$ rpki-client -vvf repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.mft File: D4688B55FB8C00F6AEC284E5BCB81E227C512DED.mft (raw, json) Hash identifier: GkUN62iKH4eD9Jt8V6IE7nxE8ktymqS1x3Vaxf6WDeM= Subject key identifier: F7:97:33:35:6D:EE:67:CD:FD:D5:BC:51:7A:11:D1:96:82:1A:EA:CC Authority key identifier: D4:68:8B:55:FB:8C:00:F6:AE:C2:84:E5:BC:B8:1E:22:7C:51:2D:ED Certificate issuer: /CN=D4688B55FB8C00F6AEC284E5BCB81E227C512DED Certificate serial: 71620C66409BF0D1B574A1B8B13E289D8EE00565 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.mft Manifest number: CB Signing time: Sat 28 Feb 2026 02:01:32 +0000 Manifest this update: Sat 28 Feb 2026 01:56:32 +0000 Manifest next update: Tue 03 Mar 2026 09:34:32 +0000 Files and hashes: 1: 3135372e32302e3133332e302f32342d3234203d3e20313532343033.roa (hash: j2jeNWrMnOWA3HVjk7O9Qz3LOhi+j72z4nmZQhM1gNs=) 2: 3135372e32302e3133322e302f32332d3233203d3e20313532343033.roa (hash: amumi/WYE2A4FB3wGrZMgKCqFZMIGROo7mRPUcV+x9E=) 3: 3135372e32302e3133322e302f32342d3234203d3e20313532343033.roa (hash: NWPdpnzjvUkWFT639EpYBF/gai4l8goVCGsjws+hbv0=) 4: D4688B55FB8C00F6AEC284E5BCB81E227C512DED.crl (hash: dIBhQVNSp0WRs/jbEIxhk8UQg7hLtJxNnS8A31NA0JU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.crl rsync://repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 09:34:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:62:0c:66:40:9b:f0:d1:b5:74:a1:b8:b1:3e:28:9d:8e:e0:05:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D4688B55FB8C00F6AEC284E5BCB81E227C512DED Validity Not Before: Feb 28 01:56:32 2026 GMT Not After : Mar 3 09:34:32 2026 GMT Subject: CN=F79733356DEE67CDFDD5BC517A11D196821AEACC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b4:c7:c2:dc:bd:dc:b5:e9:3d:cd:60:28:74: 72:b3:b1:42:e0:64:33:59:26:61:45:82:07:6f:ae: 72:8b:8c:08:18:72:eb:8a:98:02:bf:01:a5:53:a8: b8:58:7a:7f:bd:82:f7:a3:96:c5:23:a3:4e:69:20: 4a:94:5e:2c:ae:83:2b:4a:b3:c5:22:89:58:4e:f8: 2b:25:fd:f7:9d:73:7c:2b:99:3d:80:4a:16:ca:30: 96:7a:ff:b2:26:17:ca:1d:91:c6:e2:ad:2c:42:4b: df:54:93:c6:0b:83:ab:95:85:2c:3d:3f:88:8b:7b: f1:85:1f:e8:34:46:c7:62:71:82:57:59:d2:1e:b0: 6d:96:fd:45:77:e5:be:c8:45:51:af:f9:e4:7d:bb: 90:ed:8c:12:91:9f:4d:fb:7a:2a:86:64:48:f2:9b: 48:9c:ac:ad:b5:cd:a8:c6:03:89:1d:b3:fa:62:cc: 5a:eb:ee:ad:7a:c2:c4:57:a8:06:34:f7:d2:3e:35: a9:59:d5:cc:f4:42:85:69:f9:7e:08:19:89:9d:4a: 00:fe:a9:6a:65:ad:a6:5c:f3:ea:8b:47:32:74:15: a6:44:28:8a:4c:a6:3a:47:e7:03:7a:f5:03:d8:a2: 10:67:b3:24:70:03:0f:62:df:69:af:a4:16:28:5e: 19:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:97:33:35:6D:EE:67:CD:FD:D5:BC:51:7A:11:D1:96:82:1A:EA:CC X509v3 Authority Key