$ rpki-client -vvf repo-rpki.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/A74966240B64274B90EBE06CE0EE222C3EE9C60E.mft File: A74966240B64274B90EBE06CE0EE222C3EE9C60E.mft (raw, json) Hash identifier: h3lDtMGiOTTwoe+GuNPu+c1UF4J6NxHWGxqlBf8kWa0= Subject key identifier: FB:7B:84:30:AC:FB:8F:C0:4D:8D:5B:AA:37:DD:81:EF:5D:1C:47:F9 Authority key identifier: A7:49:66:24:0B:64:27:4B:90:EB:E0:6C:E0:EE:22:2C:3E:E9:C6:0E Certificate issuer: /CN=A74966240B64274B90EBE06CE0EE222C3EE9C60E Certificate serial: 181A65BAED8C0664E18BB18EFB4D88199F49F962 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A74966240B64274B90EBE06CE0EE222C3EE9C60E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/A74966240B64274B90EBE06CE0EE222C3EE9C60E.mft Manifest number: 024F Signing time: Sun 01 Mar 2026 08:51:33 +0000 Manifest this update: Sun 01 Mar 2026 08:46:33 +0000 Manifest next update: Wed 04 Mar 2026 20:26:33 +0000 Files and hashes: 1: 3130332e3138332e39342e302f32342d3234203d3e20313439343132.roa (hash: /432ui2qmqLAqTG2YzJyGFJbPM4fOVIctbLjFQr3ZFs=) 2: A74966240B64274B90EBE06CE0EE222C3EE9C60E.crl (hash: QMWR0m/0niJnoA05HKm3j/CLnHWgLeR6h2swLv9SDpc=) 3: 3130332e3139312e39342e302f32342d3234203d3e20313439343132.roa (hash: 5BGjTlG6kn0xa+zG7WIOf2FPOI4RcyC7jSjDUVIBLp8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/A74966240B64274B90EBE06CE0EE222C3EE9C60E.crl rsync://repo-rpki.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/A74966240B64274B90EBE06CE0EE222C3EE9C60E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A74966240B64274B90EBE06CE0EE222C3EE9C60E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 20:26:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:1a:65:ba:ed:8c:06:64:e1:8b:b1:8e:fb:4d:88:19:9f:49:f9:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A74966240B64274B90EBE06CE0EE222C3EE9C60E Validity Not Before: Mar 1 08:46:33 2026 GMT Not After : Mar 4 20:26:33 2026 GMT Subject: CN=FB7B8430ACFB8FC04D8D5BAA37DD81EF5D1C47F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:93:fa:9e:ba:5d:bc:a4:06:5d:93:4f:3d:b2: df:a4:6a:10:20:b6:f2:04:07:51:eb:57:ec:67:ec: 94:30:1c:65:db:48:aa:6f:22:f3:a0:e7:99:0f:70: b6:3c:41:29:06:6c:e9:4b:9a:de:05:6f:8d:66:98: e8:2c:85:d8:80:fe:cc:9d:11:b8:e8:9d:9c:b6:d2: f0:5b:a1:69:d1:c3:99:80:1e:6d:5f:f1:98:cc:09: d1:6e:a3:6a:4a:70:d5:fa:57:10:2b:86:88:33:2b: 6c:74:22:0a:98:7c:7f:16:2f:9e:9e:7f:f7:b1:44: c8:c9:00:f9:1f:f0:f1:14:8d:38:ae:85:6f:13:ad: a0:b2:ec:2a:5e:7c:88:ec:ff:73:24:df:69:b4:62: af:9c:4c:d6:a8:a1:84:03:05:b8:54:84:4f:86:ab: 7b:b6:75:59:72:51:53:56:af:97:77:41:0f:dd:9f: 58:04:e9:1c:33:ad:07:7c:6b:e9:10:80:98:87:3a: 33:3a:85:2a:95:40:e6:93:17:31:03:30:81:24:eb: eb:71:ec:31:a9:c7:7f:10:57:f5:05:6f:c2:09:c4: 42:18:76:75:02:f1:b7:44:de:d0:f7:8b:32:bc:86: ef:8a:18:bf:06:29:9e:3d:64:88:3e:9f:cf:5f:97: bb:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:7B:84:30:AC:FB:8F:C0:4D:8D:5B:AA:37:DD:81:EF:5D:1C:47:F9 X509v3 Authority