$ rpki-client -vvf repo-rpki.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.mft File: 19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.mft (raw, json) Hash identifier: lOpdEQT9GmHVW07P0xnrvEemv8G9j70UvkGGs++98fU= Subject key identifier: B4:FD:7F:3C:69:26:1E:9D:5F:66:CC:67:D0:78:BA:69:48:BE:AE:56 Authority key identifier: 19:ED:79:7A:DB:B8:D0:A3:18:4D:2B:02:D7:D1:C2:36:2A:6F:F8:7E Certificate issuer: /CN=19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E Certificate serial: 11F39320CF7E69E3DB128381E4F7A139889F8AAA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.mft Manifest number: 0250 Signing time: Sun 01 Mar 2026 17:01:55 +0000 Manifest this update: Sun 01 Mar 2026 16:56:55 +0000 Manifest next update: Wed 04 Mar 2026 22:12:55 +0000 Files and hashes: 1: 19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.crl (hash: +q+eQuKY3tYGM2qpTtcAijcjWcuUBfcusfpxvYXX7Wk=) 2: 3130332e3138302e3139372e302f32342d3234203d3e20313439333639.roa (hash: 0sBtxCmbxKq6J3NSJMDZXL4qE7kDKeTCzfpwrIBogLg=) 3: 323030313a6466303a363063303a3a2f34382d3438203d3e20313439333639.roa (hash: efHKgumm4W/iDiNoEk+pEOF7/XIOUKbYG+7UFPzA9VU=) 4: 3130332e3138302e3139362e302f32342d3234203d3e20313439333639.roa (hash: 6ROZVbNEcqpl1HbbpFIZhVYZrNJ1M6DcybOk7PyTnVE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.crl rsync://repo-rpki.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 22:12:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:f3:93:20:cf:7e:69:e3:db:12:83:81:e4:f7:a1:39:88:9f:8a:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E Validity Not Before: Mar 1 16:56:55 2026 GMT Not After : Mar 4 22:12:55 2026 GMT Subject: CN=B4FD7F3C69261E9D5F66CC67D078BA6948BEAE56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:9d:f9:7b:aa:1c:1a:f4:00:81:ba:52:37:7a: 71:0d:1d:7d:96:b3:95:57:7b:69:35:cd:85:ce:34: 9c:3e:77:78:8e:55:20:fa:2d:36:ca:e4:5b:12:7b: 01:b0:5e:2a:5b:b3:29:b9:e8:25:fb:43:3b:f1:1a: ca:f0:6e:ca:ec:53:b9:27:1b:56:be:c3:e9:f7:ce: b4:ac:56:3e:69:ad:de:66:2c:ca:b6:57:aa:0f:5a: 5a:69:35:8f:19:d7:45:b8:6b:ca:82:f5:16:81:67: 2a:ef:d5:e7:94:c6:37:c1:f6:d7:f8:ab:4f:ce:d2: 97:9a:16:e3:3d:0b:3c:da:d2:7d:3e:d5:91:56:a5: 78:82:7a:65:5c:d9:07:b0:b8:d3:b4:cb:c1:d3:11: b7:1c:8d:af:ca:e4:30:bb:28:9e:94:2d:12:a6:85: 79:19:29:50:ed:de:b4:1c:05:ea:d9:9f:c2:c2:47: e2:4a:a6:3e:4e:fe:8c:b7:94:8d:e3:cf:61:0b:7b: 68:11:c2:c6:3a:64:6b:a2:97:e0:e4:d7:08:ab:78: 82:df:72:ae:e9:a8:80:b6:5d:62:0b:12:86:d8:f0: 1a:8c:cc:84:bf:c1:f1:cd:10:8e:fc:be:aa:d9:f6: c8:ae:fb:49:ec:23:5f:30:56:ac:5e:e1:4b:9b:81: 20:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:FD:7F:3C:69:26:1E:9D:5F:66:CC:67:D0:78:BA:69:48:BE:AE:56 X509v3 