$ rpki-client -vvf repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/D2A6ABCA1EF89725109CBEA5D42E683C95925312.mft File: D2A6ABCA1EF89725109CBEA5D42E683C95925312.mft (raw, json) Hash identifier: TKhzQNXx7PGpzn7BtzDHSGIy+pEEYQvWcU9gDeov9CY= Subject key identifier: 12:00:0D:2C:DF:BE:9C:DC:31:6D:83:7E:2E:2C:05:F7:F7:A9:B9:0C Authority key identifier: D2:A6:AB:CA:1E:F8:97:25:10:9C:BE:A5:D4:2E:68:3C:95:92:53:12 Certificate issuer: /CN=D2A6ABCA1EF89725109CBEA5D42E683C95925312 Certificate serial: 47B624283A9472E48358598DA635DB0F3C957AD2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2A6ABCA1EF89725109CBEA5D42E683C95925312.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/D2A6ABCA1EF89725109CBEA5D42E683C95925312.mft Manifest number: 021D Signing time: Sun 01 Mar 2026 14:51:17 +0000 Manifest this update: Sun 01 Mar 2026 14:46:17 +0000 Manifest next update: Wed 04 Mar 2026 16:43:17 +0000 Files and hashes: 1: D2A6ABCA1EF89725109CBEA5D42E683C95925312.crl (hash: I5AIczdyx8tN8aqj4HlbvtNpIPv2df7V/XK7zl0WKYY=) 2: 32372e3131322e36342e302f32342d3234203d3e203436303633.roa (hash: o9JWChuMppyDlwbbP2wl7a1BlqxO7U1pMNyySwQnepQ=) 3: 32372e3131322e36372e302f32342d3234203d3e203436303633.roa (hash: YgxXSgVa+uYH+lGkHHbZfilfnfqWJl6PwLSpZ8P3sTU=) 4: 32372e3131322e36392e302f32342d3234203d3e203436303633.roa (hash: 2I1hpf1XM01hpFE4apAQaCDZ2SJv/6pMmkxZHdmPTWg=) 5: 32372e3131322e36352e302f32342d3234203d3e203436303633.roa (hash: Pkdf7SsfkpbiJuE6kdJ40FkL/ss5mA3yBuB75QVgOO8=) 6: 32372e3131322e37302e302f32342d3234203d3e203436303633.roa (hash: q2HyhqMcqNKr/1kOvWeC7Bv0LZJy34QkHpHUyM3pSpc=) 7: 32372e3131322e36382e302f32342d3234203d3e203436303633.roa (hash: 6MS+hpY8AAAW2vT3UGxha7ncda+Mv46TSI1kZZNVt4E=) 8: 32372e3131322e37312e302f32342d3234203d3e203436303633.roa (hash: CFppjbu+j9vN8xa/dDTxQelhICtYUCoA83bushfIr2o=) 9: 32372e3131322e36362e302f32342d3234203d3e203436303633.roa (hash: aYHcfPnNR/c6q1Gn6jLMY340l5EssmEBF13l3KbonYA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/D2A6ABCA1EF89725109CBEA5D42E683C95925312.crl rsync://repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/D2A6ABCA1EF89725109CBEA5D42E683C95925312.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2A6ABCA1EF89725109CBEA5D42E683C95925312.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 16:43:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:b6:24:28:3a:94:72:e4:83:58:59:8d:a6:35:db:0f:3c:95:7a:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2A6ABCA1EF89725109CBEA5D42E683C95925312 Validity Not Before: Mar 1 14:46:17 2026 GMT Not After : Mar 4 16:43:17 2026 GMT Subject: CN=12000D2CDFBE9CDC316D837E2E2C05F7F7A9B90C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:93:a0:c3:a4:3f:fc:10:f2:e5:c9:a6:03:4b: 65:0f:01:2b:cb:c9:42:1a:a9:4b:06:f2:e3:ea:98: db:e1:ba:e7:6c:de:a0:ab:b4:2f:23:5c:0c:6d:f2: 2a:34:99:a6:14:bb:b7:9f:06:4e:4a:e8:3f:16:c6: 1a:2b:96:35:95:99:c0:90:c5:70:ff:d9:d9:02:3c: c5:1e:e4:be:a1:14:ea:c2:0a:ea:a3:8d:c9:e6:65: 25:76:3e:15:3b:49:a3:23:c7:3e:64:68:b3:f5:be: 94:d5:07:6f:6e:7c:1a:51:b9:b1:52:8d:d1:32:1b: 73:e1:b3:e6:8f:9d:f7:da:94:45:d0:8d:07:bd:48: c2:8d:0e:23:b5:ee:09:be:b8:65:c4:cd:d8:93:fd: c5:6a:71:60:2f:5a:59:a6:9d:5e:54:cc:53:90:71: 65:de:70:a6:c7:4a:51:d0:db:07:9c:d2:34:e4:37: 99:c7:97:0d:a9:fa:db:59:9a:26:db:6a:6a:08:3b: 