$ rpki-client -vvf repo-rpki.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/D4DD8244BC2EB2B187B4181226714505DF8F4452.mft File: D4DD8244BC2EB2B187B4181226714505DF8F4452.mft (raw, json) Hash identifier: ZcwCH6QAE7K2NOO/ahUD0UJ6xB/dArEy12CE5SX0SyY= Subject key identifier: 39:30:5C:86:61:A8:45:62:CD:84:1E:F0:24:9B:FF:89:F8:4A:53:B4 Authority key identifier: D4:DD:82:44:BC:2E:B2:B1:87:B4:18:12:26:71:45:05:DF:8F:44:52 Certificate issuer: /CN=D4DD8244BC2EB2B187B4181226714505DF8F4452 Certificate serial: 7F22B6697306726D39810523C5269B3EFF751D3A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D4DD8244BC2EB2B187B4181226714505DF8F4452.cer Subject info access: rsync://repo-rpki.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/D4DD8244BC2EB2B187B4181226714505DF8F4452.mft Manifest number: 0247 Signing time: Sat 28 Feb 2026 08:11:17 +0000 Manifest this update: Sat 28 Feb 2026 08:06:17 +0000 Manifest next update: Tue 03 Mar 2026 15:43:17 +0000 Files and hashes: 1: 3130332e3137302e3138372e302f32342d3234203d3e20313432333635.roa (hash: WbsQ68Cu40oqUa2yh2wFEKvkhfxO2KVKndxoFM4DO5k=) 2: D4DD8244BC2EB2B187B4181226714505DF8F4452.crl (hash: R7eGvuEBkZX6NIvM3ZDfbPevqaPD7Pvgr3NehXawni4=) 3: 3130332e3137302e3138362e302f32332d3234203d3e20313432333635.roa (hash: H+FNrGTWOm2rEbzW4c22NCPKDmaY/bFliACB6RDfaOU=) 4: 3130332e3137302e3138362e302f32342d3234203d3e20313432333635.roa (hash: OXRZ526Vg7TmkLT93n/Qe4MisAG7vaUJuVBZqKmzdzU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/D4DD8244BC2EB2B187B4181226714505DF8F4452.crl rsync://repo-rpki.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/D4DD8244BC2EB2B187B4181226714505DF8F4452.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D4DD8244BC2EB2B187B4181226714505DF8F4452.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 15:43:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:22:b6:69:73:06:72:6d:39:81:05:23:c5:26:9b:3e:ff:75:1d:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D4DD8244BC2EB2B187B4181226714505DF8F4452 Validity Not Before: Feb 28 08:06:17 2026 GMT Not After : Mar 3 15:43:17 2026 GMT Subject: CN=39305C8661A84562CD841EF0249BFF89F84A53B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c9:62:75:7f:e8:e2:21:88:aa:e3:da:47:84: 0e:26:29:c8:96:a9:4f:1b:a8:fe:4a:aa:fc:f3:0c: 4b:5d:45:06:77:3d:76:5f:15:24:cb:ac:59:66:47: 0b:ef:cd:b8:e7:19:5d:d6:9b:4e:b6:00:85:18:96: 53:b1:b0:10:e9:5d:fa:e4:a4:88:16:ba:6c:00:9c: c1:27:15:e2:0d:3c:4a:fa:4a:fa:9c:7b:71:a1:d8: 4a:6c:b1:b5:9f:a0:92:e0:d9:cd:e6:7f:33:e9:68: d8:aa:f8:27:dc:9e:8f:9c:20:ab:7d:13:28:32:1a: 73:ac:8b:60:af:b7:35:7a:50:95:90:1c:db:7a:43: ce:c7:29:c0:c7:c2:d7:8a:72:60:8e:9b:48:73:92: 67:24:0b:e0:26:03:27:79:fc:6c:e1:21:ac:91:0a: 39:7f:61:a2:55:f4:c4:7b:d1:94:e0:8a:27:c4:af: df:f7:e9:25:f9:59:1c:a7:5e:a0:93:43:22:0b:70: 94:79:80:c5:ea:f4:13:64:f3:7a:f1:bb:4b:ec:d6: 47:37:7f:52:fe:33:93:91:af:53:cd:ab:52:97:60: 8b:28:ad:89:43:00:a3:f6:08:49:60:66:96:17:a9: 0f:38:0a:b1:86:29:cf:69:fd:12:10:c3:74:20:c7: 65:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:30:5C:86:61:A8:45:62:CD:84:1E:F0:24:9B:FF:89:F8:4A:53:B4 X509v3 Authority Key Identifier: keyid:D4:DD:82:44:BC:2E:B2:B1:87:B4:18:12:26:71:45:05:DF:8F:44:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/D4DD8244BC2EB2B187B4181226714505DF8F4452.