$ rpki-client -vvf repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.mft File: D1553F19BBD3B70719E720005FDB3145CC910A1F.mft (raw, json) Hash identifier: jVLGSFhinfElvNwTJm2EUbdFyVOFndleeubzPBWjtuU= Subject key identifier: 1F:FD:0E:57:B6:7B:8D:85:19:E8:D3:6A:4B:8E:1F:49:CC:1A:97:0C Authority key identifier: D1:55:3F:19:BB:D3:B7:07:19:E7:20:00:5F:DB:31:45:CC:91:0A:1F Certificate issuer: /CN=D1553F19BBD3B70719E720005FDB3145CC910A1F Certificate serial: 5B6A2C98D74189E493B401D169D52D64CF14BFA9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1553F19BBD3B70719E720005FDB3145CC910A1F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.mft Manifest number: 0287 Signing time: Sun 01 Mar 2026 11:40:42 +0000 Manifest this update: Sun 01 Mar 2026 11:35:42 +0000 Manifest next update: Wed 04 Mar 2026 20:57:42 +0000 Files and hashes: 1: 3130332e3138332e35392e302f32342d3234203d3e20313439343039.roa (hash: WjcJ7E0QSWsLWoEbkMd62oz7h2Nk8rjlfX12OFJZZWw=) 2: D1553F19BBD3B70719E720005FDB3145CC910A1F.crl (hash: 2RusBrIFYB8CIGAmrapvYhisO6bIy3riocypBSXPTio=) 3: 3130332e3138332e35382e302f32342d3234203d3e20313439343039.roa (hash: B89ThQDBq7NFEdKxZJ9Go94Cy2gr/9mNFR+AP3UQspo=) 4: 3130332e3138332e35382e302f32332d3233203d3e20313439343039.roa (hash: zkfW7G82q4G/1aqENxbcKsFNsfS8k4+ZqlphVmUFO1g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.crl rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1553F19BBD3B70719E720005FDB3145CC910A1F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 20:57:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:6a:2c:98:d7:41:89:e4:93:b4:01:d1:69:d5:2d:64:cf:14:bf:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1553F19BBD3B70719E720005FDB3145CC910A1F Validity Not Before: Mar 1 11:35:42 2026 GMT Not After : Mar 4 20:57:42 2026 GMT Subject: CN=1FFD0E57B67B8D8519E8D36A4B8E1F49CC1A970C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:63:0d:47:05:5a:e6:31:41:4d:74:4d:9a:64: 9d:11:fe:a4:1d:d2:44:ed:c0:a0:d0:52:6d:65:7c: df:00:d9:41:a6:af:71:0b:a5:51:08:8f:eb:bc:d5: a5:b4:81:aa:41:19:24:7f:72:75:60:90:ec:88:87: 7d:74:d1:37:30:52:51:82:3c:e3:6a:ca:0d:6e:57: 47:92:d4:50:07:a2:e5:2c:8a:9f:c0:33:5f:06:b6: 6e:c8:d0:af:da:be:de:9f:cd:37:4d:c3:92:ed:b8: 67:ba:c7:85:d4:17:e4:49:0c:fe:20:16:58:bf:8b: e1:ac:c0:14:0e:c5:f2:ac:ce:36:ba:9a:90:5a:f3: 02:f9:33:38:ed:e6:45:7a:41:99:19:1e:b2:91:f0: 6d:9e:6c:42:28:01:77:de:89:05:df:ed:04:3f:bb: 4f:15:d4:f3:dd:05:62:10:b6:07:64:1e:98:da:e3: e2:d6:48:2f:e9:74:4f:62:b1:90:3a:a8:e8:83:13: 82:40:37:b9:28:88:10:04:23:a3:a6:e6:3a:29:86: 7e:b3:93:81:9d:43:df:f9:f3:db:12:07:72:58:ba: e5:b8:a6:aa:76:74:89:31:6e:3d:16:38:9b:4e:e3: ae:2b:c0:54:8f:b4:9e:ce:7a:7e:38:fc:d0:96:ea: 6b:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:FD:0E:57:B6:7B:8D:85:19:E8:D3:6A:4B:8E:1F:49:CC:1A:97:0C