Identifier: keyid:D4:68:8B:55:FB:8C:00:F6:AE:C2:84:E5:BC:B8:1E:22:7C:51:2D:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:8e:6c:f7:c7:7c:0c:cb:55:ae:bd:cc:03:b4:00:58:40:f9: 9b:67:bd:09:a9:02:64:ae:11:37:7f:29:01:7c:8d:5b:4f:f1: 21:d6:c9:5d:ba:b6:1b:97:c8:ab:0d:56:6d:9a:5c:5e:cd:5f: 35:9e:44:bb:3c:53:72:4b:90:f8:9e:17:34:90:f7:b3:b5:98: 2a:48:d8:39:6a:31:65:85:3a:6f:98:8c:f6:44:57:11:5f:1a: 7b:70:8d:05:c4:bc:9b:ce:7b:61:d7:9e:c8:94:59:53:a1:37: 48:08:31:61:be:d8:a2:27:62:63:b5:72:ee:52:65:b2:84:b0: 2e:37:15:26:c1:08:bf:a3:a9:43:f0:f2:76:ab:42:ac:ae:e7: b5:1c:f2:8a:6c:7b:9b:bb:87:e0:4d:4a:a5:03:df:0f:d6:7e: 70:6f:fa:31:d4:dc:10:af:0a:83:a8:e8:d3:bc:7a:0f:80:07: 03:89:00:2c:1d:0a:f5:e4:cb:96:e3:3b:2a:8c:9e:46:85:39: 74:0d:e6:13:0a:45:44:d2:0c:5b:72:5b:4b:ac:df:e2:35:0a: fb:16:42:44:ed:a1:9c:71:2e:02:9b:26:ec:aa:9e:b4:d2:ce: b6:1f:f1:a6:9f:8c:15:c2:c1:8a:5b:f0:11:f3:c6:17:75:30: bc:d7:ae:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcWIMZkCb8NG1dKG4sT4onY7gBWUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQ2ODhCNTVGQjhDMDBGNkFFQzI4NEU1QkNCODFFMjI3 QzUxMkRFRDAeFw0yNjAyMjgwMTU2MzJaFw0yNjAzMDMwOTM0MzJaMDMxMTAvBgNV BAMTKEY3OTczMzM1NkRFRTY3Q0RGREQ1QkM1MTdBMTFEMTk2ODIxQUVBQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGtMfC3L3ctek9zWAodHKzsULg ZDNZJmFFggdvrnKLjAgYcuuKmAK/AaVTqLhYen+9gvejlsUjo05pIEqUXiyugytK s8UiiVhO+Csl/fedc3wrmT2AShbKMJZ6/7ImF8odkcbirSxCS99Uk8YLg6uVhSw9 P4iLe/GFH+g0RsdicYJXWdIesG2W/UV35b7IRVGv+eR9u5DtjBKRn037eiqGZEjy m0icrK21zajGA4kds/pizFrr7q16wsRXqAY099I+NalZ1cz0QoVp+X4IGYmdSgD+ qWplraZc8+qLRzJ0FaZEKIpMpjpH5wN69QPYohBnsyRwAw9i32mvpBYoXhkNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU95czNW3uZ8391bxRehHRloIa6swwHwYDVR0j BBgwFoAU1GiLVfuMAPauwoTlvLgeInxRLe0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OWMxNWI3OC0yMDcxLTQ0ZDEtOWExZC1hZDZlYjA5ZmFlMDgvMC9ENDY4OEI1NUZC OEMwMEY2QUVDMjg0RTVCQ0I4MUUyMjdDNTEyREVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDQ2ODhCNTVGQjhDMDBGNkFFQzI4NEU1QkNCODFFMjI3QzUx MkRFRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTljMTViNzgtMjA3MS00NGQxLTlh MWQtYWQ2ZWIwOWZhZTA4LzAvRDQ2ODhCNTVGQjhDMDBGNkFFQzI4NEU1QkNCODFF MjI3QzUxMkRFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEqObPfHfAzLVa69zAO0AFhA+ZtnvQmpAmSu ETd/KQF8jVtP8SHWyV26thuXyKsNVm2aXF7NXzWeRLs8U3JLkPieFzSQ97O1mCpI 2DlqMWWFOm+YjPZEVxFfGntwjQXEvJvOe2HXnsiUWVOhN0gIMWG+2KInYmO1cu5S ZbKEsC43FSbBCL+jqUPw8narQqyu57Uc8opse5u7h+BNSqUD3w/WfnBv+jHU3BCv CoOo6NO8eg+ABwOJACwdCvXky5bjOyqMnkaFOXQN5hMKRUTSDFtyW0us3+I1CvsW QkTtoZxxLgKbJuyqnrTSzrYf8aafjBXCwYpb8BHzxhd1MLzXrmQ= -----END CERTIFICATE-----Generated at Mon Mar 2 09:46:47 2026 by rpki-client