$ rpki-client -vvf repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft File: C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft (raw, json) Hash identifier: qDfYd9U/cArbhcdJ2RVlunR2sQbl75WUPXpsi1CKvEQ= Subject key identifier: F2:68:9A:7E:EF:66:99:D3:FE:83:1E:20:9E:43:6B:94:3A:B2:CF:95 Authority key identifier: C6:90:05:BB:7B:A4:68:A1:0A:32:CE:44:E9:C4:CE:78:53:89:98:AE Certificate issuer: /CN=C69005BB7BA468A10A32CE44E9C4CE78538998AE Certificate serial: 1F501EA529C8565E0E4FE3DEAF29C0AF5B9FA9C5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C69005BB7BA468A10A32CE44E9C4CE78538998AE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft Manifest number: 04A2 Signing time: Sat 28 Feb 2026 18:10:58 +0000 Manifest this update: Sat 28 Feb 2026 18:05:58 +0000 Manifest next update: Wed 04 Mar 2026 03:08:58 +0000 Files and hashes: 1: 3130332e34312e3230352e302f32342d3234203d3e203538333937.roa (hash: whajeEl8nBFK1Hik+aj8CuI5z46PiprE6Zt+K1qGkcA=) 2: 3131372e35332e3134392e302f32342d3234203d3e203538333937.roa (hash: 2LZZVkt+5pgtlh+bN+Dr5svVCbc5hhi96q5bed9+mrg=) 3: 3130332e34312e3230372e302f32342d3234203d3e203538333937.roa (hash: 4cA9blITWaGnf+nkl+PhUyn2mgMUfbwhbbX8hqlhuwc=) 4: 3130332e34312e3230342e302f32342d3234203d3e203538333937.roa (hash: 28AwtI6PlstTWzWDAVfpiiifxdaL8P6FvCfZnLUiyFM=) 5: C69005BB7BA468A10A32CE44E9C4CE78538998AE.crl (hash: cLyt14iBavQLvCIQ6lMQmDWaRnxNompcEUdFvex/5Ls=) 6: 3131372e35332e3135312e302f32342d3234203d3e203538333937.roa (hash: NacNr8tlzmpb4QfQ/myDM10o14kPPy00AmDGdwRiRcE=) 7: 3131372e35332e3135302e302f32342d3234203d3e203538333937.roa (hash: hL/G5kx82YBCvbiF0oPP1gPo6p46SnHQuMG9HUhh6Go=) 8: 3131372e35332e3134382e302f32342d3234203d3e203538333937.roa (hash: yPibvoj8h9RJ0GLdE7Y55+0vwm9XtVDLQI8fCsI5zGg=) 9: 3130332e34312e3230362e302f32342d3234203d3e203538333937.roa (hash: TlAHfis9k9OhMBttiZq0mSci/rJTU64geHe3MFRXMno=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.crl rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C69005BB7BA468A10A32CE44E9C4CE78538998AE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 03:08:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:50:1e:a5:29:c8:56:5e:0e:4f:e3:de:af:29:c0:af:5b:9f:a9:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C69005BB7BA468A10A32CE44E9C4CE78538998AE Validity Not Before: Feb 28 18:05:58 2026 GMT Not After : Mar 4 03:08:58 2026 GMT Subject: CN=F2689A7EEF6699D3FE831E209E436B943AB2CF95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0e:5c:fc:68:4f:a7:87:23:06:57:0a:c8:6f: 99:da:9e:03:e9:c9:f4:aa:9f:a9:cc:5a:ef:48:fe: 61:50:68:2f:dc:52:31:2f:79:24:3b:4f:87:d2:97: ff:fd:d7:8a:4f:3b:d5:e2:e5:ce:f8:2e:32:a2:17: e8:46:40:d7:39:28:16:3d:6b:08:54:ed:fc:ff:a9: 35:ed:71:43:dc:c9:8f:0d:0d:c9:d9:3f:c6:e0:db: 56:02:08:1e:ff:4e:6b:8c:7e:e7:a9:f4:1b:9f:f6: 5d:0b:14:6a:5e:e9:51:56:42:9e:1b:e6:c7:bc:39: c1:75:a7:f2:8f:41:ea:6d:ad:7c:29:02:98:93:57: ee:2f:46:a2:b5:46:81:d1:59:26:b6:bd:37:2b:02: 09:9a:2e:9b:30:22:63:56:cd:bb:02:44:60:3c:94: 08:a3:c4:27:f2:23:64:70:0a:4b:bb:9c:9c:b9:96: 0e:bd:9e:79:f8:27:79:ee:72:f1:f9:6f:4f:d6:04: 