$ rpki-client -vvf repo-rpki.idnic.net/repo/dfc30c71-df2d-4fc7-b435-7511df287a6b/0/C619643EEB518333DAE2A79933BEB1320C89CA87.mft File: C619643EEB518333DAE2A79933BEB1320C89CA87.mft (raw, json) Hash identifier: WV7u/QPyOBj/GlSbp2UAdrTz8R9kTOGCN04dB4SwfJk= Subject key identifier: E6:21:94:1B:72:88:D3:7F:4B:69:6B:91:9B:41:92:C9:48:81:C2:54 Authority key identifier: C6:19:64:3E:EB:51:83:33:DA:E2:A7:99:33:BE:B1:32:0C:89:CA:87 Certificate issuer: /CN=C619643EEB518333DAE2A79933BEB1320C89CA87 Certificate serial: 064DC78DCACEC0F6DBD298B2846476B4B884FC32 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C619643EEB518333DAE2A79933BEB1320C89CA87.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dfc30c71-df2d-4fc7-b435-7511df287a6b/0/C619643EEB518333DAE2A79933BEB1320C89CA87.mft Manifest number: E2 Signing time: Sun 01 Mar 2026 17:31:23 +0000 Manifest this update: Sun 01 Mar 2026 17:26:23 +0000 Manifest next update: Wed 04 Mar 2026 17:46:23 +0000 Files and hashes: 1: 3130332e3231302e322e302f32332d3233203d3e20313530393935.roa (hash: xzpAdAN4PgqY0zHFsI//uf025PaXef+Zn07c2kacwac=) 2: C619643EEB518333DAE2A79933BEB1320C89CA87.crl (hash: IPHmrgGKtIbvrVozhMehFd9RAyGKi43HXUVRxasg5LM=) 3: 3130332e3231302e322e302f32342d3234203d3e20313530393935.roa (hash: 0Dp8E4LSLWldobjFKfVvudN74JKOjxQzpOolgbOemt0=) 4: 3130332e3231302e332e302f32342d3234203d3e20313530393935.roa (hash: 8QRWf0VdSTsdniD1lv5yGS0A0uZPBTkfzdZ7EZY1Ybs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dfc30c71-df2d-4fc7-b435-7511df287a6b/0/C619643EEB518333DAE2A79933BEB1320C89CA87.crl rsync://repo-rpki.idnic.net/repo/dfc30c71-df2d-4fc7-b435-7511df287a6b/0/C619643EEB518333DAE2A79933BEB1320C89CA87.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C619643EEB518333DAE2A79933BEB1320C89CA87.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 17:46:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:4d:c7:8d:ca:ce:c0:f6:db:d2:98:b2:84:64:76:b4:b8:84:fc:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C619643EEB518333DAE2A79933BEB1320C89CA87 Validity Not Before: Mar 1 17:26:23 2026 GMT Not After : Mar 4 17:46:23 2026 GMT Subject: CN=E621941B7288D37F4B696B919B4192C94881C254 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b0:2b:8f:83:2b:41:34:e7:85:09:d4:3e:3f: 49:bf:41:a4:0f:b8:73:40:fe:ec:d2:79:3c:a2:60: da:4b:7e:fc:eb:d4:4e:ae:9b:e3:d1:9c:84:4c:0b: 65:87:7e:46:10:e6:85:75:cd:80:22:02:6a:ce:7e: de:28:c4:b2:34:f4:f4:0e:6a:db:40:d0:4b:d8:f3: 32:8e:7d:42:c1:68:92:7b:b6:13:5e:8a:3f:9e:ad: 06:ff:c3:ee:16:73:48:91:6f:64:d7:69:ed:8d:8b: 31:b0:1c:e9:ee:d5:c9:05:6d:86:d7:0f:32:34:ef: fc:1f:78:c6:05:ed:d7:12:1f:79:58:c3:39:57:a9: 20:b8:e8:8f:a7:3b:31:c3:e0:a9:70:9d:d1:49:b4: 9d:ed:3a:4a:28:a4:82:63:26:07:2f:77:ae:8a:91: 5d:91:ce:9f:ee:90:b1:0a:de:05:1f:26:68:ec:39: 67:b5:d5:33:d3:55:e6:da:20:51:c1:18:ec:8a:79: 19:87:05:ec:26:99:65:b4:f1:cf:ee:34:f0:c9:76: 34:b2:3b:06:75:a5:16:96:88:3e:d7:88:f0:fb:2c: e7:57:3a:e8:96:9c:9b:12:e7:c0:af:4d:bf:4c:c8: dd:8d:97:15:a7:aa:c3:3a:40:1b:a3:e1:9a:65:48: 75:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:21:94:1B:72:88:D3:7F:4B:69:6B:91:9B:41:92:C9:48:81:C2:54 X509v3 Authority Key Identifier: keyid:C6:19:64:3E:EB:51:83:33:DA:E2:A7:99:33:BE:B1:32:0C:89:CA:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dfc30c71-df2d-4fc7-b435-7511df287a6b/0/C619643EEB518333DAE2A79933BEB1320C89CA87.