$ rpki-client -vvf repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.mft File: 199D3D684ECEEFFBB17DD598A2688835A6F48CE7.mft (raw, json) Hash identifier: 7XT+zaBhU+dJb8jAeJi+AYhVX3wQjWwO73c7mEh2eBU= Subject key identifier: 74:54:A3:9F:65:A8:68:FA:77:1B:2A:5A:3B:44:6D:87:E3:89:17:AF Authority key identifier: 19:9D:3D:68:4E:CE:EF:FB:B1:7D:D5:98:A2:68:88:35:A6:F4:8C:E7 Certificate issuer: /CN=199D3D684ECEEFFBB17DD598A2688835A6F48CE7 Certificate serial: 748C5F7D4BF4757C329C1EE60EE90B9707497395 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.mft Manifest number: 0256 Signing time: Fri 27 Feb 2026 17:00:44 +0000 Manifest this update: Fri 27 Feb 2026 16:55:44 +0000 Manifest next update: Mon 02 Mar 2026 23:59:44 +0000 Files and hashes: 1: 3130332e3139302e35312e302f32342d3234203d3e2039333431.roa (hash: Alr3MmF3FComiYShgHs/7REcddrGc/AGrj1Fejo7KUI=) 2: 3130332e3139302e35302e302f32342d3234203d3e2039333431.roa (hash: pIxViXZoycBV8A7CIi1fmiiQDu+3Ugcswhk6WPEdvN8=) 3: 3130332e3139302e35302e302f32332d3233203d3e2039333431.roa (hash: b9POD8lIGTkSBPPG5UCEDWwytPa4KOI/X1gSRB0o140=) 4: 199D3D684ECEEFFBB17DD598A2688835A6F48CE7.crl (hash: FsGmb/MeQ6cACaNN9ddOHQo1v5/PmcseFpmjJq7PZyg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.crl rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Mar 2026 23:59:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:8c:5f:7d:4b:f4:75:7c:32:9c:1e:e6:0e:e9:0b:97:07:49:73:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=199D3D684ECEEFFBB17DD598A2688835A6F48CE7 Validity Not Before: Feb 27 16:55:44 2026 GMT Not After : Mar 2 23:59:44 2026 GMT Subject: CN=7454A39F65A868FA771B2A5A3B446D87E38917AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:8c:29:14:0b:42:79:a7:e7:fe:0d:a5:73:94: 83:c8:6d:fa:3f:01:11:44:ee:71:4a:c2:ce:97:0c: 4b:da:23:ab:a3:06:60:13:53:3d:66:12:06:2e:2b: ea:f9:a4:e3:0e:57:da:47:a3:39:a5:fc:e3:2f:0f: 2a:81:74:d1:95:8b:f0:77:70:77:66:00:0e:97:da: fc:ce:4f:c2:50:33:e2:0f:63:fa:f0:c9:fb:33:97: 27:f4:aa:4c:f9:96:15:0c:36:2f:44:0c:3b:26:6f: d0:a0:b0:e3:e1:43:9b:11:e3:4b:6b:ec:5f:4e:eb: 40:56:f2:7d:29:1d:03:9f:74:77:51:94:01:ca:93: a1:db:63:9b:5a:11:36:1d:65:6a:60:fd:e3:8d:5b: 8b:7e:5e:f5:63:ee:72:2e:2e:9b:30:21:55:19:65: 4c:06:5e:f8:5c:9b:b6:2c:66:49:1d:7e:3c:ee:48: 71:2e:5c:64:bf:61:a5:30:cd:b0:5a:0a:a6:86:b1: 01:44:4a:43:17:e5:0c:ba:70:b1:37:08:6a:7d:b3: 8b:ab:0d:1d:9a:b4:07:d9:dd:95:68:11:4e:a0:fd: 3c:15:06:14:1c:7f:ab:c6:03:21:28:d6:94:38:39: a7:93:3a:1f:0f:e1:35:83:f0:de:1a:8e:31:7d:aa: 9e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:54:A3:9F:65:A8:68:FA:77:1B:2A:5A:3B:44:6D:87:E3:89:17:AF X509v3 Authority Key Identifier: keyid:19:9D:3D:68:4E:CE:EF:FB:B1:7D:D5:98:A2:68:88:35:A6:F4:8C:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:8e:fe:6a:db:52:fe:8d:86:f3:52:01:50:a4:00:b6:87:51: 86:b0:65:8d:ba:a4:00:42:ba:4a:f3:62:0e:b5:33:22:ff:b1: a2:0a:0e:54:f6:81:a4:38:a2:98:43:94:9f:38:41:67:3c:cd: 51:c5:ca:9d:a7:a5:88:bf:5e:d9:6a:7f:fe:8c:e8:25:ce:a5: 73:90:9a:54:49:5d:1d:ce:d6:57:e2:b2:bf:86:ed:d0:a9:a0: 6f:8d:b8:cd:4a:39:51:9d:62:7a:65:6f:a9:8b:a0:6a:cd:65: c8:83:76:c3:93:7d:4f:17:85:ac:1c:74:1f:ad:fe:18:99:b9: ec:1a:93:04:34:c4:3d:08:3b:df:3c:d4:90:d4:24:0b:63:13: 30:f4:0e:8b:0d:00:a4:9b:7c:f8:32:38:a0:14:64:42:83:4f: cb:b6:76:e9:6f:5d:3d:a5:e7:b9:24:9b:09:3a:2f:e8:97:2a: d4:4d:03:07:bf:6b:13:87:49:8b:26:6a:81:f0:44:c6:01:52: ee:2e:13:0c:e3:19:cd:72:91:ea:19:c1:1b:17:ad:af:b6:df: f5:4f:c7:af:57:63:c0:eb:9a:a8:1a:50:ff:1e:43:3f:b1:9c: bd:ef:17:11:84:97:8d:07:e6:f2:3f:11:51:0f:33:f4:a8:8e: 35:d6:79:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdIxffUv0dXwynB7mDukLlwdJc5UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk5RDNENjg0RUNFRUZGQkIxN0RENTk4QTI2ODg4MzVB NkY0OENFNzAeFw0yNjAyMjcxNjU1NDRaFw0yNjAzMDIyMzU5NDRaMDMxMTAvBgNV BAMTKDc0NTRBMzlGNjVBODY4RkE3NzFCMkE1QTNCNDQ2RDg3RTM4OTE3QUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAjCkUC0J5p+f+DaVzlIPIbfo/ ARFE7nFKws6XDEvaI6ujBmATUz1mEgYuK+r5pOMOV9pHozml/OMvDyqBdNGVi/B3 cHdmAA6X2vzOT8JQM+IPY/rwyfszlyf0qkz5lhUMNi9EDDsmb9CgsOPhQ5sR40tr 7F9O60BW8n0pHQOfdHdRlAHKk6HbY5taETYdZWpg/eONW4t+XvVj7nIuLpswIVUZ ZUwGXvhcm7YsZkkdfjzuSHEuXGS/YaUwzbBaCqaGsQFESkMX5Qy6cLE3CGp9s4ur DR2atAfZ3ZVoEU6g/TwVBhQcf6vGAyEo1pQ4OaeTOh8P4TWD8N4ajjF9qp4HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdFSjn2WoaPp3GypaO0Rth+OJF68wHwYDVR0j BBgwFoAUGZ09aE7O7/uxfdWYomiINab0jOcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NTgzODNlMi0yMDZjLTRiNzQtYmE0YS1jZDhhNGQ3Y2Q4NjEvMC8xOTlEM0Q2ODRF Q0VFRkZCQjE3REQ1OThBMjY4ODgzNUE2RjQ4Q0U3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTk5RDNENjg0RUNFRUZGQkIxN0RENTk4QTI2ODg4MzVBNkY0 OENFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjU4MzgzZTItMjA2Yy00Yjc0LWJh NGEtY2Q4YTRkN2NkODYxLzAvMTk5RDNENjg0RUNFRUZGQkIxN0RENTk4QTI2ODg4 MzVBNkY0OENFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAyO/mrbUv6NhvNSAVCkALaHUYawZY26pABC ukrzYg61MyL/saIKDlT2gaQ4ophDlJ84QWc8zVHFyp2npYi/Xtlqf/6M6CXOpXOQ mlRJXR3O1lfisr+G7dCpoG+NuM1KOVGdYnplb6mLoGrNZciDdsOTfU8XhawcdB+t /hiZuewakwQ0xD0IO9881JDUJAtjEzD0DosNAKSbfPgyOKAUZEKDT8u2dulvXT2l 57kkmwk6L+iXKtRNAwe/axOHSYsmaoHwRMYBUu4uEwzjGc1ykeoZwRsXra+23/VP x69XY8DrmqgaUP8eQz+xnL3vFxGEl40H5vI/EVEPM/SojjXWeQk= -----END CERTIFICATE-----Generated at Mon Mar 2 00:56:37 2026 by rpki-client