$ rpki-client -vvf repo-rpki.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/D065D2A0A105660C70D0A89385A33A61750ED7E8.mft File: D065D2A0A105660C70D0A89385A33A61750ED7E8.mft (raw, json) Hash identifier: t+AO2OQPd392cP82FirWZq6YA/5pZg301N8cn0Uu+3U= Subject key identifier: 9D:B5:99:7B:84:45:DB:BC:9A:71:CD:05:4E:D2:4C:90:C2:1A:53:E9 Authority key identifier: D0:65:D2:A0:A1:05:66:0C:70:D0:A8:93:85:A3:3A:61:75:0E:D7:E8 Certificate issuer: /CN=D065D2A0A105660C70D0A89385A33A61750ED7E8 Certificate serial: 39CD49D11C9E009B43643EFB43B12F590FD89F31 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D065D2A0A105660C70D0A89385A33A61750ED7E8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/D065D2A0A105660C70D0A89385A33A61750ED7E8.mft Manifest number: 0226 Signing time: Sun 01 Mar 2026 11:22:35 +0000 Manifest this update: Sun 01 Mar 2026 11:17:35 +0000 Manifest next update: Wed 04 Mar 2026 23:12:35 +0000 Files and hashes: 1: 3130332e3136312e3130392e302f32342d3234203d3e20313431363138.roa (hash: o2bQvGOl23Ff/IhGDb/Bx0WpnGHktg20JirSu+NaGU4=) 2: D065D2A0A105660C70D0A89385A33A61750ED7E8.crl (hash: 3XFjzHa20nmHdiSZY6FKdNDEd3mZREdBxglKZE2pgUk=) 3: 3130332e3137342e36362e302f32342d3234203d3e20313431363138.roa (hash: 65bteXTuBMFNNSxBrNIPuupUb/Qq8/iDZ5KY9jeNgbQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/D065D2A0A105660C70D0A89385A33A61750ED7E8.crl rsync://repo-rpki.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/D065D2A0A105660C70D0A89385A33A61750ED7E8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D065D2A0A105660C70D0A89385A33A61750ED7E8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 23:12:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:cd:49:d1:1c:9e:00:9b:43:64:3e:fb:43:b1:2f:59:0f:d8:9f:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D065D2A0A105660C70D0A89385A33A61750ED7E8 Validity Not Before: Mar 1 11:17:35 2026 GMT Not After : Mar 4 23:12:35 2026 GMT Subject: CN=9DB5997B8445DBBC9A71CD054ED24C90C21A53E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:72:de:cd:fe:4c:90:d6:5f:80:8e:73:58:93: e6:cc:7b:bb:81:b3:c1:e5:42:f1:69:33:64:a5:14: 0a:80:14:7b:2d:81:d2:6c:1f:4c:1e:71:5d:4b:7d: 22:da:2f:c1:e4:3c:6a:b6:a8:a6:56:da:c4:7a:81: 03:61:04:2c:0d:45:b1:e3:34:85:7e:7b:48:18:85: 74:a3:d2:f3:dc:d8:cd:f7:23:c4:80:fa:93:bb:8c: c5:39:28:64:ec:d5:3b:a8:1b:99:f6:a0:03:c1:de: 6e:e1:a7:c3:60:7d:7b:dc:76:08:9e:b4:82:80:84: 12:7e:05:10:19:68:c1:da:9a:55:a5:54:52:36:13: 3a:df:90:87:ad:49:0a:11:4f:b9:62:8f:c3:13:d2: f2:b9:20:6d:d5:4c:dc:89:5b:cb:e5:af:0a:cd:e8: 7f:74:10:81:c8:c3:de:6e:a4:d4:31:b7:b6:5b:62: 0b:59:02:66:74:8d:05:be:00:78:ca:42:ce:3f:75: 80:03:9a:ab:0d:51:bf:16:b2:ae:9b:be:c2:05:57: 72:ae:89:8e:93:44:39:b8:e5:de:b0:54:d0:1c:81: 85:ae:cd:6c:5b:de:38:3b:02:f3:32:85:48:c0:f2: e5:6a:6f:ee:fa:8f:54:c8:0b:49:0f:60:3b:7f:16: 28:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:B5:99:7B:84:45:DB:BC:9A:71:CD:05:4E:D2:4C:90:C2:1A:53:E9 X509v3 