$ rpki-client -vvf repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/196DBD061B4577EF848600B17A266D689F5A70B5.mft File: 196DBD061B4577EF848600B17A266D689F5A70B5.mft (raw, json) Hash identifier: /9eEEEjWegXN1LOwOryHDknWEuvnxSfAu+tTlUx5+uc= Subject key identifier: DC:B8:3B:63:DE:60:A0:D6:C7:46:D4:8B:86:E7:F0:FD:08:EC:9F:30 Authority key identifier: 19:6D:BD:06:1B:45:77:EF:84:86:00:B1:7A:26:6D:68:9F:5A:70:B5 Certificate issuer: /CN=196DBD061B4577EF848600B17A266D689F5A70B5 Certificate serial: 0CDC2D397CDC2285A37CC5B29FFACDB153B40739 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/196DBD061B4577EF848600B17A266D689F5A70B5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/196DBD061B4577EF848600B17A266D689F5A70B5.mft Manifest number: 0241 Signing time: Sat 28 Feb 2026 19:42:16 +0000 Manifest this update: Sat 28 Feb 2026 19:37:16 +0000 Manifest next update: Wed 04 Mar 2026 06:56:16 +0000 Files and hashes: 1: 3130332e3138302e3139382e302f32342d3234203d3e20313439333638.roa (hash: 5lY4f9V94dB+03La5b3P91qI5RBjwa5CSpgEJJRGvxc=) 2: 3130332e3138302e3139392e302f32342d3234203d3e20313439333638.roa (hash: 34/R8QTjCFJsUx7prL6eX2eJ9Y/fnEucfem7nusLMB8=) 3: 3130332e3138302e3139382e302f32332d3234203d3e20313439333638.roa (hash: EDPK0eOxqBPQlG42EiZMre0RjhVvjul6NQmz0+X17bE=) 4: 196DBD061B4577EF848600B17A266D689F5A70B5.crl (hash: 8r5PGp6vIk61Qy5Wkgq7h+vdPm7pbsKAeSngWGyidWo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/196DBD061B4577EF848600B17A266D689F5A70B5.crl rsync://repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/196DBD061B4577EF848600B17A266D689F5A70B5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/196DBD061B4577EF848600B17A266D689F5A70B5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 06:56:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:dc:2d:39:7c:dc:22:85:a3:7c:c5:b2:9f:fa:cd:b1:53:b4:07:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=196DBD061B4577EF848600B17A266D689F5A70B5 Validity Not Before: Feb 28 19:37:16 2026 GMT Not After : Mar 4 06:56:16 2026 GMT Subject: CN=DCB83B63DE60A0D6C746D48B86E7F0FD08EC9F30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:90:7f:78:d8:b2:01:91:8f:20:27:b2:55:6d: a1:df:9f:7f:46:cf:14:2e:f5:d3:61:94:e0:ab:8a: c0:46:62:70:b1:8c:97:ac:5c:27:b4:27:ab:b7:41: 17:ef:a1:9e:27:3e:07:69:78:b1:d9:d4:5e:4b:08: 8a:a7:8b:d0:c2:6a:5f:54:78:26:b0:7b:44:e7:47: a9:ef:8e:31:31:fd:b8:97:ce:27:94:bc:1c:ab:d5: b0:3c:2f:0e:7b:3f:76:0d:97:f0:96:0a:d5:ec:21: 90:01:01:94:5b:91:ce:7f:3a:fd:26:fc:cd:a3:ee: 1d:91:f3:c7:1c:1c:fd:2d:8e:59:dd:31:ca:90:6b: 93:dd:0f:54:0a:8f:5a:83:83:04:2e:70:35:21:e9: cf:fa:78:e0:fb:f5:b5:8c:11:6b:52:59:e6:45:8c: 88:40:c5:bd:d9:79:6f:44:93:07:82:87:c4:c6:15: 89:65:6e:8f:8d:3d:b7:74:4c:8d:26:e5:d6:49:d5: 4e:c9:62:69:ba:cd:68:64:4a:bb:88:04:6f:06:54: b3:11:24:08:ba:c9:17:dd:77:bc:10:be:4a:1b:1e: 51:c6:91:08:3e:19:02:25:fc:d9:61:af:0a:c3:98: 0b:db:00:b6:b8:a7:6c:e2:a8:14:2a:9d:07:e4:62: 3b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:B8:3B:63:DE:60:A0:D6:C7:46:D4:8B:86:E7:F0:FD:08:EC:9F:30 