$ rpki-client -vvf repo-rpki.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.mft File: D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.mft (raw, json) Hash identifier: PywzL3XEQ6LC3w/1EI/B6BuDq69IJOvXMruBAwxEbQ8= Subject key identifier: F3:45:D5:5D:14:72:4C:FA:40:BE:15:8D:2D:D5:EB:EE:83:27:F2:C8 Authority key identifier: D7:6C:F6:4B:32:F2:3D:8C:4E:BF:A0:28:11:D0:B0:8A:78:C6:12:D0 Certificate issuer: /CN=D76CF64B32F23D8C4EBFA02811D0B08A78C612D0 Certificate serial: 12A20B6FA359FE3002FEE82D15F55D9A0CE541A9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.mft Manifest number: 0231 Signing time: Sun 01 Mar 2026 08:21:57 +0000 Manifest this update: Sun 01 Mar 2026 08:16:57 +0000 Manifest next update: Wed 04 Mar 2026 19:15:57 +0000 Files and hashes: 1: D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.crl (hash: cIT96ZFHBfIfdnraWCDqm0SfgpTfLK/9Z3H3VuYrLLA=) 2: 3130332e3136392e362e302f32332d3234203d3e20313431313037.roa (hash: wlhhz4T86+ShRU2p6Up+KvbeI0BWxilrsa27X54ni/4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.crl rsync://repo-rpki.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 19:15:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:a2:0b:6f:a3:59:fe:30:02:fe:e8:2d:15:f5:5d:9a:0c:e5:41:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D76CF64B32F23D8C4EBFA02811D0B08A78C612D0 Validity Not Before: Mar 1 08:16:57 2026 GMT Not After : Mar 4 19:15:57 2026 GMT Subject: CN=F345D55D14724CFA40BE158D2DD5EBEE8327F2C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:58:ff:ad:fe:ff:a3:03:2d:ea:e0:38:2b:60: 5a:18:2e:ad:f4:93:9f:ad:9b:69:19:c6:f5:0b:b4: 9e:6f:ea:b9:8c:1c:35:24:54:dd:5d:64:43:0b:10: 12:e7:ed:d2:9d:7d:17:d8:4e:bc:fd:06:0e:bc:40: c3:23:49:b9:d4:fb:aa:3b:3a:e5:03:f2:1e:c1:04: cd:8c:6d:98:c5:60:9e:9f:05:63:86:d1:44:3f:9c: d9:4f:5e:b4:ae:13:e3:c2:fe:88:e4:99:ab:37:77: 2d:16:79:7c:3c:ab:92:cb:e3:6e:9f:08:bb:99:33: 92:f9:f0:1b:b0:1f:69:72:39:f4:fd:8e:75:a0:8c: 2f:8a:d0:95:03:b4:20:71:79:5c:9e:77:28:2e:64: dc:eb:1a:15:8c:be:d7:22:4d:5f:28:e2:ca:06:01: 51:d2:69:72:21:1c:83:77:bb:16:32:26:88:10:19: a4:10:91:f7:7c:72:5c:8b:6a:a5:bd:f4:d9:84:c4: 48:ad:07:cd:ec:01:eb:86:6c:08:27:df:13:57:9f: 00:08:5e:96:e6:63:83:0b:3f:49:7e:0f:4b:d7:12: 64:12:aa:3e:94:9a:f6:aa:19:01:37:54:63:ab:c6: 18:ec:34:aa:dd:e3:15:0d:52:98:2f:b1:75:a3:be: 27:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:45:D5:5D:14:72:4C:FA:40:BE:15:8D:2D:D5:EB:EE:83:27:F2:C8 X509v3 Authority Key Identifier: keyid:D7:6C:F6:4B:32:F2:3D:8C:4E:BF:A0:28:11:D0:B0:8A:78:C6:12:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:76:6a:e6:23:99:c2:06:a7:32:f4:f5:7b:ba:77:23:e4:e4: 