$ rpki-client -vvf repo-rpki.idnic.net/repo/f1087159-30dd-41ba-9979-03588112a780/0/84DE1C79BB946275D6796DBDBC79083CB24881A6.mft File: 84DE1C79BB946275D6796DBDBC79083CB24881A6.mft (raw, json) Hash identifier: wB2K5Hsr+ejn1O3DbBiRLrL360mRbEwK1+r/ZTrPKDI= Subject key identifier: 54:66:8A:4E:FA:3D:8E:9D:B7:01:A9:1A:76:3F:DE:EB:5F:39:12:54 Authority key identifier: 84:DE:1C:79:BB:94:62:75:D6:79:6D:BD:BC:79:08:3C:B2:48:81:A6 Certificate issuer: /CN=84DE1C79BB946275D6796DBDBC79083CB24881A6 Certificate serial: 71768510E81B5D5D2C9B9C2955E2130B7E064580 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/84DE1C79BB946275D6796DBDBC79083CB24881A6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f1087159-30dd-41ba-9979-03588112a780/0/84DE1C79BB946275D6796DBDBC79083CB24881A6.mft Manifest number: 71 Signing time: Sat 28 Feb 2026 16:42:23 +0000 Manifest this update: Sat 28 Feb 2026 16:37:23 +0000 Manifest next update: Wed 04 Mar 2026 02:22:23 +0000 Files and hashes: 1: 84DE1C79BB946275D6796DBDBC79083CB24881A6.crl (hash: uM/1MiuHqkXjqo46EpJ8qJBWH8zMQ7YWbaEVPGAI6vE=) 2: 34332e3234312e3234362e302f32332d3234203d3e20313532303837.roa (hash: nPcZF2JbaXVg4aqEl6fdLSlNMJ+HNs6j21SzssKEs40=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f1087159-30dd-41ba-9979-03588112a780/0/84DE1C79BB946275D6796DBDBC79083CB24881A6.crl rsync://repo-rpki.idnic.net/repo/f1087159-30dd-41ba-9979-03588112a780/0/84DE1C79BB946275D6796DBDBC79083CB24881A6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/84DE1C79BB946275D6796DBDBC79083CB24881A6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 02:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:76:85:10:e8:1b:5d:5d:2c:9b:9c:29:55:e2:13:0b:7e:06:45:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84DE1C79BB946275D6796DBDBC79083CB24881A6 Validity Not Before: Feb 28 16:37:23 2026 GMT Not After : Mar 4 02:22:23 2026 GMT Subject: CN=54668A4EFA3D8E9DB701A91A763FDEEB5F391254 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:93:89:22:71:29:f1:4d:03:a6:99:c0:35:8c: f6:1b:ae:30:ed:af:88:eb:b0:ae:1d:e2:17:6b:b9: 50:39:8c:a8:b6:4d:d7:6a:f6:33:fc:00:15:a6:37: 26:cd:13:dd:01:b7:92:5e:b4:57:99:57:88:ee:af: df:0e:5e:41:0c:87:be:b6:51:2d:24:10:4c:3a:d6: b7:6d:e9:35:e5:14:e4:4d:65:6a:bd:3f:86:cb:b3: a2:ee:2a:92:9b:41:31:49:95:52:e2:d9:42:d8:a9: e1:78:73:58:98:77:06:e9:ee:68:2d:18:62:0f:2e: 1b:ef:51:05:88:f3:28:9e:70:2c:89:9c:40:85:26: c2:87:c7:cf:7d:f2:c7:c7:d3:00:9b:86:a3:31:e0: 3a:dc:94:8f:9a:26:5b:0a:40:0e:07:d5:36:8f:32: bd:f5:fb:3d:73:25:c5:35:c4:ae:ea:7e:75:98:ed: 5c:21:e8:4a:c7:43:c4:0f:50:b9:d1:76:62:5f:0e: 61:7b:a4:93:b6:7e:3c:b3:c5:c1:f9:52:3a:a7:f3: ae:08:b7:47:ab:0c:6d:fa:5c:1f:57:f3:89:fb:f1: 7b:3f:aa:9c:17:4c:85:78:dd:ee:7a:63:5b:cb:b7: 07:f4:67:55:7c:71:7f:49:b8:7a:df:c4:44:56:bd: c2:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:66:8A:4E:FA:3D:8E:9D:B7:01:A9:1A:76:3F:DE:EB:5F:39:12:54 X509v3 Authority Key Identifier: