$ rpki-client -vvf repo-rpki.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/D84954514E2FF8171F1DC8D8C911A96481911DBB.mft File: D84954514E2FF8171F1DC8D8C911A96481911DBB.mft (raw, json) Hash identifier: m55I38ESCA0+vItGlAade4ktVBbtkHvivJsHAZvoVyY= Subject key identifier: E8:59:81:87:40:6D:D3:70:82:3F:79:BC:E2:AE:75:F0:5D:D0:37:C6 Authority key identifier: D8:49:54:51:4E:2F:F8:17:1F:1D:C8:D8:C9:11:A9:64:81:91:1D:BB Certificate issuer: /CN=D84954514E2FF8171F1DC8D8C911A96481911DBB Certificate serial: 31F76CD0A10E5239B4300FC9B6EBE8623689CF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D84954514E2FF8171F1DC8D8C911A96481911DBB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/D84954514E2FF8171F1DC8D8C911A96481911DBB.mft Manifest number: 0251 Signing time: Tue 03 Mar 2026 04:31:19 +0000 Manifest this update: Tue 03 Mar 2026 04:26:19 +0000 Manifest next update: Fri 06 Mar 2026 10:52:19 +0000 Files and hashes: 1: 3130332e3137352e38372e302f32342d3234203d3e20313437313434.roa (hash: rSj9OVlqtiPPskUUwR+sB8KTVHxG2CyA4iMG/fwGrQ8=) 2: D84954514E2FF8171F1DC8D8C911A96481911DBB.crl (hash: NrpQ69KOB44lrGk+o2UEH9zyqspFnt3vpV3Ey4S3YAs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/D84954514E2FF8171F1DC8D8C911A96481911DBB.crl rsync://repo-rpki.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/D84954514E2FF8171F1DC8D8C911A96481911DBB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D84954514E2FF8171F1DC8D8C911A96481911DBB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Mar 2026 10:52:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:f7:6c:d0:a1:0e:52:39:b4:30:0f:c9:b6:eb:e8:62:36:89:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D84954514E2FF8171F1DC8D8C911A96481911DBB Validity Not Before: Mar 3 04:26:19 2026 GMT Not After : Mar 6 10:52:19 2026 GMT Subject: CN=E8598187406DD370823F79BCE2AE75F05DD037C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:38:6a:18:4a:2d:db:29:c6:32:0d:3b:ea:5e: ac:dd:da:17:9c:1d:e7:dd:9a:31:c6:aa:20:14:00: a9:5d:1f:af:28:f9:d1:61:8b:92:08:ea:9d:1b:95: 7d:5d:e7:73:95:2a:59:c6:ec:5b:7c:e0:3c:62:00: ad:e4:e5:e0:9e:01:a2:02:b9:29:be:c5:a5:dc:6c: 32:1f:5a:7f:c1:6c:e6:52:7a:bf:02:63:39:3d:68: a3:45:51:e6:82:f6:80:09:7a:34:82:8a:ef:2b:5c: 81:34:6a:b2:15:66:04:a2:84:2e:56:45:02:12:0c: 94:93:b1:fe:0a:91:40:9b:da:cd:f7:aa:92:c5:3a: db:21:49:6d:87:0f:16:67:5c:af:07:72:0d:d8:98: 12:90:09:07:32:12:9f:8e:95:67:58:97:b3:23:a4: 59:cf:94:e6:ca:e8:0f:69:7f:2b:93:25:31:fc:d4: 24:71:cf:9e:b7:8b:da:83:3b:27:ed:24:eb:f1:63: 23:08:a7:7d:38:0f:76:00:e7:65:79:87:45:ff:44: 72:b8:c4:03:b1:c6:a3:4c:e3:16:d0:04:a4:0f:95: 28:d9:1e:2a:9a:e8:e8:c9:e8:4a:28:72:33:88:5b: 13:07:cf:ba:fe:39:36:8e:33:aa:1e:1a:af:7e:0b: 09:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:59:81:87:40:6D:D3:70:82:3F:79:BC:E2:AE:75:F0:5D:D0:37:C6 X509v3 Authority Key Identifier: