$ rpki-client -vvf repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/1CA9E40710262DA751A67E932477D6E12B4B2DED.mft File: 1CA9E40710262DA751A67E932477D6E12B4B2DED.mft (raw, json) Hash identifier: krsu2bifpO4zzH3fE4GlGrQDa7HyInlD+Fz9GWXHjVc= Subject key identifier: 45:59:BF:C7:E1:6F:58:09:09:BE:1C:C2:D5:B6:73:A5:5A:2A:7F:F9 Authority key identifier: 1C:A9:E4:07:10:26:2D:A7:51:A6:7E:93:24:77:D6:E1:2B:4B:2D:ED Certificate issuer: /CN=1CA9E40710262DA751A67E932477D6E12B4B2DED Certificate serial: 20C4E81E2300F1136B1175BA424110C80F72B606 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CA9E40710262DA751A67E932477D6E12B4B2DED.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/1CA9E40710262DA751A67E932477D6E12B4B2DED.mft Manifest number: 0557 Signing time: Sat 28 Feb 2026 09:40:02 +0000 Manifest this update: Sat 28 Feb 2026 09:35:02 +0000 Manifest next update: Tue 03 Mar 2026 17:00:02 +0000 Files and hashes: 1: 3130332e3132332e3130352e302f32342d3234203d3e20313338303730.roa (hash: BfFCh7Vfs8z+WKVbxTTngHawwEIYaKlayBm3t+ZFnyU=) 2: 3130332e3132332e3130372e302f32342d3234203d3e20313338303730.roa (hash: cke05Fz1pU7ph5quQU6BQAXvAK/qW0tlFEcIja5SVaM=) 3: 1CA9E40710262DA751A67E932477D6E12B4B2DED.crl (hash: W6CWVZNH+d4bb6w31UMtEW/ucaR4dkCwrtn0Wgox35U=) 4: 3130332e3132332e3130362e302f32342d3234203d3e20313338303730.roa (hash: 1Qj+0yJlnyRAkhJQW7JxleOTtApsG7fPmAlVCQ6z7p8=) 5: 3130332e3132332e3130342e302f32322d3234203d3e20313338303730.roa (hash: Yh/X3wf3xgSBLANEs82b75GugxHKann/OAKH3YrZy2U=) 6: 323430333a396663303a3a2f33322d3438203d3e20313338303730.roa (hash: g2I091o7xGYF01O50CUZMPsQctw2lflU2v4s2FAorWY=) 7: 3130332e3132332e3130342e302f32342d3234203d3e20313338303730.roa (hash: yHCpL2jeoTRdKkL9PeW/BmTUh9ZLAObQa8uLRwAc8Ww=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/1CA9E40710262DA751A67E932477D6E12B4B2DED.crl rsync://repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/1CA9E40710262DA751A67E932477D6E12B4B2DED.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CA9E40710262DA751A67E932477D6E12B4B2DED.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 17:00:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:c4:e8:1e:23:00:f1:13:6b:11:75:ba:42:41:10:c8:0f:72:b6:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CA9E40710262DA751A67E932477D6E12B4B2DED Validity Not Before: Feb 28 09:35:02 2026 GMT Not After : Mar 3 17:00:02 2026 GMT Subject: CN=4559BFC7E16F580909BE1CC2D5B673A55A2A7FF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:61:93:28:dd:ea:70:a1:9a:1b:68:04:49:e0: dc:f2:ce:c3:f9:0e:fc:e7:a8:9f:b4:f9:47:52:e0: 28:15:06:74:1f:06:06:5e:09:08:16:55:93:c4:32: 2a:18:a7:5f:95:c1:c4:08:f4:94:b0:85:ab:1a:0b: e8:38:b8:3f:07:0f:4e:80:15:06:3c:21:6c:0a:30: 66:8b:ab:3f:ff:f2:31:71:6e:15:42:63:20:f8:e8: 1e:07:34:15:6e:0f:87:76:e1:ba:f6:95:0e:13:d5: e4:f7:4f:4f:e2:34:e5:5f:97:3f:d3:3c:e5:6b:90: 5f:39:dc:84:48:05:a6:2a:eb:b3:25:0d:67:97:db: 73:9e:8e:39:a8:a5:5d:48:ae:71:3e:1a:f2:06:a0: e1:19:96:09:75:dd:fb:c9:e4:0c:77:90:61:8e:00: d0:ff:98:c2:cf:22:c8:aa:71:f1:dd:fa:46:58:94: 7b:5d:8b:38:35:9f:c1:a4:6c:0f:86:ed:24:8f:70: db:0e:9b:9d:7f:28:76:2f:e0:55:1d:81:da:b2:c5: d2:6e:b3:ca:a4:e6:3c:1b:b0:cd:6e:ca:56:0b:96: 52:c4:f1:87:0b:4d:3f:5a:8a:3e:1b:66:67:df:ba: ca:e5:95:1e:ed:b9:ea:7f:a8:a4:98:9a:8d:7c:26: 89:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:59:BF:C7:E1:6F:58:09:09:BE:1C:C2:D5:B6:73:A5:5A:2A:7F:F9 X509v3 Authority Key Identifier: keyid:1C:A9:E4:07:10:26:2D:A7:51:A6:7E:93:24:77:D6:E1:2B:4B:2D:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/1CA9E40710262DA751A67E932477D6E12B4B2DED.