea:76:50:7d:6c: ee:f6:39:3e:7d:ca:50:d8:78:d9:56:5f:ed:c6:d4:59:8e:1a: 07:f4:11:59:01:45:5e:ed:2c:d3:fd:aa:fc:81:5b:46:2a:89: 01:8a:77:80:b3:06:de:7d:91:8a:4d:40:69:47:78:ce:f0:e3: 91:6c:b4:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfPEN51FGBy4sR943r0ALgYaayaswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE5QjEzMzAyNUIyRDk0NzAzNEYyQjBGQzU4MkI5RjJB QkM3QTZCMjAeFw0yNjAyMjgxNjA2MjRaFw0yNjAzMDMxODQ0MjRaMDMxMTAvBgNV BAMTKDgzN0REQUMxN0FFMzI0QTk0QTUxMkVFRkI4NkEwNURDQzFBQzUzQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4iT8mxnjE8aCu00v9X2S6ssXZ 35uwXjEPSKmW7BukJYR5dYJY8SRpBYsR4v9XSR7y1vqESqsDekMV4EiBoxHrR7Aj Vyqhz53bgJrP4cjK2KlHpimi9+qoNgRqH0tJ4k0jHByG/LsX1/AvbWn+iPLV6fPy pk38EorNSrPZNrvOD/b0b16ryH80Y6y9PSpd/sMv81hDFHaWC4hoYKh/f6v/vaiy OOCyCcWvZDfYiGCgXv0CFZl+ijj1J6UuLQDnMnrsYfW52DBryIamTcxetAut2foR jnUd0fcfSdQR6cS2QEchQKoa6MiPfyeOp5Cua6anHcUOH/FMtmeNVElh/hSLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUg33awXrjJKlKUS7vuGoF3MGsU7QwHwYDVR0j BBgwFoAUwZsTMCWy2UcDTysPxYK58qvHprIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NGY2ZDg2Yi1lM2RmLTRlMmYtOTM2Zi1lZDliOTYzNTAzYTEvMC9DMTlCMTMzMDI1 QjJEOTQ3MDM0RjJCMEZDNTgyQjlGMkFCQzdBNkIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzE5QjEzMzAyNUIyRDk0NzAzNEYyQjBGQzU4MkI5RjJBQkM3 QTZCMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDRmNmQ4NmItZTNkZi00ZTJmLTkz NmYtZWQ5Yjk2MzUwM2ExLzAvQzE5QjEzMzAyNUIyRDk0NzAzNEYyQjBGQzU4MkI5 RjJBQkM3QTZCMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADUSFuyiE1aCO7NhhqFLI2G5sQ2Rx+POfecn bxl1F27uTYuatDpves68SwcZMSne5ElCpHcWhNzRokkUcsfCyWnws6xVLhK4NeiT Qf3O4dzpSHzEjiVzfFoH0Agc9rDSpWlnsFNrd4i4eQp2JBxvnm2jLJI092Bn6rKp 8XdZTME+ApwcA16ZJrMlT0zu7WwoyoZpIVdax6DgoN6ebpeL2V/3+sTsCeTnSGOC bTz8glmdqfgcqUnEmA50GWdTXTIGOOjqdlB9bO72OT59ylDYeNlWX+3G1FmOGgf0 EVkBRV7tLNP9qvyBW0YqiQGKd4CzBt59kYpNQGlHeM7w45FstAE= -----END CERTIFICATE-----Generated at Mon Mar 2 05:28:36 2026 by rpki-client