keyid:D8:49:54:51:4E:2F:F8:17:1F:1D:C8:D8:C9:11:A9:64:81:91:1D:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/D84954514E2FF8171F1DC8D8C911A96481911DBB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D84954514E2FF8171F1DC8D8C911A96481911DBB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/D84954514E2FF8171F1DC8D8C911A96481911DBB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:14:72:c9:37:1e:16:c1:d5:84:8a:c2:af:6c:a1:0b:7d:9d: 33:05:56:13:4b:fd:f3:d3:bd:92:3d:ce:5b:61:3f:a8:2b:07: 20:87:34:64:69:eb:24:d3:23:56:ef:d5:65:66:db:02:80:6d: da:a0:58:e2:19:f1:fb:b4:2f:8c:28:4c:43:8a:db:b0:f5:ec: 02:09:e4:3f:35:7a:81:9a:47:b8:ec:05:00:38:44:a4:90:83: a1:6c:d7:98:6b:e7:6c:f3:5b:0c:1a:12:97:b5:4d:7a:52:aa: 69:14:9a:57:28:69:65:e4:0f:d8:1e:fa:cd:a9:65:3a:4e:36: b4:5c:a9:45:01:6c:ba:31:4e:6a:3c:d8:45:09:bd:ee:a6:bf: 73:1e:f7:e8:6a:f1:2b:3b:08:54:b2:da:5a:2b:27:44:85:df: d5:d0:66:07:f4:6e:6b:b5:db:82:7a:b7:72:7b:19:d8:2c:13: 28:5f:9c:08:0a:b4:3f:46:aa:96:56:d7:7a:9e:d1:87:e9:97: c1:93:bf:6b:64:df:b1:05:7f:43:b9:4a:5c:2d:cb:92:59:59: 7e:b0:7d:e0:d6:a4:1c:98:3f:2e:2a:49:05:9a:98:2c:30:a7: 57:83:f6:65:15:e1:90:c6:aa:1b:2b:72:40:35:7f:05:f2:b9: 2a:19:90:bb -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgITMfds0KEOUjm0MA/JtuvoYjaJzzANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyhEODQ5NTQ1MTRFMkZGODE3MUYxREM4RDhDOTExQTk2NDgx OTExREJCMB4XDTI2MDMwMzA0MjYxOVoXDTI2MDMwNjEwNTIxOVowMzExMC8GA1UE AxMoRTg1OTgxODc0MDZERDM3MDgyM0Y3OUJDRTJBRTc1RjA1REQwMzdDNjCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALU4ahhKLdspxjINO+perN3aF5wd 592aMcaqIBQAqV0fryj50WGLkgjqnRuVfV3nc5UqWcbsW3zgPGIAreTl4J4BogK5 Kb7FpdxsMh9af8Fs5lJ6vwJjOT1oo0VR5oL2gAl6NIKK7ytcgTRqshVmBKKELlZF AhIMlJOx/gqRQJvazfeqksU62yFJbYcPFmdcrwdyDdiYEpAJBzISn46VZ1iXsyOk Wc+U5sroD2l/K5MlMfzUJHHPnreL2oM7J+0k6/FjIwinfTgPdgDnZXmHRf9EcrjE A7HGo0zjFtAEpA+VKNkeKpro6MnoSihyM4hbEwfPuv45No4zqh4ar34LCbMCAwEA AaOCAjwwggI4MB0GA1UdDgQWBBToWYGHQG3TcII/ebzirnXwXdA3xjAfBgNVHSME GDAWgBTYSVRRTi/4Fx8dyNjJEalkgZEduzAOBgNVHQ8BAf8EBAMCB4AwgYUGA1Ud HwR+MHwweqB4oHaGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Y1 Yjg0NTlhLWUzNTEtNGM4ZC1iYzI5LTVmZDA4YzRjNTk0MS8wL0Q4NDk1NDUxNEUy RkY4MTcxRjFEQzhEOEM5MTFBOTY0ODE5MTFEQkIuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8v SUROSUMtSUQvMi9EODQ5NTQ1MTRFMkZGODE3MUYxREM4RDhDOTExQTk2NDgxOTEx REJCLmNlcjCBkwYIKwYBBQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzov L3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9mNWI4NDU5YS1lMzUxLTRjOGQtYmMy OS01ZmQwOGM0YzU5NDEvMC9EODQ5NTQ1MTRFMkZGODE3MUYxREM4RDhDOTExQTk2 NDgxOTExREJCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEASxRyyTceFsHVhIrCr2yhC32dMwVWE0v989O9 kj3OW2E/qCsHIIc0ZGnrJNMjVu/VZWbbAoBt2qBY4hnx+7QvjChMQ4rbsPXsAgnk PzV6gZpHuOwFADhEpJCDoWzXmGvnbPNbDBoSl7VNelKqaRSaVyhpZeQP2B76zall Ok42tFypRQFsujFOajzYRQm97qa/cx736GrxKzsIVLLaWisnRIXf1dBmB/Rua7Xb gnq3cnsZ2CwTKF+cCAq0P0aqllbXep7Rh+mXwZO/a2TfsQV/Q7lKXC3LkllZfrB9 4NakHJg/LipJBZqYLDCnV4P2ZRXhkMaqGytyQDV/BfK5KhmQuw== -----END CERTIFICATE-----Generated at Wed Mar 4 08:38:28 2026 by rpki-client