$ rpki-client -vvf repo-rpki.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/CD93E5B741D83CA78E83C5AD92156B086BC05233.mft File: CD93E5B741D83CA78E83C5AD92156B086BC05233.mft (raw, json) Hash identifier: jAAuwYNszJA8W/PqjjKWD7S4jQsNkm42Yyp/mEm/qGo= Subject key identifier: E9:E2:A1:0F:E2:68:32:E4:5C:43:3E:EE:84:3E:5A:D5:29:E1:17:A6 Authority key identifier: CD:93:E5:B7:41:D8:3C:A7:8E:83:C5:AD:92:15:6B:08:6B:C0:52:33 Certificate issuer: /CN=CD93E5B741D83CA78E83C5AD92156B086BC05233 Certificate serial: 7D450AA3F4C0ED7FA90BE257A1530B81AA2099FA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD93E5B741D83CA78E83C5AD92156B086BC05233.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/CD93E5B741D83CA78E83C5AD92156B086BC05233.mft Manifest number: 02EC Signing time: Sat 28 Feb 2026 01:02:25 +0000 Manifest this update: Sat 28 Feb 2026 00:57:25 +0000 Manifest next update: Tue 03 Mar 2026 08:23:25 +0000 Files and hashes: 1: 3130332e3135382e3139362e302f32342d3234203d3e20313431313333.roa (hash: veFUUZaHhHDpj6KmBcnJnR41ugvnsdBmWkSb2+LTSCU=) 2: CD93E5B741D83CA78E83C5AD92156B086BC05233.crl (hash: UZe7xW1WIojHm2plbawgEhjCKbw16pMSeIkqqeT9xC0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/CD93E5B741D83CA78E83C5AD92156B086BC05233.crl rsync://repo-rpki.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/CD93E5B741D83CA78E83C5AD92156B086BC05233.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD93E5B741D83CA78E83C5AD92156B086BC05233.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 08:23:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:45:0a:a3:f4:c0:ed:7f:a9:0b:e2:57:a1:53:0b:81:aa:20:99:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD93E5B741D83CA78E83C5AD92156B086BC05233 Validity Not Before: Feb 28 00:57:25 2026 GMT Not After : Mar 3 08:23:25 2026 GMT Subject: CN=E9E2A10FE26832E45C433EEE843E5AD529E117A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:69:11:7f:55:32:6e:72:fd:8f:8a:58:ae:0d: 94:ee:59:30:7d:08:82:b6:22:c1:e0:12:ed:9c:cc: 98:e5:f8:d0:96:ea:aa:4f:cb:f3:98:32:6f:67:f5: fe:3c:07:7e:1d:e1:1b:e3:65:c5:5a:6f:81:fd:cb: 5c:cc:40:9b:21:9d:5e:c8:fb:31:81:58:b4:c9:9b: f2:33:9f:d4:1d:27:67:c4:a5:82:d3:4b:d6:8c:3f: c6:15:7e:15:54:c0:09:f9:d2:73:67:1a:cf:73:f6: a0:6c:5d:15:c7:e7:4f:1a:0f:e4:8d:61:a5:d2:36: e6:df:20:91:fa:58:b7:1c:d0:53:11:d3:00:6a:d6: ab:de:37:4f:12:d0:02:d7:52:5c:b9:c2:49:ec:7a: 62:b6:08:61:b5:0a:e5:1e:c2:f1:7b:8a:32:9a:66: b6:d8:09:22:17:91:63:c9:b2:09:4b:be:b0:41:e2: 33:5c:90:9f:71:81:3f:57:01:e4:05:38:d9:a7:89: 83:95:a7:e7:32:db:0a:a4:24:c4:86:ff:ff:4f:5c: 65:25:df:76:7e:3b:85:18:0d:30:d8:73:37:59:58: e4:1f:98:3e:f3:b2:60:7a:d7:67:27:c5:d7:d1:4e: e8:58:99:81:52:d3:78:5e:57:3a:97:9b:b3:a8:df: 95:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:E2:A1:0F:E2:68:32:E4:5C:43:3E:EE:84:3E:5A:D5:29:E1:17:A6 X509v3 Authority Key Identifier: keyid:CD:93:E5:B7:41:D8:3C:A7:8E:83:C5:AD:92:15:6B:08:6B:C0:52:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/CD93E5B741D83CA78E83C5AD92156B086BC05233.