Key Identifier: keyid:A7:49:66:24:0B:64:27:4B:90:EB:E0:6C:E0:EE:22:2C:3E:E9:C6:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/A74966240B64274B90EBE06CE0EE222C3EE9C60E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A74966240B64274B90EBE06CE0EE222C3EE9C60E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/A74966240B64274B90EBE06CE0EE222C3EE9C60E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:e5:f6:fa:4f:7f:fb:67:66:80:db:d7:a4:cc:a0:33:92:5c: 8e:d3:06:dc:87:b6:8d:ac:6d:c5:61:37:64:1f:26:50:28:90: 7f:cd:bc:7d:e9:48:e9:29:dc:25:c9:69:30:73:4c:bf:c9:b5: dc:d3:87:d8:7f:bf:9d:35:b0:06:01:c6:22:6d:e1:e4:ff:06: da:c3:81:28:27:8e:dc:08:5b:a0:ad:99:06:65:c4:53:41:2b: 07:ce:e7:55:b3:97:94:a3:cd:9b:84:f1:92:09:40:e8:df:ca: 20:c4:17:fc:d5:d6:c2:2f:16:8d:5f:e5:28:ce:1b:b4:1e:78: 99:04:a9:1f:59:c4:28:34:9d:dc:fb:13:7b:bb:3f:f4:4f:f8: ab:89:29:7e:5e:73:e7:89:85:8f:3f:87:b0:c6:4a:d2:bb:72: 57:7a:cb:91:ba:fa:27:d9:b4:9c:f4:50:23:b3:ee:e2:4d:2c: 68:d9:e3:8c:8a:5b:31:a3:33:39:0a:04:7d:c0:63:e1:d4:9c: 2b:0a:a6:7d:2c:4f:d7:6b:83:d3:9d:81:ec:36:bb:4a:72:2d: 0f:a1:be:ad:2f:ff:1f:b1:a0:3f:bb:1b:c7:77:34:49:98:5c: 6c:5b:ef:d6:f5:51:cc:6c:ad:44:15:8f:be:74:09:5a:2d:be: 57:2b:70:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGBpluu2MBmThi7GO+02IGZ9J+WIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTc0OTY2MjQwQjY0Mjc0QjkwRUJFMDZDRTBFRTIyMkMz RUU5QzYwRTAeFw0yNjAzMDEwODQ2MzNaFw0yNjAzMDQyMDI2MzNaMDMxMTAvBgNV BAMTKEZCN0I4NDMwQUNGQjhGQzA0RDhENUJBQTM3REQ4MUVGNUQxQzQ3RjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsk/qeul28pAZdk089st+kahAg tvIEB1HrV+xn7JQwHGXbSKpvIvOg55kPcLY8QSkGbOlLmt4Fb41mmOgshdiA/syd EbjonZy20vBboWnRw5mAHm1f8ZjMCdFuo2pKcNX6VxArhogzK2x0IgqYfH8WL56e f/exRMjJAPkf8PEUjTiuhW8TraCy7CpefIjs/3Mk32m0Yq+cTNaooYQDBbhUhE+G q3u2dVlyUVNWr5d3QQ/dn1gE6RwzrQd8a+kQgJiHOjM6hSqVQOaTFzEDMIEk6+tx 7DGpx38QV/UFb8IJxEIYdnUC8bdE3tD3izK8hu+KGL8GKZ49ZIg+n89fl7tTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+3uEMKz7j8BNjVuqN92B710cR/kwHwYDVR0j BBgwFoAUp0lmJAtkJ0uQ6+Bs4O4iLD7pxg4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MGRjMTI4My0xY2UyLTQxYTUtYWZlNi1mMGJlMzFlOWIxMGQvMC9BNzQ5NjYyNDBC NjQyNzRCOTBFQkUwNkNFMEVFMjIyQzNFRTlDNjBFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTc0OTY2MjQwQjY0Mjc0QjkwRUJFMDZDRTBFRTIyMkMzRUU5 QzYwRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjBkYzEyODMtMWNlMi00MWE1LWFm ZTYtZjBiZTMxZTliMTBkLzAvQTc0OTY2MjQwQjY0Mjc0QjkwRUJFMDZDRTBFRTIy MkMzRUU5QzYwRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABDl9vpPf/tnZoDb16TMoDOSXI7TBtyHto2s bcVhN2QfJlAokH/NvH3pSOkp3CXJaTBzTL/JtdzTh9h/v501sAYBxiJt4eT/BtrD gSgnjtwIW6CtmQZlxFNBKwfO51Wzl5SjzZuE8ZIJQOjfyiDEF/zV1sIvFo1f5SjO G7QeeJkEqR9ZxCg0ndz7E3u7P/RP+KuJKX5ec+eJhY8/h7DGStK7cld6y5G6+ifZ tJz0UCOz7uJNLGjZ44yKWzGjMzkKBH3AY+HUnCsKpn0sT9drg9Odgew2u0pyLQ+h vq0v/x+xoD+7G8d3NEmYXGxb79b1UcxsrUQVj750CVotvlcrcNs= -----END CERTIFICATE-----Generated at Mon Mar 2 16:52:46 2026 by rpki-client