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C619643EEB518333DAE2A79933BEB1320C89CA87.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfc30c71-df2d-4fc7-b435-7511df287a6b/0/C619643EEB518333DAE2A79933BEB1320C89CA87.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:b0:7a:3f:ca:f3:fb:c5:f5:cc:e7:5b:c8:32:d8:51:c8:79: 74:09:d6:ab:17:66:be:56:9e:75:22:ff:b8:f9:d1:9a:ea:2b: 19:89:19:d6:c2:46:65:a5:40:31:f5:b8:4c:28:c8:d9:ce:d8: a7:e6:7a:b6:95:c9:91:8f:8c:1b:81:3c:50:d0:49:9c:11:d8: 9b:8e:d5:06:c5:c3:ca:65:e3:ed:c4:e1:cc:aa:73:53:ca:51: 40:25:dc:52:6a:58:f9:d1:a7:da:47:f8:51:a6:23:9b:fa:99: f2:f4:34:fd:03:f3:5e:21:0c:17:f3:7b:15:1e:31:ed:0f:e7: 29:6a:eb:e6:a5:aa:7f:72:eb:7b:97:84:1f:af:e5:0c:01:b1: 8c:8e:ce:c1:6b:86:ec:fe:70:14:dc:61:f9:9e:ed:5e:8c:d8: 0b:56:52:dc:c1:19:6c:17:32:5b:8c:8a:9b:c3:0e:df:c3:23: 3e:b1:56:f2:22:c5:6f:2a:41:e8:04:70:16:f0:db:9c:62:59: 56:7a:07:3a:33:15:26:72:13:4e:67:e0:bb:78:31:5a:18:b0: 70:19:1d:f2:27:fa:7b:23:75:94:c0:f0:e2:17:72:23:a3:42: e8:8e:b0:e6:1b:28:e4:79:67:49:f7:5e:bc:23:23:ae:92:cf: 40:b5:ee:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBk3HjcrOwPbb0piyhGR2tLiE/DIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzYxOTY0M0VFQjUxODMzM0RBRTJBNzk5MzNCRUIxMzIw Qzg5Q0E4NzAeFw0yNjAzMDExNzI2MjNaFw0yNjAzMDQxNzQ2MjNaMDMxMTAvBgNV BAMTKEU2MjE5NDFCNzI4OEQzN0Y0QjY5NkI5MTlCNDE5MkM5NDg4MUMyNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6sCuPgytBNOeFCdQ+P0m/QaQP uHNA/uzSeTyiYNpLfvzr1E6um+PRnIRMC2WHfkYQ5oV1zYAiAmrOft4oxLI09PQO attA0EvY8zKOfULBaJJ7thNeij+erQb/w+4Wc0iRb2TXae2NizGwHOnu1ckFbYbX DzI07/wfeMYF7dcSH3lYwzlXqSC46I+nOzHD4KlwndFJtJ3tOkoopIJjJgcvd66K kV2Rzp/ukLEK3gUfJmjsOWe11TPTVebaIFHBGOyKeRmHBewmmWW08c/uNPDJdjSy OwZ1pRaWiD7XiPD7LOdXOuiWnJsS58CvTb9MyN2NlxWnqsM6QBuj4ZplSHVHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5iGUG3KI039LaWuRm0GSyUiBwlQwHwYDVR0j BBgwFoAUxhlkPutRgzPa4qeZM76xMgyJyocwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmMzMGM3MS1kZjJkLTRmYzctYjQzNS03NTExZGYyODdhNmIvMC9DNjE5NjQzRUVC NTE4MzMzREFFMkE3OTkzM0JFQjEzMjBDODlDQTg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzYxOTY0M0VFQjUxODMzM0RBRTJBNzk5MzNCRUIxMzIwQzg5 Q0E4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGZjMzBjNzEtZGYyZC00ZmM3LWI0 MzUtNzUxMWRmMjg3YTZiLzAvQzYxOTY0M0VFQjUxODMzM0RBRTJBNzk5MzNCRUIx MzIwQzg5Q0E4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFywej/K8/vF9cznW8gy2FHIeXQJ1qsXZr5W nnUi/7j50ZrqKxmJGdbCRmWlQDH1uEwoyNnO2KfmeraVyZGPjBuBPFDQSZwR2JuO 1QbFw8pl4+3E4cyqc1PKUUAl3FJqWPnRp9pH+FGmI5v6mfL0NP0D814hDBfzexUe Me0P5ylq6+alqn9y63uXhB+v5QwBsYyOzsFrhuz+cBTcYfme7V6M2AtWUtzBGWwX MluMipvDDt/DIz6xVvIixW8qQegEcBbw25xiWVZ6BzozFSZyE05n4Lt4MVoYsHAZ HfIn+nsjdZTA8OIXciOjQuiOsOYbKOR5Z0n3XrwjI66Sz0C17l4= -----END CERTIFICATE-----Generated at Mon Mar 2 09:45:08 2026 by rpki-client