$ rpki-client -vvf repo-rpki.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.mft File: 614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.mft (raw, json) Hash identifier: LMCcQ+P6zCrlIjtW1iVWROHYh8l5TY9XsW4qOJl35ec= Subject key identifier: 03:C9:20:91:E4:CD:87:61:B1:61:E1:1C:45:B7:7E:77:85:E1:42:8E Authority key identifier: 61:4F:5C:6E:09:B1:E0:5A:7C:00:54:E6:2A:0C:D6:7B:CC:61:B6:98 Certificate issuer: /CN=614F5C6E09B1E05A7C0054E62A0CD67BCC61B698 Certificate serial: 2D2AC5B1A057481E0C89D13B38CDDD110F2658EC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.mft Manifest number: DC Signing time: Sun 01 Mar 2026 05:13:24 +0000 Manifest this update: Sun 01 Mar 2026 05:08:24 +0000 Manifest next update: Wed 04 Mar 2026 13:20:24 +0000 Files and hashes: 1: 3130332e3230342e34362e302f32332d3233203d3e20313531353835.roa (hash: ioN63y/a6zMhso1bZx+bq+twKG/bpFqGK3I7L7XEk5w=) 2: 614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.crl (hash: WCN8SVw3rOLEscyhRX3d8b3Bn/Qd5JDJXfa00FKoS7A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.crl rsync://repo-rpki.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 13:20:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:2a:c5:b1:a0:57:48:1e:0c:89:d1:3b:38:cd:dd:11:0f:26:58:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=614F5C6E09B1E05A7C0054E62A0CD67BCC61B698 Validity Not Before: Mar 1 05:08:24 2026 GMT Not After : Mar 4 13:20:24 2026 GMT Subject: CN=03C92091E4CD8761B161E11C45B77E7785E1428E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b7:ad:69:41:ef:c8:43:aa:b8:c2:27:22:10: da:3a:a9:6d:6b:fe:cc:5e:25:0a:42:a5:30:34:61: e3:75:d9:e5:9a:2f:5c:9c:53:2a:42:3e:f1:0e:ca: 21:e7:b5:1d:08:d7:1b:35:dc:4e:91:dc:24:03:a3: 42:23:8b:a4:b9:df:3c:b8:78:68:e1:b8:3c:20:90: fd:5b:9d:0a:03:fe:50:96:92:4d:40:5e:0c:53:a9: 79:02:a2:f5:ae:69:bd:87:d8:74:10:1e:fb:35:74: ad:73:92:f2:dc:69:58:0c:87:06:65:80:89:ea:66: 38:c3:cd:a4:14:f1:21:6f:49:90:0b:70:9c:65:66: d2:3e:d3:f5:43:07:b1:83:11:d7:ee:42:d1:44:8f: 4c:db:c6:1f:94:3f:ef:5c:d1:7a:cc:2a:55:1d:a6: 28:86:77:9f:df:cb:3a:4e:9b:a9:62:43:75:b6:e8: 7d:30:43:54:eb:d0:91:7e:23:d8:ce:2c:7d:3c:ef: 05:24:c6:69:b8:bd:f8:34:ae:bc:c7:8c:32:8f:47: 21:cb:97:0a:6d:70:a3:01:a7:f2:4b:53:1a:7d:d5: cc:39:ed:32:bf:66:96:ca:d5:7d:d8:11:4f:a2:40: 6e:da:d5:09:33:07:1d:2f:c5:8e:a1:9e:03:df:44: 5f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:C9:20:91:E4:CD:87:61:B1:61:E1:1C:45:B7:7E:77:85:E1:42:8E X509v3 Authority Key Identifier: keyid:61:4F:5C:6E:09:B1:E0:5A:7C:00:54:E6:2A:0C:D6:7B:CC:61:B6:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:bb:fa:42:0f:f2:88:21:c5:c4:39:4d:80:c2:11:19:73:d8: 