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D4DD8244BC2EB2B187B4181226714505DF8F4452.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/D4DD8244BC2EB2B187B4181226714505DF8F4452.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:be:5e:5f:52:8d:c0:49:ad:80:cf:34:b7:03:38:77:81:db: 12:63:bf:b6:3e:2e:e8:07:eb:d1:94:d4:78:e9:2c:2b:70:26: de:14:ba:b5:0e:08:b0:8f:28:f9:1f:70:ca:b5:e6:27:04:79: 39:f3:20:4c:f9:ba:c8:1a:ef:45:ee:8c:c7:a0:9e:e6:7f:04: 5c:c1:b5:de:f9:29:7f:d5:57:94:ef:29:b7:a6:3d:d4:64:a7: db:80:5c:45:9c:be:c8:f6:d4:8b:61:a1:a4:ac:7d:77:d7:c1: a2:8c:49:a1:ea:90:2c:66:3c:eb:08:8a:1d:33:5f:26:a1:59: 9a:de:1d:41:1a:f3:99:fd:44:73:89:fb:c2:9a:22:c7:97:9b: 85:45:84:cd:99:79:f6:91:6b:f0:ab:2f:90:89:aa:81:8e:f0: 31:c7:ab:af:51:a4:0a:72:35:bc:82:d4:de:46:e3:65:2b:e1: 71:d0:6f:11:7e:7e:84:d6:53:4a:31:81:6c:41:b5:59:cd:01: f3:ff:3b:2e:83:65:1c:3c:3a:95:39:35:cb:5a:4f:e9:9c:02: 1b:bf:30:a2:7a:86:c0:7a:51:ac:e9:f1:1a:bd:af:3d:5b:a7: 88:e2:68:50:57:81:11:c9:b7:a5:5e:96:70:fb:dc:ce:d5:40: 30:e3:18:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfyK2aXMGcm05gQUjxSabPv91HTowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDRERDgyNDRCQzJFQjJCMTg3QjQxODEyMjY3MTQ1MDVE RjhGNDQ1MjAeFw0yNjAyMjgwODA2MTdaFw0yNjAzMDMxNTQzMTdaMDMxMTAvBgNV BAMTKDM5MzA1Qzg2NjFBODQ1NjJDRDg0MUVGMDI0OUJGRjg5Rjg0QTUzQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7yWJ1f+jiIYiq49pHhA4mKciW qU8bqP5KqvzzDEtdRQZ3PXZfFSTLrFlmRwvvzbjnGV3Wm062AIUYllOxsBDpXfrk pIgWumwAnMEnFeINPEr6Svqce3Gh2EpssbWfoJLg2c3mfzPpaNiq+Cfcno+cIKt9 EygyGnOsi2CvtzV6UJWQHNt6Q87HKcDHwteKcmCOm0hzkmckC+AmAyd5/GzhIayR Cjl/YaJV9MR70ZTgiifEr9/36SX5WRynXqCTQyILcJR5gMXq9BNk83rxu0vs1kc3 f1L+M5ORr1PNq1KXYIsorYlDAKP2CElgZpYXqQ84CrGGKc9p/RIQw3Qgx2VLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOTBchmGoRWLNhB7wJJv/ifhKU7QwHwYDVR0j BBgwFoAU1N2CRLwusrGHtBgSJnFFBd+PRFIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YWYwZjQyMy0zYmVkLTQ5MzgtOWY4OS0xNWU2MjY5YmRkY2EvMC9ENEREODI0NEJD MkVCMkIxODdCNDE4MTIyNjcxNDUwNURGOEY0NDUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDRERDgyNDRCQzJFQjJCMTg3QjQxODEyMjY3MTQ1MDVERjhG NDQ1Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWFmMGY0MjMtM2JlZC00OTM4LTlm ODktMTVlNjI2OWJkZGNhLzAvRDRERDgyNDRCQzJFQjJCMTg3QjQxODEyMjY3MTQ1 MDVERjhGNDQ1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMq+Xl9SjcBJrYDPNLcDOHeB2xJjv7Y+LugH 69GU1HjpLCtwJt4UurUOCLCPKPkfcMq15icEeTnzIEz5usga70XujMegnuZ/BFzB td75KX/VV5TvKbemPdRkp9uAXEWcvsj21IthoaSsfXfXwaKMSaHqkCxmPOsIih0z XyahWZreHUEa85n9RHOJ+8KaIseXm4VFhM2ZefaRa/CrL5CJqoGO8DHHq69RpApy NbyC1N5G42Ur4XHQbxF+foTWU0oxgWxBtVnNAfP/Oy6DZRw8OpU5NctaT+mcAhu/ MKJ6hsB6Uazp8Rq9rz1bp4jiaFBXgRHJt6VelnD73M7VQDDjGK4= -----END CERTIFICATE-----Generated at Mon Mar 2 02:41:14 2026 by rpki-client