keyid:84:DE:1C:79:BB:94:62:75:D6:79:6D:BD:BC:79:08:3C:B2:48:81:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f1087159-30dd-41ba-9979-03588112a780/0/84DE1C79BB946275D6796DBDBC79083CB24881A6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/84DE1C79BB946275D6796DBDBC79083CB24881A6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f1087159-30dd-41ba-9979-03588112a780/0/84DE1C79BB946275D6796DBDBC79083CB24881A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:4e:97:a6:83:32:31:c7:6e:b9:27:6d:01:47:92:04:83:74: 84:fb:2a:3c:af:10:a7:be:fb:1d:5e:e0:dc:bb:8b:46:4f:7e: 2c:43:a2:cc:fe:e3:b7:63:cb:f5:80:ff:cc:60:aa:ee:74:62: ef:05:b3:4c:22:4f:54:88:1d:69:30:50:cc:8a:f5:13:23:b3: 08:a4:2c:67:a0:33:d6:82:9e:b7:84:e5:7a:d9:d7:80:1e:e6: 05:33:da:e4:1d:10:84:d4:85:77:1b:eb:d2:8a:d5:53:db:f2: 75:3f:8e:8f:92:64:c4:72:b1:90:41:78:26:06:2e:29:84:c0: 08:44:63:c5:5a:8d:af:44:3e:23:d8:9a:84:8c:c3:d5:cf:24: 70:5d:6f:67:34:2a:43:5f:fc:34:27:6a:34:03:ea:41:e3:46: c1:ad:aa:6a:ac:eb:7f:cc:6e:77:6a:be:54:71:ac:86:ed:c1: 53:05:3d:cd:07:b6:c2:83:62:6d:4b:39:6a:ea:3f:c8:b8:8f: f7:76:ba:77:75:9b:94:f4:27:13:e4:5b:fc:45:0a:3b:50:8f: f4:7d:90:90:d1:e0:bd:25:25:7c:15:19:47:06:e7:71:11:55: 2e:67:14:86:67:8f:ff:e9:c0:2d:45:dd:ef:66:37:fc:78:7f: 98:e6:f5:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcXaFEOgbXV0sm5wpVeITC34GRYAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODRERTFDNzlCQjk0NjI3NUQ2Nzk2REJEQkM3OTA4M0NC MjQ4ODFBNjAeFw0yNjAyMjgxNjM3MjNaFw0yNjAzMDQwMjIyMjNaMDMxMTAvBgNV BAMTKDU0NjY4QTRFRkEzRDhFOURCNzAxQTkxQTc2M0ZERUVCNUYzOTEyNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgk4kicSnxTQOmmcA1jPYbrjDt r4jrsK4d4hdruVA5jKi2Tddq9jP8ABWmNybNE90Bt5JetFeZV4jur98OXkEMh762 US0kEEw61rdt6TXlFORNZWq9P4bLs6LuKpKbQTFJlVLi2ULYqeF4c1iYdwbp7mgt GGIPLhvvUQWI8yiecCyJnECFJsKHx8998sfH0wCbhqMx4DrclI+aJlsKQA4H1TaP Mr31+z1zJcU1xK7qfnWY7Vwh6ErHQ8QPULnRdmJfDmF7pJO2fjyzxcH5Ujqn864I t0erDG36XB9X84n78Xs/qpwXTIV43e56Y1vLtwf0Z1V8cX9JuHrfxERWvcIZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVGaKTvo9jp23Aakadj/e6185ElQwHwYDVR0j BBgwFoAUhN4cebuUYnXWeW29vHkIPLJIgaYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MTA4NzE1OS0zMGRkLTQxYmEtOTk3OS0wMzU4ODExMmE3ODAvMC84NERFMUM3OUJC OTQ2Mjc1RDY3OTZEQkRCQzc5MDgzQ0IyNDg4MUE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODRERTFDNzlCQjk0NjI3NUQ2Nzk2REJEQkM3OTA4M0NCMjQ4 ODFBNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjEwODcxNTktMzBkZC00MWJhLTk5 NzktMDM1ODgxMTJhNzgwLzAvODRERTFDNzlCQjk0NjI3NUQ2Nzk2REJEQkM3OTA4 M0NCMjQ4ODFBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKlOl6aDMjHHbrknbQFHkgSDdIT7KjyvEKe+ +x1e4Ny7i0ZPfixDosz+47djy/WA/8xgqu50Yu8Fs0wiT1SIHWkwUMyK9RMjswik LGegM9aCnreE5XrZ14Ae5gUz2uQdEITUhXcb69KK1VPb8nU/jo+SZMRysZBBeCYG LimEwAhEY8Vaja9EPiPYmoSMw9XPJHBdb2c0KkNf/DQnajQD6kHjRsGtqmqs63/M bndqvlRxrIbtwVMFPc0HtsKDYm1LOWrqP8i4j/d2und1m5T0JxPkW/xFCjtQj/R9 kJDR4L0lJXwVGUcG53ERVS5nFIZnj//pwC1F3e9mN/x4f5jm9a8= -----END CERTIFICATE-----Generated at Mon Mar 2 20:20:47 2026 by rpki-client