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CA9E40710262DA751A67E932477D6E12B4B2DED.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/1CA9E40710262DA751A67E932477D6E12B4B2DED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:0d:82:26:c6:9b:38:f9:e1:38:c8:0b:90:d8:f6:53:13:26: 73:ba:bd:e2:36:df:d0:87:91:ab:44:fa:28:97:25:63:09:bb: 1a:04:60:c7:ad:72:47:46:70:a0:6e:b5:74:95:41:34:90:0c: 9b:2f:e1:fd:99:bd:ba:91:ba:7e:a6:37:c1:f7:32:dd:ad:f5: b5:1b:c6:8d:55:b5:ca:a2:ca:8e:dc:fb:08:19:4e:9d:04:2c: 28:c5:83:2e:14:ff:e3:8a:14:41:64:fe:a1:41:ae:4f:5c:1b: e4:c8:01:35:0b:8c:ab:ce:f8:48:cc:ac:70:0b:d7:14:fb:76: 53:3e:32:98:a4:05:ea:81:55:3b:b3:c0:6c:1f:6a:3f:ec:44: 25:5b:c6:8c:87:30:ca:19:55:f3:4e:5b:af:23:0b:d4:35:69: d1:e4:8f:c6:bc:e1:c4:d7:d8:0c:77:66:54:aa:4b:5c:89:99: b4:11:84:fa:72:93:f0:77:a2:ea:e2:e0:b1:c9:44:70:6e:98: fe:d9:2a:c7:cf:93:2e:8e:95:00:2c:24:1a:94:55:2f:40:17: b4:f1:27:72:9d:a2:77:13:c1:a0:50:3e:f8:7b:8c:4a:2e:02: b0:51:a1:c1:b2:0f:c0:65:7d:6a:b4:62:5c:1e:8e:d4:be:47: ae:bf:db:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIMToHiMA8RNrEXW6QkEQyA9ytgYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNBOUU0MDcxMDI2MkRBNzUxQTY3RTkzMjQ3N0Q2RTEy QjRCMkRFRDAeFw0yNjAyMjgwOTM1MDJaFw0yNjAzMDMxNzAwMDJaMDMxMTAvBgNV BAMTKDQ1NTlCRkM3RTE2RjU4MDkwOUJFMUNDMkQ1QjY3M0E1NUEyQTdGRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9YZMo3epwoZobaARJ4NzyzsP5 DvznqJ+0+UdS4CgVBnQfBgZeCQgWVZPEMioYp1+VwcQI9JSwhasaC+g4uD8HD06A FQY8IWwKMGaLqz//8jFxbhVCYyD46B4HNBVuD4d24br2lQ4T1eT3T0/iNOVflz/T POVrkF853IRIBaYq67MlDWeX23OejjmopV1IrnE+GvIGoOEZlgl13fvJ5Ax3kGGO AND/mMLPIsiqcfHd+kZYlHtdizg1n8GkbA+G7SSPcNsOm51/KHYv4FUdgdqyxdJu s8qk5jwbsM1uylYLllLE8YcLTT9aij4bZmffusrllR7tuep/qKSYmo18JolLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURVm/x+FvWAkJvhzC1bZzpVoqf/kwHwYDVR0j BBgwFoAUHKnkBxAmLadRpn6TJHfW4StLLe0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YWQ2N2Q1Zi01NzEzLTQxNTMtODcxYi0xYjAwOGY3ZmZkZDIvMC8xQ0E5RTQwNzEw MjYyREE3NTFBNjdFOTMyNDc3RDZFMTJCNEIyREVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUNBOUU0MDcxMDI2MkRBNzUxQTY3RTkzMjQ3N0Q2RTEyQjRC MkRFRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGFkNjdkNWYtNTcxMy00MTUzLTg3 MWItMWIwMDhmN2ZmZGQyLzAvMUNBOUU0MDcxMDI2MkRBNzUxQTY3RTkzMjQ3N0Q2 RTEyQjRCMkRFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGsNgibGmzj54TjIC5DY9lMTJnO6veI239CH katE+iiXJWMJuxoEYMetckdGcKButXSVQTSQDJsv4f2ZvbqRun6mN8H3Mt2t9bUb xo1Vtcqiyo7c+wgZTp0ELCjFgy4U/+OKFEFk/qFBrk9cG+TIATULjKvO+EjMrHAL 1xT7dlM+MpikBeqBVTuzwGwfaj/sRCVbxoyHMMoZVfNOW68jC9Q1adHkj8a84cTX 2Ax3ZlSqS1yJmbQRhPpyk/B3ouri4LHJRHBumP7ZKsfPky6OlQAsJBqUVS9AF7Tx J3KdoncTwaBQPvh7jEouArBRocGyD8BlfWq0YlwejtS+R66/2/0= -----END CERTIFICATE-----Generated at Mon Mar 2 11:22:47 2026 by rpki-client