19:0d:08:ec:f6:c2:21:2c:3a:5e:df:8c:79:a2:9b:c9:7f:62: e4:93:86:f1:7f:0c:5d:f3:0c:2a:5a:97:28:b6:8a:f3:e6:95: 6b:11:fa:87:ce:05:52:db:8a:8f:2e:9a:13:f9:ac:ba:7e:a4: 4c:70:74:20:bc:d7:bb:bf:71:b0:75:85:b7:d6:16:96:9c:27: 9e:7b:4b:ad:d3:ac:55:52:8b:d7:21:9d:8b:b7:af:96:74:8c: 7f:20:b3:6c:08:19:79:08:68:50:46:1d:91:46:f2:4c:61:02: 89:bd:a1:9a:df:bb:0d:c8:5c:b2:70:73:00:ac:cb:af:a5:d4: 01:f5:10:ea:f1:f2:aa:a3:90:07:09:77:11:3d:13:f6:0c:54: 46:ef:d3:a7:62:88:33:e0:c0:07:c3:e5:4b:c4:26:10:9c:ea: 97:ac:46:99:dd:db:a3:a9:a4:66:5c:32:ec:b6:b7:24:a4:59: 3e:54:a2:6c:56:34:85:fe:e3:54:92:07:d1:4c:7f:54:9b:69: 45:81:9c:79:26:c6:02:97:05:88:d7:d2:6e:8d:a5:39:96:fd: 60:8f:61:7b:58:bc:aa:d3:31:43:1c:fc:b6:6f:44:5c:25:18: 4a:18:72:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEqILb6NZ/jAC/ugtFfVdmgzlQakwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDc2Q0Y2NEIzMkYyM0Q4QzRFQkZBMDI4MTFEMEIwOEE3 OEM2MTJEMDAeFw0yNjAzMDEwODE2NTdaFw0yNjAzMDQxOTE1NTdaMDMxMTAvBgNV BAMTKEYzNDVENTVEMTQ3MjRDRkE0MEJFMTU4RDJERDVFQkVFODMyN0YyQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+WP+t/v+jAy3q4DgrYFoYLq30 k5+tm2kZxvULtJ5v6rmMHDUkVN1dZEMLEBLn7dKdfRfYTrz9Bg68QMMjSbnU+6o7 OuUD8h7BBM2MbZjFYJ6fBWOG0UQ/nNlPXrSuE+PC/ojkmas3dy0WeXw8q5LL426f CLuZM5L58BuwH2lyOfT9jnWgjC+K0JUDtCBxeVyedyguZNzrGhWMvtciTV8o4soG AVHSaXIhHIN3uxYyJogQGaQQkfd8clyLaqW99NmExEitB83sAeuGbAgn3xNXnwAI XpbmY4MLP0l+D0vXEmQSqj6UmvaqGQE3VGOrxhjsNKrd4xUNUpgvsXWjvievAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU80XVXRRyTPpAvhWNLdXr7oMn8sgwHwYDVR0j BBgwFoAU12z2SzLyPYxOv6AoEdCwinjGEtAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NTNlNGFmNS1hYWY1LTQ2Y2UtYjExOS1kN2U3NmRhZTIwYjgvMC9ENzZDRjY0QjMy RjIzRDhDNEVCRkEwMjgxMUQwQjA4QTc4QzYxMkQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDc2Q0Y2NEIzMkYyM0Q4QzRFQkZBMDI4MTFEMEIwOEE3OEM2 MTJEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDUzZTRhZjUtYWFmNS00NmNlLWIx MTktZDdlNzZkYWUyMGI4LzAvRDc2Q0Y2NEIzMkYyM0Q4QzRFQkZBMDI4MTFEMEIw OEE3OEM2MTJEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJZ2auYjmcIGpzL09Xu6dyPk5BkNCOz2wiEs Ol7fjHmim8l/YuSThvF/DF3zDCpalyi2ivPmlWsR+ofOBVLbio8umhP5rLp+pExw dCC817u/cbB1hbfWFpacJ557S63TrFVSi9chnYu3r5Z0jH8gs2wIGXkIaFBGHZFG 8kxhAom9oZrfuw3IXLJwcwCsy6+l1AH1EOrx8qqjkAcJdxE9E/YMVEbv06diiDPg wAfD5UvEJhCc6pesRpnd26OppGZcMuy2tySkWT5UomxWNIX+41SSB9FMf1SbaUWB nHkmxgKXBYjX0m6NpTmW/WCPYXtYvKrTMUMc/LZvRFwlGEoYcpc= -----END CERTIFICATE-----Generated at Mon Mar 2 05:59:16 2026 by rpki-client