Authority Key Identifier: keyid:19:ED:79:7A:DB:B8:D0:A3:18:4D:2B:02:D7:D1:C2:36:2A:6F:F8:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:d8:90:28:ba:08:0d:8e:2b:4f:31:04:33:0e:47:12:77:1d: d0:ac:4e:21:c3:5e:9f:90:7a:c9:07:f1:32:8a:1e:4f:83:d1: 52:83:da:02:af:6b:1a:ac:d7:8e:3c:e3:13:73:f4:45:32:59: d1:8b:22:78:fb:46:20:ce:9e:8f:73:90:42:0d:ee:8f:c5:c6: 9f:64:bb:27:58:2c:a4:e9:8f:e3:3a:70:9b:19:47:c7:3b:1c: c5:4c:9a:7c:a2:81:40:13:c7:78:b0:48:2a:ba:12:a3:51:63: 96:f7:49:8a:cb:71:fd:ef:08:98:57:32:c0:43:7a:72:34:7c: 9e:15:2d:05:26:33:cd:bd:ce:b3:32:c4:8c:9e:fd:f9:b2:ef: d2:6d:16:bb:0b:fd:2b:71:d0:0e:c1:d2:ee:61:84:2e:90:39: fe:b9:4a:3d:53:62:a0:57:50:7e:63:e6:cb:7d:50:20:44:ff: 38:1d:67:6b:87:c3:67:88:11:57:ea:50:6b:75:31:ea:e5:24: 6f:f2:4e:f9:8a:0f:b5:50:47:3d:99:1b:06:0a:c2:3c:37:03: 67:e7:aa:87:05:6c:2d:5b:44:52:75:5a:9a:31:a4:4f:0b:6d: e3:e4:a5:1b:52:9c:63:49:cf:49:51:36:1c:9a:b3:8c:9b:e2: d8:bb:c5:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEfOTIM9+aePbEoOB5PehOYifiqowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTlFRDc5N0FEQkI4RDBBMzE4NEQyQjAyRDdEMUMyMzYy QTZGRjg3RTAeFw0yNjAzMDExNjU2NTVaFw0yNjAzMDQyMjEyNTVaMDMxMTAvBgNV BAMTKEI0RkQ3RjNDNjkyNjFFOUQ1RjY2Q0M2N0QwNzhCQTY5NDhCRUFFNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOnfl7qhwa9ACBulI3enENHX2W s5VXe2k1zYXONJw+d3iOVSD6LTbK5FsSewGwXipbsym56CX7QzvxGsrwbsrsU7kn G1a+w+n3zrSsVj5prd5mLMq2V6oPWlppNY8Z10W4a8qC9RaBZyrv1eeUxjfB9tf4 q0/O0peaFuM9Czza0n0+1ZFWpXiCemVc2QewuNO0y8HTEbccja/K5DC7KJ6ULRKm hXkZKVDt3rQcBerZn8LCR+JKpj5O/oy3lI3jz2ELe2gRwsY6ZGuil+Dk1wireILf cq7pqIC2XWILEobY8BqMzIS/wfHNEI78vqrZ9siu+0nsI18wVqxe4UubgSDjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtP1/PGkmHp1fZsxn0Hi6aUi+rlYwHwYDVR0j BBgwFoAUGe15etu40KMYTSsC19HCNipv+H4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NTFkNmM5Yy1lYWQ3LTQ1ZmUtYTE5YS00MjIzNWZjNTM3ODAvMC8xOUVENzk3QURC QjhEMEEzMTg0RDJCMDJEN0QxQzIzNjJBNkZGODdFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTlFRDc5N0FEQkI4RDBBMzE4NEQyQjAyRDdEMUMyMzYyQTZG Rjg3RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjUxZDZjOWMtZWFkNy00NWZlLWEx OWEtNDIyMzVmYzUzNzgwLzAvMTlFRDc5N0FEQkI4RDBBMzE4NEQyQjAyRDdEMUMy MzYyQTZGRjg3RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACHYkCi6CA2OK08xBDMORxJ3HdCsTiHDXp+Q eskH8TKKHk+D0VKD2gKvaxqs14484xNz9EUyWdGLInj7RiDOno9zkEIN7o/Fxp9k uydYLKTpj+M6cJsZR8c7HMVMmnyigUATx3iwSCq6EqNRY5b3SYrLcf3vCJhXMsBD enI0fJ4VLQUmM829zrMyxIye/fmy79JtFrsL/Stx0A7B0u5hhC6QOf65Sj1TYqBX UH5j5st9UCBE/zgdZ2uHw2eIEVfqUGt1MerlJG/yTvmKD7VQRz2ZGwYKwjw3A2fn qocFbC1bRFJ1WpoxpE8LbePkpRtSnGNJz0lRNhyas4yb4ti7xZ4= -----END CERTIFICATE-----Generated at Mon Mar 2 09:22:18 2026 by rpki-client