$ rpki-client -vvf repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.mft File: 2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.mft (raw, json) Hash identifier: n29dFSoDtNl6WzsWTfks4gf2c5p8Ha7//lwsi/e90Oo= Subject key identifier: 24:1C:73:AA:47:ED:34:0C:08:AE:98:D2:74:92:A7:46:CD:94:9E:86 Authority key identifier: 28:63:C0:F5:0E:0E:E5:0D:A8:CD:FB:2E:F1:2D:4B:58:11:B1:66:6C Certificate issuer: /CN=2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C Certificate serial: 4BA2CBE36A5D401D3B98B46FF31843517BCB6B88 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.mft Manifest number: 023A Signing time: Sun 01 Mar 2026 07:30:41 +0000 Manifest this update: Sun 01 Mar 2026 07:25:41 +0000 Manifest next update: Wed 04 Mar 2026 07:47:41 +0000 Files and hashes: 1: 3130332e3138332e35372e302f32342d3234203d3e203438343635.roa (hash: ih19KYxvAXsTsnPq7aFCmnb58F9kPF7YQb52MN4zD5E=) 2: 2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.crl (hash: isnsY+x5j5mPPLx3mWJ1SaeVViu6uZ5qdgQXJfVRLAo=) 3: 3130332e3138332e35362e302f32332d3234203d3e20313439343035.roa (hash: /nEcTC5QsPT94UNynHuxNo5heYOYhbTbt0590F0PjQ8=) 4: 3130332e3138332e35362e302f32342d3234203d3e203438343635.roa (hash: 9/+sbuomRYkbpuZkgeXYn2wYKrH6jZB0uQ6CyyEN0fI=) 5: 3130332e3138332e35362e302f32342d3234203d3e20333938373730.roa (hash: 6mPOu8i0ZNMpERixSEWj+YT5W5q+bEUWd8MdCrMm+DU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.crl rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 07:47:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:a2:cb:e3:6a:5d:40:1d:3b:98:b4:6f:f3:18:43:51:7b:cb:6b:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C Validity Not Before: Mar 1 07:25:41 2026 GMT Not After : Mar 4 07:47:41 2026 GMT Subject: CN=241C73AA47ED340C08AE98D27492A746CD949E86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:93:9d:d4:a6:ab:e0:47:c3:a6:4a:af:27:d5: 2c:c2:de:cd:1c:a7:83:4e:5a:37:4f:1c:35:ed:82: 17:d6:79:ed:9f:ea:ef:1d:e6:e2:e2:b6:55:64:6e: ab:57:7b:96:f9:30:10:0f:c9:50:5e:3f:5a:83:88: 3f:f9:97:d2:d2:0d:1b:9b:ab:38:d8:b4:21:4b:a8: b2:0a:ff:f4:35:9f:2e:aa:fc:d0:6a:0b:9f:ce:4c: 89:43:47:f4:43:66:2a:49:8b:29:a1:53:7c:46:ca: cf:43:79:cd:8f:b4:e8:11:5a:aa:90:65:50:e3:49: 84:d9:be:72:bc:64:7e:7f:10:e3:e9:d0:ac:74:c3: 70:0d:7e:98:6f:fa:ff:11:f8:30:8b:56:13:70:03: db:31:da:f6:d1:21:ad:90:40:1f:c5:4c:e1:98:11: e1:72:85:f0:cc:65:a8:5b:0d:12:05:81:58:3b:d6: b4:02:62:8e:e2:07:30:c3:6c:e6:8c:0a:0c:e8:c7: 33:e7:6a:c4:76:eb:93:bf:94:9d:38:0b:69:10:1e: f8:9f:7c:b1:d1:ec:52:68:dd:5f:b0:ed:38:86:db: f2:8e:25:04:86:d8:d2:03:a5:0a:02:b2:35:b6:3a: c9:10:80:83:17:cc:5f:9f:45:c7:13:09:da:1b:a1: 0c:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:1C:73:AA:47:ED:34:0C:08:AE:98:D2:74:92:A7:46:CD:94:9E:86 