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD93E5B741D83CA78E83C5AD92156B086BC05233.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/CD93E5B741D83CA78E83C5AD92156B086BC05233.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:2b:ce:87:83:61:88:14:07:70:eb:89:c3:cb:c0:9a:e8:15: 67:56:3a:8b:c1:a7:ed:bf:28:e5:49:22:c0:23:e8:8f:90:5b: 24:23:79:88:90:ef:3f:d0:5f:39:6a:3b:be:78:9e:59:99:ff: df:e3:b0:20:9e:83:44:bf:b0:f3:8f:16:0a:ac:e9:63:8d:52: 0f:09:46:2b:11:5d:a7:eb:35:26:2e:0c:62:99:6f:ea:3a:e7: 0c:4f:38:ae:11:cf:18:13:1a:54:ec:20:b5:42:fa:a1:29:c0: 8c:33:d8:4c:bc:aa:72:44:8b:ec:fb:4f:81:99:75:83:d2:35: 27:58:fc:56:eb:4a:1d:ed:61:ec:da:52:0c:54:f6:b3:41:36: 63:4e:2c:3c:88:75:7c:cc:3b:6c:36:38:22:2d:cb:aa:4b:19: 4d:e9:91:70:80:3a:bb:56:4f:a1:ac:17:91:ad:98:1c:4b:d1: 5c:ac:99:2a:e3:6b:e7:69:a5:0a:39:a9:bd:f8:d9:ac:94:3c: bc:9b:fd:ec:3d:b6:15:dd:b0:92:b0:a5:53:bb:10:78:7f:bc: ec:af:0b:22:3a:3b:d5:2d:66:d4:cf:81:4e:1f:58:4b:e3:22: c5:81:9d:d6:29:58:07:4b:2a:a9:a3:c5:39:19:92:61:ee:50: 90:3b:a1:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfUUKo/TA7X+pC+JXoVMLgaogmfowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q5M0U1Qjc0MUQ4M0NBNzhFODNDNUFEOTIxNTZCMDg2 QkMwNTIzMzAeFw0yNjAyMjgwMDU3MjVaFw0yNjAzMDMwODIzMjVaMDMxMTAvBgNV BAMTKEU5RTJBMTBGRTI2ODMyRTQ1QzQzM0VFRTg0M0U1QUQ1MjlFMTE3QTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVaRF/VTJucv2PiliuDZTuWTB9 CIK2IsHgEu2czJjl+NCW6qpPy/OYMm9n9f48B34d4RvjZcVab4H9y1zMQJshnV7I +zGBWLTJm/Izn9QdJ2fEpYLTS9aMP8YVfhVUwAn50nNnGs9z9qBsXRXH508aD+SN YaXSNubfIJH6WLcc0FMR0wBq1qveN08S0ALXUly5wknsemK2CGG1CuUewvF7ijKa ZrbYCSIXkWPJsglLvrBB4jNckJ9xgT9XAeQFONmniYOVp+cy2wqkJMSG//9PXGUl 33Z+O4UYDTDYczdZWOQfmD7zsmB612cnxdfRTuhYmYFS03heVzqXm7Oo35UFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6eKhD+JoMuRcQz7uhD5a1SnhF6YwHwYDVR0j BBgwFoAUzZPlt0HYPKeOg8WtkhVrCGvAUjMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmRkY2I0Yi02ZDhlLTQ1OWItOGFhMi05OWE2MDg4NjI1NmEvMC9DRDkzRTVCNzQx RDgzQ0E3OEU4M0M1QUQ5MjE1NkIwODZCQzA1MjMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0Q5M0U1Qjc0MUQ4M0NBNzhFODNDNUFEOTIxNTZCMDg2QkMw NTIzMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGZkZGNiNGItNmQ4ZS00NTliLThh YTItOTlhNjA4ODYyNTZhLzAvQ0Q5M0U1Qjc0MUQ4M0NBNzhFODNDNUFEOTIxNTZC MDg2QkMwNTIzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABYrzoeDYYgUB3DricPLwJroFWdWOovBp+2/ KOVJIsAj6I+QWyQjeYiQ7z/QXzlqO754nlmZ/9/jsCCeg0S/sPOPFgqs6WONUg8J RisRXafrNSYuDGKZb+o65wxPOK4RzxgTGlTsILVC+qEpwIwz2Ey8qnJEi+z7T4GZ dYPSNSdY/FbrSh3tYezaUgxU9rNBNmNOLDyIdXzMO2w2OCIty6pLGU3pkXCAOrtW T6GsF5GtmBxL0VysmSrja+dppQo5qb342ayUPLyb/ew9thXdsJKwpVO7EHh/vOyv CyI6O9UtZtTPgU4fWEvjIsWBndYpWAdLKqmjxTkZkmHuUJA7oWU= -----END CERTIFICATE-----Generated at Mon Mar 2 04:18:19 2026 by rpki-client