64:72:9f:af:a7:a5:f4:f9:c0:c3:54:84:bf:75:0c: 6b:f3:fa:05:7c:00:d8:f4:65:77:d4:af:05:b8:89: a1:57:e0:01:77:e6:2e:fe:35:86:8a:35:8d:94:a6: 40:a9:4c:ca:3e:07:bf:14:b3:37:f8:fa:e9:00:50: 9d:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:68:9A:7E:EF:66:99:D3:FE:83:1E:20:9E:43:6B:94:3A:B2:CF:95 X509v3 Authority Key Identifier: keyid:C6:90:05:BB:7B:A4:68:A1:0A:32:CE:44:E9:C4:CE:78:53:89:98:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C69005BB7BA468A10A32CE44E9C4CE78538998AE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:f3:67:7a:aa:be:cc:0e:fe:ce:6d:1f:0c:d3:ca:44:0d:76: d2:80:b3:f8:77:80:94:ad:12:bc:f3:27:be:30:1c:24:5c:b3: 71:20:05:e4:e2:65:93:4e:64:5a:de:61:cd:fa:2e:2b:91:78: 89:54:f6:0f:bb:32:68:96:e7:f3:c6:5c:d8:95:13:64:5e:9a: 37:13:e6:71:c7:43:e6:58:f9:6c:55:5c:b0:42:ad:e8:56:d1: c5:d4:94:e4:68:44:ec:6a:f4:28:b3:f5:62:e3:12:5e:e4:a4: 52:57:59:03:c1:8a:1c:d6:6b:ea:58:db:d9:f2:ab:54:83:86: 9e:e1:e0:b4:e8:ad:61:b9:e8:77:fb:33:89:e5:9a:07:13:41: c5:23:02:24:e6:77:87:09:be:23:4f:eb:e0:66:a2:d9:3a:e2: b0:c2:9c:d0:fa:5f:c3:d0:c6:58:e9:70:1b:00:32:fd:ef:4c: 46:b2:1c:a6:bd:98:91:25:65:80:ad:74:e3:40:fb:90:3c:da: 72:f3:8e:ae:c9:f2:c4:f3:e2:95:08:64:e8:2f:f2:2c:01:37: 31:ce:42:94:21:e3:94:c2:2e:39:06:bc:da:03:f4:fb:a9:b4: b0:d3:76:18:56:85:6d:2c:f3:7d:1e:4f:4e:d7:05:61:49:2c: f4:2e:85:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH1AepSnIVl4OT+PerynAr1ufqcUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzY5MDA1QkI3QkE0NjhBMTBBMzJDRTQ0RTlDNENFNzg1 Mzg5OThBRTAeFw0yNjAyMjgxODA1NThaFw0yNjAzMDQwMzA4NThaMDMxMTAvBgNV BAMTKEYyNjg5QTdFRUY2Njk5RDNGRTgzMUUyMDlFNDM2Qjk0M0FCMkNGOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6Dlz8aE+nhyMGVwrIb5nangPp yfSqn6nMWu9I/mFQaC/cUjEveSQ7T4fSl//914pPO9Xi5c74LjKiF+hGQNc5KBY9 awhU7fz/qTXtcUPcyY8NDcnZP8bg21YCCB7/TmuMfuep9Buf9l0LFGpe6VFWQp4b 5se8OcF1p/KPQeptrXwpApiTV+4vRqK1RoHRWSa2vTcrAgmaLpswImNWzbsCRGA8 lAijxCfyI2RwCku7nJy5lg69nnn4J3nucvH5b0/WBGRyn6+npfT5wMNUhL91DGvz +gV8ANj0ZXfUrwW4iaFX4AF35i7+NYaKNY2UpkCpTMo+B78Uszf4+ukAUJ37AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8miafu9mmdP+gx4gnkNrlDqyz5UwHwYDVR0j BBgwFoAUxpAFu3ukaKEKMs5E6cTOeFOJmK4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YjhiYTQ1ZS1mNWRhLTQ1ODEtYmZlNS1jMTYxNmMzMGVmYWIvMC9DNjkwMDVCQjdC QTQ2OEExMEEzMkNFNDRFOUM0Q0U3ODUzODk5OEFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzY5MDA1QkI3QkE0NjhBMTBBMzJDRTQ0RTlDNENFNzg1Mzg5 OThBRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGI4YmE0NWUtZjVkYS00NTgxLWJm ZTUtYzE2MTZjMzBlZmFiLzAvQzY5MDA1QkI3QkE0NjhBMTBBMzJDRTQ0RTlDNENF Nzg1Mzg5OThBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAATzZ3qqvswO/s5tHwzTykQNdtKAs/h3gJSt ErzzJ74wHCRcs3EgBeTiZZNOZFreYc36LiuReIlU9g+7MmiW5/PGXNiVE2RemjcT 5nHHQ+ZY+WxVXLBCrehW0cXUlORoROxq9Ciz9WLjEl7kpFJXWQPBihzWa+pY29ny q1SDhp7h4LTorWG56Hf7M4nlmgcTQcUjAiTmd4cJviNP6+Bmotk64rDCnND6X8PQ xljpcBsAMv3vTEayHKa9mJElZYCtdONA+5A82nLzjq7J8sTz4pUIZOgv8iwBNzHO QpQh45TCLjkGvNoD9PuptLDTdhhWhW0s830eT07XBWFJLPQuhT4= -----END CERTIFICATE-----Generated at Tue Mar 3 02:43:12 2026 by rpki-client