$ rpki-client -vvf repo-rpki.idnic.net/repo/ddf2ffda-05d1-4085-a135-03987a07f39e/0/CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.mft File: CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.mft (raw, json) Hash identifier: BMs2514KJH3HwjNT8cBk8J3AEpuP70LdeUj9IIqNxH4= Subject key identifier: 3B:4D:66:E6:B1:D4:58:E1:39:8B:39:88:B0:1D:4F:99:04:E2:D8:DC Authority key identifier: CB:96:62:73:31:53:C0:2E:4C:41:1B:7D:2F:2B:9E:22:D2:F0:EB:85 Certificate issuer: /CN=CB9662733153C02E4C411B7D2F2B9E22D2F0EB85 Certificate serial: 6190EA4E83100CD2EF6037B2FAF12C7D3D2A9B97 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ddf2ffda-05d1-4085-a135-03987a07f39e/0/CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.mft Manifest number: 01D7 Signing time: Sun 01 Mar 2026 03:01:15 +0000 Manifest this update: Sun 01 Mar 2026 02:56:15 +0000 Manifest next update: Wed 04 Mar 2026 10:42:15 +0000 Files and hashes: 1: 3130332e3133322e34302e302f32342d3234203d3e20313530393730.roa (hash: qHXQ3QdEStqD3uKNvFn/PgcoJYTH2F/sc5gVhh/RXSU=) 2: CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.crl (hash: RsLGDLAQUDTQ3oj8MslZBlv5iW63dgjM3m7XmDdsEB0=) 3: 3130332e3133322e34312e302f32342d3234203d3e20313530393730.roa (hash: CRwU0L1ssLkMhvFPkriFbIaLrVr0CAOnZXuoJx/zYFU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ddf2ffda-05d1-4085-a135-03987a07f39e/0/CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.crl rsync://repo-rpki.idnic.net/repo/ddf2ffda-05d1-4085-a135-03987a07f39e/0/CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 10:42:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:90:ea:4e:83:10:0c:d2:ef:60:37:b2:fa:f1:2c:7d:3d:2a:9b:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB9662733153C02E4C411B7D2F2B9E22D2F0EB85 Validity Not Before: Mar 1 02:56:15 2026 GMT Not After : Mar 4 10:42:15 2026 GMT Subject: CN=3B4D66E6B1D458E1398B3988B01D4F9904E2D8DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:09:cd:83:70:b6:60:db:9e:51:dc:2a:73:67: 2d:65:16:73:21:e8:12:0c:f4:46:63:09:b6:d3:96: b6:ca:bb:27:87:7b:35:21:72:dd:ea:fc:97:29:59: c6:2a:bb:89:06:b4:d5:94:c9:12:a3:6a:fc:db:70: c6:3a:6a:c1:ca:ed:06:89:d7:ea:24:ad:91:50:9a: 9d:fb:d2:b2:dd:f2:ce:20:9a:29:12:71:71:ef:15: 7f:2f:91:19:8e:de:71:d8:03:bd:9e:81:6e:d6:7d: af:0f:10:33:62:01:aa:72:27:c8:57:e1:18:37:41: 94:de:b5:e2:8d:05:54:29:0e:9b:13:29:9b:b0:86: ec:cf:e9:e3:39:b0:e3:82:a0:05:d5:ad:73:dd:45: 5e:c3:4d:a5:fe:53:80:79:9f:30:dc:68:f4:de:42: 72:4c:9a:bd:45:a7:38:de:36:80:78:d7:db:a4:74: 0f:f4:31:02:de:db:36:76:46:67:0a:4c:8c:ac:e3: 7b:89:98:d9:76:ad:2b:d4:57:7e:3e:30:70:41:c4: 96:aa:24:b7:f4:3b:28:b7:c7:cd:4c:c8:88:fe:eb: db:a9:b4:e0:fe:bd:2e:7d:d5:87:ce:12:d7:ec:b5: 5f:37:c0:16:72:db:57:22:9c:f1:32:a5:71:c9:b5: 52:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:4D:66:E6:B1:D4:58:E1:39:8B:39:88:B0:1D:4F:99:04:E2:D8:DC X509v3 