$ rpki-client -vvf repo-rpki.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/D807B5A7716CB56D036EDE4CE994632C0D3A2501.mft File: D807B5A7716CB56D036EDE4CE994632C0D3A2501.mft (raw, json) Hash identifier: a6wwketNQwLHOpELHEBrdMoOXsBeNLkc3RoOhsa/TKE= Subject key identifier: 5C:70:DA:CA:2B:D6:FE:72:AE:45:CC:DD:86:0F:D4:25:CA:52:37:FA Authority key identifier: D8:07:B5:A7:71:6C:B5:6D:03:6E:DE:4C:E9:94:63:2C:0D:3A:25:01 Certificate issuer: /CN=D807B5A7716CB56D036EDE4CE994632C0D3A2501 Certificate serial: 1ECDEF602822046866EE7EDFBD864360E184062C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D807B5A7716CB56D036EDE4CE994632C0D3A2501.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/D807B5A7716CB56D036EDE4CE994632C0D3A2501.mft Manifest number: 0200 Signing time: Mon 02 Mar 2026 03:22:22 +0000 Manifest this update: Mon 02 Mar 2026 03:17:22 +0000 Manifest next update: Thu 05 Mar 2026 09:59:22 +0000 Files and hashes: 1: 3130332e3139312e3230302e302f32342d3234203d3e20313432333636.roa (hash: PoHfbIWBTAgg6GV0EgVNoxxVcZmuQWnVjc1te2yrEhM=) 2: D807B5A7716CB56D036EDE4CE994632C0D3A2501.crl (hash: KsWL9jXjHU3xdtJ0pwKwnjgtWpJI+duwIFamu2R5OFI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/D807B5A7716CB56D036EDE4CE994632C0D3A2501.crl rsync://repo-rpki.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/D807B5A7716CB56D036EDE4CE994632C0D3A2501.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D807B5A7716CB56D036EDE4CE994632C0D3A2501.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:cd:ef:60:28:22:04:68:66:ee:7e:df:bd:86:43:60:e1:84:06:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D807B5A7716CB56D036EDE4CE994632C0D3A2501 Validity Not Before: Mar 2 03:17:22 2026 GMT Not After : Mar 5 09:59:22 2026 GMT Subject: CN=5C70DACA2BD6FE72AE45CCDD860FD425CA5237FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:48:ac:22:18:bf:e7:74:4d:64:59:24:c4:ee: 66:2d:1a:a7:c7:fb:4a:53:e4:dd:ad:79:b7:04:d5: e9:26:28:3e:f2:68:07:89:17:ed:bc:0d:d6:a9:75: bf:d6:b7:c1:40:ab:1a:ad:0b:4e:ca:43:fb:8f:89: 2c:65:69:b7:dd:44:58:70:b1:29:69:70:3b:eb:60: f0:60:51:ba:41:85:35:b0:29:1e:42:18:bf:6f:f8: 0a:1c:2c:bd:b9:b6:89:8f:6d:80:ef:a8:1d:18:6f: ae:6f:5a:54:92:14:25:03:7b:95:82:85:53:4f:72: 81:aa:b2:44:3f:0e:14:f6:33:e3:51:0b:d0:89:a5: 3c:d2:cb:bb:28:50:51:46:31:4c:1c:19:f6:00:f1: ea:4c:aa:a9:c0:3b:c9:10:b1:10:24:23:39:74:db: c5:88:68:a9:0f:2b:fa:40:cc:12:8d:78:73:d9:ad: 27:9b:64:ab:c1:df:52:e0:3f:5a:6b:d2:06:e4:3e: 21:a2:f4:8e:7b:10:f3:61:2f:49:9a:52:4e:48:a5: 41:ad:86:30:90:f8:31:81:1a:5c:e4:6f:1d:93:45: 6b:3b:d0:53:1e:2b:c4:a1:80:d8:f6:aa:26:5d:9d: 6b:5f:8d:18:a4:c7:b2:5c:3b:3a:ef:c2:c6:e3:f0: 8f:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:70:DA:CA:2B:D6:FE:72:AE:45:CC:DD:86:0F:D4:25:CA:52:37:FA X509v3 Authority Key Identifier: keyid:D8:07:B5:A7:71:6C:B5:6D:03:6E:DE:4C:E9:94:63:2C:0D:3A:25:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/D807B5A7716CB56D036EDE4CE994632C0D3A2501.