75:c1:47:81:7d:dd:59:51:9d:b6:d4:eb:d2:ac:8e:73:13:fe: 99:ae:11:80:0b:ce:a2:bc:dd:db:b8:09:57:58:7d:1c:36:bb: 2e:20:f0:b5:5a:6a:73:43:1d:47:24:2d:0f:b8:b5:bd:9c:ef: 17:ad:9a:d1:a4:df:1a:91:54:38:cd:76:c4:69:3e:60:19:3d: 36:23:6c:5e:79:91:41:a1:f7:ae:e9:05:79:e6:d8:06:eb:3b: 2b:14:0f:1c:dc:a8:bb:e2:eb:9b:af:f6:77:5a:42:c7:c3:58: e7:a7:cd:0a:93:89:d6:9c:41:29:ac:95:7a:ea:f9:71:2c:cd: 42:36:9b:26:08:63:59:b1:03:fc:b9:cc:5d:61:c2:36:5f:ad: ac:4b:be:8f:6e:1a:4c:07:ce:d6:2b:ac:b3:fe:cd:89:74:a2: 91:c7:b0:2b:a3:53:d9:c7:14:28:9e:29:96:b4:22:e3:a9:6d: 60:3c:15:d4:ba:d5:e4:64:24:a4:1f:3d:3b:ba:4f:20:a6:12: 5f:5d:f1:67:d2:de:b1:7b:0a:3d:67:83:8b:d3:ff:cc:e7:71: a7:df:7c:ed:ce:27:6a:7a:67:fc:09:e3:38:f1:6b:e3:c3:91: dd:30:4b:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULSrFsaBXSB4MidE7OM3dEQ8mWOwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjE0RjVDNkUwOUIxRTA1QTdDMDA1NEU2MkEwQ0Q2N0JD QzYxQjY5ODAeFw0yNjAzMDEwNTA4MjRaFw0yNjAzMDQxMzIwMjRaMDMxMTAvBgNV BAMTKDAzQzkyMDkxRTRDRDg3NjFCMTYxRTExQzQ1Qjc3RTc3ODVFMTQyOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNt61pQe/IQ6q4wiciENo6qW1r /sxeJQpCpTA0YeN12eWaL1ycUypCPvEOyiHntR0I1xs13E6R3CQDo0Iji6S53zy4 eGjhuDwgkP1bnQoD/lCWkk1AXgxTqXkCovWuab2H2HQQHvs1dK1zkvLcaVgMhwZl gInqZjjDzaQU8SFvSZALcJxlZtI+0/VDB7GDEdfuQtFEj0zbxh+UP+9c0XrMKlUd piiGd5/fyzpOm6liQ3W26H0wQ1Tr0JF+I9jOLH087wUkxmm4vfg0rrzHjDKPRyHL lwptcKMBp/JLUxp91cw57TK/ZpbK1X3YEU+iQG7a1QkzBx0vxY6hngPfRF9XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA8kgkeTNh2GxYeEcRbd+d4XhQo4wHwYDVR0j BBgwFoAUYU9cbgmx4Fp8AFTmKgzWe8xhtpgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NjYwZTc1OC1mNjViLTQ2OWEtOGExYy1mYjAxOTg0MzQzYjEvMC82MTRGNUM2RTA5 QjFFMDVBN0MwMDU0RTYyQTBDRDY3QkNDNjFCNjk4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjE0RjVDNkUwOUIxRTA1QTdDMDA1NEU2MkEwQ0Q2N0JDQzYx QjY5OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTY2MGU3NTgtZjY1Yi00NjlhLThh MWMtZmIwMTk4NDM0M2IxLzAvNjE0RjVDNkUwOUIxRTA1QTdDMDA1NEU2MkEwQ0Q2 N0JDQzYxQjY5OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC+7+kIP8oghxcQ5TYDCERlz2HXBR4F93VlR nbbU69KsjnMT/pmuEYALzqK83du4CVdYfRw2uy4g8LVaanNDHUckLQ+4tb2c7xet mtGk3xqRVDjNdsRpPmAZPTYjbF55kUGh967pBXnm2AbrOysUDxzcqLvi65uv9nda QsfDWOenzQqTidacQSmslXrq+XEszUI2myYIY1mxA/y5zF1hwjZfraxLvo9uGkwH ztYrrLP+zYl0opHHsCujU9nHFCieKZa0IuOpbWA8FdS61eRkJKQfPTu6TyCmEl9d 8WfS3rF7Cj1ng4vT/8zncafffO3OJ2p6Z/wJ4zjxa+PDkd0wS3o= -----END CERTIFICATE-----Generated at Mon Mar 2 15:37:13 2026 by rpki-client