X509v3 Authority Key Identifier: keyid:D1:55:3F:19:BB:D3:B7:07:19:E7:20:00:5F:DB:31:45:CC:91:0A:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1553F19BBD3B70719E720005FDB3145CC910A1F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:5a:85:45:10:36:4d:d4:e1:d6:2a:fa:ad:f6:03:d4:c3:0f: 57:b5:87:a2:89:2d:89:57:b6:e3:77:a9:3b:dc:2f:ee:c2:07: 28:41:d6:f6:07:4f:a6:5e:6f:1d:ad:5c:cc:34:b6:3a:4a:8d: f1:11:fb:6e:6c:45:11:16:26:06:70:61:ff:80:ad:e5:e0:a5: 34:fa:73:cf:a1:5b:d6:48:a1:06:41:2a:0d:2a:e4:4e:93:5e: dd:98:db:99:5c:38:53:46:3f:4c:43:49:44:35:0d:24:b7:0f: d9:cd:8a:6a:c3:4f:94:e1:69:0e:8c:04:29:57:45:02:70:92: 94:e3:e4:ec:c2:97:2d:d4:fe:67:e5:23:5e:0d:8a:5c:5c:5a: e0:ab:66:12:ec:cb:79:47:ba:0b:8e:5d:21:4c:9e:ba:4f:fe: 93:80:ae:e3:14:2e:e2:aa:ea:3b:10:03:4c:9f:ac:74:8e:0f: 75:b1:ff:5a:77:ac:41:4a:64:b5:83:dd:c6:ad:09:15:54:08: b6:ce:0c:82:8f:db:81:6b:f9:17:c6:c1:43:be:63:fc:f4:38: 4a:85:ff:46:f1:e7:5d:c7:26:78:1c:6f:fb:80:7e:7c:8c:4d: e1:be:65:8e:03:03:93:bc:8c:f5:a1:42:62:8c:94:69:39:f3: 60:2c:c0:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW2osmNdBieSTtAHRadUtZM8Uv6kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDE1NTNGMTlCQkQzQjcwNzE5RTcyMDAwNUZEQjMxNDVD QzkxMEExRjAeFw0yNjAzMDExMTM1NDJaFw0yNjAzMDQyMDU3NDJaMDMxMTAvBgNV BAMTKDFGRkQwRTU3QjY3QjhEODUxOUU4RDM2QTRCOEUxRjQ5Q0MxQTk3MEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxYw1HBVrmMUFNdE2aZJ0R/qQd 0kTtwKDQUm1lfN8A2UGmr3ELpVEIj+u81aW0gapBGSR/cnVgkOyIh3100TcwUlGC PONqyg1uV0eS1FAHouUsip/AM18Gtm7I0K/avt6fzTdNw5LtuGe6x4XUF+RJDP4g Fli/i+GswBQOxfKszja6mpBa8wL5Mzjt5kV6QZkZHrKR8G2ebEIoAXfeiQXf7QQ/ u08V1PPdBWIQtgdkHpja4+LWSC/pdE9isZA6qOiDE4JAN7koiBAEI6Om5jophn6z k4GdQ9/589sSB3JYuuW4pqp2dIkxbj0WOJtO464rwFSPtJ7Oen44/NCW6munAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUH/0OV7Z7jYUZ6NNqS44fScwalwwwHwYDVR0j BBgwFoAU0VU/GbvTtwcZ5yAAX9sxRcyRCh8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OTliNjA0Zi0xNTc4LTRhMGItOGY3YS01OGQ5ZjEzYzk3NjkvMC9EMTU1M0YxOUJC RDNCNzA3MTlFNzIwMDA1RkRCMzE0NUNDOTEwQTFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDE1NTNGMTlCQkQzQjcwNzE5RTcyMDAwNUZEQjMxNDVDQzkx MEExRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTk5YjYwNGYtMTU3OC00YTBiLThm N2EtNThkOWYxM2M5NzY5LzAvRDE1NTNGMTlCQkQzQjcwNzE5RTcyMDAwNUZEQjMx NDVDQzkxMEExRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ1ahUUQNk3U4dYq+q32A9TDD1e1h6KJLYlX tuN3qTvcL+7CByhB1vYHT6Zebx2tXMw0tjpKjfER+25sRREWJgZwYf+AreXgpTT6 c8+hW9ZIoQZBKg0q5E6TXt2Y25lcOFNGP0xDSUQ1DSS3D9nNimrDT5ThaQ6MBClX RQJwkpTj5OzCly3U/mflI14NilxcWuCrZhLsy3lHuguOXSFMnrpP/pOAruMULuKq 6jsQA0yfrHSOD3Wx/1p3rEFKZLWD3catCRVUCLbODIKP24Fr+RfGwUO+Y/z0OEqF /0bx513HJngcb/uAfnyMTeG+ZY4DA5O8jPWhQmKMlGk582AswK8= -----END CERTIFICATE-----Generated at Mon Mar 2 12:52:08 2026 by rpki-client