$ rpki-client -vvf repo-rpki.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/D0DE430E423B23AB634EBCF0195F1126B44A525E.mft File: D0DE430E423B23AB634EBCF0195F1126B44A525E.mft (raw, json) Hash identifier: ZLSyxUB0UKGmxLgLIqt7DrRGS/ul8xS5LEsDD2slgjA= Subject key identifier: 37:13:AB:A3:DC:0B:3F:9F:35:F8:78:A9:72:B4:1B:39:5D:25:03:D8 Authority key identifier: D0:DE:43:0E:42:3B:23:AB:63:4E:BC:F0:19:5F:11:26:B4:4A:52:5E Certificate issuer: /CN=D0DE430E423B23AB634EBCF0195F1126B44A525E Certificate serial: 6AE95CDCD77E3C6EA2DC453064DFBC6AAFCCBB6D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0DE430E423B23AB634EBCF0195F1126B44A525E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/D0DE430E423B23AB634EBCF0195F1126B44A525E.mft Manifest number: 0173 Signing time: Sat 28 Feb 2026 09:02:07 +0000 Manifest this update: Sat 28 Feb 2026 08:57:07 +0000 Manifest next update: Tue 03 Mar 2026 17:02:07 +0000 Files and hashes: 1: 34352e3132332e3134322e302f32342d3234203d3e20313532303236.roa (hash: VvHLmuXRMUHqTPfrpSgqTa3OVr8h9pb8S/5kTj+y7+8=) 2: D0DE430E423B23AB634EBCF0195F1126B44A525E.crl (hash: 25fTvBUYZIbkxyrjHI16Fp+v5fN8tYttc2Az9ArFLBU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/D0DE430E423B23AB634EBCF0195F1126B44A525E.crl rsync://repo-rpki.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/D0DE430E423B23AB634EBCF0195F1126B44A525E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0DE430E423B23AB634EBCF0195F1126B44A525E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 17:02:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:e9:5c:dc:d7:7e:3c:6e:a2:dc:45:30:64:df:bc:6a:af:cc:bb:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0DE430E423B23AB634EBCF0195F1126B44A525E Validity Not Before: Feb 28 08:57:07 2026 GMT Not After : Mar 3 17:02:07 2026 GMT Subject: CN=3713ABA3DC0B3F9F35F878A972B41B395D2503D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:83:22:c2:5a:c1:0a:22:ea:1b:b4:6c:17:e1: 47:0a:31:86:1d:f2:2f:c3:bc:48:dd:b4:06:f2:01: 80:72:77:04:06:ab:a3:02:7a:96:e9:30:12:b0:b3: 81:c8:2d:03:68:58:9c:62:99:5c:7a:72:b7:6b:7c: 07:ab:15:80:cd:41:ce:91:5a:32:50:28:56:da:7d: 4b:45:e2:83:31:0d:87:44:22:72:43:36:26:f0:0d: 0d:2d:df:91:c2:f4:8f:14:ef:a9:2e:9d:da:ed:eb: 94:90:3b:ab:89:60:bc:7a:fb:bb:28:4a:ee:ef:51: 19:04:50:92:72:00:08:ac:c1:61:7e:84:f6:63:4c: 19:bb:8f:44:38:9a:41:12:a5:16:cd:6f:a7:ce:34: 30:01:ac:6c:b6:40:d1:58:14:30:96:92:70:36:a1: bb:80:30:93:ae:e0:da:9f:32:57:54:65:ff:32:b8: 29:96:7e:ad:b7:a2:85:7a:2f:df:df:0e:78:d8:d5: b8:cc:23:4c:68:e4:d4:70:c8:8f:6b:61:a4:59:5f: ae:bf:39:08:75:05:97:98:59:58:4a:28:b1:3a:89: 0a:8a:02:7e:8d:24:fd:e8:82:9e:45:a2:2a:56:00: 22:d0:91:81:87:be:cc:5e:4d:d9:b9:da:da:c6:5b: 43:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:13:AB:A3:DC:0B:3F:9F:35:F8:78:A9:72:B4:1B:39:5D:25:03:D8 X509v3 Authority Key Identifier: