$ rpki-client -vvf repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/C43D9C91D389ADDD2039882757F731CAFAAC740F.mft File: C43D9C91D389ADDD2039882757F731CAFAAC740F.mft (raw, json) Hash identifier: kdE4fMnKMdm/yxUbLVrop6o17ZWkKokyAepnUhuBzj8= Subject key identifier: 06:3B:05:B8:E2:6F:10:59:A8:D7:57:17:35:6F:81:DC:66:33:18:AB Authority key identifier: C4:3D:9C:91:D3:89:AD:DD:20:39:88:27:57:F7:31:CA:FA:AC:74:0F Certificate issuer: /CN=C43D9C91D389ADDD2039882757F731CAFAAC740F Certificate serial: 15D638FD31A70211DAE1B69A13DFFC6D6AEF70D7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C43D9C91D389ADDD2039882757F731CAFAAC740F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/C43D9C91D389ADDD2039882757F731CAFAAC740F.mft Manifest number: 026A Signing time: Sun 01 Mar 2026 18:30:56 +0000 Manifest this update: Sun 01 Mar 2026 18:25:56 +0000 Manifest next update: Wed 04 Mar 2026 23:39:56 +0000 Files and hashes: 1: 323030313a6466313a353438303a3a2f34382d3438203d3e20313339333737.roa (hash: L5SSKiEo+E6kMD2pTjeK2EegAPOEaiDjUkwPgfIZ0H0=) 2: C43D9C91D389ADDD2039882757F731CAFAAC740F.crl (hash: rIVZnrFOqAjQzKblc7OI48SpIG/iDbEzg3R6pvxvNuE=) 3: 3130332e3134322e3139342e302f32342d3234203d3e20313338383636.roa (hash: O208rGlxXsDRg5ZQgFSHuXQXt753cTvrXuKq5DJTaZU=) 4: 3130332e3134322e3139352e302f32342d3234203d3e20313339333737.roa (hash: xXmPg+qv24jKz/eXwVHYUpUxLnyd59IGPLP0enb+4aQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/C43D9C91D389ADDD2039882757F731CAFAAC740F.crl rsync://repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/C43D9C91D389ADDD2039882757F731CAFAAC740F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C43D9C91D389ADDD2039882757F731CAFAAC740F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 23:39:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:d6:38:fd:31:a7:02:11:da:e1:b6:9a:13:df:fc:6d:6a:ef:70:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C43D9C91D389ADDD2039882757F731CAFAAC740F Validity Not Before: Mar 1 18:25:56 2026 GMT Not After : Mar 4 23:39:56 2026 GMT Subject: CN=063B05B8E26F1059A8D75717356F81DC663318AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:68:69:39:2a:ff:99:a1:10:0d:9f:43:84:1b: c1:0d:8b:35:84:14:de:1d:c6:3a:6a:cd:f5:ad:c5: c3:99:50:f5:18:f4:3e:12:d6:96:78:71:65:61:37: 5d:2f:ba:2c:fc:49:a4:68:cf:99:b0:89:6a:a9:e5: 23:2f:bf:19:25:f9:09:fe:39:2a:3f:46:02:8a:9d: 76:f7:e9:ba:6c:fd:2b:ab:e7:ba:a3:95:8f:4e:ce: 7d:29:77:65:d4:0b:db:48:8d:79:2d:48:79:b7:9c: 07:2e:11:33:36:0d:d7:6d:85:be:c2:46:11:a2:ab: d8:93:41:83:2b:ff:88:7f:9b:78:11:09:b7:84:bf: bc:0e:b0:b0:cb:7e:23:7c:1e:5c:95:f8:b9:3c:75: 42:ea:b2:de:f8:c6:8f:9c:b2:b9:7d:aa:98:af:87: e1:56:de:15:77:45:e0:0b:c3:89:3d:5a:56:5a:0a: 04:76:b6:bd:30:fc:1f:53:0d:d4:28:5c:b3:92:d3: e4:dd:2e:a4:84:c1:93:92:e1:55:a1:10:a1:ad:8d: 3c:b9:74:78:e7:65:7e:6f:1b:f2:89:ec:e6:27:cc: bf:a8:af:95:8f:d7:88:2c:ef:7c:5d:f6:d4:fd:a7: c3:8e:ee:19:d6:89:07:1a:4d:a8:4e:ad:ff:e7:4a: c9:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:3B:05:B8:E2:6F:10:59:A8:D7:57:17:35:6F:81:DC:66:33:18:AB