Authority Key Identifier: keyid:D0:65:D2:A0:A1:05:66:0C:70:D0:A8:93:85:A3:3A:61:75:0E:D7:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/D065D2A0A105660C70D0A89385A33A61750ED7E8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D065D2A0A105660C70D0A89385A33A61750ED7E8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/D065D2A0A105660C70D0A89385A33A61750ED7E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:74:88:7f:df:15:99:ce:9b:60:e0:9c:34:c4:56:c3:3d:38: 3b:fd:86:fd:17:13:72:c8:30:d5:99:87:fd:c5:04:06:58:49: 6f:c6:bf:82:54:69:e2:64:12:7c:dc:39:80:d7:94:8b:61:e0: 7c:2e:3d:d6:c8:4b:f2:77:cf:d6:27:ad:5b:f8:fd:5b:56:1b: 8f:d8:de:6a:2a:43:eb:44:09:0a:ce:da:0c:08:bc:44:55:fe: 64:8c:cc:96:9a:bc:3b:0d:6e:35:28:56:03:30:07:55:e2:28: bf:b0:5b:9d:d4:71:c2:e5:41:77:2a:e2:29:0b:36:64:93:3c: 43:55:b7:26:f0:63:d5:8a:6c:6a:54:23:1a:e0:78:97:3c:c7: de:05:75:05:c5:46:dc:9d:98:65:ba:25:47:33:63:54:9b:e8: f6:e7:a3:79:cb:8b:c8:c5:c2:ec:8a:64:d7:00:40:bf:2e:42: 2c:f1:6f:6b:7a:fb:13:cc:66:54:96:0a:c2:85:22:4c:12:b3: 6d:d3:ce:37:96:a7:72:82:1c:ed:04:6c:24:9f:bc:79:51:38: 5e:a1:d9:0e:06:d3:b1:93:62:46:19:6f:5b:62:93:4b:b4:fb: 7d:7b:b6:58:9d:32:2d:d1:b9:8d:9a:1a:9a:97:d1:38:55:cd: 18:16:bd:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOc1J0RyeAJtDZD77Q7EvWQ/YnzEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDA2NUQyQTBBMTA1NjYwQzcwRDBBODkzODVBMzNBNjE3 NTBFRDdFODAeFw0yNjAzMDExMTE3MzVaFw0yNjAzMDQyMzEyMzVaMDMxMTAvBgNV BAMTKDlEQjU5OTdCODQ0NURCQkM5QTcxQ0QwNTRFRDI0QzkwQzIxQTUzRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbct7N/kyQ1l+AjnNYk+bMe7uB s8HlQvFpM2SlFAqAFHstgdJsH0wecV1LfSLaL8HkPGq2qKZW2sR6gQNhBCwNRbHj NIV+e0gYhXSj0vPc2M33I8SA+pO7jMU5KGTs1TuoG5n2oAPB3m7hp8NgfXvcdgie tIKAhBJ+BRAZaMHamlWlVFI2EzrfkIetSQoRT7lij8MT0vK5IG3VTNyJW8vlrwrN 6H90EIHIw95upNQxt7ZbYgtZAmZ0jQW+AHjKQs4/dYADmqsNUb8Wsq6bvsIFV3Ku iY6TRDm45d6wVNAcgYWuzWxb3jg7AvMyhUjA8uVqb+76j1TIC0kPYDt/FigpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnbWZe4RF27yacc0FTtJMkMIaU+kwHwYDVR0j BBgwFoAU0GXSoKEFZgxw0KiThaM6YXUO1+gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MGJhOTdlZi03YmM4LTQ1YjgtODJhYi1mODU1MzNjYWVkZjQvMC9EMDY1RDJBMEEx MDU2NjBDNzBEMEE4OTM4NUEzM0E2MTc1MEVEN0U4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDA2NUQyQTBBMTA1NjYwQzcwRDBBODkzODVBMzNBNjE3NTBF RDdFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTBiYTk3ZWYtN2JjOC00NWI4LTgy YWItZjg1NTMzY2FlZGY0LzAvRDA2NUQyQTBBMTA1NjYwQzcwRDBBODkzODVBMzNB NjE3NTBFRDdFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKJ0iH/fFZnOm2DgnDTEVsM9ODv9hv0XE3LI MNWZh/3FBAZYSW/Gv4JUaeJkEnzcOYDXlIth4HwuPdbIS/J3z9YnrVv4/VtWG4/Y 3moqQ+tECQrO2gwIvERV/mSMzJaavDsNbjUoVgMwB1XiKL+wW53UccLlQXcq4ikL NmSTPENVtybwY9WKbGpUIxrgeJc8x94FdQXFRtydmGW6JUczY1Sb6Pbno3nLi8jF wuyKZNcAQL8uQizxb2t6+xPMZlSWCsKFIkwSs23TzjeWp3KCHO0EbCSfvHlROF6h 2Q4G07GTYkYZb1tik0u0+317tlidMi3RuY2aGpqX0ThVzRgWvVg= -----END CERTIFICATE-----Generated at Mon Mar 2 13:41:12 2026 by rpki-client