keyid:D0:DE:43:0E:42:3B:23:AB:63:4E:BC:F0:19:5F:11:26:B4:4A:52:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/D0DE430E423B23AB634EBCF0195F1126B44A525E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0DE430E423B23AB634EBCF0195F1126B44A525E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/D0DE430E423B23AB634EBCF0195F1126B44A525E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:8d:09:5f:77:c9:28:48:2e:d0:16:b8:3d:fa:85:1d:e9:55: 1b:31:3a:76:86:7b:fc:59:cd:d5:86:5c:f3:6e:fe:18:28:44: 2f:a1:8c:f9:a3:04:ce:d0:c3:34:85:a8:46:fe:2e:c9:20:b2: 4f:f3:56:e8:59:3c:da:f3:39:c4:c5:d4:59:a2:53:05:d3:3d: a5:19:30:f6:6c:75:7f:99:0f:13:22:92:ac:b1:9b:4c:a5:da: ae:15:1f:c0:0b:04:bc:55:b5:81:9c:b8:cb:e4:b2:f4:c8:ea: ad:b1:6e:70:50:f7:21:1a:31:b3:0b:18:9a:60:f8:6f:1f:11: 84:23:9d:3c:71:19:05:8d:17:b5:95:83:f4:2b:14:48:32:d6: 69:72:44:d2:13:d3:5e:20:46:00:e7:13:81:b9:96:18:bd:34: 31:25:07:c2:13:05:6e:ac:5b:bf:79:d7:4b:96:6e:64:f6:47: 4b:35:cb:f7:c3:d2:b5:93:a4:ee:bd:dd:c5:6d:0b:4f:ec:6a: 3f:03:1d:9c:e2:80:54:ed:39:d6:d4:4e:35:5e:92:05:df:8b: 53:dd:e1:63:26:31:5f:50:af:b8:00:6d:5b:34:6c:54:69:fc: 76:83:7e:8d:df:e4:49:5e:6a:d3:db:a2:32:78:33:6d:57:aa: 9b:53:a4:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaulc3Nd+PG6i3EUwZN+8aq/Mu20wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBERTQzMEU0MjNCMjNBQjYzNEVCQ0YwMTk1RjExMjZC NDRBNTI1RTAeFw0yNjAyMjgwODU3MDdaFw0yNjAzMDMxNzAyMDdaMDMxMTAvBgNV BAMTKDM3MTNBQkEzREMwQjNGOUYzNUY4NzhBOTcyQjQxQjM5NUQyNTAzRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0gyLCWsEKIuobtGwX4UcKMYYd 8i/DvEjdtAbyAYBydwQGq6MCepbpMBKws4HILQNoWJximVx6crdrfAerFYDNQc6R WjJQKFbafUtF4oMxDYdEInJDNibwDQ0t35HC9I8U76kundrt65SQO6uJYLx6+7so Su7vURkEUJJyAAiswWF+hPZjTBm7j0Q4mkESpRbNb6fONDABrGy2QNFYFDCWknA2 obuAMJOu4NqfMldUZf8yuCmWfq23ooV6L9/fDnjY1bjMI0xo5NRwyI9rYaRZX66/ OQh1BZeYWVhKKLE6iQqKAn6NJP3ogp5FoipWACLQkYGHvsxeTdm52trGW0OHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNxOro9wLP581+HipcrQbOV0lA9gwHwYDVR0j BBgwFoAU0N5DDkI7I6tjTrzwGV8RJrRKUl4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NzRhMTUyNy01YzhlLTRiZDMtYTFjNy05ZDFlZDJkMjNlMTQvMC9EMERFNDMwRTQy M0IyM0FCNjM0RUJDRjAxOTVGMTEyNkI0NEE1MjVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDBERTQzMEU0MjNCMjNBQjYzNEVCQ0YwMTk1RjExMjZCNDRB NTI1RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDc0YTE1MjctNWM4ZS00YmQzLWEx YzctOWQxZWQyZDIzZTE0LzAvRDBERTQzMEU0MjNCMjNBQjYzNEVCQ0YwMTk1RjEx MjZCNDRBNTI1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKeNCV93yShILtAWuD36hR3pVRsxOnaGe/xZ zdWGXPNu/hgoRC+hjPmjBM7QwzSFqEb+Lskgsk/zVuhZPNrzOcTF1FmiUwXTPaUZ MPZsdX+ZDxMikqyxm0yl2q4VH8ALBLxVtYGcuMvksvTI6q2xbnBQ9yEaMbMLGJpg +G8fEYQjnTxxGQWNF7WVg/QrFEgy1mlyRNIT014gRgDnE4G5lhi9NDElB8ITBW6s W79510uWbmT2R0s1y/fD0rWTpO693cVtC0/saj8DHZzigFTtOdbUTjVekgXfi1Pd 4WMmMV9Qr7gAbVs0bFRp/HaDfo3f5EleatPbojJ4M21XqptTpNo= -----END CERTIFICATE-----Generated at Mon Mar 2 12:42:08 2026 by rpki-client