X509v3 Authority Key Identifier: keyid:28:63:C0:F5:0E:0E:E5:0D:A8:CD:FB:2E:F1:2D:4B:58:11:B1:66:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:69:c6:75:3c:84:6e:b0:ba:14:29:fd:b8:71:b5:29:af:e0: ff:d6:3c:42:17:f0:e2:b0:09:f5:8d:61:8d:54:f0:de:92:46: c1:22:1a:ed:73:15:83:fa:76:9e:05:bf:ee:10:1b:1e:00:40: df:28:68:48:58:ba:07:a2:67:01:0d:55:08:cf:5f:f9:e0:0d: f7:95:79:cf:da:bc:44:50:0a:f2:02:7c:31:76:67:e8:41:ab: dd:15:2e:2a:7e:e1:c5:46:9e:61:aa:1b:71:ee:62:9c:4b:0c: d3:f1:75:4b:c9:1e:71:ef:55:be:71:e0:bf:45:ec:61:71:6d: ab:6b:68:0a:1e:6b:b0:30:db:dc:e4:c6:d8:2d:52:63:46:e5: 59:d4:63:d5:70:01:33:12:3d:c2:e4:4e:c6:2b:ab:7e:55:53: f5:22:ed:98:e6:d9:c6:ce:b3:da:e6:b2:f2:62:bf:29:af:2f: da:53:e4:d9:d9:c5:a4:a4:67:de:f0:6d:b4:af:f7:9d:2d:6b: 67:cc:1e:ca:98:64:ea:9a:8b:3f:d7:53:fe:76:34:2f:0b:bd: 4b:6f:b4:85:78:2e:11:6d:79:6c:95:52:f9:48:66:d3:b8:17: ad:6e:1f:3c:28:0c:15:c4:1b:51:42:d2:8b:ec:7c:68:11:a4: a9:01:b7:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS6LL42pdQB07mLRv8xhDUXvLa4gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg2M0MwRjUwRTBFRTUwREE4Q0RGQjJFRjEyRDRCNTgx MUIxNjY2QzAeFw0yNjAzMDEwNzI1NDFaFw0yNjAzMDQwNzQ3NDFaMDMxMTAvBgNV BAMTKDI0MUM3M0FBNDdFRDM0MEMwOEFFOThEMjc0OTJBNzQ2Q0Q5NDlFODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4k53UpqvgR8OmSq8n1SzC3s0c p4NOWjdPHDXtghfWee2f6u8d5uLitlVkbqtXe5b5MBAPyVBeP1qDiD/5l9LSDRub qzjYtCFLqLIK//Q1ny6q/NBqC5/OTIlDR/RDZipJiymhU3xGys9Dec2PtOgRWqqQ ZVDjSYTZvnK8ZH5/EOPp0Kx0w3ANfphv+v8R+DCLVhNwA9sx2vbRIa2QQB/FTOGY EeFyhfDMZahbDRIFgVg71rQCYo7iBzDDbOaMCgzoxzPnasR265O/lJ04C2kQHvif fLHR7FJo3V+w7TiG2/KOJQSG2NIDpQoCsjW2OskQgIMXzF+fRccTCdoboQz5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJBxzqkftNAwIrpjSdJKnRs2UnoYwHwYDVR0j BBgwFoAUKGPA9Q4O5Q2ozfsu8S1LWBGxZmwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NTRkZGM2NS02MWMxLTQ5ZTEtYTg5NS0zYzAzZjU4N2EyN2IvMC8yODYzQzBGNTBF MEVFNTBEQThDREZCMkVGMTJENEI1ODExQjE2NjZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg2M0MwRjUwRTBFRTUwREE4Q0RGQjJFRjEyRDRCNTgxMUIx NjY2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjU0ZGRjNjUtNjFjMS00OWUxLWE4 OTUtM2MwM2Y1ODdhMjdiLzAvMjg2M0MwRjUwRTBFRTUwREE4Q0RGQjJFRjEyRDRC NTgxMUIxNjY2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKdpxnU8hG6wuhQp/bhxtSmv4P/WPEIX8OKw CfWNYY1U8N6SRsEiGu1zFYP6dp4Fv+4QGx4AQN8oaEhYugeiZwENVQjPX/ngDfeV ec/avERQCvICfDF2Z+hBq90VLip+4cVGnmGqG3HuYpxLDNPxdUvJHnHvVb5x4L9F 7GFxbatraAoea7Aw29zkxtgtUmNG5VnUY9VwATMSPcLkTsYrq35VU/Ui7Zjm2cbO s9rmsvJivymvL9pT5NnZxaSkZ97wbbSv950ta2fMHsqYZOqaiz/XU/52NC8LvUtv tIV4LhFteWyVUvlIZtO4F61uHzwoDBXEG1FC0ovsfGgRpKkBt9c= -----END CERTIFICATE-----Generated at Mon Mar 2 13:26:15 2026 by rpki-client