X509v3 Authority Key Identifier: keyid:C4:3D:9C:91:D3:89:AD:DD:20:39:88:27:57:F7:31:CA:FA:AC:74:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/C43D9C91D389ADDD2039882757F731CAFAAC740F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C43D9C91D389ADDD2039882757F731CAFAAC740F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/C43D9C91D389ADDD2039882757F731CAFAAC740F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:15:28:5e:74:cd:a4:97:76:07:8e:f7:f3:8c:4a:18:e4:4d: 7a:13:64:f5:b9:02:1c:7c:51:1e:30:97:26:4f:01:10:e8:fc: fb:0e:bb:32:e5:36:7a:d2:ae:ad:1d:23:39:a7:44:e3:44:d6: 5e:0a:37:29:c1:26:18:13:b0:86:f2:8b:e7:6b:44:ae:55:19: 3c:ac:26:c4:51:95:7e:58:74:9d:73:e8:e7:76:0d:8d:54:0a: 02:00:a6:c3:78:bc:7a:b6:36:21:3b:21:6c:c0:5e:be:7f:0a: 93:bf:8a:b1:c7:5b:ee:96:74:7c:53:f4:6c:53:9e:59:8c:ac: c1:a7:8f:e2:ba:c9:ea:a3:c1:2d:c6:3a:1e:a9:a7:08:79:67: d4:27:6b:b5:73:f7:83:f1:a4:9e:18:e6:f2:3a:a1:13:0d:44: 4d:18:59:37:92:df:28:76:ba:2e:1f:f1:1e:76:09:9b:2f:a3: a8:2d:99:34:fa:d7:f2:dc:dd:c8:7e:fd:eb:95:cf:24:21:dc: 8a:59:d0:4b:2e:d2:85:9e:64:95:f4:c7:c9:8e:fd:99:14:03: d4:eb:c3:32:f7:c1:97:7c:c3:46:19:74:c8:7a:37:d3:ca:34: e5:fd:c4:ea:3b:6f:ce:1c:fe:bd:25:83:cf:25:21:1a:ae:5b: f8:a5:60:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFdY4/TGnAhHa4baaE9/8bWrvcNcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQzRDlDOTFEMzg5QURERDIwMzk4ODI3NTdGNzMxQ0FG QUFDNzQwRjAeFw0yNjAzMDExODI1NTZaFw0yNjAzMDQyMzM5NTZaMDMxMTAvBgNV BAMTKDA2M0IwNUI4RTI2RjEwNTlBOEQ3NTcxNzM1NkY4MURDNjYzMzE4QUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWaGk5Kv+ZoRANn0OEG8ENizWE FN4dxjpqzfWtxcOZUPUY9D4S1pZ4cWVhN10vuiz8SaRoz5mwiWqp5SMvvxkl+Qn+ OSo/RgKKnXb36bps/Sur57qjlY9Ozn0pd2XUC9tIjXktSHm3nAcuETM2Dddthb7C RhGiq9iTQYMr/4h/m3gRCbeEv7wOsLDLfiN8HlyV+Lk8dULqst74xo+csrl9qpiv h+FW3hV3ReALw4k9WlZaCgR2tr0w/B9TDdQoXLOS0+TdLqSEwZOS4VWhEKGtjTy5 dHjnZX5vG/KJ7OYnzL+or5WP14gs73xd9tT9p8OO7hnWiQcaTahOrf/nSsmDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBjsFuOJvEFmo11cXNW+B3GYzGKswHwYDVR0j BBgwFoAUxD2ckdOJrd0gOYgnV/cxyvqsdA8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MmFhMmQxMC0zZmFhLTQyNzItYmUxZi04MTAyOTU3YjY1ZTYvMC9DNDNEOUM5MUQz ODlBREREMjAzOTg4Mjc1N0Y3MzFDQUZBQUM3NDBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzQzRDlDOTFEMzg5QURERDIwMzk4ODI3NTdGNzMxQ0FGQUFD NzQwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjJhYTJkMTAtM2ZhYS00MjcyLWJl MWYtODEwMjk1N2I2NWU2LzAvQzQzRDlDOTFEMzg5QURERDIwMzk4ODI3NTdGNzMx Q0FGQUFDNzQwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAQVKF50zaSXdgeO9/OMShjkTXoTZPW5Ahx8 UR4wlyZPARDo/PsOuzLlNnrSrq0dIzmnRONE1l4KNynBJhgTsIbyi+drRK5VGTys JsRRlX5YdJ1z6Od2DY1UCgIApsN4vHq2NiE7IWzAXr5/CpO/irHHW+6WdHxT9GxT nlmMrMGnj+K6yeqjwS3GOh6ppwh5Z9Qna7Vz94PxpJ4Y5vI6oRMNRE0YWTeS3yh2 ui4f8R52CZsvo6gtmTT61/Lc3ch+/euVzyQh3IpZ0Esu0oWeZJX0x8mO/ZkUA9Tr wzL3wZd8w0YZdMh6N9PKNOX9xOo7b84c/r0lg88lIRquW/ilYBc= -----END CERTIFICATE-----Generated at Mon Mar 2 04:21:52 2026 by rpki-client