Authority Key Identifier: keyid:CB:96:62:73:31:53:C0:2E:4C:41:1B:7D:2F:2B:9E:22:D2:F0:EB:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ddf2ffda-05d1-4085-a135-03987a07f39e/0/CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ddf2ffda-05d1-4085-a135-03987a07f39e/0/CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:77:06:d2:f0:12:3b:56:34:03:8b:60:ef:73:70:48:64:a3: 48:43:0a:c7:fc:cf:c0:0b:d2:fb:31:f0:46:1b:cb:19:ce:84: 49:c0:df:b0:e8:a3:e5:e1:6f:53:cc:c1:d7:54:c6:4b:f0:fb: f8:68:78:f8:f2:81:e5:4a:50:db:0a:5f:98:f0:c1:bd:c5:97: f0:19:93:d0:b9:58:ee:46:da:5e:f6:a4:e2:65:32:67:0b:75: e6:e6:4b:34:50:ce:9b:e8:79:5b:8b:1f:0f:88:e2:62:09:27: 79:38:7b:4e:9d:4c:7b:cc:a6:31:df:9e:53:47:07:64:7a:25: 77:f0:b1:62:2c:5f:a4:1c:eb:2e:04:39:12:2d:48:9d:c0:9a: a8:a5:36:89:14:8d:3a:8c:32:85:72:3f:68:06:5b:d1:e4:3f: 8f:87:83:56:a5:d2:0d:a6:d5:35:fe:c9:b2:ad:03:60:cd:b6: 2f:fc:cd:c3:02:e5:f4:03:b5:7b:63:97:94:0a:fe:c8:86:76: c2:e9:74:c9:9c:fd:fa:d0:26:4d:20:87:60:97:33:8b:d6:d2: 76:cd:07:46:59:99:df:4a:c7:7d:47:cf:4e:1c:7f:05:41:ab: f3:a6:1b:39:7a:c4:ac:73:73:69:78:cb:dd:cb:5c:5e:35:d5: 86:c1:64:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYZDqToMQDNLvYDey+vEsfT0qm5cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0I5NjYyNzMzMTUzQzAyRTRDNDExQjdEMkYyQjlFMjJE MkYwRUI4NTAeFw0yNjAzMDEwMjU2MTVaFw0yNjAzMDQxMDQyMTVaMDMxMTAvBgNV BAMTKDNCNEQ2NkU2QjFENDU4RTEzOThCMzk4OEIwMUQ0Rjk5MDRFMkQ4REMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwCc2DcLZg255R3CpzZy1lFnMh 6BIM9EZjCbbTlrbKuyeHezUhct3q/JcpWcYqu4kGtNWUyRKjavzbcMY6asHK7QaJ 1+okrZFQmp370rLd8s4gmikScXHvFX8vkRmO3nHYA72egW7Wfa8PEDNiAapyJ8hX 4Rg3QZTeteKNBVQpDpsTKZuwhuzP6eM5sOOCoAXVrXPdRV7DTaX+U4B5nzDcaPTe QnJMmr1FpzjeNoB419ukdA/0MQLe2zZ2RmcKTIys43uJmNl2rSvUV34+MHBBxJaq JLf0Oyi3x81MyIj+69uptOD+vS591YfOEtfstV83wBZy21cinPEypXHJtVI7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUO01m5rHUWOE5izmIsB1PmQTi2NwwHwYDVR0j BBgwFoAUy5ZiczFTwC5MQRt9LyueItLw64UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZGYyZmZkYS0wNWQxLTQwODUtYTEzNS0wMzk4N2EwN2YzOWUvMC9DQjk2NjI3MzMx NTNDMDJFNEM0MTFCN0QyRjJCOUUyMkQyRjBFQjg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0I5NjYyNzMzMTUzQzAyRTRDNDExQjdEMkYyQjlFMjJEMkYw RUI4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGRmMmZmZGEtMDVkMS00MDg1LWEx MzUtMDM5ODdhMDdmMzllLzAvQ0I5NjYyNzMzMTUzQzAyRTRDNDExQjdEMkYyQjlF MjJEMkYwRUI4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFt3BtLwEjtWNAOLYO9zcEhko0hDCsf8z8AL 0vsx8EYbyxnOhEnA37Doo+Xhb1PMwddUxkvw+/hoePjygeVKUNsKX5jwwb3Fl/AZ k9C5WO5G2l72pOJlMmcLdebmSzRQzpvoeVuLHw+I4mIJJ3k4e06dTHvMpjHfnlNH B2R6JXfwsWIsX6Qc6y4EORItSJ3AmqilNokUjTqMMoVyP2gGW9HkP4+Hg1al0g2m 1TX+ybKtA2DNti/8zcMC5fQDtXtjl5QK/siGdsLpdMmc/frQJk0gh2CXM4vW0nbN B0ZZmd9Kx31Hz04cfwVBq/OmGzl6xKxzc2l4y93LXF411YbBZIo= -----END CERTIFICATE-----Generated at Mon Mar 2 11:00:44 2026 by rpki-client