28:b1:e6:17:73:09:a7:6d:df:fd:32:ac:8f:9e:19: 4c:e5:ef:c3:95:0d:40:48:87:1d:f3:2b:99:f2:9a: fa:f6:f1:cd:78:1d:a7:cb:a4:72:64:4d:15:10:d8: 04:ce:d5:12:a1:47:92:02:40:09:15:8a:f1:4d:02: 96:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:00:0D:2C:DF:BE:9C:DC:31:6D:83:7E:2E:2C:05:F7:F7:A9:B9:0C X509v3 Authority Key Identifier: keyid:D2:A6:AB:CA:1E:F8:97:25:10:9C:BE:A5:D4:2E:68:3C:95:92:53:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/D2A6ABCA1EF89725109CBEA5D42E683C95925312.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2A6ABCA1EF89725109CBEA5D42E683C95925312.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/D2A6ABCA1EF89725109CBEA5D42E683C95925312.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:2f:22:9b:b4:48:f8:5c:a9:03:34:ab:ca:33:4d:f7:f4:a6: e0:d2:c6:8b:34:ae:a2:07:09:80:cd:c9:bb:06:2e:dd:0c:16: f7:92:89:e2:ac:f5:e2:30:80:4d:78:ed:fd:e4:be:71:d9:21: db:8c:85:21:b6:0f:53:f4:46:3d:25:f5:d1:e1:da:e5:43:d4: 7c:ad:a9:c0:8c:02:a6:60:37:ca:5d:24:eb:79:64:0f:71:41: 1f:79:f1:aa:12:8a:29:96:e5:93:97:39:52:0f:4c:35:c3:26: f0:02:5c:ea:20:59:2a:83:bb:27:3b:59:09:ac:58:eb:aa:5e: 9b:85:4a:cd:72:08:bb:8c:05:50:58:03:3c:1f:3b:6f:d9:6a: 2a:66:62:80:b0:8f:11:9a:f1:43:fc:df:8f:f0:50:a6:36:b3: 73:b3:8a:51:f7:4d:40:93:0b:52:1e:be:21:23:d9:3e:b8:cb: 17:68:9f:c8:bb:7c:17:f1:68:41:a4:4f:c3:66:8b:2a:59:39: 4d:15:6d:14:67:c6:61:29:78:00:46:d5:d5:06:e0:02:56:90: 66:ec:ea:e9:f7:fd:a9:0b:3c:59:20:0e:b3:b2:37:85:e6:30: 67:6a:57:db:38:16:dc:d2:64:8a:ba:74:3c:5f:96:2e:72:b1: e8:14:14:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR7YkKDqUcuSDWFmNpjXbDzyVetIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDJBNkFCQ0ExRUY4OTcyNTEwOUNCRUE1RDQyRTY4M0M5 NTkyNTMxMjAeFw0yNjAzMDExNDQ2MTdaFw0yNjAzMDQxNjQzMTdaMDMxMTAvBgNV BAMTKDEyMDAwRDJDREZCRTlDREMzMTZEODM3RTJFMkMwNUY3RjdBOUI5MEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmk6DDpD/8EPLlyaYDS2UPASvL yUIaqUsG8uPqmNvhuuds3qCrtC8jXAxt8io0maYUu7efBk5K6D8WxhorljWVmcCQ xXD/2dkCPMUe5L6hFOrCCuqjjcnmZSV2PhU7SaMjxz5kaLP1vpTVB29ufBpRubFS jdEyG3Phs+aPnffalEXQjQe9SMKNDiO17gm+uGXEzdiT/cVqcWAvWlmmnV5UzFOQ cWXecKbHSlHQ2wec0jTkN5nHlw2p+ttZmibbamoIOyix5hdzCadt3/0yrI+eGUzl 78OVDUBIhx3zK5nymvr28c14HafLpHJkTRUQ2ATO1RKhR5ICQAkVivFNApb/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEgANLN++nNwxbYN+LiwF9/epuQwwHwYDVR0j BBgwFoAU0qaryh74lyUQnL6l1C5oPJWSUxIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YWQxZTE2YS0wYTRkLTQ0YjEtOTg0NS05YzBjZDdhNmYzOGYvMC9EMkE2QUJDQTFF Rjg5NzI1MTA5Q0JFQTVENDJFNjgzQzk1OTI1MzEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDJBNkFCQ0ExRUY4OTcyNTEwOUNCRUE1RDQyRTY4M0M5NTky NTMxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWFkMWUxNmEtMGE0ZC00NGIxLTk4 NDUtOWMwY2Q3YTZmMzhmLzAvRDJBNkFCQ0ExRUY4OTcyNTEwOUNCRUE1RDQyRTY4 M0M5NTkyNTMxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF8vIpu0SPhcqQM0q8ozTff0puDSxos0rqIH CYDNybsGLt0MFveSieKs9eIwgE147f3kvnHZIduMhSG2D1P0Rj0l9dHh2uVD1Hyt qcCMAqZgN8pdJOt5ZA9xQR958aoSiimW5ZOXOVIPTDXDJvACXOogWSqDuyc7WQms WOuqXpuFSs1yCLuMBVBYAzwfO2/ZaipmYoCwjxGa8UP834/wUKY2s3OzilH3TUCT C1IeviEj2T64yxdon8i7fBfxaEGkT8NmiypZOU0VbRRnxmEpeABG1dUG4AJWkGbs 6un3/akLPFkgDrOyN4XmMGdqV9s4FtzSZIq6dDxfli5ysegUFJU= -----END CERTIFICATE-----Generated at Mon Mar 2 12:02:15 2026 by rpki-client