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D807B5A7716CB56D036EDE4CE994632C0D3A2501.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/D807B5A7716CB56D036EDE4CE994632C0D3A2501.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:21:28:5e:99:54:3d:99:fe:20:5c:a7:7a:51:e9:c7:e0:cf: 12:f4:3e:59:cd:c3:b0:60:b6:65:40:b7:b8:fc:6c:a5:03:f3: 70:f6:16:ff:b9:06:05:3a:0d:11:43:d0:cb:d9:56:c8:be:9c: 69:cd:e8:c3:82:f0:6d:7a:5f:6d:2f:ff:25:86:f6:ae:62:38: be:a9:a8:4f:7f:d5:53:07:97:a8:48:3f:27:04:43:5d:9c:f3: a4:f3:93:51:54:d9:26:13:04:70:3b:67:3c:33:54:e2:91:cf: a6:19:60:e3:d8:c9:cf:38:27:d5:41:80:ad:cd:12:1c:76:b9: ec:b0:2a:e0:a7:c3:fb:af:4f:ca:8d:7c:52:53:5f:e7:9f:84: 6e:b0:ef:29:1e:2f:83:e7:df:90:e5:0e:f1:20:cf:a4:0d:31: 2e:47:80:d1:b8:76:8d:20:21:b7:f0:f1:ba:73:a6:4b:a1:1d: 89:82:1b:f9:5e:54:7b:1a:0e:b8:b8:fb:bd:03:99:4c:24:35: fe:f6:d6:a8:11:54:16:0b:58:ee:e2:ea:69:1c:d1:f4:1a:88: a9:13:41:31:76:5d:47:1e:87:d8:9c:90:35:c5:c9:8f:0e:4b: a6:98:3b:c0:49:e3:34:37:94:70:6c:0b:82:5a:99:a1:7f:44: c3:e3:d8:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHs3vYCgiBGhm7n7fvYZDYOGEBiwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDgwN0I1QTc3MTZDQjU2RDAzNkVERTRDRTk5NDYzMkMw RDNBMjUwMTAeFw0yNjAzMDIwMzE3MjJaFw0yNjAzMDUwOTU5MjJaMDMxMTAvBgNV BAMTKDVDNzBEQUNBMkJENkZFNzJBRTQ1Q0NERDg2MEZENDI1Q0E1MjM3RkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJSKwiGL/ndE1kWSTE7mYtGqfH +0pT5N2tebcE1ekmKD7yaAeJF+28Ddapdb/Wt8FAqxqtC07KQ/uPiSxlabfdRFhw sSlpcDvrYPBgUbpBhTWwKR5CGL9v+AocLL25tomPbYDvqB0Yb65vWlSSFCUDe5WC hVNPcoGqskQ/DhT2M+NRC9CJpTzSy7soUFFGMUwcGfYA8epMqqnAO8kQsRAkIzl0 28WIaKkPK/pAzBKNeHPZrSebZKvB31LgP1pr0gbkPiGi9I57EPNhL0maUk5IpUGt hjCQ+DGBGlzkbx2TRWs70FMeK8ShgNj2qiZdnWtfjRikx7JcOzrvwsbj8I/lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXHDayivW/nKuRczdhg/UJcpSN/owHwYDVR0j BBgwFoAU2Ae1p3FstW0Dbt5M6ZRjLA06JQEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MDNlNzFmZS1hZDMzLTRkMTItODcyMC00MzE0M2ZmMDFkYmYvMC9EODA3QjVBNzcx NkNCNTZEMDM2RURFNENFOTk0NjMyQzBEM0EyNTAxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDgwN0I1QTc3MTZDQjU2RDAzNkVERTRDRTk5NDYzMkMwRDNB MjUwMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTAzZTcxZmUtYWQzMy00ZDEyLTg3 MjAtNDMxNDNmZjAxZGJmLzAvRDgwN0I1QTc3MTZDQjU2RDAzNkVERTRDRTk5NDYz MkMwRDNBMjUwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIAhKF6ZVD2Z/iBcp3pR6cfgzxL0PlnNw7Bg tmVAt7j8bKUD83D2Fv+5BgU6DRFD0MvZVsi+nGnN6MOC8G16X20v/yWG9q5iOL6p qE9/1VMHl6hIPycEQ12c86Tzk1FU2SYTBHA7ZzwzVOKRz6YZYOPYyc84J9VBgK3N Ehx2ueywKuCnw/uvT8qNfFJTX+efhG6w7ykeL4Pn35DlDvEgz6QNMS5HgNG4do0g Ibfw8bpzpkuhHYmCG/leVHsaDri4+70DmUwkNf721qgRVBYLWO7i6mkc0fQaiKkT QTF2XUceh9ickDXFyY8OS6aYO8BJ4zQ3lHBsC4JamaF/RMPj2J8= -----END CERTIFICATE-----Generated at Mon Mar 2 07:44:54 2026 by rpki-client