X509v3 Authority Key Identifier: keyid:19:6D:BD:06:1B:45:77:EF:84:86:00:B1:7A:26:6D:68:9F:5A:70:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/196DBD061B4577EF848600B17A266D689F5A70B5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/196DBD061B4577EF848600B17A266D689F5A70B5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/196DBD061B4577EF848600B17A266D689F5A70B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:7e:a7:d3:a2:a6:02:f3:5f:2a:af:7b:b0:ab:3a:5d:41:71: 44:5f:0a:b2:38:d8:40:ad:d6:e6:63:e5:9a:06:1a:c1:dd:b3: 19:bd:e5:0c:b7:6c:fb:f5:81:8f:41:46:f2:8b:a7:ba:89:83: c8:8b:df:55:28:43:0b:5b:ad:a7:30:11:52:60:16:d3:51:f3: b5:79:2c:1e:75:4d:9d:a2:ea:76:86:9a:cd:42:d9:c9:d8:60: 08:c4:b3:d2:e1:b2:cf:2b:63:73:c7:e4:90:c2:07:dd:e0:84: a4:f1:9e:f0:68:4f:50:bf:c5:29:fb:07:44:17:3d:20:2e:14: c6:be:b4:ef:d8:5d:97:a4:0b:27:cc:0a:dc:a2:33:22:46:fb: 13:a5:8e:bf:5a:75:e3:6b:22:9d:5b:95:9b:25:e0:6f:f0:f1: 9f:f7:9f:44:ac:37:90:3b:24:29:8f:2c:f5:3b:e6:84:a0:38: 6b:87:12:b3:11:1e:2e:fb:67:33:9a:3c:79:92:62:0f:65:3d: 87:b9:72:b4:5e:10:4e:89:88:78:1f:f2:07:8d:e0:9a:da:ea: 75:c4:1f:2a:46:9d:97:a0:f8:53:8a:ec:2e:3b:2f:1d:b8:6e: 14:86:57:c6:62:5b:de:dc:db:dc:98:c1:d4:3d:5c:8e:c6:5b: 60:0a:63:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDNwtOXzcIoWjfMWyn/rNsVO0BzkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk2REJEMDYxQjQ1NzdFRjg0ODYwMEIxN0EyNjZENjg5 RjVBNzBCNTAeFw0yNjAyMjgxOTM3MTZaFw0yNjAzMDQwNjU2MTZaMDMxMTAvBgNV BAMTKERDQjgzQjYzREU2MEEwRDZDNzQ2RDQ4Qjg2RTdGMEZEMDhFQzlGMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfkH942LIBkY8gJ7JVbaHfn39G zxQu9dNhlOCrisBGYnCxjJesXCe0J6u3QRfvoZ4nPgdpeLHZ1F5LCIqni9DCal9U eCawe0TnR6nvjjEx/biXzieUvByr1bA8Lw57P3YNl/CWCtXsIZABAZRbkc5/Ov0m /M2j7h2R88ccHP0tjlndMcqQa5PdD1QKj1qDgwQucDUh6c/6eOD79bWMEWtSWeZF jIhAxb3ZeW9EkweCh8TGFYllbo+NPbd0TI0m5dZJ1U7JYmm6zWhkSruIBG8GVLMR JAi6yRfdd7wQvkobHlHGkQg+GQIl/NlhrwrDmAvbALa4p2ziqBQqnQfkYjstAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3Lg7Y95goNbHRtSLhufw/QjsnzAwHwYDVR0j BBgwFoAUGW29BhtFd++EhgCxeiZtaJ9acLUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YWM4MDFhMC03OTEyLTRiMDEtYTI4MS04ODAyNDYyNGEyZDQvMC8xOTZEQkQwNjFC NDU3N0VGODQ4NjAwQjE3QTI2NkQ2ODlGNUE3MEI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTk2REJEMDYxQjQ1NzdFRjg0ODYwMEIxN0EyNjZENjg5RjVB NzBCNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGFjODAxYTAtNzkxMi00YjAxLWEy ODEtODgwMjQ2MjRhMmQ0LzAvMTk2REJEMDYxQjQ1NzdFRjg0ODYwMEIxN0EyNjZE Njg5RjVBNzBCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEx+p9OipgLzXyqve7CrOl1BcURfCrI42ECt 1uZj5ZoGGsHdsxm95Qy3bPv1gY9BRvKLp7qJg8iL31UoQwtbracwEVJgFtNR87V5 LB51TZ2i6naGms1C2cnYYAjEs9Lhss8rY3PH5JDCB93ghKTxnvBoT1C/xSn7B0QX PSAuFMa+tO/YXZekCyfMCtyiMyJG+xOljr9adeNrIp1blZsl4G/w8Z/3n0SsN5A7 JCmPLPU75oSgOGuHErMRHi77ZzOaPHmSYg9lPYe5crReEE6JiHgf8geN4Jra6nXE HypGnZeg+FOK7C47Lx24bhSGV8ZiW97c29yYwdQ9XI7GW2AKY6I= -----END CERTIFICATE-----Generated at Mon Mar 2 17:11:01 2026 by rpki-client